This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json) Hash identifier: MC/2CvP6F1gX4AOAwtAM1J4T99+HdoUUOZWldzv5NXA= Subject key identifier: 71:43:8B:3A:74:BB:47:A2:47:16:DC:27:1B:BA:9E:36:AA:AF:70:FF Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06 Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006 Certificate serial: 019B3CEC33036B62E72F85D2C6D92F4B3C2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft Manifest number: 082A Signing time: Sat 20 Dec 2025 18:01:10 +0000 Manifest this update: Sat 20 Dec 2025 18:01:10 +0000 Manifest next update: Sun 21 Dec 2025 18:01:10 +0000 Files and hashes: 1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=) 2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=) 3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=) 4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: fy5gkJTzXbCSMcA9AOJGPOs47qlsm9gn1y4arBurCLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:33:03:6b:62:e7:2f:85:d2:c6:d9:2f:4b:3c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006 Validity Not Before: Dec 20 18:01:10 2025 GMT Not After : Dec 21 18:01:10 2025 GMT Subject: CN=71438b3a74bb47a24716dc271bba9e36aaaf70ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7d:30:17:a4:ad:c2:bf:7a:d4:97:0c:52:69: 04:e9:e5:f4:e6:0a:d0:b3:a0:00:83:0a:2f:5f:64: 30:12:d5:58:23:37:ef:6c:eb:66:ab:0f:c2:08:a0: 34:27:ca:da:a9:89:2c:d3:de:63:4b:4c:9c:f8:89: ce:9f:31:89:ca:05:c1:e2:bb:38:ff:13:76:4b:f1: 6e:e4:1e:a2:da:0a:26:89:86:61:6a:3c:df:b9:67: 72:bb:68:6c:de:3e:1f:09:99:8f:49:08:ae:2b:c7: ff:c7:f4:01:cd:31:a1:65:ac:77:5a:3a:c5:97:62: f4:8c:c0:bc:76:a1:7c:e6:65:ef:db:0c:2c:79:11: 8d:88:c7:9b:e2:ee:5c:7c:e1:53:c1:79:97:8a:c9: 48:e9:e0:f8:0b:12:03:c7:6e:92:4e:52:ba:e2:bd: 8a:44:2e:cc:61:22:af:2b:b5:bd:d3:84:58:8e:a8: 95:62:7e:91:e7:a4:ed:5c:aa:91:19:89:e4:ef:f2: 0a:94:f5:9f:c7:a0:d0:7f:61:c7:1e:a9:aa:e7:0f: 3b:a9:24:82:8e:7d:82:2a:ef:2d:71:51:37:ae:38: 0b:aa:31:9d:e9:7c:07:4d:af:f2:4f:5e:2b:07:15: 90:b2:11:de:8e:01:e7:79:8a:88:29:79:49:ed:12: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:8B:3A:74:BB:47:A2:47:16:DC:27:1B:BA:9E:36:AA:AF:70:FF X509v3 Authority Key Identifier: keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c4:85:e0:14:5c:91:70:c2:fd:0b:ce:8f:a8:8d:d2:4c:e4: c1:3c:0c:d2:32:5a:a3:41:04:d8:90:75:1f:7c:de:2f:99:94: c3:a3:2f:47:ea:3a:26:ee:b4:db:21:da:dd:05:e4:c2:bb:80: 5f:24:1a:41:63:7f:5d:eb:e4:bf:82:84:ea:cc:3d:21:e1:c2: e2:2a:ca:2d:20:f1:6a:e1:b2:1f:85:93:3a:59:de:d8:1d:ca: e6:39:ab:2c:9c:db:0d:0e:9a:04:38:49:fb:3f:23:79:73:11: 42:04:c9:dd:ad:89:9f:84:47:87:a7:99:35:a7:9a:99:cd:7a: e9:ea:68:92:d7:34:4b:aa:51:99:c1:02:54:c7:5c:dc:db:8e: 92:9b:83:e8:ff:a4:34:7e:0c:b6:fc:ac:da:b2:d0:c1:c8:5e: b9:18:4f:3e:cd:9f:7b:9a:ff:c8:52:2c:ac:71:94:64:66:59: 30:bd:62:46:2e:d2:fe:49:12:eb:0b:f2:ba:a6:95:c7:60:ef: dd:f1:37:71:e8:15:dd:f7:fd:9e:0a:b0:c4:88:40:82:2c:f1: ec:40:18:0c:b9:79:e2:ba:35:8f:dd:3b:96:5f:97:f1:07:db: 79:e9:a9:c7:3f:46:49:19:ef:a3:dc:8b:06:c5:11:3b:c3:8b: 4a:9e:a9:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87DMDa2LnL4XSxtkvSzwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi ZGQwMDYwHhcNMjUxMjIwMTgwMTEwWhcNMjUxMjIxMTgwMTEwWjAzMTEwLwYDVQQD Eyg3MTQzOGIzYTc0YmI0N2EyNDcxNmRjMjcxYmJhOWUzNmFhYWY3MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA430wF6Stwr961JcMUmkE6eX05grQ s6AAgwovX2QwEtVYIzfvbOtmqw/CCKA0J8raqYks095jS0yc+InOnzGJygXB4rs4 /xN2S/Fu5B6i2gomiYZhajzfuWdyu2hs3j4fCZmPSQiuK8f/x/QBzTGhZax3WjrF l2L0jMC8dqF85mXv2wwseRGNiMeb4u5cfOFTwXmXislI6eD4CxIDx26STlK64r2K RC7MYSKvK7W904RYjqiVYn6R56TtXKqRGYnk7/IKlPWfx6DQf2HHHqmq5w87qSSC jn2CKu8tcVE3rjgLqjGd6XwHTa/yT14rBxWQshHejgHneYqIKXlJ7RIbYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFDizp0u0eiRxbcJxu6njaqr3D/MB8GA1UdIwQY MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt Nzk0YzlkOTI4Y2RjLzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsSF4BRc kXDC/QvOj6iN0kzkwTwM0jJao0EE2JB1H3zeL5mUw6MvR+o6Ju602yHa3QXkwruA XyQaQWN/Xevkv4KE6sw9IeHC4irKLSDxauGyH4WTOlne2B3K5jmrLJzbDQ6aBDhJ +z8jeXMRQgTJ3a2Jn4RHh6eZNaeamc166epoktc0S6pRmcECVMdc3NuOkpuD6P+k NH4Mtvys2rLQwcheuRhPPs2fe5r/yFIsrHGUZGZZML1iRi7S/kkS6wvyuqaVx2Dv 3fE3cegV3ff9ngqwxIhAgizx7EAYDLl54ro1j907ll+X8Qfbeempxz9GSRnvo9yL BsURO8OLSp6pOg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:47:53 2025 by rpki-client