This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json) Hash identifier: 535ITDIrNXaUYpOX78qrCl9AnrqOJhYE49b2i5KKWug= Subject key identifier: C7:5E:F2:9B:E8:B5:76:BA:1C:BF:AB:72:D2:42:B2:AB:22:66:32:67 Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8 Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8 Certificate serial: 019B424AB06B983DE2B20FEB4C0CFE7A046D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft Manifest number: 71 Signing time: Sun 21 Dec 2025 19:02:29 +0000 Manifest this update: Sun 21 Dec 2025 19:02:29 +0000 Manifest next update: Mon 22 Dec 2025 19:02:29 +0000 Files and hashes: 1: DuUayi7tY9bIV5I_bemnhj2FKgU.roa (hash: 7q+2lmzKPBedZK74Yj01qUbUDa4feTYvUbWikyXAteg=) 2: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: BzajaJe5LTQwBS6HWvhT7O2XSN/Yn0X0JNguBW6oYFY=) 3: mlI7o2WpJZBYyozovfozaIiNzyk.roa (hash: Ja13LeLJgj0g0MQUt0A5EkvjaYCybl3TMMz53xHlb0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:b0:6b:98:3d:e2:b2:0f:eb:4c:0c:fe:7a:04:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8 Validity Not Before: Dec 21 19:02:29 2025 GMT Not After : Dec 22 19:02:29 2025 GMT Subject: CN=c75ef29be8b576ba1cbfab72d242b2ab22663267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:f9:ae:a6:b0:35:f4:6c:41:8a:57:2f:fb: b2:db:7d:ea:fa:ae:f9:e3:b6:66:20:0e:57:a5:a8: b8:e8:88:eb:45:7c:f5:4e:bf:6c:4d:4c:7f:9b:36: 18:26:d5:e1:c3:54:a8:6d:24:ae:c8:72:72:da:76: 49:de:1f:85:03:4a:38:29:00:68:43:d4:40:5b:a0: 05:96:84:cd:7c:9a:e8:9e:f0:66:99:9c:0f:7e:66: 82:df:5c:dc:d5:a7:67:81:13:9a:27:47:c4:0e:79: b6:cf:30:92:60:9f:91:ea:f7:13:99:1b:0c:76:b4: 79:8a:8a:33:c3:89:2c:81:b2:83:ed:12:ad:ae:f8: 69:1d:c3:49:3f:32:c4:eb:3d:e9:bf:7d:46:64:d1: c8:b8:8b:80:b3:56:54:d7:68:83:f7:e6:66:d0:cf: 1e:73:45:af:e3:9c:80:cf:b1:a7:c5:13:66:5d:72: 45:d3:25:99:f3:55:97:f0:86:e3:66:80:f5:0c:75: 0f:ad:09:84:df:ff:6f:ba:a7:e2:ce:57:cb:dd:63: 59:55:9a:af:20:e9:2b:6c:77:73:9f:da:9c:c1:bf: 03:9d:bc:17:12:f8:0f:d6:17:9d:90:3e:61:ec:be: 16:61:6e:5e:26:e3:d7:36:c8:2d:90:5a:b7:21:25: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:F2:9B:E8:B5:76:BA:1C:BF:AB:72:D2:42:B2:AB:22:66:32:67 X509v3 Authority Key Identifier: keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c1:c6:51:4f:0c:06:2a:f1:40:6b:09:40:75:bd:ba:92:31: d7:31:04:97:64:19:41:b1:19:b3:3f:96:43:00:13:84:66:cc: 95:61:cb:27:f1:22:8f:fa:62:be:e8:68:4a:7b:62:10:15:f4: a4:56:15:2d:b4:ca:34:b5:7f:99:12:0d:66:59:58:6d:9a:bd: c1:9f:94:f1:10:f8:87:9c:ed:0a:43:0d:aa:b3:26:e4:04:ab: 6b:4b:49:d1:7f:b5:dd:41:56:47:7e:e8:a8:f3:71:9e:ed:1f: 65:21:7b:46:1b:41:60:5f:de:95:a1:46:18:0c:7f:fb:8f:5e: 3a:96:91:a3:46:a2:a8:a1:1c:74:c8:3f:8b:2d:10:9b:4f:bb: 2d:4c:ae:fd:1e:3a:62:2d:d1:4c:c4:62:51:f8:66:2b:e5:cd: 2d:57:80:c1:1b:0b:17:1a:1f:90:6c:94:8e:71:76:b8:47:21: eb:9c:3a:4b:a9:62:20:5a:3e:40:92:9a:a6:6a:87:41:f1:96: 83:29:c4:d7:21:34:2e:c7:92:ee:21:c8:5e:da:b4:6d:5a:2a: 21:f6:8a:e3:b7:ac:89:78:4e:88:68:02:43:8e:ce:83:2b:56: 3a:26:df:ce:ab:85:95:20:38:d5:47:79:7c:e6:a0:39:6a:53: fd:9d:e1:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSrBrmD3isg/rTAz+egRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMmJhOGNjZjM0NWVlZjBkY2Y3ZDAxNTQ5MjA4MThmMzE5 YzI1ZjgwHhcNMjUxMjIxMTkwMjI5WhcNMjUxMjIyMTkwMjI5WjAzMTEwLwYDVQQD EyhjNzVlZjI5YmU4YjU3NmJhMWNiZmFiNzJkMjQyYjJhYjIyNjYzMjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS75rqawNfRsQYpXL/uy233q+q75 47ZmIA5Xpai46IjrRXz1Tr9sTUx/mzYYJtXhw1SobSSuyHJy2nZJ3h+FA0o4KQBo Q9RAW6AFloTNfJronvBmmZwPfmaC31zc1adngROaJ0fEDnm2zzCSYJ+R6vcTmRsM drR5ioozw4ksgbKD7RKtrvhpHcNJPzLE6z3pv31GZNHIuIuAs1ZU12iD9+Zm0M8e c0Wv45yAz7GnxRNmXXJF0yWZ81WX8IbjZoD1DHUPrQmE3/9vuqfizlfL3WNZVZqv IOkrbHdzn9qcwb8DnbwXEvgP1hedkD5h7L4WYW5eJuPXNsgtkFq3ISUBzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMde8pvotXa6HL+rctJCsqsiZjJnMB8GA1UdIwQY MBaAFCErqMzzRe7w3PfQFUkggY8xnCX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMt ZTA2NmUwMDQxYTA1LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMtZTA2NmUwMDQxYTA1 LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMHGUU8M BirxQGsJQHW9upIx1zEEl2QZQbEZsz+WQwAThGbMlWHLJ/Eij/pivuhoSntiEBX0 pFYVLbTKNLV/mRINZllYbZq9wZ+U8RD4h5ztCkMNqrMm5ASra0tJ0X+13UFWR37o qPNxnu0fZSF7RhtBYF/elaFGGAx/+49eOpaRo0aiqKEcdMg/iy0Qm0+7LUyu/R46 Yi3RTMRiUfhmK+XNLVeAwRsLFxofkGyUjnF2uEch65w6S6liIFo+QJKapmqHQfGW gynE1yE0LseS7iHIXtq0bVoqIfaK47esiXhOiGgCQ47OgytWOibfzquFlSA41Ud5 fOagOWpT/Z3htg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:14:04 2025 by rpki-client