This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json) Hash identifier: za3Hkz1Lmy0BMaF7nY/v1qWycu+nPLfdCYme5pce3yM= Subject key identifier: D0:7B:D8:97:E4:E5:A7:08:05:AE:98:E1:48:B7:9D:F7:4B:46:DC:5F Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0 Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0 Certificate serial: 019B3BD9513BCCA0CA0DE12A9E9744B1D7E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft Manifest number: 09D9 Signing time: Sat 20 Dec 2025 13:00:56 +0000 Manifest this update: Sat 20 Dec 2025 13:00:56 +0000 Manifest next update: Sun 21 Dec 2025 13:00:56 +0000 Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: kheLLXPNUfFpz5z5Nk/JJZ6XAJX7Y6drBmGg5+fb5Yw=) 2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:51:3b:cc:a0:ca:0d:e1:2a:9e:97:44:b1:d7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0 Validity Not Before: Dec 20 13:00:56 2025 GMT Not After : Dec 21 13:00:56 2025 GMT Subject: CN=d07bd897e4e5a70805ae98e148b79df74b46dc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:11:93:92:24:c1:56:f9:df:d3:63:fc:f2: b3:5e:f3:8f:11:72:3d:e9:2e:db:c8:3f:f4:6a:e5: 6d:64:4f:31:f8:8f:ee:2b:d5:4f:39:04:6e:2c:95: 10:7e:45:35:f9:01:89:a2:85:6a:3d:d7:5f:a1:67: 36:2a:c8:ba:a2:e8:3b:e3:33:8a:87:c6:be:4d:19: 3a:65:6c:81:af:bc:00:ab:8b:0f:87:9e:aa:71:d2: 69:1c:13:95:39:04:9d:80:7a:89:c7:29:44:c8:1a: fb:51:bf:d6:74:46:e7:94:b0:f5:ed:15:97:2c:f0: ab:fb:4b:28:e7:af:ff:51:46:14:0e:aa:93:00:ee: 14:19:1c:ec:11:dc:0e:df:32:0f:3f:c6:02:10:f4: f6:52:cf:c3:80:a6:2c:12:df:63:be:51:eb:1c:41: b5:29:a2:e2:69:3a:ee:3e:96:03:bc:0b:93:51:1d: 2e:68:18:48:f1:16:0a:e8:07:e8:19:66:93:56:dc: 42:32:83:9f:4c:dd:54:5d:22:f6:96:e0:82:6b:4a: ec:8e:7a:f3:17:c0:7e:1a:e7:f7:23:7a:d0:ef:94: 78:83:56:c8:58:10:5d:00:25:ab:03:69:f8:01:89: 15:5e:d9:a3:b1:1d:d0:45:ce:bf:21:57:75:67:2c: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:D8:97:E4:E5:A7:08:05:AE:98:E1:48:B7:9D:F7:4B:46:DC:5F X509v3 Authority Key Identifier: keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:de:35:93:49:8a:36:62:07:93:01:58:99:fd:d6:8e:a5:83: 23:b7:1d:64:e3:32:83:42:3f:d0:00:47:d9:14:df:48:41:2f: 6b:e7:3c:a2:af:2d:36:25:32:e3:14:8e:d8:b9:61:03:6d:b2: ec:aa:d8:46:37:1d:05:bd:87:7d:89:f5:7f:93:b6:9d:6c:4c: c8:22:04:3e:f6:be:10:19:2b:1e:19:cc:05:6e:31:e4:46:f9: 96:bb:8d:d1:02:79:2b:37:9f:92:a0:76:a9:47:d2:a1:6e:47: e2:c1:33:7a:2d:71:b2:2d:fc:61:a5:79:e7:41:48:fc:f9:72: 51:3e:7e:10:3c:65:21:5e:18:55:45:82:d5:7f:cc:68:12:8a: 63:33:e9:d4:c8:5d:83:03:ba:6d:9a:13:c4:5c:e1:5b:f8:89: 2a:e6:15:b9:79:cc:2a:9b:c7:dc:46:cf:4c:4e:b3:2a:ae:d1: b9:11:85:56:e3:f4:c9:7f:89:1c:b2:88:89:66:a2:af:dd:00: e8:c6:6e:c2:88:b0:b1:9b:ec:67:cc:6e:be:74:61:0d:12:41: 36:6f:b1:dd:45:66:4d:08:2c:38:da:87:82:c7:bf:22:4c:77: 79:ff:a5:c8:56:c8:ac:05:f8:15:87:b9:f0:62:36:6e:ec:31: cb:07:c1:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72VE7zKDKDeEqnpdEsdfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh YWViZjAwHhcNMjUxMjIwMTMwMDU2WhcNMjUxMjIxMTMwMDU2WjAzMTEwLwYDVQQD EyhkMDdiZDg5N2U0ZTVhNzA4MDVhZTk4ZTE0OGI3OWRmNzRiNDZkYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAIRk5IkwVb539Nj/PKzXvOPEXI9 6S7byD/0auVtZE8x+I/uK9VPOQRuLJUQfkU1+QGJooVqPddfoWc2Ksi6oug74zOK h8a+TRk6ZWyBr7wAq4sPh56qcdJpHBOVOQSdgHqJxylEyBr7Ub/WdEbnlLD17RWX LPCr+0so56//UUYUDqqTAO4UGRzsEdwO3zIPP8YCEPT2Us/DgKYsEt9jvlHrHEG1 KaLiaTruPpYDvAuTUR0uaBhI8RYK6AfoGWaTVtxCMoOfTN1UXSL2luCCa0rsjnrz F8B+Guf3I3rQ75R4g1bIWBBdACWrA2n4AYkVXtmjsR3QRc6/IVd1Zyz6nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB72Jfk5acIBa6Y4Ui3nfdLRtxfMB8GA1UdIwQY MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3 LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG941k0mK NmIHkwFYmf3WjqWDI7cdZOMyg0I/0ABH2RTfSEEva+c8oq8tNiUy4xSO2LlhA22y 7KrYRjcdBb2HfYn1f5O2nWxMyCIEPva+EBkrHhnMBW4x5Eb5lruN0QJ5KzefkqB2 qUfSoW5H4sEzei1xsi38YaV550FI/PlyUT5+EDxlIV4YVUWC1X/MaBKKYzPp1Mhd gwO6bZoTxFzhW/iJKuYVuXnMKpvH3EbPTE6zKq7RuRGFVuP0yX+JHLKIiWair90A 6MZuwoiwsZvsZ8xuvnRhDRJBNm+x3UVmTQgsONqHgse/Ikx3ef+lyFbIrAX4FYe5 8GI2buwxywfB1w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:34:34 2025 by rpki-client