This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json) Hash identifier: EwXts57bsmyE1pW8svHSLtsSIkIm4g3U1BEPhvZv+Ww= Subject key identifier: BB:AA:1B:6B:CD:46:3D:AA:FB:99:84:48:25:9C:3C:3E:4E:EE:DC:34 Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0 Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0 Certificate serial: 019B4F294EA192825C95682D05B732D0F502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft Manifest number: 09E3 Signing time: Wed 24 Dec 2025 07:01:05 +0000 Manifest this update: Wed 24 Dec 2025 07:01:05 +0000 Manifest next update: Thu 25 Dec 2025 07:01:05 +0000 Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: y42J/f1oHDcJMSqKCM7rhxhjKyK3YYYmwhzYuA1qzp0=) 2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:4e:a1:92:82:5c:95:68:2d:05:b7:32:d0:f5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0 Validity Not Before: Dec 24 07:01:05 2025 GMT Not After : Dec 25 07:01:05 2025 GMT Subject: CN=bbaa1b6bcd463daafb998448259c3c3e4eeedc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:9d:c5:83:98:e2:b0:ce:2c:88:6e:27:88: 30:fb:28:fe:3a:76:32:0e:e3:0e:92:25:d7:62:7e: 99:33:55:eb:3c:fd:2a:2b:ce:0d:a0:0e:7e:4a:13: 30:64:bc:03:bd:94:c3:16:54:d4:64:a9:1f:1a:c6: 72:55:0d:1b:54:7d:b1:0f:b9:66:00:60:f5:1d:71: db:ca:18:0e:59:e6:ca:bc:dc:db:d3:6b:66:0f:07: 8a:91:44:68:af:b6:fe:0b:c5:f2:a9:71:16:1d:0c: 33:f1:be:0c:52:5e:0d:c0:78:39:71:00:80:ad:db: 6f:23:49:f5:8b:e2:9c:95:03:2f:09:20:73:e0:9a: 1c:51:73:20:88:90:7f:34:f1:c8:33:98:23:b7:9a: 85:bc:a9:42:21:6b:53:57:0a:0b:b4:19:dc:ee:bb: 62:50:8c:4d:ab:83:59:2a:50:cb:82:ec:6a:a1:c5: 60:f5:40:62:ab:42:69:d5:07:6d:15:d6:5f:1f:a1: 58:e9:68:af:0d:c6:2e:e6:6c:c0:59:a2:4a:bc:f0: 1e:22:ca:9c:b1:e4:f5:45:6e:14:11:ef:eb:a6:cc: 39:7f:f7:3b:ac:30:cf:5d:4e:92:fc:a5:d8:41:04: c4:d8:a9:09:32:80:ae:f7:3d:6c:9c:ae:50:50:aa: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:1B:6B:CD:46:3D:AA:FB:99:84:48:25:9C:3C:3E:4E:EE:DC:34 X509v3 Authority Key Identifier: keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:72:c3:72:7e:f6:be:15:82:d4:25:6a:da:1a:86:99:5c:1b: 9c:ba:0f:7c:d3:51:14:71:04:79:cf:ea:aa:e8:9d:2a:f0:68: bc:8f:e8:d8:80:63:de:d8:e5:98:b4:84:50:40:6d:70:4b:aa: c6:25:4e:ee:d4:25:99:a0:9e:8c:17:9e:ae:b9:80:4e:fb:fa: 87:df:6b:f9:c9:28:d7:16:97:8c:9d:a3:88:89:a9:03:a5:a0: ab:7d:8c:d7:f9:09:60:32:c0:c3:9d:f6:51:bf:e4:0b:e5:9d: 1a:96:4e:7f:3b:24:b1:3c:ab:e5:81:0e:a5:7f:8d:7d:bd:f6: 9e:b7:92:b2:1c:03:18:ad:7b:0e:05:95:de:8f:1e:0e:6b:38: 15:c8:1c:ee:95:cb:ce:5f:42:fc:e7:00:39:b1:c1:80:f8:ce: 91:c3:e8:9c:b5:1e:4b:f4:ee:eb:6c:a7:90:2c:85:ea:5d:2e: 93:40:61:61:1e:53:4a:50:99:91:29:44:7b:90:1e:ee:93:4e: 42:d2:47:d6:f8:70:81:f0:e3:fe:dd:a2:df:15:0c:65:33:f4: fc:82:77:c8:1e:e9:d4:23:40:46:f8:5a:68:20:89:6c:7a:4b: 4c:b4:79:6c:17:11:c5:de:52:89:cc:ff:23:6d:c9:83:61:19: 3c:3b:1e:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKU6hkoJclWgtBbcy0PUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh YWViZjAwHhcNMjUxMjI0MDcwMTA1WhcNMjUxMjI1MDcwMTA1WjAzMTEwLwYDVQQD EyhiYmFhMWI2YmNkNDYzZGFhZmI5OTg0NDgyNTljM2MzZTRlZWVkYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eadxYOY4rDOLIhuJ4gw+yj+OnYy DuMOkiXXYn6ZM1XrPP0qK84NoA5+ShMwZLwDvZTDFlTUZKkfGsZyVQ0bVH2xD7lm AGD1HXHbyhgOWebKvNzb02tmDweKkURor7b+C8XyqXEWHQwz8b4MUl4NwHg5cQCA rdtvI0n1i+KclQMvCSBz4JocUXMgiJB/NPHIM5gjt5qFvKlCIWtTVwoLtBnc7rti UIxNq4NZKlDLguxqocVg9UBiq0Jp1QdtFdZfH6FY6WivDcYu5mzAWaJKvPAeIsqc seT1RW4UEe/rpsw5f/c7rDDPXU6S/KXYQQTE2KkJMoCu9z1snK5QUKryuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuqG2vNRj2q+5mESCWcPD5O7tw0MB8GA1UdIwQY MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3 LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXLDcn72 vhWC1CVq2hqGmVwbnLoPfNNRFHEEec/qquidKvBovI/o2IBj3tjlmLSEUEBtcEuq xiVO7tQlmaCejBeerrmATvv6h99r+cko1xaXjJ2jiImpA6Wgq32M1/kJYDLAw532 Ub/kC+WdGpZOfzsksTyr5YEOpX+Nfb32nreSshwDGK17DgWV3o8eDms4Fcgc7pXL zl9C/OcAObHBgPjOkcPonLUeS/Tu62ynkCyF6l0uk0BhYR5TSlCZkSlEe5Ae7pNO QtJH1vhwgfDj/t2i3xUMZTP0/IJ3yB7p1CNARvhaaCCJbHpLTLR5bBcRxd5Sicz/ I23Jg2EZPDseAw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:19:42 2025 by rpki-client