This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json) Hash identifier: Va1FC6dVu9WLa++rqIFeKDjCdBifuJU/ir4ivdRRDa0= Subject key identifier: C6:E9:6E:65:15:2D:56:56:BC:52:E4:CB:10:C1:06:AB:4D:17:B3:E1 Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39 Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039 Certificate serial: 019B300C3115BFE13B2666DA38870D8FDA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 06:01:03 +0000 Manifest this update: Thu 18 Dec 2025 06:01:03 +0000 Manifest next update: Fri 19 Dec 2025 06:01:03 +0000 Files and hashes: 1: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: M8mekumP7/E4hXu8IJApSvOu5JMyhNYOCSIrxKxXoNA=) 2: UrbTQ94JxNgYNpJivV6a1qmD0_A.roa (hash: TSib+fjl7l1ifEcWuz5+zR2oEqhkqRFFxSAkrpwIXbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:31:15:bf:e1:3b:26:66:da:38:87:0d:8f:da:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039 Validity Not Before: Dec 18 06:01:03 2025 GMT Not After : Dec 19 06:01:03 2025 GMT Subject: CN=c6e96e65152d5656bc52e4cb10c106ab4d17b3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:73:cc:e6:f8:20:07:39:8c:19:5c:21:6d: 64:83:fb:87:f2:d0:66:74:b7:66:0d:eb:1a:dd:a6: cd:0d:dc:6f:14:9c:84:2d:0b:ae:5f:f1:7f:54:50: 28:6c:42:4f:b8:6f:e0:18:81:60:db:b5:fa:bb:54: fe:95:55:b8:fa:ab:93:6e:a8:af:0f:85:20:c9:14: 74:ca:cd:69:6a:96:07:f5:2b:b5:8f:4b:38:71:95: 2b:24:aa:18:90:f6:7c:94:e4:1d:c1:8d:ee:fb:4a: f1:f5:73:5f:38:25:ac:46:cf:e9:b8:f9:4f:c0:cf: b5:26:60:08:2d:5d:7d:05:51:28:6d:c3:c9:6b:0e: c1:df:b5:33:26:aa:13:06:67:e2:b2:c3:66:96:ec: fb:7d:ce:77:76:83:56:84:01:6a:32:22:8a:1b:ca: 7d:91:82:4f:f3:0f:ac:72:8b:91:5f:fe:24:a1:53: f2:44:f9:d4:26:98:57:0b:e8:e9:b7:b1:dc:9b:f7: 21:ae:47:c1:18:d3:84:69:63:a1:29:66:4e:b1:6f: 50:ee:7a:61:a9:27:6f:16:de:5d:90:dd:87:ee:ae: 24:42:ed:b0:1a:0e:65:c9:76:d1:49:64:21:4f:c5: 8e:cb:8d:9c:b9:9c:07:75:3d:75:76:e4:50:85:68: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E9:6E:65:15:2D:56:56:BC:52:E4:CB:10:C1:06:AB:4D:17:B3:E1 X509v3 Authority Key Identifier: keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3d:3c:06:11:41:0b:98:cf:ab:91:ab:94:14:ce:e2:be:88: 3a:90:47:51:48:dd:28:50:3d:1a:a3:5b:a0:46:4a:6b:c4:4d: a3:0e:bb:d9:1a:3a:c9:11:63:7b:35:da:4e:be:54:23:24:21: d0:71:69:72:15:a8:c1:d6:c0:e2:15:2f:45:39:03:46:3c:bc: 5a:5e:e6:62:97:ed:fd:41:df:07:16:60:9b:1e:c9:8d:9f:2c: 3f:b6:82:ce:05:d5:d6:db:2e:de:91:e6:33:09:7f:1d:99:5e: 0e:26:b4:d8:56:d9:35:08:4c:7c:c1:2a:35:56:78:17:cc:6e: 73:f9:cd:8e:fe:7a:c3:2e:4b:a2:63:39:09:ea:8b:39:a7:f1: 79:4a:56:c3:da:e4:dc:13:18:e4:9b:45:fb:d3:fe:71:1b:1f: 56:f7:eb:d6:f9:d5:0f:44:4d:51:0a:44:a6:79:1a:16:02:f9: 6e:18:7f:83:f6:d0:9d:ee:9e:4e:d1:f5:f2:93:9b:76:be:5c: 65:20:16:bb:8c:0d:27:03:3f:0b:d5:1a:ff:61:9a:37:0d:7c: f9:3f:e6:3a:44:20:c0:66:4b:9d:35:d3:3f:77:52:8a:9f:f3: 07:da:ab:c3:4d:76:db:8b:09:e4:a0:c3:aa:87:46:26:b4:72: 9a:df:88:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDDEVv+E7JmbaOIcNj9okMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzVmZWIyZDI1ZmFjNGRkOGJhYTRmNzFkOGRjMjI2ODE4 NmEwMzkwHhcNMjUxMjE4MDYwMTAzWhcNMjUxMjE5MDYwMTAzWjAzMTEwLwYDVQQD EyhjNmU5NmU2NTE1MmQ1NjU2YmM1MmU0Y2IxMGMxMDZhYjRkMTdiM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDpzzOb4IAc5jBlcIW1kg/uH8tBm dLdmDesa3abNDdxvFJyELQuuX/F/VFAobEJPuG/gGIFg27X6u1T+lVW4+quTbqiv D4UgyRR0ys1papYH9Su1j0s4cZUrJKoYkPZ8lOQdwY3u+0rx9XNfOCWsRs/puPlP wM+1JmAILV19BVEobcPJaw7B37UzJqoTBmfissNmluz7fc53doNWhAFqMiKKG8p9 kYJP8w+scouRX/4koVPyRPnUJphXC+jpt7Hcm/chrkfBGNOEaWOhKWZOsW9Q7nph qSdvFt5dkN2H7q4kQu2wGg5lyXbRSWQhT8WOy42cuZwHdT11duRQhWgvBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbpbmUVLVZWvFLkyxDBBqtNF7PhMB8GA1UdIwQY MBaAFCLF/rLSX6xN2Lqk9x2NwiaBhqA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTkt NDY4ZjQ5OGZhZjFjLzEvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTktNDY4ZjQ5OGZhZjFj LzEvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOD08BhFB C5jPq5GrlBTO4r6IOpBHUUjdKFA9GqNboEZKa8RNow672Ro6yRFjezXaTr5UIyQh 0HFpchWowdbA4hUvRTkDRjy8Wl7mYpft/UHfBxZgmx7JjZ8sP7aCzgXV1tsu3pHm Mwl/HZleDia02FbZNQhMfMEqNVZ4F8xuc/nNjv56wy5LomM5CeqLOafxeUpWw9rk 3BMY5JtF+9P+cRsfVvfr1vnVD0RNUQpEpnkaFgL5bhh/g/bQne6eTtH18pObdr5c ZSAWu4wNJwM/C9Ua/2GaNw18+T/mOkQgwGZLnTXTP3dSip/zB9qrw01224sJ5KDD qodGJrRymt+IvQ== -----END CERTIFICATE-----Generated at Thu Dec 18 10:27:00 2025 by rpki-client