This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json) Hash identifier: G9eddLou14ZZQKAJByvJmqVjke41CjvyY7vLyJW6i6w= Subject key identifier: 61:57:85:22:5C:8B:4A:9A:F1:16:49:FE:D0:24:C7:23:DE:0B:88:91 Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87 Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087 Certificate serial: 019B3C7E27E943F2948BFB17A28C89B52D70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft Manifest number: 1020 Signing time: Sat 20 Dec 2025 16:00:59 +0000 Manifest this update: Sat 20 Dec 2025 16:00:59 +0000 Manifest next update: Sun 21 Dec 2025 16:00:59 +0000 Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=) 2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: FCxq+mU395jNXcJvaXrPINDG83kvq7vp2RN6pln7SkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:27:e9:43:f2:94:8b:fb:17:a2:8c:89:b5:2d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087 Validity Not Before: Dec 20 16:00:59 2025 GMT Not After : Dec 21 16:00:59 2025 GMT Subject: CN=615785225c8b4a9af11649fed024c723de0b8891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:a6:75:bc:27:1d:9d:ef:8b:61:77:01:f6: de:69:8a:90:cb:81:fb:03:70:b7:1c:79:b7:3c:76: cd:7c:ed:c4:31:1b:89:f2:4c:c2:9e:82:50:32:98: 8e:19:4a:ff:ad:7b:d6:90:e3:dc:a4:03:bf:33:01: 11:ea:53:14:2a:63:31:eb:08:fb:55:9a:b5:0d:ca: 3e:3b:8d:74:9d:79:85:1b:df:cd:e9:55:25:36:00: c6:ed:49:12:59:8f:63:4d:e7:3f:ec:ce:35:2a:e6: 39:57:89:2c:99:2a:db:f1:d1:4c:dc:8e:55:09:c0: e7:fe:8a:f0:73:a9:01:3d:30:c2:d3:b3:d1:77:5f: f0:e7:2a:8b:a7:a8:5b:c3:1f:df:5f:37:9a:64:0a: f4:96:8e:d5:07:e0:5e:00:f4:6a:37:bc:c7:8f:ba: 66:38:f9:86:22:ce:a6:ca:2a:33:4c:55:26:ab:ed: 20:b1:f2:45:76:8b:4e:43:be:a0:dc:a4:67:a8:04: 98:f6:48:40:33:4d:50:35:91:1a:ab:ee:df:65:99: 65:23:72:08:35:65:bd:d8:ba:9d:5f:a6:c4:26:29: fe:c5:fe:e5:90:7d:cb:7a:43:a9:c3:3b:82:2e:7e: 18:61:bb:af:eb:1c:c0:4b:16:72:b6:01:b6:87:88: d7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:57:85:22:5C:8B:4A:9A:F1:16:49:FE:D0:24:C7:23:DE:0B:88:91 X509v3 Authority Key Identifier: keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2d:71:dc:a7:c6:e9:ea:a9:f3:6e:e5:7d:d5:0a:e8:32:44: 3b:14:59:7e:e3:ba:74:48:27:8e:c4:3d:aa:28:13:f0:3b:d0: 3f:8c:e5:25:12:a8:f0:47:bc:2b:e7:df:e2:6c:3e:c7:f7:85: 66:6e:fb:ca:41:e7:f2:d1:1a:1d:61:7a:4c:bb:c8:12:7e:ca: 53:21:29:19:13:6b:5f:ca:f2:64:32:41:2c:63:46:e6:df:5b: 64:38:62:fb:d9:05:0e:de:92:4c:52:b6:c4:95:8e:e7:6f:f0: e7:5a:76:60:04:81:15:49:45:ad:af:0e:61:19:d1:1c:46:35: 06:09:ed:aa:8c:bd:de:65:e0:fd:6c:f1:cd:1e:37:b4:24:d4: fc:0a:ed:02:cc:a9:e8:6a:17:92:db:01:6f:fd:af:10:c3:5f: 3b:b5:9b:d3:6b:0d:b4:01:48:a3:9b:05:14:47:8b:96:1c:d2: 6d:b4:f5:80:4c:c0:2f:19:d3:f6:2a:4e:f5:c3:8d:c2:94:22: 53:fb:f4:23:dd:a0:1b:e0:e4:a2:18:90:28:b6:a4:0e:44:67: 5b:63:91:41:32:cd:e7:b3:f4:b1:6c:ab:bf:5e:9f:f8:9d:3a: 72:ce:8e:21:af:9d:48:c8:ac:84:5d:b5:a6:f4:2e:41:91:f0: 4b:74:a7:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fifpQ/KUi/sXooyJtS1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOGM0YTQzMDA4MzdjNGVhMTdhZDFlMzgyMWEwOWFkNTM3 NjQwODcwHhcNMjUxMjIwMTYwMDU5WhcNMjUxMjIxMTYwMDU5WjAzMTEwLwYDVQQD Eyg2MTU3ODUyMjVjOGI0YTlhZjExNjQ5ZmVkMDI0YzcyM2RlMGI4ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DOmdbwnHZ3vi2F3AfbeaYqQy4H7 A3C3HHm3PHbNfO3EMRuJ8kzCnoJQMpiOGUr/rXvWkOPcpAO/MwER6lMUKmMx6wj7 VZq1Dco+O410nXmFG9/N6VUlNgDG7UkSWY9jTec/7M41KuY5V4ksmSrb8dFM3I5V CcDn/orwc6kBPTDC07PRd1/w5yqLp6hbwx/fXzeaZAr0lo7VB+BeAPRqN7zHj7pm OPmGIs6myiozTFUmq+0gsfJFdotOQ76g3KRnqASY9khAM01QNZEaq+7fZZllI3II NWW92LqdX6bEJin+xf7lkH3LekOpwzuCLn4YYbuv6xzASxZytgG2h4jXVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFXhSJci0qa8RZJ/tAkxyPeC4iRMB8GA1UdIwQY MBaAFLGMSkMAg3xOoXrR44IaCa1TdkCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2Mjgt ZjA4YTBhZTkyYjhkLzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2MjgtZjA4YTBhZTkyYjhk LzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALi1x3KfG 6eqp827lfdUK6DJEOxRZfuO6dEgnjsQ9qigT8DvQP4zlJRKo8Ee8K+ff4mw+x/eF Zm77ykHn8tEaHWF6TLvIEn7KUyEpGRNrX8ryZDJBLGNG5t9bZDhi+9kFDt6STFK2 xJWO52/w51p2YASBFUlFra8OYRnRHEY1Bgntqoy93mXg/WzxzR43tCTU/ArtAsyp 6GoXktsBb/2vEMNfO7Wb02sNtAFIo5sFFEeLlhzSbbT1gEzALxnT9ipO9cONwpQi U/v0I92gG+DkohiQKLakDkRnW2ORQTLN57P0sWyrv16f+J06cs6OIa+dSMishF21 pvQuQZHwS3Sn4w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:16 2025 by rpki-client