This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json) Hash identifier: z7iQW81LpcGVwMECpe2XnuQQ3AVizK+OysjIu7c0KDE= Subject key identifier: 47:88:90:77:7F:75:47:A7:A0:EC:2E:6D:CA:A9:F2:E2:3A:CE:E3:1A Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87 Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087 Certificate serial: 019B3E6C90188837646B717B111FD6F7F621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft Manifest number: 1021 Signing time: Sun 21 Dec 2025 01:01:00 +0000 Manifest this update: Sun 21 Dec 2025 01:01:00 +0000 Manifest next update: Mon 22 Dec 2025 01:01:00 +0000 Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=) 2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: 8ISCRuiZWLIBImdoSzW3yn+p9k8hWQNTWv6ll0Re6Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:90:18:88:37:64:6b:71:7b:11:1f:d6:f7:f6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087 Validity Not Before: Dec 21 01:01:00 2025 GMT Not After : Dec 22 01:01:00 2025 GMT Subject: CN=478890777f7547a7a0ec2e6dcaa9f2e23acee31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:69:28:51:b8:be:46:02:08:e4:42:ff:22:71: 17:95:bf:2e:9d:21:5a:14:d8:99:7f:7f:3a:2f:6f: 0d:63:01:cf:71:4e:ed:f3:e8:38:ba:0d:21:ff:b7: 69:45:4f:7a:11:d5:c5:25:48:01:70:78:3f:9e:f0: 40:0e:de:a5:61:9f:ef:3a:9b:77:c3:b4:16:49:c6: b9:a2:b2:82:80:06:39:5a:7e:85:74:d0:c0:e6:46: 0c:2b:2f:83:c9:39:72:30:b3:58:90:a3:73:ab:8e: 58:fb:07:5d:d3:13:e6:57:30:23:5f:8b:03:13:48: a5:d9:a4:3f:5d:e5:58:ed:6c:75:ed:b5:15:a5:91: a6:ba:bf:fe:88:db:c1:49:c0:1d:c2:c6:f6:5b:5b: 91:d6:fb:6b:9d:f9:68:a9:8c:8b:eb:94:ee:b9:24: ce:a6:be:cc:5b:46:0f:86:8c:1d:c3:16:16:c2:c4: 8f:8d:d1:72:47:3f:79:a1:41:2c:cf:43:69:a0:30: 2e:43:97:c6:22:e6:e4:77:10:75:cb:ed:51:25:1e: d9:16:03:17:c0:4b:56:eb:ca:c6:27:6e:da:f1:23: ae:f5:96:4b:94:65:1e:95:af:28:55:e1:6c:e5:19: fc:de:92:8f:eb:54:6b:f0:bc:cf:48:4f:80:84:2a: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:88:90:77:7F:75:47:A7:A0:EC:2E:6D:CA:A9:F2:E2:3A:CE:E3:1A X509v3 Authority Key Identifier: keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:bb:ac:55:95:2f:83:b9:c0:9a:12:f2:f5:bd:3e:e6:13:ef: 25:1c:5f:92:da:c7:d8:cc:0a:4c:2b:93:90:4b:ab:1f:c9:10: 48:77:fc:c9:af:dd:c8:1c:3d:be:30:82:02:b0:3b:bd:86:41: fb:31:45:4e:43:0d:c4:13:ed:c9:bd:79:d2:d4:80:f7:04:7e: 66:fd:f4:a1:e8:ce:41:f1:53:8a:f7:27:72:fc:3e:e2:54:d5: 9c:64:81:e1:37:b6:ca:48:0f:a5:5b:e8:7e:50:06:fe:61:83: d8:e8:87:3c:80:02:14:39:c4:86:9b:51:0c:61:bc:03:43:21: 2e:64:59:c6:c7:8a:f1:c4:14:46:88:76:1d:6a:99:1f:89:ca: fc:1f:27:18:80:08:7b:b9:9d:b6:71:48:41:0c:67:1b:ab:3b: 69:58:60:02:14:77:ae:46:fd:39:5f:be:e3:e2:0c:88:ca:51: 15:e0:fe:6d:46:7a:70:0f:22:df:10:30:a2:e2:0b:a2:73:ee: 30:b5:65:4d:3f:ac:1f:ea:8c:09:26:6d:0b:bf:1e:90:85:00: 03:22:ab:ec:24:d2:07:c1:03:e9:8a:93:a8:32:de:48:5a:48: 7a:54:25:7a:4b:8b:10:86:ef:f2:ab:df:be:12:01:7f:ff:05: 74:3d:36:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJAYiDdka3F7ER/W9/YhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOGM0YTQzMDA4MzdjNGVhMTdhZDFlMzgyMWEwOWFkNTM3 NjQwODcwHhcNMjUxMjIxMDEwMTAwWhcNMjUxMjIyMDEwMTAwWjAzMTEwLwYDVQQD Eyg0Nzg4OTA3NzdmNzU0N2E3YTBlYzJlNmRjYWE5ZjJlMjNhY2VlMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92koUbi+RgII5EL/InEXlb8unSFa FNiZf386L28NYwHPcU7t8+g4ug0h/7dpRU96EdXFJUgBcHg/nvBADt6lYZ/vOpt3 w7QWSca5orKCgAY5Wn6FdNDA5kYMKy+DyTlyMLNYkKNzq45Y+wdd0xPmVzAjX4sD E0il2aQ/XeVY7Wx17bUVpZGmur/+iNvBScAdwsb2W1uR1vtrnfloqYyL65TuuSTO pr7MW0YPhowdwxYWwsSPjdFyRz95oUEsz0NpoDAuQ5fGIubkdxB1y+1RJR7ZFgMX wEtW68rGJ27a8SOu9ZZLlGUela8oVeFs5Rn83pKP61Rr8LzPSE+AhCqqZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeIkHd/dUenoOwubcqp8uI6zuMaMB8GA1UdIwQY MBaAFLGMSkMAg3xOoXrR44IaCa1TdkCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2Mjgt ZjA4YTBhZTkyYjhkLzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2MjgtZjA4YTBhZTkyYjhk LzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbusVZUv g7nAmhLy9b0+5hPvJRxfktrH2MwKTCuTkEurH8kQSHf8ya/dyBw9vjCCArA7vYZB +zFFTkMNxBPtyb150tSA9wR+Zv30oejOQfFTivcncvw+4lTVnGSB4Te2ykgPpVvo flAG/mGD2OiHPIACFDnEhptRDGG8A0MhLmRZxseK8cQURoh2HWqZH4nK/B8nGIAI e7mdtnFIQQxnG6s7aVhgAhR3rkb9OV++4+IMiMpRFeD+bUZ6cA8i3xAwouILonPu MLVlTT+sH+qMCSZtC78ekIUAAyKr7CTSB8ED6YqTqDLeSFpIelQlekuLEIbv8qvf vhIBf/8FdD02CQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:02:33 2025 by rpki-client