This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft File: sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json) Hash identifier: s9N9EBFOsn2eAisB7xGxcjMcxBaEudVeg9ax4Q7RogM= Subject key identifier: E1:8F:6E:AA:56:CA:1B:5A:65:07:BA:F2:40:AE:21:E8:D0:16:5A:FF Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774 Certificate serial: 019B413664CE905D04497FC3D2DCF9FDA4D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft Manifest number: 1217 Signing time: Sun 21 Dec 2025 14:00:42 +0000 Manifest this update: Sun 21 Dec 2025 14:00:42 +0000 Manifest next update: Mon 22 Dec 2025 14:00:42 +0000 Files and hashes: 1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=) 2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=) 3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=) 4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: K4XkFrGoi5hVISx2uqr999kH3pJI5coejEufF+g+nps=) 5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:64:ce:90:5d:04:49:7f:c3:d2:dc:f9:fd:a4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774 Validity Not Before: Dec 21 14:00:42 2025 GMT Not After : Dec 22 14:00:42 2025 GMT Subject: CN=e18f6eaa56ca1b5a6507baf240ae21e8d0165aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:66:e3:2c:75:65:3b:d6:4c:8a:b4:a0:1f: f9:b5:97:2c:f3:0c:ed:93:af:93:f3:00:17:d8:c3: 53:ea:27:c5:f4:c8:74:84:3c:aa:71:35:46:c8:d0: f3:1f:f9:b5:70:fe:0c:c9:ff:98:0e:62:2b:7e:b1: d2:c6:b0:22:11:1d:06:75:e1:1a:4f:ab:c4:75:63: 24:eb:6f:0c:b8:29:8c:d7:ef:36:1b:c8:63:c6:5d: d0:48:1b:a7:41:8e:20:82:f2:7c:e0:d3:06:e9:cc: c7:82:03:01:82:e6:5f:5f:08:7d:a7:37:0d:3b:23: 1e:03:a8:56:1d:d9:22:31:38:09:f8:07:46:fe:9d: 9e:56:a4:65:23:75:bf:83:8b:29:60:3e:2c:fa:fc: 70:53:bd:fd:1d:28:21:d5:97:73:3b:6f:a6:cf:5f: 91:52:64:a8:88:9b:12:c7:1d:7a:8e:05:55:e2:20: e8:ac:c2:5e:24:ee:87:00:88:95:1d:41:0f:f5:09: a7:0f:25:e8:3c:d9:90:cf:f2:a3:d0:04:71:44:8f: 9b:10:83:1f:a8:87:bd:79:c5:9e:a5:6c:81:33:26: f3:4e:19:c4:a6:fe:e0:30:80:74:5b:bb:05:00:21: 4c:3d:20:90:ed:92:a9:b5:25:c9:f8:bc:7a:d6:a1: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8F:6E:AA:56:CA:1B:5A:65:07:BA:F2:40:AE:21:E8:D0:16:5A:FF X509v3 Authority Key Identifier: keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ef:e4:41:1c:0d:af:f5:d2:58:56:fa:56:20:26:8b:b3:0e: 92:b1:37:0f:c7:33:8f:97:15:3c:d7:41:b0:bd:6d:0f:b5:77: 1b:9a:68:4e:e0:d6:9d:b3:3b:f3:8d:79:61:29:44:1b:80:d6: 0e:2b:16:e6:d2:d9:3a:64:6b:78:ff:97:d3:c4:19:af:bd:a1: cf:5f:cb:8c:1b:cc:9a:0e:e0:1e:64:70:cd:09:c9:ae:5a:c9: bd:3f:6b:99:57:5f:55:82:3f:84:ff:1c:b6:41:72:5a:e2:d2: bd:c3:56:94:23:1a:80:df:1f:ef:9a:1f:cb:8b:e2:86:37:19: 96:1e:63:e7:2d:98:e4:de:06:78:8e:63:f4:2f:c6:cf:c7:b6: 12:8f:35:ab:89:c7:f8:6c:69:7e:ac:b3:e3:db:37:00:65:1d: 2d:9d:5b:ba:e0:8e:17:1c:63:49:69:20:f8:85:b2:1e:4a:4b: 37:f2:12:05:d3:f6:aa:67:5c:f2:94:dc:de:fb:67:15:17:69: 41:f3:96:32:de:e1:a8:31:b7:a1:16:9f:0e:4c:d9:86:92:81: 6b:8a:13:0b:ba:83:f2:14:9a:ad:75:dc:a0:6c:76:c4:c3:56: c7:0e:b7:fe:f1:61:4a:fa:16:f4:67:20:0e:99:0d:43:4d:b6: c7:a2:06:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNmTOkF0ESX/D0tz5/aTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3 Zjc3NzQwHhcNMjUxMjIxMTQwMDQyWhcNMjUxMjIyMTQwMDQyWjAzMTEwLwYDVQQD EyhlMThmNmVhYTU2Y2ExYjVhNjUwN2JhZjI0MGFlMjFlOGQwMTY1YWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+tm4yx1ZTvWTIq0oB/5tZcs8wzt k6+T8wAX2MNT6ifF9Mh0hDyqcTVGyNDzH/m1cP4Myf+YDmIrfrHSxrAiER0GdeEa T6vEdWMk628MuCmM1+82G8hjxl3QSBunQY4ggvJ84NMG6czHggMBguZfXwh9pzcN OyMeA6hWHdkiMTgJ+AdG/p2eVqRlI3W/g4spYD4s+vxwU739HSgh1ZdzO2+mz1+R UmSoiJsSxx16jgVV4iDorMJeJO6HAIiVHUEP9QmnDyXoPNmQz/Kj0ARxRI+bEIMf qIe9ecWepWyBMybzThnEpv7gMIB0W7sFACFMPSCQ7ZKptSXJ+Lx61qFeuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGPbqpWyhtaZQe68kCuIejQFlr/MB8GA1UdIwQY MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt NTQ2OGIyY2YwYTc3LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3 LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADO/kQRwN r/XSWFb6ViAmi7MOkrE3D8czj5cVPNdBsL1tD7V3G5poTuDWnbM78415YSlEG4DW DisW5tLZOmRreP+X08QZr72hz1/LjBvMmg7gHmRwzQnJrlrJvT9rmVdfVYI/hP8c tkFyWuLSvcNWlCMagN8f75ofy4vihjcZlh5j5y2Y5N4GeI5j9C/Gz8e2Eo81q4nH +Gxpfqyz49s3AGUdLZ1buuCOFxxjSWkg+IWyHkpLN/ISBdP2qmdc8pTc3vtnFRdp QfOWMt7hqDG3oRafDkzZhpKBa4oTC7qD8hSarXXcoGx2xMNWxw63/vFhSvoW9Gcg DpkNQ022x6IGBA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:16:53 2025 by rpki-client