This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft File: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft (raw, json) Hash identifier: dhgp3ngU0SkNhzzx3rs/EjpwdvZo9msTrXjeu0fYWos= Subject key identifier: 42:76:CB:75:D1:9F:D7:B0:F6:09:68:3C:4C:47:31:6F:36:5A:34:26 Authority key identifier: B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4 Certificate issuer: /CN=b284cdf0507443e16e509d57a229e914f73566a4 Certificate serial: 019B6C2102C60342462F10EE60FD51C1B48F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft Manifest number: 1647 Signing time: Mon 29 Dec 2025 22:01:01 +0000 Manifest this update: Mon 29 Dec 2025 22:01:01 +0000 Manifest next update: Tue 30 Dec 2025 22:01:01 +0000 Files and hashes: 1: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl (hash: iqxCEd76bVm5+cgc4mK/GPaJw2aikYn1xcCRrnQFt6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:21:02:c6:03:42:46:2f:10:ee:60:fd:51:c1:b4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b284cdf0507443e16e509d57a229e914f73566a4 Validity Not Before: Dec 29 22:01:01 2025 GMT Not After : Dec 30 22:01:01 2025 GMT Subject: CN=4276cb75d19fd7b0f609683c4c47316f365a3426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:76:ce:45:8b:12:65:95:4d:f3:64:a2:cc: c0:b0:c6:bd:a7:d6:d7:f7:64:90:0c:b5:b3:e4:94: 8e:57:09:f5:a3:da:ff:fa:1f:04:98:43:e1:fd:70: 42:05:3a:d6:fd:b8:2b:20:fd:d3:06:40:6e:b9:3e: 69:69:c3:33:80:4c:b4:a2:e7:9d:ad:c2:0d:e4:98: d7:bc:47:e1:69:fd:db:05:b1:a8:e3:24:6f:a4:16: 9b:90:ec:7c:98:c3:eb:e1:9c:0e:a0:dc:38:8e:73: 93:fd:84:c5:6d:bc:eb:7c:e7:a8:a4:f6:32:0b:cd: 10:dc:fb:42:43:23:3c:f9:7e:64:d4:66:dc:93:97: f9:4b:37:4a:66:4e:7c:64:11:43:22:03:fc:99:84: 99:8a:1d:26:23:67:9d:86:f7:97:73:ee:b7:09:07: 3a:9f:91:bd:82:66:ec:08:24:d9:ad:7b:31:9a:b9: be:2c:8b:33:66:29:96:5f:c3:d4:2f:8c:94:e8:73: df:7c:e3:00:0e:60:c1:b9:10:71:7a:8b:1b:bb:c6: 69:6b:6c:90:f8:84:33:bd:d6:2f:56:2f:43:4a:46: 64:86:ec:e9:53:a4:66:5a:93:da:1b:43:7b:ce:94: 73:13:92:6f:f2:fb:b6:79:ae:6c:7e:31:71:f7:21: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:76:CB:75:D1:9F:D7:B0:F6:09:68:3C:4C:47:31:6F:36:5A:34:26 X509v3 Authority Key Identifier: keyid:B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fe:cf:87:09:0b:30:9a:7d:15:29:e5:59:46:1b:ad:ea:89: d1:3a:2e:60:07:75:90:f8:db:b0:23:d8:be:e3:1c:e1:ce:08: 6f:55:f2:fd:7d:24:38:45:75:b4:53:c8:eb:84:eb:74:df:ab: d6:7b:52:b5:2c:66:c1:05:cc:43:f0:38:e7:ef:9b:0c:27:1d: 14:55:7e:4f:d6:ee:ff:70:ae:8d:93:bd:61:5d:2b:d0:0e:9b: fa:82:01:06:55:b8:11:f9:1c:3b:a3:52:93:d8:af:1b:ca:a9: 47:38:52:30:9f:48:c3:26:20:86:11:83:d7:d6:01:0b:fe:22: 65:ae:d9:bc:55:c0:9b:24:8f:0c:cb:d1:01:3a:da:67:c1:d7: 30:14:46:da:3a:7e:4c:85:f7:ce:c4:12:38:1d:58:88:d8:f9: e5:27:1f:8a:88:42:f7:bc:77:43:21:34:30:e8:81:30:98:bf: 1b:3d:27:1c:9e:52:54:b3:9c:5b:b7:19:b2:0c:31:f3:c6:3b: 6b:6b:bf:b4:22:b7:34:f1:f2:22:fc:3a:d5:89:63:dd:2c:e7: e8:ce:fd:31:95:35:34:d8:4c:dd:bb:62:0d:fd:a9:02:8f:42: 52:9c:e3:a6:77:da:e7:40:cc:60:78:f7:4d:85:19:7b:b8:9d: 75:e6:d0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIQLGA0JGLxDuYP1RwbSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODRjZGYwNTA3NDQzZTE2ZTUwOWQ1N2EyMjllOTE0Zjcz NTY2YTQwHhcNMjUxMjI5MjIwMTAxWhcNMjUxMjMwMjIwMTAxWjAzMTEwLwYDVQQD Eyg0Mjc2Y2I3NWQxOWZkN2IwZjYwOTY4M2M0YzQ3MzE2ZjM2NWEzNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMR2zkWLEmWVTfNkoszAsMa9p9bX 92SQDLWz5JSOVwn1o9r/+h8EmEPh/XBCBTrW/bgrIP3TBkBuuT5pacMzgEy0oued rcIN5JjXvEfhaf3bBbGo4yRvpBabkOx8mMPr4ZwOoNw4jnOT/YTFbbzrfOeopPYy C80Q3PtCQyM8+X5k1Gbck5f5SzdKZk58ZBFDIgP8mYSZih0mI2edhveXc+63CQc6 n5G9gmbsCCTZrXsxmrm+LIszZimWX8PUL4yU6HPffOMADmDBuRBxeosbu8Zpa2yQ +IQzvdYvVi9DSkZkhuzpU6RmWpPaG0N7zpRzE5Jv8vu2ea5sfjFx9yFDBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ2y3XRn9ew9gloPExHMW82WjQmMB8GA1UdIwQY MBaAFLKEzfBQdEPhblCdV6Ip6RT3NWakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29UTjhGQjBRLUZ1VUoxWG9pbnBGUGMxWnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hMzgyOGQtMGY1MS00ZGEwLTg0MzMt ZGY1NmEyNDEwOThmLzEvc29UTjhGQjBRLUZ1VUoxWG9pbnBGUGMxWnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hMzgyOGQtMGY1MS00ZGEwLTg0MzMtZGY1NmEyNDEwOThm LzEvc29UTjhGQjBRLUZ1VUoxWG9pbnBGUGMxWnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/7PhwkL MJp9FSnlWUYbreqJ0TouYAd1kPjbsCPYvuMc4c4Ib1Xy/X0kOEV1tFPI64TrdN+r 1ntStSxmwQXMQ/A45++bDCcdFFV+T9bu/3CujZO9YV0r0A6b+oIBBlW4EfkcO6NS k9ivG8qpRzhSMJ9IwyYghhGD19YBC/4iZa7ZvFXAmySPDMvRATraZ8HXMBRG2jp+ TIX3zsQSOB1YiNj55ScfiohC97x3QyE0MOiBMJi/Gz0nHJ5SVLOcW7cZsgwx88Y7 a2u/tCK3NPHyIvw61Ylj3Szn6M79MZU1NNhM3btiDf2pAo9CUpzjpnfa50DMYHj3 TYUZe7iddebQzg== -----END CERTIFICATE-----Generated at Tue Dec 30 03:16:52 2025 by rpki-client