This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json) Hash identifier: T/+0ktp1upZJhzU+ElBeaA4/o6e+DVfxgAGG0avrBjc= Subject key identifier: 66:29:C5:B4:19:6D:15:3E:6B:CD:BF:92:F2:BA:3E:5F:AE:6E:82:11 Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2 Certificate serial: 019B3C7F75B824EAD364144BA70B52D6C36C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 16:02:24 +0000 Manifest this update: Sat 20 Dec 2025 16:02:24 +0000 Manifest next update: Sun 21 Dec 2025 16:02:24 +0000 Files and hashes: 1: pgTDkA03VW0zDxlnTBVHz55HqJY.roa (hash: rBFxYtlNHOxBeylPNnZjz2J7DVtg6cM4mYoztB0MlM0=) 2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: 3+U7DOAMDhLgLv8QlHWtaWIbO74mw8QxFG5+jbfDIoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:75:b8:24:ea:d3:64:14:4b:a7:0b:52:d6:c3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2 Validity Not Before: Dec 20 16:02:24 2025 GMT Not After : Dec 21 16:02:24 2025 GMT Subject: CN=6629c5b4196d153e6bcdbf92f2ba3e5fae6e8211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:58:c2:f8:70:8a:5f:8a:d5:a3:35:64:83: 50:56:42:5d:89:00:74:43:23:55:57:ca:af:6c:1c: 56:c5:df:66:38:ee:36:75:70:02:4a:9c:74:27:eb: 8a:6c:e7:42:77:eb:04:33:9e:4c:1d:6d:aa:aa:bc: e0:46:d2:5f:15:d4:03:6b:ab:7a:e5:92:07:a5:91: cb:a4:b0:f5:0f:e1:0f:f6:28:e5:62:fc:3c:2a:ee: 3f:89:0c:33:b4:63:86:d6:3b:68:8e:29:7c:f2:40: ce:ba:18:47:4a:a2:79:31:74:07:5d:b6:c5:b9:f9: 31:c9:31:e1:29:9c:74:13:98:7e:b6:b8:0b:5a:85: f6:b8:0b:2a:ef:39:1b:a5:1e:8e:31:bd:3d:f5:77: 59:13:a0:f2:93:0d:df:aa:b0:69:ad:99:d3:63:ac: bb:d1:f2:39:62:3d:fb:46:64:de:b1:f8:dc:74:c0: 10:9e:d0:77:72:cf:81:7e:25:5c:c0:57:b4:1f:d4: 23:5d:7e:92:67:4a:67:b1:19:e6:b9:f0:65:50:03: c4:29:7d:60:9a:8a:45:2f:0d:f2:da:aa:e7:80:92: 82:29:0c:e2:dd:42:69:dd:a8:10:1c:db:99:55:44: 3b:cc:51:fc:54:89:90:97:49:af:74:d6:cb:4d:17: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:29:C5:B4:19:6D:15:3E:6B:CD:BF:92:F2:BA:3E:5F:AE:6E:82:11 X509v3 Authority Key Identifier: keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c0:13:bd:bc:91:c7:11:44:05:ae:0e:3d:d0:26:b8:7d:26: 0d:47:18:fd:20:0b:1b:d2:de:6a:a3:e0:c4:c7:6c:e5:03:e4: b3:82:48:af:32:4f:bd:26:f1:47:a1:34:f7:38:43:a4:e8:2b: 17:8b:b9:4f:5a:67:a8:13:47:90:4f:65:75:48:2b:e2:08:67: 6a:39:dc:a7:ed:25:23:0c:6c:fc:97:b5:c5:0e:bd:af:b8:bc: f4:a6:fc:af:41:cf:50:19:fb:28:b3:16:fd:d5:bd:2e:b9:33: 06:d7:f0:52:7e:bb:30:3f:ab:2c:26:e3:e3:31:22:0a:f1:cf: c9:7c:4b:0f:ce:50:0e:ad:47:61:f4:af:43:61:a8:15:ed:e3: 28:29:db:cb:8d:b4:4d:9f:21:a5:91:fd:4b:b9:f1:05:45:05: 22:c7:b1:5f:91:df:53:0e:59:70:c1:da:1b:aa:43:82:b9:2b: e7:a5:4f:9e:86:d4:70:5c:cf:66:00:2a:ca:fa:93:43:3b:5b: c0:e0:b1:eb:7a:77:05:d6:d8:ae:e6:58:1b:7d:4a:65:b8:6e: f5:79:1b:49:7c:82:da:50:ca:0e:81:95:18:36:0a:59:c8:04: 13:c0:13:a7:04:f0:37:c3:26:01:f8:e7:99:51:12:09:6d:ce: 0b:99:36:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f3W4JOrTZBRLpwtS1sNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4 NWFmYzIwHhcNMjUxMjIwMTYwMjI0WhcNMjUxMjIxMTYwMjI0WjAzMTEwLwYDVQQD Eyg2NjI5YzViNDE5NmQxNTNlNmJjZGJmOTJmMmJhM2U1ZmFlNmU4MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArttYwvhwil+K1aM1ZINQVkJdiQB0 QyNVV8qvbBxWxd9mOO42dXACSpx0J+uKbOdCd+sEM55MHW2qqrzgRtJfFdQDa6t6 5ZIHpZHLpLD1D+EP9ijlYvw8Ku4/iQwztGOG1jtojil88kDOuhhHSqJ5MXQHXbbF ufkxyTHhKZx0E5h+trgLWoX2uAsq7zkbpR6OMb099XdZE6Dykw3fqrBprZnTY6y7 0fI5Yj37RmTesfjcdMAQntB3cs+BfiVcwFe0H9QjXX6SZ0pnsRnmufBlUAPEKX1g mopFLw3y2qrngJKCKQzi3UJp3agQHNuZVUQ7zFH8VImQl0mvdNbLTReWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYpxbQZbRU+a82/kvK6Pl+uboIRMB8GA1UdIwQY MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt NTMzNGU2YjhjNWZlLzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMATvbyR xxFEBa4OPdAmuH0mDUcY/SALG9LeaqPgxMds5QPks4JIrzJPvSbxR6E09zhDpOgr F4u5T1pnqBNHkE9ldUgr4ghnajncp+0lIwxs/Je1xQ69r7i89Kb8r0HPUBn7KLMW /dW9LrkzBtfwUn67MD+rLCbj4zEiCvHPyXxLD85QDq1HYfSvQ2GoFe3jKCnby420 TZ8hpZH9S7nxBUUFIsexX5HfUw5ZcMHaG6pDgrkr56VPnobUcFzPZgAqyvqTQztb wOCx63p3BdbYruZYG31KZbhu9XkbSXyC2lDKDoGVGDYKWcgEE8ATpwTwN8MmAfjn mVESCW3OC5k2lg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:01:45 2025 by rpki-client