This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json) Hash identifier: H/Pq0XsSg2oto+hg10A3EzScMxGeTqH5ek3HJsc9h6w= Subject key identifier: 7B:BC:5B:57:8D:FD:AC:32:B5:80:FE:EB:D2:CA:62:26:C5:6E:AF:8F Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Certificate serial: 019B3EA3B9CEE25478395DE52D73B5BE8B09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft Manifest number: 147A Signing time: Sun 21 Dec 2025 02:01:15 +0000 Manifest this update: Sun 21 Dec 2025 02:01:15 +0000 Manifest next update: Mon 22 Dec 2025 02:01:15 +0000 Files and hashes: 1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=) 2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=) 3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=) 4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=) 5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=) 6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=) 7: q1aUxTH67vKCNVudozumhgFJnN0.roa (hash: Gev4Jmq/q5w1K/DLzN5ZlF/rU5AntRJHyQ0iiS7LMww=) 8: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: xPCEol3BeDjyEj3pYwNqJSpO5uJpuoG0D88iNENfXCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:b9:ce:e2:54:78:39:5d:e5:2d:73:b5:be:8b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Validity Not Before: Dec 21 02:01:15 2025 GMT Not After : Dec 22 02:01:15 2025 GMT Subject: CN=7bbc5b578dfdac32b580feebd2ca6226c56eaf8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:0b:cf:ad:8f:6b:8e:9e:6f:68:53:76:16: 37:6c:14:db:05:48:3b:9f:c2:2e:f2:6c:39:28:b2: b6:e5:3b:8b:a0:39:8a:3f:eb:8d:cd:30:87:42:69: 6e:ed:f3:02:49:4c:f3:a3:e2:51:bb:b1:be:10:f0: 9f:f8:5e:08:dd:89:5c:ae:50:c3:b9:b5:d3:c7:5d: 13:4a:d6:8a:e8:20:86:77:1d:14:67:29:0f:dd:d7: 14:df:d1:b3:f5:45:a0:36:b2:20:5a:b7:71:84:96: d6:91:da:54:66:2d:07:64:12:f4:d0:6e:60:e2:3a: 88:c0:dd:0b:29:3e:34:8f:2a:d8:59:c8:2a:d5:83: 65:c1:09:87:a8:d1:2e:25:fe:61:b2:12:85:d9:36: 80:cb:f4:64:8b:c2:8f:b2:3a:50:45:28:27:ba:7a: 49:ca:eb:40:89:db:bd:a7:fe:8a:4c:1c:e9:65:03: f8:a4:69:e1:1c:e9:21:37:3a:e4:33:f4:1a:59:20: 7a:0b:c4:b6:e0:8c:4d:bc:65:7f:f4:15:d6:46:5e: b4:f0:fe:64:1d:4a:b9:ed:16:85:cc:5d:74:70:4c: e3:4d:aa:83:f5:b4:01:f9:ab:ea:ba:c3:4e:d2:03: 39:3f:40:d4:04:60:64:20:4d:30:64:1d:f7:96:3b: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BC:5B:57:8D:FD:AC:32:B5:80:FE:EB:D2:CA:62:26:C5:6E:AF:8F X509v3 Authority Key Identifier: keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:42:1e:f9:0e:ca:26:23:de:7e:d4:3a:fa:35:93:b7:02:85: 24:02:95:87:84:be:82:89:c4:29:80:5f:49:20:70:89:b3:2c: 72:6c:61:a1:b1:44:c7:7b:07:0c:d2:90:9d:15:29:e6:70:59: eb:8d:ea:84:94:39:45:4b:2e:b9:ca:f9:7a:00:09:3f:6b:e6: 00:b9:1e:93:46:33:1e:e1:eb:d7:85:3a:52:58:2e:ee:05:1a: 0a:dc:2f:3d:76:70:26:59:53:d2:47:c7:08:3c:6f:89:76:40: 9f:1f:45:4b:02:14:15:13:ef:80:36:2f:a2:ba:3b:5c:82:33: 0e:82:cf:79:9e:2b:62:28:ec:b2:ac:b6:87:e6:93:b5:8b:73: 2a:96:3a:c8:20:ab:db:22:67:8e:20:0b:a6:ee:24:fd:46:38: 9c:c1:5f:1b:49:8b:7c:fc:1d:f5:9f:f9:1c:8d:7f:63:12:38: 50:0f:42:46:4e:b5:ef:bf:55:a7:b6:02:ae:00:96:a9:47:2c: 6f:ff:31:b8:e6:13:3e:15:ec:30:fa:04:4e:82:ec:76:37:85: 45:19:72:ff:34:e4:48:8b:d3:c1:e7:90:c4:da:55:64:36:05: 56:8e:d8:24:34:3a:33:a7:a3:56:01:27:22:14:f3:ff:55:95: b7:e0:37:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o7nO4lR4OV3lLXO1vosJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy YjAzYzAwHhcNMjUxMjIxMDIwMTE1WhcNMjUxMjIyMDIwMTE1WjAzMTEwLwYDVQQD Eyg3YmJjNWI1NzhkZmRhYzMyYjU4MGZlZWJkMmNhNjIyNmM1NmVhZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlwLz62Pa46eb2hTdhY3bBTbBUg7 n8Iu8mw5KLK25TuLoDmKP+uNzTCHQmlu7fMCSUzzo+JRu7G+EPCf+F4I3YlcrlDD ubXTx10TStaK6CCGdx0UZykP3dcU39Gz9UWgNrIgWrdxhJbWkdpUZi0HZBL00G5g 4jqIwN0LKT40jyrYWcgq1YNlwQmHqNEuJf5hshKF2TaAy/Rki8KPsjpQRSgnunpJ yutAidu9p/6KTBzpZQP4pGnhHOkhNzrkM/QaWSB6C8S24IxNvGV/9BXWRl608P5k HUq57RaFzF10cEzjTaqD9bQB+avqusNO0gM5P0DUBGBkIE0wZB33lju53wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu8W1eN/awytYD+69LKYibFbq+PMB8GA1UdIwQY MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt YTcyNDdlOWQ1ZjNhLzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkIe+Q7K JiPeftQ6+jWTtwKFJAKVh4S+gonEKYBfSSBwibMscmxhobFEx3sHDNKQnRUp5nBZ 643qhJQ5RUsuucr5egAJP2vmALkek0YzHuHr14U6Ulgu7gUaCtwvPXZwJllT0kfH CDxviXZAnx9FSwIUFRPvgDYvoro7XIIzDoLPeZ4rYijssqy2h+aTtYtzKpY6yCCr 2yJnjiALpu4k/UY4nMFfG0mLfPwd9Z/5HI1/YxI4UA9CRk61779Vp7YCrgCWqUcs b/8xuOYTPhXsMPoEToLsdjeFRRly/zTkSIvTweeQxNpVZDYFVo7YJDQ6M6ejVgEn IhTz/1WVt+A37g== -----END CERTIFICATE-----Generated at Sun Dec 21 08:17:01 2025 by rpki-client