This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json) Hash identifier: R8QEwS1y4U3xgy3hA67XDjC3g5i/hx03UW0Oq2mMOwg= Subject key identifier: AB:74:2B:2B:95:3C:F8:38:A6:B8:A7:3C:9A:FF:13:DA:21:6D:48:85 Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Certificate serial: 019B6FC64FE241F3B9D8B4C672C918F04849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 15:00:25 +0000 Manifest this update: Tue 30 Dec 2025 15:00:25 +0000 Manifest next update: Wed 31 Dec 2025 15:00:25 +0000 Files and hashes: 1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=) 2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=) 3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=) 4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: BaOPtkOy7n6Kby8wQCFI499nlP2EIuxDkciNMtY8HhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:c6:4f:e2:41:f3:b9:d8:b4:c6:72:c9:18:f0:48:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Validity Not Before: Dec 30 15:00:25 2025 GMT Not After : Dec 31 15:00:25 2025 GMT Subject: CN=ab742b2b953cf838a6b8a73c9aff13da216d4885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:6a:1e:5e:64:a1:1e:6c:a7:e4:27:c8:d0: 18:80:8a:0f:8d:6d:b5:a8:16:d9:f2:ed:69:9c:7e: 30:f6:5c:9c:44:91:df:b7:f8:c1:ee:68:57:eb:59: ca:4d:f4:8b:65:88:1d:11:41:9f:f8:23:cb:13:94: 5e:88:a8:b1:8c:92:35:c9:a4:c6:a0:78:ad:f7:88: 0b:1d:ea:2d:ff:a4:fc:a5:e1:ba:d7:4d:0e:4a:d1: 4f:c9:a4:92:20:33:85:6f:87:31:83:53:d7:19:0e: 33:63:23:f5:c6:48:d3:32:56:72:fb:94:b3:eb:fb: a0:5a:91:12:5f:94:de:f9:13:e3:d7:3e:6c:21:cb: c9:fb:b5:41:01:02:52:6e:b5:4a:f0:fe:b9:34:49: 88:e3:54:ab:bc:95:87:66:b8:89:f3:16:8c:29:56: a3:6f:e3:36:a8:84:d1:be:b8:30:84:33:a2:ba:f3: 7f:94:a7:c7:15:55:7a:a8:2d:0e:f8:96:30:b9:ee: 17:86:ef:b5:af:63:d0:1d:ce:5c:fc:a5:5f:e9:20: c9:42:4a:86:d1:3b:5f:b6:75:70:1a:38:29:b2:c8: 29:85:bf:0a:26:2c:3d:53:ad:8e:43:7d:3b:9e:f3: cf:26:94:4a:b2:0a:2e:70:5c:18:72:3e:58:24:28: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:74:2B:2B:95:3C:F8:38:A6:B8:A7:3C:9A:FF:13:DA:21:6D:48:85 X509v3 Authority Key Identifier: keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:db:a8:86:da:8e:be:33:c4:f6:00:92:dd:e7:57:1d:c5:f9: a3:2a:30:17:1b:96:dc:4c:bc:41:c9:65:32:f7:3d:d5:bb:4a: 6d:34:5b:29:09:17:4f:2a:00:ea:9e:05:73:23:12:14:84:1e: 03:34:4e:bc:de:ba:56:aa:25:1f:95:f8:e4:f4:5a:9b:58:34: e4:1d:a9:37:e9:90:2c:b9:5d:b4:0d:9f:e6:ec:01:59:f9:42: e9:88:80:bc:b4:73:e8:99:b7:b7:e6:19:61:5a:aa:36:67:00: 43:d5:a6:fc:99:bf:ba:8d:6a:51:4c:89:ae:41:9f:a1:3f:e7: 00:a6:8b:63:1b:c4:52:04:23:f7:d2:93:8a:da:69:9f:db:a5: 15:ce:c8:56:2d:3c:a6:64:f5:fe:72:23:8c:9e:46:23:60:eb: bf:00:c8:df:5c:cd:f5:db:42:ff:e6:2d:35:a3:08:8d:4b:1f: 86:82:c0:fc:5d:16:67:67:dd:05:b6:28:3b:f3:db:6c:cb:2b: 32:e1:29:60:ad:5f:41:d3:2f:ec:8c:5b:74:f0:d7:fa:ed:b9: 4c:f6:1d:7b:a6:b4:bf:e0:df:91:d3:73:f3:26:66:29:31:58: 8b:a9:0e:3b:cd:bb:45:c3:ea:ca:a9:37:af:ac:e6:27:fc:49: e9:ec:50:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvxk/iQfO52LTGcskY8EhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz ZDM5MDgwHhcNMjUxMjMwMTUwMDI1WhcNMjUxMjMxMTUwMDI1WjAzMTEwLwYDVQQD EyhhYjc0MmIyYjk1M2NmODM4YTZiOGE3M2M5YWZmMTNkYTIxNmQ0ODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaNqHl5koR5sp+QnyNAYgIoPjW21 qBbZ8u1pnH4w9lycRJHft/jB7mhX61nKTfSLZYgdEUGf+CPLE5ReiKixjJI1yaTG oHit94gLHeot/6T8peG6100OStFPyaSSIDOFb4cxg1PXGQ4zYyP1xkjTMlZy+5Sz 6/ugWpESX5Te+RPj1z5sIcvJ+7VBAQJSbrVK8P65NEmI41SrvJWHZriJ8xaMKVaj b+M2qITRvrgwhDOiuvN/lKfHFVV6qC0O+JYwue4Xhu+1r2PQHc5c/KVf6SDJQkqG 0TtftnVwGjgpssgphb8KJiw9U62OQ307nvPPJpRKsgoucFwYcj5YJChLaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt0KyuVPPg4prinPJr/E9ohbUiFMB8GA1UdIwQY MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt YTYwNTcxN2QzNGFlLzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9uohtqO vjPE9gCS3edXHcX5oyowFxuW3Ey8QcllMvc91btKbTRbKQkXTyoA6p4FcyMSFIQe AzROvN66VqolH5X45PRam1g05B2pN+mQLLldtA2f5uwBWflC6YiAvLRz6Jm3t+YZ YVqqNmcAQ9Wm/Jm/uo1qUUyJrkGfoT/nAKaLYxvEUgQj99KTitppn9ulFc7IVi08 pmT1/nIjjJ5GI2DrvwDI31zN9dtC/+YtNaMIjUsfhoLA/F0WZ2fdBbYoO/PbbMsr MuEpYK1fQdMv7IxbdPDX+u25TPYde6a0v+DfkdNz8yZmKTFYi6kOO827RcPqyqk3 r6zmJ/xJ6exQxw== -----END CERTIFICATE-----Generated at Tue Dec 30 18:42:22 2025 by rpki-client