This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft File: sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json) Hash identifier: xwv915htdotOkNhf6nyQpOpc68wxG1meFhz4FzRG9o8= Subject key identifier: 1B:D5:A7:89:DE:D3:8D:77:D7:59:C4:55:17:09:0C:52:27:C4:FF:9F Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Certificate serial: 019B51BC9A7AFE518855D74E6496F920A6EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft Manifest number: 133D Signing time: Wed 24 Dec 2025 19:01:13 +0000 Manifest this update: Wed 24 Dec 2025 19:01:13 +0000 Manifest next update: Thu 25 Dec 2025 19:01:13 +0000 Files and hashes: 1: HGyMO-gI6BJOthGGldBVkMwTP6M.roa (hash: LWkHdvqqdhuJkMVn2Z8NyBNjrEPjz4vXV3NQv+TmBQY=) 2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: 7Ze40CewJXliHQptZ+7X/uDnZOu1V7GSwEwa54Acqfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:9a:7a:fe:51:88:55:d7:4e:64:96:f9:20:a6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Validity Not Before: Dec 24 19:01:13 2025 GMT Not After : Dec 25 19:01:13 2025 GMT Subject: CN=1bd5a789ded38d77d759c45517090c5227c4ff9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:b5:a5:c5:22:0c:2c:00:24:51:c8:c5:04: d2:9b:d7:cc:a9:e8:e2:ed:2c:ba:41:cb:bf:12:9a: 85:97:8a:a2:c8:fa:98:c7:0c:9d:e1:90:3e:d4:3e: 3d:11:08:0e:0c:b8:a3:41:39:84:f1:5b:61:43:6e: 69:09:ab:3e:bc:52:44:b6:64:b0:15:33:61:4a:9b: b4:03:26:00:0f:80:d2:84:c2:72:09:6d:b2:09:b5: d9:95:1e:c2:82:9d:2e:98:84:f7:cc:06:ec:98:9c: 04:ab:b1:c3:40:0e:b3:c8:65:cb:02:61:b3:0d:52: df:93:d1:eb:3d:8b:5f:ad:85:a0:43:45:d6:9a:f3: 1a:e4:83:d1:6e:be:8d:9e:07:66:b9:7f:17:39:8f: 81:59:bb:4f:be:76:c7:e8:5a:66:9d:e9:b3:ac:10: bc:b3:32:a3:6a:f4:b1:0f:42:93:36:29:b4:dc:bb: 54:84:d4:19:a6:6b:96:fe:3b:9f:6e:54:5c:90:1e: 2a:7d:df:30:ef:81:6b:22:0b:54:88:1b:9a:de:00: 32:f5:10:2e:47:06:cc:c7:27:5c:c9:8b:76:35:8f: e5:57:af:c4:d0:96:a3:51:f4:d2:ec:f1:4c:e8:45: 5b:c5:1b:eb:22:cc:cf:10:9e:90:06:05:3f:31:d2: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D5:A7:89:DE:D3:8D:77:D7:59:C4:55:17:09:0C:52:27:C4:FF:9F X509v3 Authority Key Identifier: keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:92:10:20:e8:a2:e5:c8:dd:ce:49:35:8b:7b:f7:5c:26:25: af:11:b8:fb:c4:cd:39:21:f4:96:d2:d5:87:34:de:a3:6e:ff: e9:e1:6c:1e:5b:f2:08:fd:c5:f0:39:f3:57:41:73:08:2b:6a: be:20:2e:66:5c:3c:f3:e0:f9:92:14:5d:82:65:01:1f:98:db: f5:3b:d2:1d:66:e5:21:8e:7d:6d:9c:a7:1d:47:a0:5a:a5:88: 87:62:bb:78:5a:2c:cf:c9:e3:10:1b:9b:6c:42:b8:d1:e8:93: df:f5:fb:3f:66:e8:c9:94:cd:5f:59:ce:71:1c:b7:49:27:30: 70:63:e2:f2:e0:86:c9:46:b5:52:6b:00:75:2a:0b:d6:02:d9: c4:51:71:38:47:97:34:56:12:27:4a:c3:03:a3:eb:f1:28:8d: b1:da:35:0b:a3:dc:29:52:f9:83:e5:ce:31:33:49:c1:68:5f: 48:b6:07:81:30:a6:6a:dc:12:d6:36:9f:f7:a1:a1:ac:64:01: d8:6d:3e:c6:12:e6:b4:c8:23:b6:c9:03:47:5a:ba:5a:70:7f: 33:d5:f8:58:fb:29:1a:d3:ee:1f:78:76:09:ac:55:58:68:21: 56:5c:69:36:69:81:c8:de:4a:dd:4b:c5:ea:6f:67:f2:69:4e: bf:f4:9b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvJp6/lGIVddOZJb5IKbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWNhMmY2ODZkNGU0ODRhNzdjMzRjMTczNDc2YmY2OWQy MzdiN2QwHhcNMjUxMjI0MTkwMTEzWhcNMjUxMjI1MTkwMTEzWjAzMTEwLwYDVQQD EygxYmQ1YTc4OWRlZDM4ZDc3ZDc1OWM0NTUxNzA5MGM1MjI3YzRmZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdC1pcUiDCwAJFHIxQTSm9fMqeji 7Sy6Qcu/EpqFl4qiyPqYxwyd4ZA+1D49EQgODLijQTmE8VthQ25pCas+vFJEtmSw FTNhSpu0AyYAD4DShMJyCW2yCbXZlR7Cgp0umIT3zAbsmJwEq7HDQA6zyGXLAmGz DVLfk9HrPYtfrYWgQ0XWmvMa5IPRbr6NngdmuX8XOY+BWbtPvnbH6FpmnemzrBC8 szKjavSxD0KTNim03LtUhNQZpmuW/jufblRckB4qfd8w74FrIgtUiBua3gAy9RAu RwbMxydcyYt2NY/lV6/E0JajUfTS7PFM6EVbxRvrIszPEJ6QBgU/MdLj4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvVp4ne041311nEVRcJDFInxP+fMB8GA1UdIwQY MBaAFLFcovaG1OSEp3w0wXNHa/adI3t9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2Qt Mzg1ZjNmNTJhOTZiLzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2QtMzg1ZjNmNTJhOTZi LzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5IQIOii 5cjdzkk1i3v3XCYlrxG4+8TNOSH0ltLVhzTeo27/6eFsHlvyCP3F8DnzV0FzCCtq viAuZlw88+D5khRdgmUBH5jb9TvSHWblIY59bZynHUegWqWIh2K7eFosz8njEBub bEK40eiT3/X7P2boyZTNX1nOcRy3SScwcGPi8uCGyUa1UmsAdSoL1gLZxFFxOEeX NFYSJ0rDA6Pr8SiNsdo1C6PcKVL5g+XOMTNJwWhfSLYHgTCmatwS1jaf96GhrGQB 2G0+xhLmtMgjtskDR1q6WnB/M9X4WPspGtPuH3h2CaxVWGghVlxpNmmByN5K3UvF 6m9n8mlOv/SbnA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:50 2025 by rpki-client