This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json) Hash identifier: FDlk4vFLFNsH5j9N1XCAk+X5Sxbh5W6pnBtIjeFJX/A= Subject key identifier: FD:A4:AF:1F:E1:0E:23:5B:8E:79:D4:40:A4:A2:24:ED:9E:30:F2:B0 Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47 Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947 Certificate serial: 019B3D5A180FB6781529E9AB987DAC721DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft Manifest number: 0AA8 Signing time: Sat 20 Dec 2025 20:01:13 +0000 Manifest this update: Sat 20 Dec 2025 20:01:13 +0000 Manifest next update: Sun 21 Dec 2025 20:01:13 +0000 Files and hashes: 1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: PkA4NsIWIJOOi4PTz7HrzDxLnikpoLQpIogynPYSSws=) 2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:18:0f:b6:78:15:29:e9:ab:98:7d:ac:72:1d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947 Validity Not Before: Dec 20 20:01:13 2025 GMT Not After : Dec 21 20:01:13 2025 GMT Subject: CN=fda4af1fe10e235b8e79d440a4a224ed9e30f2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:5f:d2:d3:6e:b7:1c:be:b3:26:f3:d7:10: 0a:0b:ea:66:51:a8:83:f4:29:55:cc:95:16:0b:63: 17:60:8d:f1:74:a3:16:92:3e:bf:da:07:b4:33:00: ed:e0:d1:9d:06:1e:ae:ae:b1:3d:b1:91:2a:7f:1a: f2:ea:2b:93:d2:3f:a8:cf:aa:70:16:75:91:83:b8: a9:d3:bd:46:e8:6e:b7:e8:63:37:9f:06:91:8e:6e: 09:58:a7:1d:60:84:33:82:bb:bc:5c:5a:a7:76:67: aa:b6:5c:b5:72:7f:62:0d:1e:d8:c3:9b:81:28:dd: 12:44:97:90:41:4c:a7:d5:4f:25:27:4b:66:c3:1e: da:a1:fc:11:ff:24:1b:ad:8c:ef:d4:22:19:eb:f3: 20:89:be:13:18:4b:d0:64:82:7b:4e:41:79:cd:93: 6e:be:16:1c:12:b6:f2:bd:41:25:42:f8:72:fa:db: 32:49:bc:90:24:3b:00:af:8c:93:3c:af:32:eb:3d: 33:34:16:66:3e:e6:f7:84:4c:d9:6f:0a:08:5b:59: 9f:eb:0e:db:a8:70:be:6f:e2:81:9d:15:c5:a3:d9: 71:52:5c:86:96:3c:4d:e6:eb:f3:5b:cb:fd:26:d9: e5:d2:46:20:bd:8b:1e:d2:07:03:e2:82:c1:98:7f: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A4:AF:1F:E1:0E:23:5B:8E:79:D4:40:A4:A2:24:ED:9E:30:F2:B0 X509v3 Authority Key Identifier: keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:74:96:f4:31:48:05:37:12:07:b8:4b:06:3c:87:aa:2e:f9: 71:d3:ef:07:92:cd:f8:3d:da:22:6c:fe:65:f1:3e:6e:bb:2a: ff:df:6d:ae:a0:6e:3b:cb:04:da:e3:af:e6:39:28:64:c4:4f: b2:ba:ea:4f:38:0a:95:01:fc:c3:84:ef:be:4a:80:38:fb:ba: 17:bc:5d:df:1d:1b:17:d0:02:ac:b5:b8:56:82:da:71:23:70: bc:28:2c:bc:b4:7d:a4:9d:41:81:9f:01:63:2d:50:ec:32:c7: d2:0b:cd:26:82:62:7b:aa:e6:da:6d:b0:84:32:57:8a:b7:16: b1:ed:24:6b:42:0d:af:20:38:62:06:4b:83:00:eb:2d:20:77: 7d:08:ea:61:06:65:55:2b:d1:0e:51:1b:44:2d:b9:2a:7b:69: 96:06:28:31:4e:65:38:2d:50:da:b0:45:ce:e9:0d:b4:bd:8e: 0d:9c:3b:7c:51:ef:b5:13:1f:8c:bf:2b:d3:d3:70:07:0f:9d: a3:a0:bd:d9:1f:04:27:c4:51:da:fe:c4:39:70:8b:b9:1a:77: 43:c3:89:6a:75:6b:50:27:78:27:46:3d:78:fa:18:8d:52:fd: b6:57:9f:ed:88:f1:7d:a8:a0:31:73:54:92:23:2f:b2:c8:d7: d7:6e:b0:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhgPtngVKemrmH2sch3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODU5ZjNkMmNkMjgzZTdkYjkwZjAyZmUxYjBkNGY2MTU2 MDU5NDcwHhcNMjUxMjIwMjAwMTEzWhcNMjUxMjIxMjAwMTEzWjAzMTEwLwYDVQQD EyhmZGE0YWYxZmUxMGUyMzViOGU3OWQ0NDBhNGEyMjRlZDllMzBmMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Jf0tNutxy+sybz1xAKC+pmUaiD 9ClVzJUWC2MXYI3xdKMWkj6/2ge0MwDt4NGdBh6urrE9sZEqfxry6iuT0j+oz6pw FnWRg7ip071G6G636GM3nwaRjm4JWKcdYIQzgru8XFqndmeqtly1cn9iDR7Yw5uB KN0SRJeQQUyn1U8lJ0tmwx7aofwR/yQbrYzv1CIZ6/Mgib4TGEvQZIJ7TkF5zZNu vhYcErbyvUElQvhy+tsySbyQJDsAr4yTPK8y6z0zNBZmPub3hEzZbwoIW1mf6w7b qHC+b+KBnRXFo9lxUlyGljxN5uvzW8v9Jtnl0kYgvYse0gcD4oLBmH/3KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2krx/hDiNbjnnUQKSiJO2eMPKwMB8GA1UdIwQY MBaAFLGFnz0s0oPn25DwL+Gw1PYVYFlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUt MmFhZGM1YzNjNTdkLzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUtMmFhZGM1YzNjNTdk LzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnSW9DFI BTcSB7hLBjyHqi75cdPvB5LN+D3aImz+ZfE+brsq/99trqBuO8sE2uOv5jkoZMRP srrqTzgKlQH8w4TvvkqAOPu6F7xd3x0bF9ACrLW4VoLacSNwvCgsvLR9pJ1BgZ8B Yy1Q7DLH0gvNJoJie6rm2m2whDJXircWse0ka0INryA4YgZLgwDrLSB3fQjqYQZl VSvRDlEbRC25KntplgYoMU5lOC1Q2rBFzukNtL2ODZw7fFHvtRMfjL8r09NwBw+d o6C92R8EJ8RR2v7EOXCLuRp3Q8OJanVrUCd4J0Y9ePoYjVL9tlef7YjxfaigMXNU kiMvssjX126wMw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:11 2025 by rpki-client