This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json) Hash identifier: iluSG7ehsUm71zLQx3Q3MRjgxQey2afK8B4dhU6cT58= Subject key identifier: C6:E4:1C:A5:FF:96:D5:07:7D:F0:F7:E9:CD:74:13:0E:32:2D:65:60 Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a Certificate serial: 019B4324D34D23E04F5FCCB54F54E0F63B9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft Manifest number: 1195 Signing time: Sun 21 Dec 2025 23:00:45 +0000 Manifest this update: Sun 21 Dec 2025 23:00:45 +0000 Manifest next update: Mon 22 Dec 2025 23:00:45 +0000 Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: rz+SOjiD0GaKu84HGfsAWWFVRPTCsxaeasCjxYFM3Dk=) 2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:d3:4d:23:e0:4f:5f:cc:b5:4f:54:e0:f6:3b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a Validity Not Before: Dec 21 23:00:45 2025 GMT Not After : Dec 22 23:00:45 2025 GMT Subject: CN=c6e41ca5ff96d5077df0f7e9cd74130e322d6560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a2:4c:39:f6:c9:45:a1:62:8c:20:f8:a0:fd: e3:30:ee:20:ec:d3:a2:5d:6c:a2:4a:4c:f4:48:de: 80:53:9b:21:9f:d6:45:1d:0f:71:1f:3c:5f:b4:a4: 68:10:bf:a3:d2:d8:0b:95:06:be:00:a9:9d:78:0a: b9:37:c0:2c:a9:26:bb:7c:5b:9a:1d:66:38:b0:5e: c1:83:75:ff:0c:70:0a:27:23:cc:28:f4:f5:c8:09: 22:2f:bf:ef:58:37:48:84:6c:61:93:75:c9:03:ed: 40:9b:31:24:0b:61:a2:52:d3:5c:9a:85:f1:26:99: f3:69:1b:ca:c9:73:8f:1f:53:b3:c5:43:f7:26:85: a0:b9:ff:43:96:2b:e8:90:38:0b:17:c4:6f:08:a7: b2:5e:25:c1:0a:b6:0f:8c:99:b6:fe:3b:68:94:2d: 83:72:cb:bd:a6:03:08:43:c3:d9:de:48:6b:01:79: f6:5c:10:07:76:a1:e3:9d:59:32:a6:87:75:74:ea: 99:80:b5:c5:eb:95:af:0d:aa:b8:ee:5c:03:ac:75: 7c:e2:c3:a6:5a:25:48:82:83:8c:93:19:ad:49:57: 90:80:32:ba:ba:3f:af:eb:bb:4f:4d:2e:2d:fe:19: 43:0a:5d:06:d2:f5:ad:09:42:67:0f:3f:b7:4f:62: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E4:1C:A5:FF:96:D5:07:7D:F0:F7:E9:CD:74:13:0E:32:2D:65:60 X509v3 Authority Key Identifier: keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c5:30:6f:6e:df:64:99:f5:4f:e7:a9:a6:42:c0:4f:e9:30: 9a:2f:0c:33:e3:d2:49:79:ef:82:6f:08:45:bb:d6:b8:a3:67: f0:6a:9e:8d:3f:ec:25:ae:35:80:5d:66:09:83:30:9e:6f:6b: 91:4d:2e:7e:ae:ee:d7:f9:ce:32:2e:91:cc:d8:d2:95:66:61: ca:7b:90:7f:12:b9:bf:fc:d7:bf:38:0f:99:b5:a4:e8:ae:79: a1:23:f3:05:a3:fc:b3:41:79:b4:60:1b:90:0a:a8:69:39:f3: 48:b2:cf:8e:7a:e8:1a:d8:e1:14:a2:78:3a:3d:70:8a:e8:2b: 42:77:b4:02:26:06:c2:cc:21:94:f1:f5:9c:4b:2b:44:6c:f1: 9e:49:7f:24:6a:fd:c3:05:b4:8e:84:94:1d:c8:93:81:d2:b5: 5b:d3:6f:13:25:97:00:9b:8e:8c:1c:7a:08:ee:b7:eb:4d:a5: 36:14:89:e9:d6:fe:2c:5b:b0:13:60:e4:07:02:38:0f:d4:c2: 6e:63:b1:b7:d6:22:85:e7:98:b5:8d:e0:d8:3f:c3:72:4e:47: 6a:3a:67:f4:aa:4d:af:d6:5c:7f:92:b7:9f:cb:03:a3:33:a5: b4:d5:0a:39:18:a5:4a:8f:54:5d:41:91:fe:fb:4d:69:58:1e: d7:8e:3d:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJNNNI+BPX8y1T1Tg9judMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODNlZTdkY2MzMjgzN2IwYmE1Yjg5MWQ4ZjE0NTQzNWFi M2I2MGEwHhcNMjUxMjIxMjMwMDQ1WhcNMjUxMjIyMjMwMDQ1WjAzMTEwLwYDVQQD EyhjNmU0MWNhNWZmOTZkNTA3N2RmMGY3ZTljZDc0MTMwZTMyMmQ2NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66JMOfbJRaFijCD4oP3jMO4g7NOi XWyiSkz0SN6AU5shn9ZFHQ9xHzxftKRoEL+j0tgLlQa+AKmdeAq5N8AsqSa7fFua HWY4sF7Bg3X/DHAKJyPMKPT1yAkiL7/vWDdIhGxhk3XJA+1AmzEkC2GiUtNcmoXx JpnzaRvKyXOPH1OzxUP3JoWguf9DlivokDgLF8RvCKeyXiXBCrYPjJm2/jtolC2D csu9pgMIQ8PZ3khrAXn2XBAHdqHjnVkypod1dOqZgLXF65WvDaq47lwDrHV84sOm WiVIgoOMkxmtSVeQgDK6uj+v67tPTS4t/hlDCl0G0vWtCUJnDz+3T2K4wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbkHKX/ltUHffD36c10Ew4yLWVgMB8GA1UdIwQY MBaAFEqD7n3MMoN7C6W4kdjxRUNas7YKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81MTNlOGEtYWQ1Yi00MmJlLTliNmUt YjQyNjk0NjNiY2U4LzEvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81MTNlOGEtYWQ1Yi00MmJlLTliNmUtYjQyNjk0NjNiY2U4 LzEvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsUwb27f ZJn1T+eppkLAT+kwmi8MM+PSSXnvgm8IRbvWuKNn8GqejT/sJa41gF1mCYMwnm9r kU0ufq7u1/nOMi6RzNjSlWZhynuQfxK5v/zXvzgPmbWk6K55oSPzBaP8s0F5tGAb kAqoaTnzSLLPjnroGtjhFKJ4Oj1wiugrQne0AiYGwswhlPH1nEsrRGzxnkl/JGr9 wwW0joSUHciTgdK1W9NvEyWXAJuOjBx6CO63602lNhSJ6db+LFuwE2DkBwI4D9TC bmOxt9YiheeYtY3g2D/Dck5Hajpn9KpNr9Zcf5K3n8sDozOltNUKORilSo9UXUGR /vtNaVge1449Tg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:51:20 2025 by rpki-client