This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json) Hash identifier: bXJwH8FR1r/Pj61YzihAkWD6KVYlJQuHPyIGBbhYNp4= Subject key identifier: 7A:7F:A9:62:A0:E2:3B:31:17:70:8D:D6:4C:12:07:AD:68:CD:B7:C5 Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39 Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639 Certificate serial: 019B51F2FB8340A0DA12E64D712F4D168F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft Manifest number: 0563 Signing time: Wed 24 Dec 2025 20:00:37 +0000 Manifest this update: Wed 24 Dec 2025 20:00:37 +0000 Manifest next update: Thu 25 Dec 2025 20:00:37 +0000 Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=) 2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: CT5hUXp/XXr+G2s0jR515QzMxX/doHr/NZzSoy9PfgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f2:fb:83:40:a0:da:12:e6:4d:71:2f:4d:16:8f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639 Validity Not Before: Dec 24 20:00:37 2025 GMT Not After : Dec 25 20:00:37 2025 GMT Subject: CN=7a7fa962a0e23b3117708dd64c1207ad68cdb7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:17:ae:78:dc:99:60:16:36:2f:91:f4:89: 0f:86:be:41:52:67:3b:3a:78:ad:bc:ae:1d:eb:d0: 34:32:52:a3:46:1e:4c:bb:dc:b4:4c:b0:68:12:c0: 60:c0:a4:e8:bb:eb:e3:4b:20:1b:99:8b:ee:99:1f: 1a:c0:52:bc:dc:5d:d4:04:e1:ff:f7:1e:21:b1:6d: 3e:ca:fd:81:d7:d6:b5:f1:e9:cc:9c:a5:00:ff:44: 0a:55:c0:d9:f5:ff:3b:d7:5c:09:f4:53:1c:76:81: 56:20:01:72:8b:bd:a5:4d:c1:54:ec:12:f1:72:6a: b6:65:9a:63:ba:f5:05:86:65:64:b6:ab:d9:7c:c4: 1c:f4:88:e3:ea:ad:73:10:f7:ad:14:e1:16:4b:19: 2a:ae:d7:c7:80:c0:81:45:9a:d3:52:3c:39:3f:7d: ab:c2:01:e0:a8:0e:97:29:b7:7f:02:28:38:1a:60: a6:8d:31:ae:52:9f:72:46:44:b0:41:86:03:37:bb: 96:e8:12:cc:1b:6f:c3:eb:3f:4a:b5:30:51:92:4f: a8:f9:70:a6:85:e3:41:dd:82:11:6f:35:59:e8:a3: ef:f9:30:38:e3:30:1d:eb:c6:01:5c:8b:d1:7d:75: 1b:47:c5:38:64:a0:b0:a5:70:b6:d6:79:52:0b:8b: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7F:A9:62:A0:E2:3B:31:17:70:8D:D6:4C:12:07:AD:68:CD:B7:C5 X509v3 Authority Key Identifier: keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:95:a4:b7:a7:fd:83:a0:02:70:f9:a1:57:92:1b:9d:1a:94: ea:fe:6c:9e:d8:c8:37:bb:98:fc:eb:1d:fd:ed:a9:f1:7c:6c: d2:ef:26:ec:4a:6f:55:87:e7:4f:66:63:ad:93:71:b6:8f:4b: f6:e3:11:87:30:00:55:a0:82:45:b8:03:43:8a:94:d3:9b:b8: cf:fe:37:f0:fd:08:26:71:2d:ef:a2:94:3d:39:06:0f:0f:a2: e3:87:c4:bf:8f:78:c5:88:94:bd:63:f9:4a:79:15:41:08:8f: f8:a5:7b:2e:f3:57:3d:e4:69:98:c9:da:4b:61:4f:13:f0:eb: 86:97:81:a0:92:49:df:15:d1:ed:80:63:fd:7f:85:4c:65:cf: 3a:42:33:da:42:4d:0d:a4:c8:86:92:1e:ee:5c:3b:15:89:2a: 36:28:f3:f7:38:39:2e:15:23:d5:90:71:f5:70:f5:dd:30:29: ba:0e:b5:e1:c6:6e:7b:8e:4c:46:94:78:e9:ea:53:d8:fe:e5: f2:0a:22:5b:5c:c1:b1:ca:e5:99:d3:e9:12:bf:4d:46:b9:2c: e0:a3:7e:f6:38:5d:22:d8:0b:dc:d2:ab:16:cb:ee:d8:7f:5f: 58:18:85:d5:40:a6:41:e1:f4:46:4d:cf:95:7a:c2:e0:b2:6c: d1:46:ca:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8vuDQKDaEuZNcS9NFo9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw YWI2MzkwHhcNMjUxMjI0MjAwMDM3WhcNMjUxMjI1MjAwMDM3WjAzMTEwLwYDVQQD Eyg3YTdmYTk2MmEwZTIzYjMxMTc3MDhkZDY0YzEyMDdhZDY4Y2RiN2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXcXrnjcmWAWNi+R9IkPhr5BUmc7 OnitvK4d69A0MlKjRh5Mu9y0TLBoEsBgwKTou+vjSyAbmYvumR8awFK83F3UBOH/ 9x4hsW0+yv2B19a18enMnKUA/0QKVcDZ9f8711wJ9FMcdoFWIAFyi72lTcFU7BLx cmq2ZZpjuvUFhmVktqvZfMQc9Ijj6q1zEPetFOEWSxkqrtfHgMCBRZrTUjw5P32r wgHgqA6XKbd/Aig4GmCmjTGuUp9yRkSwQYYDN7uW6BLMG2/D6z9KtTBRkk+o+XCm heNB3YIRbzVZ6KPv+TA44zAd68YBXIvRfXUbR8U4ZKCwpXC21nlSC4vedQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp/qWKg4jsxF3CN1kwSB61ozbfFMB8GA1UdIwQY MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt ZTgxY2Q3MDIyNTUzLzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJWkt6f9 g6ACcPmhV5IbnRqU6v5sntjIN7uY/Osd/e2p8Xxs0u8m7EpvVYfnT2ZjrZNxto9L 9uMRhzAAVaCCRbgDQ4qU05u4z/438P0IJnEt76KUPTkGDw+i44fEv494xYiUvWP5 SnkVQQiP+KV7LvNXPeRpmMnaS2FPE/DrhpeBoJJJ3xXR7YBj/X+FTGXPOkIz2kJN DaTIhpIe7lw7FYkqNijz9zg5LhUj1ZBx9XD13TApug614cZue45MRpR46epT2P7l 8goiW1zBscrlmdPpEr9NRrks4KN+9jhdItgL3NKrFsvu2H9fWBiF1UCmQeH0Rk3P lXrC4LJs0UbKYQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:50:06 2025 by rpki-client