This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json) Hash identifier: WVuPGmjuAPgE/E2upgp3lnl9E1neXdI5YXAMLgKjoHY= Subject key identifier: 80:B8:CD:06:AC:70:D7:23:D2:69:69:3C:1B:BF:01:E3:A9:BA:3E:A2 Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8 Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8 Certificate serial: 019B405B2CE2810B4EBEE872E4081CB7F51B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft Manifest number: 1133 Signing time: Sun 21 Dec 2025 10:01:15 +0000 Manifest this update: Sun 21 Dec 2025 10:01:15 +0000 Manifest next update: Mon 22 Dec 2025 10:01:15 +0000 Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=) 2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=) 3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: o0VsgfR/r+FyqxjmtB+eD6n72enMdiOKE5NnuM8nos0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:2c:e2:81:0b:4e:be:e8:72:e4:08:1c:b7:f5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8 Validity Not Before: Dec 21 10:01:15 2025 GMT Not After : Dec 22 10:01:15 2025 GMT Subject: CN=80b8cd06ac70d723d269693c1bbf01e3a9ba3ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:64:3b:4f:90:03:77:63:e1:2b:84:17:b1: 1e:17:8f:39:86:3a:23:31:1c:80:01:53:4b:2f:bf: 8e:36:84:5b:99:6b:de:2e:28:85:6a:e0:02:f9:3e: ff:5f:76:a3:51:2c:cf:dd:92:2f:37:71:c7:af:cf: e0:9d:41:ef:73:8f:bc:e6:62:6b:64:a0:d7:62:13: 53:09:b9:dd:28:6e:fe:35:ab:d7:d7:1f:68:e2:de: c6:f2:33:8d:92:c6:63:ff:7c:68:53:3d:35:3c:05: 6e:dc:02:64:1f:79:ef:d0:93:4a:cc:67:4b:7e:b0: 80:a9:af:19:e5:ac:f7:41:ad:15:a3:c8:ed:61:51: 3f:70:6d:6c:5e:6f:33:1f:11:7c:60:e3:b4:17:f0: 19:5f:47:a5:cb:e7:68:52:7b:0c:35:f1:3b:12:6d: 2f:e8:20:1b:4d:ee:18:21:e3:49:3f:9e:d4:a3:c6: ce:69:17:7c:92:6b:ff:4c:e7:b1:0c:aa:e2:fd:ba: e0:db:ad:b6:df:6a:d4:81:48:1e:8f:29:fd:60:0e: 49:67:f8:ec:ab:1b:67:12:b0:07:b3:1d:41:8e:3a: 3e:1a:bd:4f:12:18:59:68:6b:c2:4a:4a:fa:62:63: 86:5c:1b:5e:bb:0e:42:01:a5:db:dc:f2:1b:94:9b: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B8:CD:06:AC:70:D7:23:D2:69:69:3C:1B:BF:01:E3:A9:BA:3E:A2 X509v3 Authority Key Identifier: keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d1:ab:df:73:5d:2d:fb:17:be:6d:cf:06:1b:3a:28:44:09: 5d:aa:05:e7:35:c3:c8:4f:cb:de:0a:61:e2:0a:d8:ca:22:60: d2:4b:ef:0b:77:ad:92:ca:b4:92:cd:02:85:3d:e2:b0:c0:17: f2:b9:16:ff:9c:c7:10:d4:2e:e0:a3:19:29:be:ce:9b:e9:27: 3e:b3:fd:aa:59:8f:ff:e6:f4:bc:17:4e:56:07:0c:57:e1:71: 9d:cf:25:1b:7c:05:49:34:14:cb:a0:b6:e1:bd:b7:f1:ad:f5: ab:f9:9a:9b:83:9e:a1:cd:c5:3e:1c:b6:52:d3:af:2a:b2:2a: ee:45:b6:c3:1c:52:52:7e:46:72:7d:1d:d2:23:66:5e:33:61: 45:1e:75:1f:36:60:64:6c:55:c7:4a:5e:5d:b7:01:9f:09:fd: 9f:d1:b1:83:3d:b6:92:70:f4:26:2a:e0:00:83:3b:bb:86:8f: 48:08:88:0e:d5:9b:f5:c9:53:5d:9c:12:d8:63:78:10:02:ab: f2:91:89:8d:29:8e:0c:13:33:c5:f9:6d:63:60:25:a9:85:ae: 31:6e:61:f8:6d:8b:5d:45:b6:4f:b0:c6:51:1b:1e:77:88:8c: 22:e8:d1:eb:31:7e:d4:e6:4f:6c:28:94:6c:ea:94:a5:9b:84: c3:ef:a8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWyzigQtOvuhy5Agct/UbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMmEwMTIyNGIxZGE4NjQ4MGNmZWNiY2I2YzUyZGY5ODEy OTY4ZTgwHhcNMjUxMjIxMTAwMTE1WhcNMjUxMjIyMTAwMTE1WjAzMTEwLwYDVQQD Eyg4MGI4Y2QwNmFjNzBkNzIzZDI2OTY5M2MxYmJmMDFlM2E5YmEzZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgpkO0+QA3dj4SuEF7EeF485hjoj MRyAAVNLL7+ONoRbmWveLiiFauAC+T7/X3ajUSzP3ZIvN3HHr8/gnUHvc4+85mJr ZKDXYhNTCbndKG7+NavX1x9o4t7G8jONksZj/3xoUz01PAVu3AJkH3nv0JNKzGdL frCAqa8Z5az3Qa0Vo8jtYVE/cG1sXm8zHxF8YOO0F/AZX0ely+doUnsMNfE7Em0v 6CAbTe4YIeNJP57Uo8bOaRd8kmv/TOexDKri/brg262232rUgUgejyn9YA5JZ/js qxtnErAHsx1Bjjo+Gr1PEhhZaGvCSkr6YmOGXBteuw5CAaXb3PIblJsWgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC4zQascNcj0mlpPBu/AeOpuj6iMB8GA1UdIwQY MBaAFH0qASJLHahkgM/svLbFLfmBKWjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNDFmNzctYjZhMi00NDk0LWEwNzQt NGZhZTg0ZmExNThlLzEvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jNDFmNzctYjZhMi00NDk0LWEwNzQtNGZhZTg0ZmExNThl LzEvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldGr33Nd LfsXvm3PBhs6KEQJXaoF5zXDyE/L3gph4grYyiJg0kvvC3etksq0ks0ChT3isMAX 8rkW/5zHENQu4KMZKb7Om+knPrP9qlmP/+b0vBdOVgcMV+Fxnc8lG3wFSTQUy6C2 4b238a31q/mam4Oeoc3FPhy2UtOvKrIq7kW2wxxSUn5Gcn0d0iNmXjNhRR51HzZg ZGxVx0peXbcBnwn9n9Gxgz22knD0JirgAIM7u4aPSAiIDtWb9clTXZwS2GN4EAKr 8pGJjSmODBMzxfltY2AlqYWuMW5h+G2LXUW2T7DGURsed4iMIujR6zF+1OZPbCiU bOqUpZuEw++oQw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:58:12 2025 by rpki-client