This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json) Hash identifier: s5w6O1Dnfu99w+rAxDmMyIoyQp+joqTUAWGjjMA7C0c= Subject key identifier: 0E:E9:68:50:CA:6B:74:05:AD:11:27:9F:87:E0:D4:75:42:EE:B1:9E Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Certificate serial: 019B3CB53131DC99C938EE6EE74DF77D505D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 17:01:06 +0000 Manifest this update: Sat 20 Dec 2025 17:01:06 +0000 Manifest next update: Sun 21 Dec 2025 17:01:06 +0000 Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=) 2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: 3ZzKYV+VBe+BsVtPQ+LC0liGI30F9e3hXh5KCwU1ZLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:31:31:dc:99:c9:38:ee:6e:e7:4d:f7:7d:50:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Validity Not Before: Dec 20 17:01:06 2025 GMT Not After : Dec 21 17:01:06 2025 GMT Subject: CN=0ee96850ca6b7405ad11279f87e0d47542eeb19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:46:e8:29:86:4b:d9:10:93:d1:15:4a:29: 29:e7:60:a6:88:ef:c2:d8:06:5c:8b:bd:f7:36:f3: b7:d7:c6:b6:2d:78:20:40:8b:c4:4a:c2:d1:f5:56: 65:2d:f3:01:1e:c6:53:13:02:91:8e:6d:c5:21:3b: e3:f7:6c:ac:8d:d5:98:44:60:b3:6d:53:dc:5a:5a: a5:d7:03:22:38:fc:2f:ad:2f:f0:ba:32:4c:a5:fb: a0:6f:60:80:90:f5:00:d9:da:a7:e3:80:fa:4b:83: 84:5c:86:16:43:de:b6:61:e6:ac:ea:a7:37:ec:c2: 00:35:20:3c:cf:f3:92:1d:fd:27:a0:c1:e0:1a:4f: 66:1c:0d:19:8e:0a:a8:0b:53:89:8a:80:0b:b6:d7: 23:8b:0e:38:c6:63:bb:04:7e:69:a1:d4:f1:90:db: 2a:f0:9f:09:2e:5b:32:ee:9f:f7:9d:01:4c:74:07: 96:4c:2a:40:97:ef:90:60:73:3f:5e:61:ed:bd:be: f1:0c:8d:8a:d1:0d:66:b7:17:70:9b:32:16:87:2d: cc:72:ee:07:18:7e:d4:32:5c:0c:e0:3e:f8:60:7c: 05:43:61:09:65:5a:4c:3e:c6:07:fb:44:a1:4f:2e: d7:f2:36:9a:c6:02:a1:59:75:09:2e:43:07:06:f5: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E9:68:50:CA:6B:74:05:AD:11:27:9F:87:E0:D4:75:42:EE:B1:9E X509v3 Authority Key Identifier: keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:03:23:62:17:4f:c2:6d:24:2b:5e:77:0c:36:63:97:36:e2: c9:ae:c1:4f:ae:17:de:c8:40:c2:06:d2:8e:6d:20:e3:71:10: c9:a2:62:20:0f:23:b8:a0:60:2a:9d:92:21:af:53:74:b8:2a: be:dd:49:5e:2d:d9:7a:b9:db:3e:9d:f7:3c:2a:58:c8:71:4d: 01:d2:89:da:96:e1:0e:d9:7a:23:f4:0f:70:6e:27:8c:ad:aa: 1a:8f:1d:35:af:2b:99:ac:ae:c2:63:dc:3b:be:fc:d2:73:02: d7:b0:e2:11:f7:6f:37:c8:0e:50:78:32:21:a9:9c:ac:00:16: 42:88:4e:5c:ee:bd:2e:f3:a7:64:f6:b9:44:6c:33:f0:56:18: bc:05:f3:d1:3b:f0:f9:fc:e8:1d:21:8e:02:94:c0:a3:93:b6: dc:9f:56:e3:54:a1:83:08:00:d5:04:15:80:4f:b0:3c:2f:70: b4:72:b2:e8:41:cc:ad:a6:a7:c0:1c:f1:2f:c9:e2:22:95:d9: cb:f8:43:e9:60:87:4f:18:ee:c3:85:a7:bb:46:68:ce:c6:d5: 91:90:5d:10:8d:6e:12:e6:73:a8:0b:e0:ec:6c:61:31:c1:36: a5:83:e5:c0:6a:df:d7:2c:15:49:81:5c:0b:53:1a:db:5d:11: 17:96:46:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTEx3JnJOO5u5033fVBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWZkMGNiOTc3NWZmNDc4ZjE4NWY4Zjk4MGQ1YjFkOTJk NGJlNGYwHhcNMjUxMjIwMTcwMTA2WhcNMjUxMjIxMTcwMTA2WjAzMTEwLwYDVQQD EygwZWU5Njg1MGNhNmI3NDA1YWQxMTI3OWY4N2UwZDQ3NTQyZWViMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm5G6CmGS9kQk9EVSikp52CmiO/C 2AZci733NvO318a2LXggQIvESsLR9VZlLfMBHsZTEwKRjm3FITvj92ysjdWYRGCz bVPcWlql1wMiOPwvrS/wujJMpfugb2CAkPUA2dqn44D6S4OEXIYWQ962Yeas6qc3 7MIANSA8z/OSHf0noMHgGk9mHA0ZjgqoC1OJioALttcjiw44xmO7BH5podTxkNsq 8J8JLlsy7p/3nQFMdAeWTCpAl++QYHM/XmHtvb7xDI2K0Q1mtxdwmzIWhy3Mcu4H GH7UMlwM4D74YHwFQ2EJZVpMPsYH+0ShTy7X8jaaxgKhWXUJLkMHBvWAqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7paFDKa3QFrREnn4fg1HVC7rGeMB8GA1UdIwQY MBaAFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUt NmVmNWM0NzM1ZThhLzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUtNmVmNWM0NzM1ZThh LzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAMjYhdP wm0kK153DDZjlzbiya7BT64X3shAwgbSjm0g43EQyaJiIA8juKBgKp2SIa9TdLgq vt1JXi3ZernbPp33PCpYyHFNAdKJ2pbhDtl6I/QPcG4njK2qGo8dNa8rmayuwmPc O7780nMC17DiEfdvN8gOUHgyIamcrAAWQohOXO69LvOnZPa5RGwz8FYYvAXz0Tvw +fzoHSGOApTAo5O23J9W41ShgwgA1QQVgE+wPC9wtHKy6EHMraanwBzxL8niIpXZ y/hD6WCHTxjuw4Wnu0ZozsbVkZBdEI1uEuZzqAvg7GxhMcE2pYPlwGrf1ywVSYFc C1Ma210RF5ZG5w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:39:41 2025 by rpki-client