This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json) Hash identifier: u+cm824S+2Omk+H+5Ubb3fwxJbuCOkwAUDS4bWwu0Fw= Subject key identifier: 87:CD:78:37:BC:6E:19:55:02:DC:D6:E1:7F:57:70:81:8F:03:AC:1B Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2 Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2 Certificate serial: 019B3C7FB1517AD4541ECBB99C5722E83FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft Manifest number: 05CD Signing time: Sat 20 Dec 2025 16:02:39 +0000 Manifest this update: Sat 20 Dec 2025 16:02:39 +0000 Manifest next update: Sun 21 Dec 2025 16:02:39 +0000 Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=) 2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: LpK9VOiUSXSfjWNbATlIKCqDlxV32ClhQM9QZsNw5bU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b1:51:7a:d4:54:1e:cb:b9:9c:57:22:e8:3f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2 Validity Not Before: Dec 20 16:02:39 2025 GMT Not After : Dec 21 16:02:39 2025 GMT Subject: CN=87cd7837bc6e195502dcd6e17f5770818f03ac1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:bf:69:83:5e:9f:f1:ef:3c:f1:53:e7:e2: 21:f2:1c:f7:ae:b7:a0:7d:a7:2c:85:e0:9a:15:f8: 14:8e:02:e2:72:f7:3b:41:ad:4f:f8:16:5c:ce:9f: ad:cc:4c:b2:85:d5:a0:38:4c:1f:f0:28:91:7f:6f: 6b:65:69:7d:d7:2d:10:0d:b1:d1:85:ec:e3:8b:3c: 54:7f:ae:e9:ce:93:81:9f:6d:ad:c1:bb:c3:70:35: ec:6b:cf:d5:b2:ae:bd:5d:26:e0:a3:ba:0e:8b:7b: f3:4b:8e:f3:30:6f:7e:80:b2:10:0f:6f:58:db:f9: e3:07:8b:7d:38:17:d3:ca:85:e8:bf:97:94:5d:29: 5b:e9:e1:0a:ae:d3:5d:ad:5c:a8:b4:12:08:5b:6b: 5f:e8:82:ea:68:46:5c:e9:2d:52:4e:0a:80:7d:d9: ee:73:bc:6c:f4:f3:7e:b3:94:4d:5b:39:9b:d7:b8: 6a:cf:77:63:24:cd:92:de:95:d8:77:99:b0:74:f7: 6a:dd:99:54:ee:67:fd:a7:03:05:84:22:3f:ef:e6: 26:37:21:07:08:86:78:eb:38:d0:c4:4a:3f:18:d1: 55:55:ee:63:8a:68:ff:79:cc:b6:6d:16:ca:bd:c0: 89:b1:00:35:ec:56:c1:4d:7e:e5:d7:72:cf:c0:5e: 5e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:78:37:BC:6E:19:55:02:DC:D6:E1:7F:57:70:81:8F:03:AC:1B X509v3 Authority Key Identifier: keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0e:e7:08:a2:94:3a:f3:dd:3e:f7:d6:19:5e:f2:df:e1:64: 9e:dd:73:37:19:d9:d7:82:88:2c:e8:36:67:36:a1:09:8b:5c: e9:64:a1:68:c9:9b:58:40:07:15:7f:47:1b:c1:92:41:2a:90: 47:f7:c9:38:d4:77:4f:80:e4:bb:ce:2c:79:37:e8:17:de:d0: 8c:e3:17:f2:75:a2:da:d1:60:a7:b4:3c:05:e2:d4:d7:4b:a7: 56:3f:08:74:b2:90:f0:e2:f2:38:2e:2a:2e:c9:0b:a7:de:c6: 20:9b:0c:f3:07:05:a9:18:20:6d:8b:d7:c4:ec:b2:1e:34:56: a5:c8:8c:ce:d7:b9:45:12:b9:8c:1e:80:a5:ac:8a:88:2a:da: 88:2e:59:f7:b0:e3:ff:4e:ab:b7:4a:ad:c2:56:0b:25:c9:f2: 7c:1d:73:c8:a7:8c:8f:2b:c6:c9:77:c9:59:33:c5:e5:63:e2: 4e:df:e8:b5:bb:54:29:60:c3:f9:b6:27:a1:0b:de:52:d3:f1: 94:39:27:22:a6:60:06:5d:aa:a1:1f:11:6d:70:7a:a3:d0:cd: ac:77:af:6a:0f:0c:8f:99:33:39:64:5c:43:8b:8d:d7:56:da: 2c:86:91:1b:20:9b:e8:a5:94:05:fd:d3:da:e8:0b:a0:fa:fb: 76:6b:73:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7FRetRUHsu5nFci6D/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODBmODAwMWQ1OTkzMzM3M2ZlOGU1ODg0OWU0YjkxZGVh YTJiYjIwHhcNMjUxMjIwMTYwMjM5WhcNMjUxMjIxMTYwMjM5WjAzMTEwLwYDVQQD Eyg4N2NkNzgzN2JjNmUxOTU1MDJkY2Q2ZTE3ZjU3NzA4MThmMDNhYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEW/aYNen/HvPPFT5+Ih8hz3rreg facsheCaFfgUjgLicvc7Qa1P+BZczp+tzEyyhdWgOEwf8CiRf29rZWl91y0QDbHR hezjizxUf67pzpOBn22twbvDcDXsa8/Vsq69XSbgo7oOi3vzS47zMG9+gLIQD29Y 2/njB4t9OBfTyoXov5eUXSlb6eEKrtNdrVyotBIIW2tf6ILqaEZc6S1STgqAfdnu c7xs9PN+s5RNWzmb17hqz3djJM2S3pXYd5mwdPdq3ZlU7mf9pwMFhCI/7+YmNyEH CIZ46zjQxEo/GNFVVe5jimj/ecy2bRbKvcCJsQA17FbBTX7l13LPwF5eIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfNeDe8bhlVAtzW4X9XcIGPA6wbMB8GA1UdIwQY MBaAFLCA+AAdWZMzc/6OWISeS5HeqiuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDIyNjItZTM3Zi00MTQyLTlhMmMt OWYxNzZlMjRjMDM0LzEvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hMDIyNjItZTM3Zi00MTQyLTlhMmMtOWYxNzZlMjRjMDM0 LzEvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANw7nCKKU OvPdPvfWGV7y3+Fknt1zNxnZ14KILOg2ZzahCYtc6WShaMmbWEAHFX9HG8GSQSqQ R/fJONR3T4Dku84seTfoF97QjOMX8nWi2tFgp7Q8BeLU10unVj8IdLKQ8OLyOC4q LskLp97GIJsM8wcFqRggbYvXxOyyHjRWpciMzte5RRK5jB6ApayKiCraiC5Z97Dj /06rt0qtwlYLJcnyfB1zyKeMjyvGyXfJWTPF5WPiTt/otbtUKWDD+bYnoQveUtPx lDknIqZgBl2qoR8RbXB6o9DNrHevag8Mj5kzOWRcQ4uN11baLIaRGyCb6KWUBf3T 2ugLoPr7dmtzlQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:10 2025 by rpki-client