This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json) Hash identifier: p6Og2VuwC1h6zOc/C4oF29sx9oD8+X5t5C1fiDFVAXA= Subject key identifier: A1:27:FC:57:5E:84:16:8E:52:5A:38:22:76:8B:0A:2B:FA:06:6A:CB Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a Certificate serial: 019B3D236383F3F0686072D76CA9E1FEF349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 19:01:27 +0000 Manifest this update: Sat 20 Dec 2025 19:01:27 +0000 Manifest next update: Sun 21 Dec 2025 19:01:27 +0000 Files and hashes: 1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=) 2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: ZzEBRfXSoA7Mr7E7GSFDbgEKPAYHiJfhII/Vk49bAqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:63:83:f3:f0:68:60:72:d7:6c:a9:e1:fe:f3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a Validity Not Before: Dec 20 19:01:27 2025 GMT Not After : Dec 21 19:01:27 2025 GMT Subject: CN=a127fc575e84168e525a3822768b0a2bfa066acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8a:15:6b:5f:67:28:6b:11:f8:28:c4:03:ed: 0a:e8:7a:ca:cd:c4:50:a8:3c:a7:be:3d:ea:0f:71: b9:cb:d3:c1:18:c2:69:e9:4d:25:6c:6c:87:0a:f5: 30:5b:c0:b9:9b:9e:ce:f8:15:63:20:01:2f:1f:2a: 18:0c:31:5c:d7:d6:e9:4e:0e:d5:0c:1e:3b:91:6c: a6:7f:0d:3e:55:04:c6:59:51:5a:b0:ee:e6:0e:c8: a8:11:d4:29:a0:0f:2d:b4:bc:70:b6:d6:60:23:fb: 20:b8:f6:38:cd:19:88:a9:f6:69:21:f7:f4:53:48: d9:3b:7f:87:83:dd:8c:d9:69:4f:d2:f9:84:1c:c7: a6:1f:72:bb:82:c7:bd:6a:bc:70:99:71:b1:8b:b1: f0:a8:75:db:02:86:fb:43:29:98:9d:13:10:1c:30: e7:a5:f8:9c:c3:5b:51:cd:7e:58:47:cc:be:2b:ff: 6b:d1:95:a9:2e:d0:d7:45:59:76:f3:79:aa:cb:cb: 53:8c:0a:d8:c6:c8:75:e3:94:9f:3a:e9:66:43:f9: ed:fd:a5:ab:14:6c:52:71:fd:ec:a9:ec:f4:29:10: 00:26:2e:33:8b:7b:6c:40:12:83:d2:25:8a:87:af: d1:fe:c6:e9:8b:e2:02:a5:a6:d3:99:47:c0:ff:ce: d0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:27:FC:57:5E:84:16:8E:52:5A:38:22:76:8B:0A:2B:FA:06:6A:CB X509v3 Authority Key Identifier: keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:82:df:37:61:1a:94:46:a3:58:af:f5:55:22:bd:13:a8:9f: 79:91:03:71:0a:d0:19:a7:23:0a:b2:3b:5e:45:c8:cc:52:d7: 24:92:1a:b7:bb:d4:e5:67:23:06:23:37:20:70:d8:15:ec:7b: 37:78:dd:86:e5:89:53:c8:7a:4f:79:39:15:e6:1a:45:62:06: 69:22:81:bc:e1:6e:a4:ad:dc:3b:60:38:ff:91:07:55:3f:cb: da:34:3a:0d:16:6f:4a:36:20:a7:de:76:b5:75:41:71:ce:3d: 4d:58:5f:ee:f5:21:31:09:d6:3a:62:f0:19:aa:76:9b:e8:a9: 92:78:47:1e:0e:f2:1c:69:73:c3:3b:f2:db:f0:d4:56:b6:47: 58:00:93:c8:bf:6e:55:24:4e:6e:94:25:e7:d7:9c:83:05:83: 84:e7:b0:64:69:99:13:41:e3:4e:96:57:b6:5f:1e:20:8e:94: bf:78:92:16:9c:78:77:dd:2b:09:9d:a1:d8:b9:cc:7f:31:1e: 92:4f:cb:fb:d9:9c:95:25:93:d1:04:9a:a2:83:f4:c7:3d:e7: ee:64:5d:20:78:c5:33:f6:e7:d9:dc:e0:75:df:2d:b2:55:24: c2:32:a6:1e:5a:2d:b2:5c:39:e5:62:01:ee:0c:a3:c4:96:b7: d4:09:54:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2OD8/BoYHLXbKnh/vNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm Mjc3OWEwHhcNMjUxMjIwMTkwMTI3WhcNMjUxMjIxMTkwMTI3WjAzMTEwLwYDVQQD EyhhMTI3ZmM1NzVlODQxNjhlNTI1YTM4MjI3NjhiMGEyYmZhMDY2YWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjooVa19nKGsR+CjEA+0K6HrKzcRQ qDynvj3qD3G5y9PBGMJp6U0lbGyHCvUwW8C5m57O+BVjIAEvHyoYDDFc19bpTg7V DB47kWymfw0+VQTGWVFasO7mDsioEdQpoA8ttLxwttZgI/sguPY4zRmIqfZpIff0 U0jZO3+Hg92M2WlP0vmEHMemH3K7gse9arxwmXGxi7HwqHXbAob7QymYnRMQHDDn pficw1tRzX5YR8y+K/9r0ZWpLtDXRVl283mqy8tTjArYxsh145SfOulmQ/nt/aWr FGxScf3sqez0KRAAJi4zi3tsQBKD0iWKh6/R/sbpi+ICpabTmUfA/87QawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEn/FdehBaOUlo4InaLCiv6BmrLMB8GA1UdIwQY MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt YjM4ZDdmNzA5ZDcwLzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYLfN2Ea lEajWK/1VSK9E6ifeZEDcQrQGacjCrI7XkXIzFLXJJIat7vU5WcjBiM3IHDYFex7 N3jdhuWJU8h6T3k5FeYaRWIGaSKBvOFupK3cO2A4/5EHVT/L2jQ6DRZvSjYgp952 tXVBcc49TVhf7vUhMQnWOmLwGap2m+ipknhHHg7yHGlzwzvy2/DUVrZHWACTyL9u VSRObpQl59ecgwWDhOewZGmZE0HjTpZXtl8eII6Uv3iSFpx4d90rCZ2h2LnMfzEe kk/L+9mclSWT0QSaooP0xz3n7mRdIHjFM/bn2dzgdd8tslUkwjKmHlotslw55WIB 7gyjxJa31AlU2g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:51:45 2025 by rpki-client