This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json) Hash identifier: dykhASSTWH/6l1mdkrvck718mDThNVbtrvu1VFJLMV8= Subject key identifier: 35:CB:D0:04:9B:38:F5:7D:7E:C9:81:07:A6:AF:23:FA:48:CE:8C:55 Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3 Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3 Certificate serial: 019B47A6636AC3EBCFC688510E26ECFA75BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft Manifest number: 1521 Signing time: Mon 22 Dec 2025 20:00:45 +0000 Manifest this update: Mon 22 Dec 2025 20:00:45 +0000 Manifest next update: Tue 23 Dec 2025 20:00:45 +0000 Files and hashes: 1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=) 2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: +IXThi1ivmIRm67/ywEkJkYiczrVe5G4GTmjC/VYYZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:63:6a:c3:eb:cf:c6:88:51:0e:26:ec:fa:75:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3 Validity Not Before: Dec 22 20:00:45 2025 GMT Not After : Dec 23 20:00:45 2025 GMT Subject: CN=35cbd0049b38f57d7ec98107a6af23fa48ce8c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:d1:5e:0f:36:d1:f4:c7:1e:2f:51:87:6b: 5e:28:bf:d7:89:07:8e:7b:11:e8:84:9d:60:ed:b5: 63:ca:d8:15:2a:6f:d7:87:bf:33:4c:1d:2d:93:b4: 57:73:7b:48:8b:ba:69:f4:36:b1:0d:fa:b9:15:13: a6:eb:51:0a:db:97:2d:c3:33:da:bb:77:57:71:ba: a4:67:f6:3d:d1:92:29:3b:08:e3:b8:b0:19:0c:31: ab:c2:99:78:0a:c8:7d:c5:84:18:2a:2b:56:db:01: 6f:6c:b6:4b:e2:78:63:5f:f5:8d:58:31:06:db:5c: 80:65:99:8f:54:56:e4:e4:8b:35:6a:7f:28:4b:f1: f3:a1:66:54:30:76:0b:76:a6:2b:3e:2d:c7:28:77: 22:c2:c0:d3:f2:dd:53:bc:b6:4f:f5:32:ff:81:57: f6:2a:99:91:f6:63:00:7a:2b:b2:2d:7d:77:9e:8d: 0c:59:61:b3:89:2b:84:34:f9:48:69:6f:3b:c2:2c: 52:67:29:9a:44:48:ab:57:ab:78:2a:b5:af:f3:8c: 80:f6:ca:ac:36:b5:07:d4:ba:4b:4e:5a:1f:d0:7c: ce:10:83:d7:39:67:f2:df:30:16:0e:64:2b:b8:f8: d8:b2:3c:8e:67:61:4c:e9:dd:67:44:1f:0f:98:d0: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CB:D0:04:9B:38:F5:7D:7E:C9:81:07:A6:AF:23:FA:48:CE:8C:55 X509v3 Authority Key Identifier: keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c3:19:3e:e6:4b:e1:18:56:41:f3:ac:56:9b:2f:c0:cb:91: 1c:fc:d8:c4:ec:23:ec:a8:05:d3:f8:b6:f0:e4:44:29:2c:39: ba:59:3b:dd:84:25:97:e8:b6:f1:2e:3e:86:c3:62:85:a5:48: 0e:ab:68:62:ce:43:31:2e:1d:25:69:90:54:0a:5f:88:27:2e: cb:63:85:40:b5:10:e3:6b:90:2a:23:d4:92:0a:84:4d:09:da: 2f:69:73:91:50:45:e1:0a:0c:ce:a6:32:bd:bf:59:94:55:87: 1b:af:ff:45:03:02:9c:b6:53:c7:0f:82:84:21:3d:10:a3:7d: 59:e6:a3:5c:27:be:56:a1:4b:25:1d:8b:63:9b:7a:f5:1b:64: 8c:f8:3a:af:07:e1:b5:c7:07:82:16:0a:67:3b:57:fb:6d:7c: 05:a7:bd:12:3e:80:35:ca:1b:c7:8e:fd:55:e2:5a:21:e3:3c: 84:b2:b3:9e:8e:aa:e5:9b:9a:3d:c3:e6:36:fa:7d:1f:be:d9: ad:a6:71:42:80:e0:01:c1:7e:f3:63:1d:4a:1f:50:d6:c3:fe: 69:0a:8f:e4:c2:ba:ca:39:ae:a5:19:a2:6b:b8:09:2f:9e:94: 06:a6:79:23:84:7b:fd:f5:ef:e1:61:27:1b:a1:17:3e:5f:ee: 95:c8:6e:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpmNqw+vPxohRDibs+nW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZjhhODg1Zjc3NzZkMmFiOTliYjRmMjBlODRkMzA2ZTAz OTRhYTMwHhcNMjUxMjIyMjAwMDQ1WhcNMjUxMjIzMjAwMDQ1WjAzMTEwLwYDVQQD EygzNWNiZDAwNDliMzhmNTdkN2VjOTgxMDdhNmFmMjNmYTQ4Y2U4YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEXRXg820fTHHi9Rh2teKL/XiQeO exHohJ1g7bVjytgVKm/Xh78zTB0tk7RXc3tIi7pp9DaxDfq5FROm61EK25ctwzPa u3dXcbqkZ/Y90ZIpOwjjuLAZDDGrwpl4Csh9xYQYKitW2wFvbLZL4nhjX/WNWDEG 21yAZZmPVFbk5Is1an8oS/HzoWZUMHYLdqYrPi3HKHciwsDT8t1TvLZP9TL/gVf2 KpmR9mMAeiuyLX13no0MWWGziSuENPlIaW87wixSZymaREirV6t4KrWv84yA9sqs NrUH1LpLTlof0HzOEIPXOWfy3zAWDmQruPjYsjyOZ2FM6d1nRB8PmNBnIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXL0ASbOPV9fsmBB6avI/pIzoxVMB8GA1UdIwQY MBaAFLD4qIX3d20quZu08g6E0wbgOUqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iMTI4MmYtNzFjNS00N2U3LWFlYTEt NGQwNTQ5OGFhOTdkLzEvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iMTI4MmYtNzFjNS00N2U3LWFlYTEtNGQwNTQ5OGFhOTdk LzEvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsMZPuZL 4RhWQfOsVpsvwMuRHPzYxOwj7KgF0/i28OREKSw5ulk73YQll+i28S4+hsNihaVI DqtoYs5DMS4dJWmQVApfiCcuy2OFQLUQ42uQKiPUkgqETQnaL2lzkVBF4QoMzqYy vb9ZlFWHG6//RQMCnLZTxw+ChCE9EKN9WeajXCe+VqFLJR2LY5t69RtkjPg6rwfh tccHghYKZztX+218Bae9Ej6ANcobx479VeJaIeM8hLKzno6q5ZuaPcPmNvp9H77Z raZxQoDgAcF+82MdSh9Q1sP+aQqP5MK6yjmupRmia7gJL56UBqZ5I4R7/fXv4WEn G6EXPl/ulchu6Q== -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:44 2025 by rpki-client