This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft File: sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json) Hash identifier: m1xOALJ9MyluCjBEyNFyxHckitI1tRoHsLAFN1siMqE= Subject key identifier: D3:D0:19:46:4C:5E:DE:CB:63:EA:4D:E8:46:75:38:8A:C9:D5:09:F8 Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1 Certificate serial: 019B2AE55EFDAF1FD29C4DE6E096B6C555B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft Manifest number: 1786 Signing time: Wed 17 Dec 2025 06:00:33 +0000 Manifest this update: Wed 17 Dec 2025 06:00:33 +0000 Manifest next update: Thu 18 Dec 2025 06:00:33 +0000 Files and hashes: 1: CU0pD-qyopGrF2gG1g9vsUEj3PE.roa (hash: 0vq62FNq9PmPpi5DYpzPDW7Ij6TgGimr0Wq2pd7Z3Os=) 2: ZWlEyMmdqJGSNqxwfiZSm70MebY.roa (hash: J3jPxKXZF3DeIN3lfslH24QMc9DgqTN2xea7MsxjKgg=) 3: ZwlANAaAmvWFJg4oN0Kigut0u8A.roa (hash: xCGLRl7E5Z55wWdT0lqlDrtOMIU0KHDV+L6PHOcX4k0=) 4: eQwhkUJDD3fHnBNUmTCO1wm_-Mo.roa (hash: BapbGy+3qttaGIgQRgRll0fuWWSygKB9RzxksoJwcro=) 5: la7bz71ihLeyogVuoQIY1GT3314.roa (hash: 5hafRGGQbIP56cRQdMYLUdF59or9sDzUcmPM82jh51E=) 6: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: cuSuhWtEyKOFohHw9y4kxtqtwLMr1AbqSl9BXzPa19M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:e5:5e:fd:af:1f:d2:9c:4d:e6:e0:96:b6:c5:55:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1 Validity Not Before: Dec 17 06:00:33 2025 GMT Not After : Dec 18 06:00:33 2025 GMT Subject: CN=d3d019464c5edecb63ea4de84675388ac9d509f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:bb:8c:74:68:c1:b2:0f:a0:4b:72:87:b3: 5f:1d:fa:ef:17:9b:98:3f:93:ab:08:6e:9f:0c:76: 09:78:38:ba:dd:b0:01:83:5a:25:d4:22:2f:24:28: 79:ba:85:10:0a:cf:1b:6d:d5:a3:63:a7:6b:7f:85: ca:43:48:3e:53:43:15:c2:d5:00:1c:57:f2:e2:9f: 7f:4d:6d:eb:8e:34:06:c0:f4:98:e5:c2:92:c1:72: 58:fd:b8:a3:22:35:97:91:79:5c:cb:2c:48:70:44: bc:1b:3b:9f:00:17:55:04:b6:f9:0f:9a:c7:a8:bc: f9:13:2e:b0:f6:6b:3a:99:9f:fc:16:04:78:71:29: 35:17:be:de:6b:06:59:3a:bc:8b:16:c8:1c:00:ca: 1c:16:dc:1d:60:ef:67:be:31:c9:d6:6c:cd:73:fe: 8f:34:ba:64:42:8b:d1:7f:0b:2b:57:07:d2:67:2a: b7:2d:46:be:d7:4b:3b:48:ba:7a:4f:d8:4c:a9:49: 43:91:42:0a:ce:c9:ba:5d:0e:d7:5b:cf:1a:e4:36: 29:8a:c3:b2:ce:4b:40:22:b9:bb:27:37:6f:4f:50: 86:80:7e:74:1f:77:08:88:0c:44:f9:98:d8:08:7a: 94:e5:b2:50:17:73:0d:c8:54:db:9b:7d:d1:92:f9: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D0:19:46:4C:5E:DE:CB:63:EA:4D:E8:46:75:38:8A:C9:D5:09:F8 X509v3 Authority Key Identifier: keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1e:ec:47:4c:5a:db:b6:be:b1:fc:b5:8e:9c:b2:f4:b1:df: 2b:ce:f8:c0:da:94:0d:b2:2f:d4:fa:02:65:0c:ff:c4:8c:f0: 9b:08:9c:45:0b:26:3b:1d:ab:77:3a:4e:20:b4:ca:5f:fc:aa: 4f:38:51:45:45:94:cd:97:c9:22:84:f1:22:55:c1:81:33:07: df:23:48:18:7b:58:81:26:e5:95:93:87:d7:5a:86:0d:4d:0f: d7:9e:d6:f3:2d:56:99:50:e4:dd:b5:99:a9:bc:95:56:bb:bb: ef:5f:bb:2d:de:0c:98:12:d5:88:af:4c:13:7b:79:41:6b:b7: af:ed:33:4f:be:91:f9:b7:55:cc:ca:12:e4:91:32:9b:c1:d5: 86:8a:7b:7d:b8:c1:95:97:0c:37:1b:a2:7e:23:3f:5b:e0:3a: cf:78:4e:3e:02:c8:7f:02:a5:08:e6:56:0d:fd:d3:69:0f:3a: 9d:88:4c:80:e7:f5:48:76:f3:b6:04:fc:5b:cb:dc:e6:43:49: 6d:94:db:4a:db:38:dc:c2:30:93:73:67:34:d9:16:a9:dd:67: c1:f0:a6:cc:ad:c2:82:31:a4:a1:4e:c1:4f:74:9c:cb:c6:1d: 8d:d8:89:61:a5:6b:4e:50:1c:6a:9d:be:bd:ad:50:1c:4a:84: 8e:70:d8:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsq5V79rx/SnE3m4Ja2xVW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjY3YTUxYWNiNjZmMjk5MWJlYTUyNDNmZTM4ODA2ODk3 MWExZjEwHhcNMjUxMjE3MDYwMDMzWhcNMjUxMjE4MDYwMDMzWjAzMTEwLwYDVQQD EyhkM2QwMTk0NjRjNWVkZWNiNjNlYTRkZTg0Njc1Mzg4YWM5ZDUwOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDO7jHRowbIPoEtyh7NfHfrvF5uY P5OrCG6fDHYJeDi63bABg1ol1CIvJCh5uoUQCs8bbdWjY6drf4XKQ0g+U0MVwtUA HFfy4p9/TW3rjjQGwPSY5cKSwXJY/bijIjWXkXlcyyxIcES8GzufABdVBLb5D5rH qLz5Ey6w9ms6mZ/8FgR4cSk1F77eawZZOryLFsgcAMocFtwdYO9nvjHJ1mzNc/6P NLpkQovRfwsrVwfSZyq3LUa+10s7SLp6T9hMqUlDkUIKzsm6XQ7XW88a5DYpisOy zktAIrm7JzdvT1CGgH50H3cIiAxE+ZjYCHqU5bJQF3MNyFTbm33RkvmxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPQGUZMXt7LY+pN6EZ1OIrJ1Qn4MB8GA1UdIwQY MBaAFLEmelGstm8pkb6lJD/jiAaJcaHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAt OTRkMWI4OWY4Y2IyLzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAtOTRkMWI4OWY4Y2Iy LzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh7sR0xa 27a+sfy1jpyy9LHfK874wNqUDbIv1PoCZQz/xIzwmwicRQsmOx2rdzpOILTKX/yq TzhRRUWUzZfJIoTxIlXBgTMH3yNIGHtYgSbllZOH11qGDU0P157W8y1WmVDk3bWZ qbyVVru771+7Ld4MmBLViK9ME3t5QWu3r+0zT76R+bdVzMoS5JEym8HVhop7fbjB lZcMNxuifiM/W+A6z3hOPgLIfwKlCOZWDf3TaQ86nYhMgOf1SHbztgT8W8vc5kNJ bZTbSts43MIwk3NnNNkWqd1nwfCmzK3CgjGkoU7BT3Scy8YdjdiJYaVrTlAcap2+ va1QHEqEjnDYyg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:45 2025 by rpki-client