This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json) Hash identifier: oYzPoJEmyNWMB1YjFtHjuZSJu9HYcDmcG3KvLsqYpJM= Subject key identifier: B8:D6:50:E0:F2:3F:DF:61:53:1A:7F:36:85:92:F6:B2:DC:10:40:F3 Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5 Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5 Certificate serial: 019B337B4359A1BE366148C09B23E0358A0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft Manifest number: 1797 Signing time: Thu 18 Dec 2025 22:01:14 +0000 Manifest this update: Thu 18 Dec 2025 22:01:14 +0000 Manifest next update: Fri 19 Dec 2025 22:01:14 +0000 Files and hashes: 1: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: cmu/3bgyj4s8SrDDbWHnJW8XTm8YRweu3gzGx3IMMPU=) 2: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=) 3: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=) 4: aBxSYhVn_anxC7-03zZfXGAPrRA.roa (hash: 4z8vPSTGN/KrBGvUG7yKZHmMHGsa+QLaisXrVqvvKq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:43:59:a1:be:36:61:48:c0:9b:23:e0:35:8a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5 Validity Not Before: Dec 18 22:01:14 2025 GMT Not After : Dec 19 22:01:14 2025 GMT Subject: CN=b8d650e0f23fdf61531a7f368592f6b2dc1040f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:e6:59:31:bd:60:10:a4:8e:5e:50:7e:4d: 6b:2d:4f:a6:ba:e1:84:46:9c:ec:ac:df:4a:29:75: 3b:22:e4:2f:57:83:ac:9f:b0:4a:bd:ae:08:e2:b8: 58:52:64:b2:aa:b6:c5:a9:f2:a9:81:ea:88:d9:7e: af:42:5c:70:a5:59:fe:0a:5d:50:5a:3d:cb:e3:df: c8:03:69:b0:51:ef:c4:b7:8b:d5:93:52:c3:a1:e7: 2e:a0:48:65:34:09:da:3c:ea:4e:2a:5a:df:4c:55: ac:60:17:8a:0f:66:ae:e9:3e:4d:ed:74:ff:ae:f8: f2:30:18:64:42:08:17:e2:42:03:4c:65:2b:bd:37: 7e:27:f6:b1:99:a9:a5:19:a9:08:b3:56:f2:56:a9: ed:9b:98:6b:60:a5:19:fe:49:06:71:2b:48:84:3c: d7:f1:19:53:b7:18:8e:6a:3c:3b:30:09:17:a8:a9: dd:23:a1:3c:3d:b0:df:e1:1a:c9:ad:e3:e5:a7:3f: c4:01:7c:96:5a:4a:15:13:26:d1:f1:55:fe:e2:10: 64:4f:22:cc:5f:8c:62:05:70:54:6f:95:be:7e:5d: b3:17:70:c9:e2:20:7f:12:f2:a3:c8:30:46:56:f1: 6b:49:b3:5b:ae:35:b9:8b:27:e6:ce:bb:2f:b8:58: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D6:50:E0:F2:3F:DF:61:53:1A:7F:36:85:92:F6:B2:DC:10:40:F3 X509v3 Authority Key Identifier: keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b2:30:0f:a8:cd:0a:e1:86:cd:31:b9:99:e2:53:8f:a4:67: 5e:9c:f5:d9:d0:97:27:5b:d2:90:c2:bd:4b:3b:d6:95:ce:fc: 45:c3:3b:5a:4b:ff:ac:66:6c:d2:2a:93:16:e7:66:6c:43:30: cd:40:32:f2:40:01:f0:d2:16:18:43:51:0b:dc:c6:4a:52:6e: 08:a8:49:31:12:83:94:27:c1:c2:a6:6f:4a:ed:6f:9a:f8:14: dd:7c:4b:ff:ff:da:70:c6:77:91:1c:ea:dd:da:04:fe:48:78: c2:97:25:45:44:35:48:ec:8d:4d:5f:68:4d:48:00:c7:c0:2c: 04:fa:fa:49:4f:c9:9d:b8:a2:7e:3c:c7:40:0f:36:45:2b:cc: 5e:2a:d7:13:cd:45:95:19:9a:d5:e5:ad:9b:9d:84:51:cc:07: ed:ee:bf:6a:31:57:c0:cc:c7:47:fb:a8:14:71:e2:32:2e:68: 14:19:61:11:21:0c:20:07:3d:e9:bd:a4:1c:57:54:c5:92:91: 98:2c:b9:3e:09:90:4d:d0:7e:18:12:42:c3:96:e1:f1:16:99: a4:7c:87:69:66:86:e8:7a:98:c0:8c:e2:3e:75:3a:aa:f8:d8: ce:8a:d7:09:e6:0f:90:4b:9c:39:f1:0f:96:67:a7:da:67:f3: 39:27:43:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0NZob42YUjAmyPgNYoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm NThiZTUwHhcNMjUxMjE4MjIwMTE0WhcNMjUxMjE5MjIwMTE0WjAzMTEwLwYDVQQD EyhiOGQ2NTBlMGYyM2ZkZjYxNTMxYTdmMzY4NTkyZjZiMmRjMTA0MGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPbmWTG9YBCkjl5Qfk1rLU+muuGE RpzsrN9KKXU7IuQvV4Osn7BKva4I4rhYUmSyqrbFqfKpgeqI2X6vQlxwpVn+Cl1Q Wj3L49/IA2mwUe/Et4vVk1LDoecuoEhlNAnaPOpOKlrfTFWsYBeKD2au6T5N7XT/ rvjyMBhkQggX4kIDTGUrvTd+J/axmamlGakIs1byVqntm5hrYKUZ/kkGcStIhDzX 8RlTtxiOajw7MAkXqKndI6E8PbDf4RrJrePlpz/EAXyWWkoVEybR8VX+4hBkTyLM X4xiBXBUb5W+fl2zF3DJ4iB/EvKjyDBGVvFrSbNbrjW5iyfmzrsvuFhzCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjWUODyP99hUxp/NoWS9rLcEEDzMB8GA1UdIwQY MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt YWIxYTg3ZWNkZjFiLzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbIwD6jN CuGGzTG5meJTj6RnXpz12dCXJ1vSkMK9SzvWlc78RcM7Wkv/rGZs0iqTFudmbEMw zUAy8kAB8NIWGENRC9zGSlJuCKhJMRKDlCfBwqZvSu1vmvgU3XxL///acMZ3kRzq 3doE/kh4wpclRUQ1SOyNTV9oTUgAx8AsBPr6SU/JnbiifjzHQA82RSvMXirXE81F lRma1eWtm52EUcwH7e6/ajFXwMzHR/uoFHHiMi5oFBlhESEMIAc96b2kHFdUxZKR mCy5PgmQTdB+GBJCw5bh8RaZpHyHaWaG6HqYwIziPnU6qvjYzorXCeYPkEucOfEP lmen2mfzOSdDvA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:27:31 2025 by rpki-client