This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json) Hash identifier: E6EDygyu5NFik93u1v1QEr+L1xUdwSsb55oH1V96hdc= Subject key identifier: B7:CF:06:E5:BA:B3:ED:4D:12:C6:19:C0:26:C2:43:85:35:63:7C:0A Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98 Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998 Certificate serial: 019B3DFEAA10B3D4B57D9ABE320F7E600FA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft Manifest number: 143F Signing time: Sat 20 Dec 2025 23:00:58 +0000 Manifest this update: Sat 20 Dec 2025 23:00:58 +0000 Manifest next update: Sun 21 Dec 2025 23:00:58 +0000 Files and hashes: 1: KqM5XDgI_gIy9O3UmMKLUWUHXOQ.roa (hash: uBBprn8iUpipBM/piZ68Yxmj007S30ZT/FkMsMlB4ls=) 2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: BRt488hy4VG8ScD4zViECqVjq6Eg2pNX2FX4z545K9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:aa:10:b3:d4:b5:7d:9a:be:32:0f:7e:60:0f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998 Validity Not Before: Dec 20 23:00:58 2025 GMT Not After : Dec 21 23:00:58 2025 GMT Subject: CN=b7cf06e5bab3ed4d12c619c026c2438535637c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:be:de:c2:27:bf:0a:63:7e:5b:f7:b4:cd: 49:ee:42:42:f0:4e:01:7e:2b:dd:1c:fe:51:3a:50: d2:b9:8f:3a:2f:80:d6:a0:5b:98:03:fc:14:76:6f: 4d:60:58:63:ed:b0:22:56:c5:30:2c:4c:3c:0a:cb: 93:87:5f:ab:b2:69:9a:29:59:6d:cc:48:73:a3:c3: f5:6a:ea:bf:e7:c7:fb:f2:59:6a:07:aa:6e:69:b7: 44:7b:67:1b:dd:42:40:67:5c:7c:07:ae:4c:f4:bb: d5:7a:9b:a6:8a:b0:6c:91:d2:ad:5f:31:e6:94:16: c5:a0:79:8d:70:7f:0a:14:10:1f:89:6d:5b:21:57: 4c:6d:1d:4b:1c:90:92:bc:98:53:3f:fa:80:9e:95: fa:2d:fb:76:11:c7:9f:a4:57:4c:41:3a:ed:0d:fb: 37:33:c1:f1:7c:2d:35:a5:79:d2:31:08:ab:9c:63: 0a:8e:d6:c8:60:a6:83:40:a5:de:67:da:a3:d7:68: 49:e5:6b:58:ae:af:dc:ef:63:da:5f:86:a2:38:a6: 96:07:f7:76:70:fd:3a:cf:c3:f6:24:ba:db:15:43: 59:35:fa:27:3f:80:f4:e2:4f:09:3c:e6:83:18:96: 27:c0:4b:cb:d3:12:43:f9:73:b6:44:66:e6:53:d0: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CF:06:E5:BA:B3:ED:4D:12:C6:19:C0:26:C2:43:85:35:63:7C:0A X509v3 Authority Key Identifier: keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:7f:c3:44:31:d7:04:5b:52:8c:71:52:22:25:56:8c:de:4d: 0a:e3:cd:48:3d:e1:6d:53:13:70:82:d9:02:27:d5:4a:98:9f: 3b:09:2a:59:a4:40:6e:bb:c8:f9:f3:8e:e5:89:bc:f9:58:32: 12:81:93:8d:5f:79:e4:2a:a3:2b:88:d7:54:56:06:c4:b5:28: e8:5b:27:91:f3:77:15:c8:29:9a:59:66:f6:12:4f:3d:e4:16: 84:eb:b2:a9:7d:83:ec:5e:ca:9c:00:24:45:5a:44:73:d1:2a: 51:67:56:a6:03:69:d4:56:1b:05:9d:01:e3:bb:82:5d:38:33: 03:c3:b0:4d:50:b3:62:ae:29:c6:6a:96:0f:68:28:90:a3:d6: a7:b1:60:4d:83:8b:46:cc:47:27:71:e1:e3:f8:42:2c:e4:d6: 52:0f:14:b0:6f:c5:03:c1:c8:ac:ae:d8:a8:9c:c7:9c:4b:9b: 23:54:b4:d1:9f:2d:be:d4:1a:b2:79:3d:93:c6:1d:2a:1f:3a: de:ac:48:a3:a4:5e:bb:e6:4b:78:c0:c3:7d:e2:0f:1c:6e:e4: f9:74:55:0c:56:11:16:e1:d1:18:b4:49:a9:ac:0c:98:7b:3a: 15:16:e3:27:db:a5:90:3e:54:0f:53:28:f0:f1:6a:db:e6:a8: 69:2e:53:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qoQs9S1fZq+Mg9+YA+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMGQzZDM0ZjYxZTQ4NDY4OGJmZmY5Y2M3MDM3NTU4MjM3 NzU5OTgwHhcNMjUxMjIwMjMwMDU4WhcNMjUxMjIxMjMwMDU4WjAzMTEwLwYDVQQD EyhiN2NmMDZlNWJhYjNlZDRkMTJjNjE5YzAyNmMyNDM4NTM1NjM3YzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiW+3sInvwpjflv3tM1J7kJC8E4B fivdHP5ROlDSuY86L4DWoFuYA/wUdm9NYFhj7bAiVsUwLEw8CsuTh1+rsmmaKVlt zEhzo8P1auq/58f78llqB6puabdEe2cb3UJAZ1x8B65M9LvVepumirBskdKtXzHm lBbFoHmNcH8KFBAfiW1bIVdMbR1LHJCSvJhTP/qAnpX6Lft2EcefpFdMQTrtDfs3 M8HxfC01pXnSMQirnGMKjtbIYKaDQKXeZ9qj12hJ5WtYrq/c72PaX4aiOKaWB/d2 cP06z8P2JLrbFUNZNfonP4D04k8JPOaDGJYnwEvL0xJD+XO2RGbmU9Au3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfPBuW6s+1NEsYZwCbCQ4U1Y3wKMB8GA1UdIwQY MBaAFLANPTT2HkhGiL//nMcDdVgjd1mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEt MTcxZGM1YTk4NDc0LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEtMTcxZGM1YTk4NDc0 LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyH/DRDHX BFtSjHFSIiVWjN5NCuPNSD3hbVMTcILZAifVSpifOwkqWaRAbrvI+fOO5Ym8+Vgy EoGTjV955CqjK4jXVFYGxLUo6FsnkfN3Fcgpmllm9hJPPeQWhOuyqX2D7F7KnAAk RVpEc9EqUWdWpgNp1FYbBZ0B47uCXTgzA8OwTVCzYq4pxmqWD2gokKPWp7FgTYOL RsxHJ3Hh4/hCLOTWUg8UsG/FA8HIrK7YqJzHnEubI1S00Z8tvtQasnk9k8YdKh86 3qxIo6Reu+ZLeMDDfeIPHG7k+XRVDFYRFuHRGLRJqawMmHs6FRbjJ9ulkD5UD1Mo 8PFq2+aoaS5TGg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:37 2025 by rpki-client