This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json) Hash identifier: IYJupB2akTI8pj39IUBZsHqSQrZzav8t3p4o5EidBA4= Subject key identifier: FC:7E:C4:15:F8:14:9B:ED:DD:F5:04:70:BE:4D:6D:F4:25:2A:08:67 Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7 Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7 Certificate serial: 019B3F117EDFDCEDF9D1AD7A6D3E07FA7A8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 04:01:09 +0000 Manifest this update: Sun 21 Dec 2025 04:01:09 +0000 Manifest next update: Mon 22 Dec 2025 04:01:09 +0000 Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: xBmZmJsypeuIWJd7nVF822cIXSdvxAiEfvdplDwNS3w=) 2: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (hash: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:7e:df:dc:ed:f9:d1:ad:7a:6d:3e:07:fa:7a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7 Validity Not Before: Dec 21 04:01:09 2025 GMT Not After : Dec 22 04:01:09 2025 GMT Subject: CN=fc7ec415f8149bedddf50470be4d6df4252a0867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:a8:f4:b3:31:ff:95:bf:e8:31:2e:a2:48: c7:37:71:2f:8c:e6:62:db:00:18:f4:e4:59:b7:55: dc:18:07:34:73:ab:a8:8e:41:58:6f:96:e0:e7:10: cd:bf:30:91:b0:a9:9c:60:f0:6a:93:d6:b4:a8:40: 84:a7:08:ce:0f:be:c3:22:d0:a8:74:0e:94:11:84: 96:1b:86:0a:cc:bc:54:df:81:5a:dd:b4:f2:ce:94: e2:bc:77:0a:2e:5a:09:fc:9b:7d:9c:0b:07:d7:94: 98:cd:2a:8b:32:f7:40:fa:5f:6b:99:62:ea:53:63: 16:6f:10:72:f4:38:06:3c:d7:0e:ff:75:2e:4f:1c: 77:09:99:34:52:92:54:5e:68:3f:e3:27:7b:4b:4c: c4:5e:4c:f1:0c:20:a8:36:16:23:e9:b5:bc:08:dd: ea:56:b1:d2:e6:ce:ae:11:05:42:a0:e0:59:ae:77: b6:c9:02:6a:ae:c8:50:53:22:8c:fe:0b:bf:7f:6e: 44:8d:80:9f:12:e9:29:2f:1e:da:54:b0:3d:e3:20: ab:7d:e9:34:59:91:77:5a:86:9e:fc:d0:f5:06:7a: 6d:95:e6:6a:10:ba:cc:4b:7a:da:64:c3:df:74:a9: 5a:fe:bf:e4:1a:00:f0:dc:35:3e:a2:6a:f7:8e:d6: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7E:C4:15:F8:14:9B:ED:DD:F5:04:70:BE:4D:6D:F4:25:2A:08:67 X509v3 Authority Key Identifier: keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:db:40:a2:48:59:31:4f:71:73:27:b7:ad:88:eb:d1:77:3c: 96:aa:cc:59:37:24:9d:59:46:7d:e3:82:64:b5:fe:41:07:50: 71:38:8f:f4:e1:ac:08:ce:38:9c:9e:3f:7e:f2:b7:ca:93:47: fd:4d:dc:ea:14:f3:9e:61:ff:52:56:36:37:9e:22:0d:6c:fe: c7:6b:da:6a:a2:c7:3e:7f:72:2b:27:f0:fe:a9:26:16:37:14: b9:47:a8:df:0e:b7:b5:12:41:56:20:7e:2d:c0:9f:5f:a6:35: 45:d5:2a:c3:c5:b2:ab:fe:76:63:d9:17:c1:fe:bf:b1:fc:f8: e4:8a:4e:02:5d:2d:d8:2e:8f:41:7a:70:d4:4d:5b:6c:ff:b1: ed:d0:43:5e:52:53:97:a7:c0:2b:a7:29:c3:41:20:fa:28:70: bc:c8:4a:6e:49:8d:fb:04:57:fe:b5:cf:92:2e:c3:0f:de:35: 2f:1b:94:86:dc:c4:cb:14:f6:8c:b8:13:b1:55:54:69:a0:90: ec:ca:b0:19:70:ed:5b:0e:65:4c:44:c7:0b:15:ad:63:66:2a: 58:43:a2:2b:c8:33:8c:79:ca:0a:c7:dc:63:93:89:b6:b1:3f: b1:cf:8e:19:f0:f6:b1:3a:a3:a9:e0:b0:8f:da:5b:73:3b:a8: f7:3b:3d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EX7f3O350a16bT4H+nqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMjIyZWQxYjhhNTMzODU4ZjQ2NThjNWQyNTM5ZmFmNTJh YmRhYTcwHhcNMjUxMjIxMDQwMTA5WhcNMjUxMjIyMDQwMTA5WjAzMTEwLwYDVQQD EyhmYzdlYzQxNWY4MTQ5YmVkZGRmNTA0NzBiZTRkNmRmNDI1MmEwODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwISo9LMx/5W/6DEuokjHN3EvjOZi 2wAY9ORZt1XcGAc0c6uojkFYb5bg5xDNvzCRsKmcYPBqk9a0qECEpwjOD77DItCo dA6UEYSWG4YKzLxU34Fa3bTyzpTivHcKLloJ/Jt9nAsH15SYzSqLMvdA+l9rmWLq U2MWbxBy9DgGPNcO/3UuTxx3CZk0UpJUXmg/4yd7S0zEXkzxDCCoNhYj6bW8CN3q VrHS5s6uEQVCoOBZrne2yQJqrshQUyKM/gu/f25EjYCfEukpLx7aVLA94yCrfek0 WZF3Woae/ND1BnptleZqELrMS3raZMPfdKla/r/kGgDw3DU+omr3jtbyHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPx+xBX4FJvt3fUEcL5NbfQlKghnMB8GA1UdIwQY MBaAFEoiLtG4pTOFj0ZYxdJTn69Sq9qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUt ODM3ZDAwMzFiM2QxLzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUtODM3ZDAwMzFiM2Qx LzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9tAokhZ MU9xcye3rYjr0Xc8lqrMWTcknVlGfeOCZLX+QQdQcTiP9OGsCM44nJ4/fvK3ypNH /U3c6hTznmH/UlY2N54iDWz+x2vaaqLHPn9yKyfw/qkmFjcUuUeo3w63tRJBViB+ LcCfX6Y1RdUqw8Wyq/52Y9kXwf6/sfz45IpOAl0t2C6PQXpw1E1bbP+x7dBDXlJT l6fAK6cpw0Eg+ihwvMhKbkmN+wRX/rXPki7DD941LxuUhtzEyxT2jLgTsVVUaaCQ 7MqwGXDtWw5lTETHCxWtY2YqWEOiK8gzjHnKCsfcY5OJtrE/sc+OGfD2sTqjqeCw j9pbczuo9zs95Q== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:02 2025 by rpki-client