This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json) Hash identifier: jIdxl5a6yd+lS8ruUyfyTRD57BjwiijACd/Mma+reEs= Subject key identifier: 5F:EE:A2:62:0B:61:1F:C7:8F:A7:77:99:2C:7F:3B:F6:BC:93:F4:AC Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7 Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7 Certificate serial: 019B4E8463A33AF958C444B905591226DE69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 04:00:57 +0000 Manifest this update: Wed 24 Dec 2025 04:00:57 +0000 Manifest next update: Thu 25 Dec 2025 04:00:57 +0000 Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: MuzibkTXxOou4hgX+eqQRN7pG2d4husfrd9Zbxbau+k=) 2: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (hash: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:63:a3:3a:f9:58:c4:44:b9:05:59:12:26:de:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7 Validity Not Before: Dec 24 04:00:57 2025 GMT Not After : Dec 25 04:00:57 2025 GMT Subject: CN=5feea2620b611fc78fa777992c7f3bf6bc93f4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:c1:30:2f:63:ac:2c:f9:ff:c0:59:ce:5d: b6:e6:f9:ec:5e:50:30:2d:83:9d:12:68:83:4a:3a: ac:ee:83:eb:c0:17:1e:fe:d2:81:15:b1:4e:44:82: ea:6c:b0:15:09:fd:5c:3a:f6:85:2d:d3:0f:b0:47: ac:63:f3:4e:48:44:35:ab:94:e1:c7:3e:68:32:6c: bd:32:c6:04:2a:40:65:24:f7:5f:e6:be:f9:40:8e: 97:b1:5f:cd:a9:ad:d2:d3:36:f9:74:aa:d1:32:c9: 69:fb:0e:5a:ed:75:1c:16:98:3a:f7:c5:45:aa:04: e6:62:8b:bd:25:ce:9a:95:aa:94:1f:4b:31:77:d7: 45:a3:69:63:6b:30:7b:35:69:34:07:3f:ca:eb:78: 12:d7:f7:10:09:10:e1:32:83:f8:6d:88:32:0a:fb: c5:5a:c6:80:6e:c6:8e:a0:d5:77:6a:45:48:ab:41: ca:53:59:a6:b9:44:9e:46:aa:0c:9a:3b:81:3d:84: a7:30:62:45:70:9e:c9:e7:e1:90:f8:e2:57:5f:a9: a7:a4:da:04:21:25:16:7f:87:7f:03:70:da:92:51: 5b:65:35:fa:b4:aa:63:64:00:3b:5f:f3:33:a6:90: 42:a6:a2:50:7d:22:9a:f0:c7:85:5b:be:0a:5b:70: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:A2:62:0B:61:1F:C7:8F:A7:77:99:2C:7F:3B:F6:BC:93:F4:AC X509v3 Authority Key Identifier: keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f2:91:22:9e:fe:5a:9b:36:66:e7:59:58:45:2d:8b:36:dc: a5:6b:27:fd:c2:4c:f1:09:e3:d8:ae:b6:e5:fb:89:78:34:3e: ca:2f:44:f5:f2:82:2b:7e:ed:21:78:07:e0:5a:3b:cc:b7:cb: 49:6b:78:1e:94:2a:53:b9:e5:29:61:e7:3b:06:d3:9c:36:da: 9c:29:7f:1f:e0:f2:91:6c:c6:73:1f:99:86:5e:9d:74:73:e7: 93:0a:a5:07:43:ee:a8:e2:fe:34:62:c7:ad:7d:7a:7f:69:f0: 60:c6:df:31:07:38:a1:75:24:2f:5d:20:f7:3d:8e:4e:03:f8: 39:f9:1b:af:0f:7d:25:da:ab:98:23:e6:28:a8:27:25:23:b4: dc:f5:d0:f9:c9:9e:c6:5f:96:bc:8a:d4:93:f0:f8:44:94:85: 07:1e:70:35:7a:b3:2e:9e:32:70:b1:f8:3b:e6:df:04:30:07: 0c:c9:53:34:19:06:fc:a4:0a:1d:b4:d4:9b:b1:30:ff:1b:2c: 73:4c:63:9c:1e:0b:65:d6:a2:1c:46:40:ab:14:12:5a:ea:47: d7:06:f4:0b:35:bb:04:18:71:e7:2e:b5:3a:b5:96:2c:2c:2d: 05:ff:d0:8d:42:e7:ba:82:1b:1a:f8:65:e1:85:8a:79:d1:5f: 67:68:6b:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhGOjOvlYxES5BVkSJt5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMjIyZWQxYjhhNTMzODU4ZjQ2NThjNWQyNTM5ZmFmNTJh YmRhYTcwHhcNMjUxMjI0MDQwMDU3WhcNMjUxMjI1MDQwMDU3WjAzMTEwLwYDVQQD Eyg1ZmVlYTI2MjBiNjExZmM3OGZhNzc3OTkyYzdmM2JmNmJjOTNmNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQfBMC9jrCz5/8BZzl225vnsXlAw LYOdEmiDSjqs7oPrwBce/tKBFbFORILqbLAVCf1cOvaFLdMPsEesY/NOSEQ1q5Th xz5oMmy9MsYEKkBlJPdf5r75QI6XsV/Nqa3S0zb5dKrRMslp+w5a7XUcFpg698VF qgTmYou9Jc6alaqUH0sxd9dFo2ljazB7NWk0Bz/K63gS1/cQCRDhMoP4bYgyCvvF WsaAbsaOoNV3akVIq0HKU1mmuUSeRqoMmjuBPYSnMGJFcJ7J5+GQ+OJXX6mnpNoE ISUWf4d/A3DaklFbZTX6tKpjZAA7X/MzppBCpqJQfSKa8MeFW74KW3D85QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/uomILYR/Hj6d3mSx/O/a8k/SsMB8GA1UdIwQY MBaAFEoiLtG4pTOFj0ZYxdJTn69Sq9qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUt ODM3ZDAwMzFiM2QxLzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUtODM3ZDAwMzFiM2Qx LzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfKRIp7+ Wps2ZudZWEUtizbcpWsn/cJM8Qnj2K625fuJeDQ+yi9E9fKCK37tIXgH4Fo7zLfL SWt4HpQqU7nlKWHnOwbTnDbanCl/H+DykWzGcx+Zhl6ddHPnkwqlB0PuqOL+NGLH rX16f2nwYMbfMQc4oXUkL10g9z2OTgP4Ofkbrw99JdqrmCPmKKgnJSO03PXQ+cme xl+WvIrUk/D4RJSFBx5wNXqzLp4ycLH4O+bfBDAHDMlTNBkG/KQKHbTUm7Ew/xss c0xjnB4LZdaiHEZAqxQSWupH1wb0CzW7BBhx5y61OrWWLCwtBf/QjULnuoIbGvhl 4YWKedFfZ2hr+w== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:39 2025 by rpki-client