This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json) Hash identifier: Yj2+sJGvKeBT27vyT+cYO9bH0mFNlM8vLoQvjdM9MEM= Subject key identifier: A7:BF:5E:C2:02:EA:C8:B9:94:5D:21:F2:F4:C4:15:EA:FE:10:D4:FA Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d Certificate serial: 019B51F331133015667F86FA36FA7F9A8370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 20:00:50 +0000 Manifest this update: Wed 24 Dec 2025 20:00:50 +0000 Manifest next update: Thu 25 Dec 2025 20:00:50 +0000 Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: gCIDltXaN21/hdb/h9Varz4X1Fe3prvpR4yLlwX/0/I=) 2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:31:13:30:15:66:7f:86:fa:36:fa:7f:9a:83:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d Validity Not Before: Dec 24 20:00:50 2025 GMT Not After : Dec 25 20:00:50 2025 GMT Subject: CN=a7bf5ec202eac8b9945d21f2f4c415eafe10d4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:d8:f8:1a:9a:42:76:b0:95:24:2b:3c:f8: b5:50:77:93:17:df:cd:92:36:3e:18:3f:c9:f1:98: 1b:db:c9:55:a5:78:bd:ec:95:a7:b9:8d:40:83:20: 7d:45:00:0f:9f:d5:f1:ce:ea:6b:a1:9e:3a:d4:a5: de:b5:54:97:32:a4:65:38:e8:ab:e3:36:96:ab:3d: 6b:f9:d3:70:a5:d1:29:3e:30:da:48:8d:fb:26:7a: 3d:88:8a:02:c3:1b:aa:4f:04:bf:0a:e0:a7:f8:13: 49:75:97:6f:25:46:4d:10:64:3d:48:a4:c4:81:79: 02:3e:58:63:56:56:ab:98:62:1a:97:00:90:ec:b5: e3:a6:51:0a:67:31:1e:e0:c5:a2:71:f1:b5:6f:0b: 63:b8:64:43:16:e1:c3:d6:f6:fd:7e:dd:2e:4c:e0: c3:50:8e:41:cc:3f:29:a5:b1:85:51:46:f6:d2:06: c4:b3:2f:c4:ee:22:0e:9d:8d:16:a3:cd:74:86:f7: 00:65:bc:f8:45:8b:21:b8:77:06:4a:5d:e1:a6:5b: 27:49:f3:c2:8f:c1:3c:87:10:36:50:db:e4:a5:96: 50:a1:89:65:13:32:18:71:46:e9:90:8f:80:24:14: c0:ca:a2:77:2e:36:1a:b3:91:a3:71:0c:41:28:d4: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BF:5E:C2:02:EA:C8:B9:94:5D:21:F2:F4:C4:15:EA:FE:10:D4:FA X509v3 Authority Key Identifier: keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4f:75:ff:97:9f:5e:60:ee:17:c3:fe:ae:50:e3:68:a6:39: 1e:19:4f:c7:f5:a0:39:32:16:50:f2:6d:49:47:3a:b6:0e:50: eb:8a:33:55:de:b8:c1:f6:8e:f8:4d:9e:3a:bb:74:f3:84:90: 3e:42:f1:55:a3:dc:b4:67:7a:5d:c2:f1:a9:e1:16:25:35:b4: 61:b8:fa:07:ab:51:61:ac:8d:c1:24:94:3d:29:e7:44:6e:d3: 41:e2:e1:b2:2c:0f:db:12:ac:aa:ff:e4:ad:c8:da:5a:db:3a: cd:fe:8d:d7:e7:d0:79:fa:76:ef:c4:c3:aa:3b:45:ca:0d:cf: 82:c1:61:e0:45:c1:ca:04:49:19:4d:df:f5:ee:05:75:53:27: d8:2c:85:6c:af:28:8c:f0:b2:52:41:4f:9f:6a:b6:17:e2:0a: ef:9a:bd:88:45:22:23:62:04:b2:27:1e:73:f3:1d:9c:98:c0: 8b:dd:6c:20:24:79:50:48:74:77:06:ae:05:75:69:99:dc:3c: 17:b3:f2:ef:5c:b6:ab:ed:18:7c:9b:50:03:86:ee:82:28:6a: eb:48:6f:78:ca:d9:12:a4:d5:0c:77:af:fc:d8:a6:07:c9:00: cc:60:69:b8:5c:53:9e:ea:aa:84:7e:9e:ae:7a:cb:c8:e2:54: f2:4c:d2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8zETMBVmf4b6Nvp/moNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNGQ1MmFiMDliMTZkNzJmNGMzZTQ4Y2M0YjQ5MDI1ZDA4 MzY3NmQwHhcNMjUxMjI0MjAwMDUwWhcNMjUxMjI1MjAwMDUwWjAzMTEwLwYDVQQD EyhhN2JmNWVjMjAyZWFjOGI5OTQ1ZDIxZjJmNGM0MTVlYWZlMTBkNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LnY+BqaQnawlSQrPPi1UHeTF9/N kjY+GD/J8Zgb28lVpXi97JWnuY1AgyB9RQAPn9XxzuproZ461KXetVSXMqRlOOir 4zaWqz1r+dNwpdEpPjDaSI37Jno9iIoCwxuqTwS/CuCn+BNJdZdvJUZNEGQ9SKTE gXkCPlhjVlarmGIalwCQ7LXjplEKZzEe4MWicfG1bwtjuGRDFuHD1vb9ft0uTODD UI5BzD8ppbGFUUb20gbEsy/E7iIOnY0Wo810hvcAZbz4RYshuHcGSl3hplsnSfPC j8E8hxA2UNvkpZZQoYllEzIYcUbpkI+AJBTAyqJ3LjYas5GjcQxBKNSvpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe/XsIC6si5lF0h8vTEFer+ENT6MB8GA1UdIwQY MBaAFNtNUqsJsW1y9MPkjMS0kCXQg2dtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUt MjJiZGVmOTliY2VhLzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUtMjJiZGVmOTliY2Vh LzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE91/5ef XmDuF8P+rlDjaKY5HhlPx/WgOTIWUPJtSUc6tg5Q64ozVd64wfaO+E2eOrt084SQ PkLxVaPctGd6XcLxqeEWJTW0Ybj6B6tRYayNwSSUPSnnRG7TQeLhsiwP2xKsqv/k rcjaWts6zf6N1+fQefp278TDqjtFyg3PgsFh4EXBygRJGU3f9e4FdVMn2CyFbK8o jPCyUkFPn2q2F+IK75q9iEUiI2IEsicec/MdnJjAi91sICR5UEh0dwauBXVpmdw8 F7Py71y2q+0YfJtQA4bugihq60hveMrZEqTVDHev/NimB8kAzGBpuFxTnuqqhH6e rnrLyOJU8kzSTQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:46:13 2025 by rpki-client