This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json) Hash identifier: uJIpgRXnmNHA3g7rhdpZh/GojqwsSJj+OUKtJ8m1mb0= Subject key identifier: DB:CA:CB:AF:80:8E:79:7B:04:BB:4F:89:4A:D4:0D:82:1F:4A:2A:68 Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf Certificate serial: 019B3C0FF8C49E337788654E563DA2000432 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 14:00:38 +0000 Manifest this update: Sat 20 Dec 2025 14:00:38 +0000 Manifest next update: Sun 21 Dec 2025 14:00:38 +0000 Files and hashes: 1: GGuZV4w4l_L1AAB0u4gI9OxObhI.roa (hash: CLNm60QGfX0COSZodNNnpcHnrbcFlA00OSTVLEP9aw4=) 2: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=) 3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: HE69dGv6ZpS96+R1Qxx45DVZSPIagB/F7URTCPKvH2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f8:c4:9e:33:77:88:65:4e:56:3d:a2:00:04:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Dec 21 14:00:38 2025 GMT Subject: CN=dbcacbaf808e797b04bb4f894ad40d821f4a2a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:99:6c:2f:b9:a4:55:9f:f7:90:a1:79:2f:0d: 51:c3:67:9d:96:64:8d:f3:65:e5:c4:9b:e6:e0:80: fa:67:a7:4f:06:aa:bd:e6:b5:ff:69:ac:d1:42:02: 5a:e8:81:ad:0a:58:b1:46:a8:d4:77:35:ef:17:1a: e0:0f:c0:43:0e:ac:f2:fe:b7:aa:e2:86:e6:ee:ba: 71:2f:e4:e0:90:29:10:a5:94:2b:73:d9:e8:bf:eb: 53:c2:fe:a5:08:0a:f4:28:f0:a3:3e:18:8c:60:4e: f8:d6:f3:88:aa:b1:b9:81:a2:31:bc:ef:c2:d9:33: 24:27:b4:26:be:cf:6d:34:62:19:46:c8:a8:cd:a4: a5:59:a2:dd:b3:d7:bf:9f:e9:51:51:ba:30:d9:dd: 80:f6:79:8c:50:cd:5a:79:29:95:d7:3f:11:61:b3: 79:8b:ad:57:58:36:94:7f:85:aa:07:bf:a1:0c:38: 3a:ed:2f:cd:b6:ba:36:50:85:63:23:fc:9b:1a:c2: 8a:97:09:d7:bc:d8:b4:e0:31:15:75:60:8f:62:51: 55:89:e1:4c:88:2d:cf:1b:99:76:24:17:d4:d4:c8: 6e:b9:23:ae:94:d6:91:67:49:f6:ff:9d:50:1f:e2: 02:57:ac:72:f4:03:91:a3:3c:19:e0:aa:96:40:50: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CA:CB:AF:80:8E:79:7B:04:BB:4F:89:4A:D4:0D:82:1F:4A:2A:68 X509v3 Authority Key Identifier: keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d8:99:67:01:1b:97:59:b4:67:c3:6b:8a:48:72:b6:09:a3: 7e:17:f9:41:d5:56:c4:db:10:5f:55:55:ef:d0:2b:21:df:37: 09:5d:73:01:37:54:bb:be:74:d9:85:9d:31:d3:56:c6:10:c8: 68:9d:12:d2:cf:85:c8:f1:6d:e6:7d:c3:da:95:f4:65:27:79: 9e:3f:47:7e:36:04:42:9b:f7:7f:ad:3b:93:90:39:a2:6e:86: 1f:6f:9d:b7:bf:3f:d9:b7:f0:fb:91:2f:1f:72:58:86:56:d2: af:1b:36:94:c6:24:8f:94:42:7f:3d:d2:aa:9a:b5:8a:0c:84: a2:3f:aa:9f:06:87:0d:0c:d5:f6:a2:22:e4:39:29:9c:85:34: b7:de:9e:25:e5:10:bd:4c:f4:f4:de:3d:d8:89:dd:82:58:a5: 06:8e:d6:6d:cf:b7:a6:0c:6a:0e:c4:e9:d4:53:c2:d2:51:bc: 48:7b:38:7f:ba:63:54:5d:2d:36:9f:20:7a:3a:9a:8d:7e:86: 1d:20:45:b9:5a:80:71:97:e3:58:f4:d8:5e:23:6c:af:bc:37: 30:1c:7a:75:2f:a2:bf:8a:98:7f:b9:9e:2c:cb:fa:92:21:7d: cc:5a:ea:27:ec:3d:e5:d0:7e:91:7f:4c:1a:1c:5c:4b:16:65: de:80:ef:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/jEnjN3iGVOVj2iAAQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm MTZlZGYwHhcNMjUxMjIwMTQwMDM4WhcNMjUxMjIxMTQwMDM4WjAzMTEwLwYDVQQD EyhkYmNhY2JhZjgwOGU3OTdiMDRiYjRmODk0YWQ0MGQ4MjFmNGEyYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZlsL7mkVZ/3kKF5Lw1Rw2edlmSN 82XlxJvm4ID6Z6dPBqq95rX/aazRQgJa6IGtClixRqjUdzXvFxrgD8BDDqzy/req 4obm7rpxL+TgkCkQpZQrc9nov+tTwv6lCAr0KPCjPhiMYE741vOIqrG5gaIxvO/C 2TMkJ7Qmvs9tNGIZRsiozaSlWaLds9e/n+lRUbow2d2A9nmMUM1aeSmV1z8RYbN5 i61XWDaUf4WqB7+hDDg67S/Ntro2UIVjI/ybGsKKlwnXvNi04DEVdWCPYlFVieFM iC3PG5l2JBfU1MhuuSOulNaRZ0n2/51QH+ICV6xy9AORozwZ4KqWQFCBaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvKy6+Ajnl7BLtPiUrUDYIfSipoMB8GA1UdIwQY MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt ZjJiODEwNzliNzQ2LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2 LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtiZZwEb l1m0Z8Nrikhytgmjfhf5QdVWxNsQX1VV79ArId83CV1zATdUu7502YWdMdNWxhDI aJ0S0s+FyPFt5n3D2pX0ZSd5nj9HfjYEQpv3f607k5A5om6GH2+dt78/2bfw+5Ev H3JYhlbSrxs2lMYkj5RCfz3Sqpq1igyEoj+qnwaHDQzV9qIi5DkpnIU0t96eJeUQ vUz09N492IndglilBo7Wbc+3pgxqDsTp1FPC0lG8SHs4f7pjVF0tNp8gejqajX6G HSBFuVqAcZfjWPTYXiNsr7w3MBx6dS+iv4qYf7meLMv6kiF9zFrqJ+w95dB+kX9M GhxcSxZl3oDvqA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:11:32 2025 by rpki-client