This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json) Hash identifier: TXlDZUQq9BOwvS9Gm6DV6jnTV9U0Tr0qzQo7Wz72owk= Subject key identifier: C6:EB:2A:06:16:FF:22:7B:C8:4F:64:03:1F:DF:FB:F3:14:ED:F2:6E Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Certificate serial: 019B3C7E60C5333F20F94937FA7194532785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft Manifest number: 1519 Signing time: Sat 20 Dec 2025 16:01:13 +0000 Manifest this update: Sat 20 Dec 2025 16:01:13 +0000 Manifest next update: Sun 21 Dec 2025 16:01:13 +0000 Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=) 2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: tPcLUiFefb66qn5bse3jQPljuoGjYlrlr8FBOwXglSY=) 3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:60:c5:33:3f:20:f9:49:37:fa:71:94:53:27:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Validity Not Before: Dec 20 16:01:13 2025 GMT Not After : Dec 21 16:01:13 2025 GMT Subject: CN=c6eb2a0616ff227bc84f64031fdffbf314edf26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:aa:09:60:38:23:71:a9:fa:4e:f2:db:97: 4d:a3:41:64:ed:11:da:5e:6b:a4:18:9f:c4:3b:2b: c3:f6:6d:89:05:a7:7f:43:f1:bb:7e:e0:b8:85:3c: df:db:f2:fc:21:e2:ab:36:68:33:ff:b7:e0:51:a6: 92:61:23:67:59:aa:59:0e:fb:9e:a2:69:6a:b8:1a: fd:18:5a:e2:4f:69:b8:c1:20:32:84:68:22:c6:91: d8:b9:09:96:a6:f9:03:35:3a:86:d9:be:4c:6d:bd: 4f:ae:36:17:1a:46:7a:10:d8:30:1d:12:d8:23:82: 44:c3:a8:2d:aa:0e:b5:a4:3e:61:98:22:1f:6c:f9: eb:95:02:cc:00:38:37:1d:ab:1d:8d:7e:f0:18:0d: f1:4d:af:b7:02:ed:0c:9a:57:3a:42:8a:e0:43:81: 64:9a:00:0e:36:a2:13:52:89:a6:95:9a:a2:bd:f5: 94:32:75:2f:54:0f:bc:eb:02:7e:25:0d:6b:f4:da: 13:e9:fb:63:ba:08:c1:c0:75:f5:9a:11:c4:a6:f7: 03:7d:01:51:7c:f9:70:b5:69:52:8b:ab:12:e5:20: 7c:8d:6b:7d:63:17:74:11:c6:06:49:08:8d:3d:c5: 04:52:1c:42:02:60:53:c5:f2:9b:0f:b2:32:fd:2d: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EB:2A:06:16:FF:22:7B:C8:4F:64:03:1F:DF:FB:F3:14:ED:F2:6E X509v3 Authority Key Identifier: keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ed:74:85:fe:dd:4c:be:ba:cb:50:72:be:37:bc:20:3f:88: fb:ee:c8:da:ee:20:30:be:be:7d:05:67:aa:c7:ea:78:ba:eb: ea:6b:b1:fa:43:71:a1:d0:fc:31:f0:86:b4:a3:66:92:65:db: 1b:04:d0:8a:72:98:db:ec:2a:f4:e0:fe:fc:9b:1c:db:89:a2: ea:d2:82:25:34:23:b7:c9:e0:5d:0c:ba:6e:69:8c:21:2b:3d: b0:ec:e5:5d:58:54:38:01:3c:5a:e5:12:77:42:d5:71:f7:93: 5d:ad:d2:2b:85:5e:21:ef:4b:cc:82:ce:4a:4f:55:8a:e0:17: 41:77:31:da:2f:e5:51:35:eb:c2:90:fa:25:96:85:8e:14:e2: 47:85:37:10:79:68:53:b5:52:ea:d9:a3:c3:8e:b4:d6:dd:7f: d8:09:36:13:cc:4f:71:48:9b:19:7d:cd:29:bc:fc:c3:40:72: 7c:0b:c5:a1:94:86:47:dc:2f:2c:b3:66:24:2e:c1:42:34:73: 8b:d0:89:4b:33:0a:76:0e:ba:42:49:65:6a:68:bf:60:6b:ae: 29:86:f7:d0:87:36:31:3f:0c:a5:5f:65:92:44:f6:8c:bf:cd: 4e:75:b7:ab:e7:71:5a:8f:8f:99:23:53:4f:bb:6d:da:9e:47: 99:ac:2e:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fmDFMz8g+Uk3+nGUUyeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz NzI0OTYwHhcNMjUxMjIwMTYwMTEzWhcNMjUxMjIxMTYwMTEzWjAzMTEwLwYDVQQD EyhjNmViMmEwNjE2ZmYyMjdiYzg0ZjY0MDMxZmRmZmJmMzE0ZWRmMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eWqCWA4I3Gp+k7y25dNo0Fk7RHa XmukGJ/EOyvD9m2JBad/Q/G7fuC4hTzf2/L8IeKrNmgz/7fgUaaSYSNnWapZDvue omlquBr9GFriT2m4wSAyhGgixpHYuQmWpvkDNTqG2b5Mbb1PrjYXGkZ6ENgwHRLY I4JEw6gtqg61pD5hmCIfbPnrlQLMADg3HasdjX7wGA3xTa+3Au0Mmlc6QorgQ4Fk mgAONqITUommlZqivfWUMnUvVA+86wJ+JQ1r9NoT6ftjugjBwHX1mhHEpvcDfQFR fPlwtWlSi6sS5SB8jWt9Yxd0EcYGSQiNPcUEUhxCAmBTxfKbD7Iy/S2yPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbrKgYW/yJ7yE9kAx/f+/MU7fJuMB8GA1UdIwQY MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt OThmNzQ1NGJhNmNlLzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlO10hf7d TL66y1Byvje8ID+I++7I2u4gML6+fQVnqsfqeLrr6mux+kNxodD8MfCGtKNmkmXb GwTQinKY2+wq9OD+/Jsc24mi6tKCJTQjt8ngXQy6bmmMISs9sOzlXVhUOAE8WuUS d0LVcfeTXa3SK4VeIe9LzILOSk9ViuAXQXcx2i/lUTXrwpD6JZaFjhTiR4U3EHlo U7VS6tmjw4601t1/2Ak2E8xPcUibGX3NKbz8w0ByfAvFoZSGR9wvLLNmJC7BQjRz i9CJSzMKdg66Qkllami/YGuuKYb30Ic2MT8MpV9lkkT2jL/NTnW3q+dxWo+PmSNT T7tt2p5HmawuUw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:28:41 2025 by rpki-client