This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json) Hash identifier: RpqSyvLln8cEW2UcXLNKgeYRr63XPznS+oaGlcmeoQo= Subject key identifier: B7:1E:AF:3A:64:EE:7A:99:29:88:CC:CE:8F:50:4C:6B:5E:CA:5F:16 Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Certificate serial: 019B409208976536A4033D0D1EFC3EBEEE69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft Manifest number: 1797 Signing time: Sun 21 Dec 2025 11:01:10 +0000 Manifest this update: Sun 21 Dec 2025 11:01:10 +0000 Manifest next update: Mon 22 Dec 2025 11:01:10 +0000 Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=) 2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: Ftsi3yk9mDejR2zIHszUwXihpNn/mI4qvx1urL5Q7i8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:08:97:65:36:a4:03:3d:0d:1e:fc:3e:be:ee:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Validity Not Before: Dec 21 11:01:10 2025 GMT Not After : Dec 22 11:01:10 2025 GMT Subject: CN=b71eaf3a64ee7a992988ccce8f504c6b5eca5f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:b0:34:5a:15:52:e4:46:07:7b:7b:f0:96: 5b:70:f3:17:f8:64:cf:f2:5d:b3:f1:1e:89:3a:a0: d7:85:f5:7f:46:7c:a0:63:79:7d:23:3a:f7:e7:44: a9:fd:22:73:e6:12:09:85:23:0b:a1:ab:4a:c7:10: d5:29:e2:e5:6c:68:46:eb:c5:74:f9:d9:12:31:91: fc:19:80:d9:f5:b6:ab:7f:5f:79:b5:5e:fe:0b:40: fe:17:92:f7:fc:56:11:f8:9b:c4:b7:a6:19:c2:dd: b7:4f:6f:6b:e4:b4:d2:c0:cd:70:2e:d0:a9:98:24: be:39:eb:2c:58:f3:af:3a:18:98:d1:a5:6b:15:64: 32:41:de:58:47:c3:0f:31:d4:b3:57:17:9e:da:a6: 82:53:de:c0:e1:49:9b:15:42:82:c8:a9:b1:dc:8d: d9:91:07:0e:49:6e:a9:c0:4d:06:23:a2:69:7b:75: 7b:53:64:4b:9b:30:ef:04:c8:17:5d:b6:a1:0f:5f: e1:2e:9a:8c:6d:61:f9:1c:8f:62:12:e9:78:57:c6: 53:07:64:52:d0:a2:52:06:d1:ec:8a:bb:d3:9c:b5: cf:09:7e:8f:1e:c9:69:d0:7a:6b:5e:fc:cb:e4:64: 5b:73:32:29:05:c7:16:e7:2a:61:d4:99:ea:a5:8b: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1E:AF:3A:64:EE:7A:99:29:88:CC:CE:8F:50:4C:6B:5E:CA:5F:16 X509v3 Authority Key Identifier: keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ad:17:54:32:72:f7:83:4d:54:f4:d8:3d:86:fd:2b:53:82: 74:4c:89:24:ec:25:5d:bb:59:33:bc:f7:ff:15:dc:a2:c3:82: 79:09:52:df:b7:e3:55:e7:67:94:2b:42:22:6d:4c:9c:fe:c3: e8:b7:15:57:35:04:f7:08:45:48:31:38:1d:40:8f:bd:5b:0b: 01:f2:e8:3d:4a:fe:73:3b:dd:60:de:f7:54:56:75:36:4b:90: 58:b8:a9:a2:71:d3:5e:d6:f2:19:14:c9:e7:fe:be:02:14:c8: d2:6c:28:77:9b:98:4b:59:9e:62:21:67:9c:a7:b3:74:f5:15: c7:c5:fd:4e:a5:ba:73:a2:21:d8:ae:5f:a1:a6:6b:d8:d4:84: 45:f4:29:2e:29:e0:ec:39:52:78:40:89:64:12:ae:78:cb:b7: 05:3b:46:c6:69:93:69:a5:d7:f8:4d:e3:b1:20:09:7e:d2:f4: e1:40:ef:c2:99:b5:4f:46:5a:10:4e:f5:5c:78:0a:ea:63:bd: d7:d7:13:9c:56:09:70:d9:02:20:e6:9f:a1:38:7c:6f:0b:e6: c7:a8:da:85:40:f8:83:fa:30:0a:6a:13:03:40:18:41:62:0a: cd:81:09:19:22:7f:fe:d0:48:2c:85:b1:0b:d2:55:37:db:30: ca:22:10:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkgiXZTakAz0NHvw+vu5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGU2ODcwMmVmNWQ0OGM0ZjJiMDcyZDljYjQ3M2U2MmI4 N2IzZTQwHhcNMjUxMjIxMTEwMTEwWhcNMjUxMjIyMTEwMTEwWjAzMTEwLwYDVQQD EyhiNzFlYWYzYTY0ZWU3YTk5Mjk4OGNjY2U4ZjUwNGM2YjVlY2E1ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RWwNFoVUuRGB3t78JZbcPMX+GTP 8l2z8R6JOqDXhfV/RnygY3l9Izr350Sp/SJz5hIJhSMLoatKxxDVKeLlbGhG68V0 +dkSMZH8GYDZ9barf195tV7+C0D+F5L3/FYR+JvEt6YZwt23T29r5LTSwM1wLtCp mCS+OessWPOvOhiY0aVrFWQyQd5YR8MPMdSzVxee2qaCU97A4UmbFUKCyKmx3I3Z kQcOSW6pwE0GI6Jpe3V7U2RLmzDvBMgXXbahD1/hLpqMbWH5HI9iEul4V8ZTB2RS 0KJSBtHsirvTnLXPCX6PHslp0HprXvzL5GRbczIpBccW5yph1JnqpYtArwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcerzpk7nqZKYjMzo9QTGteyl8WMB8GA1UdIwQY MBaAFEqOaHAu9dSMTysHLZy0c+Yrh7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWIt MWM0YmI1OGFiNzIwLzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWItMWM0YmI1OGFiNzIw LzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC60XVDJy 94NNVPTYPYb9K1OCdEyJJOwlXbtZM7z3/xXcosOCeQlS37fjVednlCtCIm1MnP7D 6LcVVzUE9whFSDE4HUCPvVsLAfLoPUr+czvdYN73VFZ1NkuQWLiponHTXtbyGRTJ 5/6+AhTI0mwod5uYS1meYiFnnKezdPUVx8X9TqW6c6Ih2K5foaZr2NSERfQpLing 7DlSeECJZBKueMu3BTtGxmmTaaXX+E3jsSAJftL04UDvwpm1T0ZaEE71XHgK6mO9 19cTnFYJcNkCIOafoTh8bwvmx6jahUD4g/owCmoTA0AYQWIKzYEJGSJ//tBILIWx C9JVN9swyiIQZA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:16:02 2025 by rpki-client