This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json) Hash identifier: r8UkSoaav9Xp+o7q+26uSEHT24AeZa3qAsQaUzj98j0= Subject key identifier: 3B:2B:F3:38:CB:5D:F8:3D:F6:95:5B:BA:7D:92:33:9B:6C:18:B7:1D Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Certificate serial: 019B6543523FD5BB4D6BBF17F0AEA67973FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft Manifest number: 17AA Signing time: Sun 28 Dec 2025 14:01:09 +0000 Manifest this update: Sun 28 Dec 2025 14:01:09 +0000 Manifest next update: Mon 29 Dec 2025 14:01:09 +0000 Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=) 2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: CUwYpxXS+s7we2tdwFmIhGP2fYKfre3YFPa6H8APshs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:43:52:3f:d5:bb:4d:6b:bf:17:f0:ae:a6:79:73:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Validity Not Before: Dec 28 14:01:09 2025 GMT Not After : Dec 29 14:01:09 2025 GMT Subject: CN=3b2bf338cb5df83df6955bba7d92339b6c18b71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:74:1e:eb:38:89:3d:4d:3f:be:68:30:df: e0:d2:8b:00:de:83:db:66:af:07:c0:e5:11:4e:bb: 09:2a:cc:1a:96:7f:9d:56:a8:96:09:20:37:93:e3: 82:1b:01:30:f2:7d:b6:b7:54:7d:e3:e5:a4:3e:33: 4c:ef:7c:5f:fa:6b:93:67:36:c5:ff:40:4c:33:b4: a1:ae:24:3b:2d:56:29:79:89:b5:49:19:50:46:e3: 79:a1:79:00:68:ea:80:76:2b:c9:15:2c:ce:fd:0f: 0c:e5:df:04:52:5e:8b:8c:62:04:43:2a:ec:54:79: 7f:ce:7e:fe:77:65:37:75:c3:0d:31:64:a1:88:89: 36:e7:7a:19:0d:9a:4c:69:85:9c:d6:08:e8:19:16: 29:97:d3:26:bb:65:23:a7:36:52:63:cb:2f:40:84: 6a:42:96:d5:a4:20:40:42:a3:93:cf:e5:4e:e3:5a: 9c:45:b8:6e:11:3c:d5:54:99:ea:61:d9:c3:31:26: 3a:0b:65:cf:b8:6e:40:fc:14:35:c1:5c:87:cc:24: ca:e1:17:ff:55:14:4d:de:87:a6:96:91:c3:67:15: 0c:19:c6:94:f9:dc:49:60:c8:e4:a7:21:61:e3:a4: 6d:2c:c1:77:c8:5c:e4:1e:4e:3b:53:6f:c7:29:44: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2B:F3:38:CB:5D:F8:3D:F6:95:5B:BA:7D:92:33:9B:6C:18:B7:1D X509v3 Authority Key Identifier: keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:66:c5:89:19:5b:52:77:bf:54:7a:82:99:b2:52:e6:59:49: ce:83:c3:0a:01:43:0e:04:d0:94:57:f2:c8:be:12:74:b2:bc: df:11:fd:2e:55:34:78:5b:4a:1c:11:fd:62:26:35:ed:d2:f5: 33:87:db:57:6a:af:36:1c:15:da:19:69:1c:28:d3:fb:d9:08: 6c:70:36:73:83:28:8c:bc:0b:ad:66:25:80:93:54:e3:87:6f: 38:62:f1:be:82:51:3f:f4:84:04:67:55:c4:ae:4a:e2:47:ea: 02:81:35:c6:ea:7f:f2:52:6f:94:0b:75:d2:60:e9:85:62:cc: e7:0e:7d:1a:b0:6f:2d:a7:84:1e:f8:44:56:8a:0e:4e:4e:ee: 05:43:08:c0:38:3d:4e:69:a7:77:54:b8:84:e7:8a:79:21:ba: 33:27:4e:82:ea:b5:7e:99:08:09:8a:9b:ed:11:af:78:f4:0a: b3:52:5a:51:fb:b4:41:16:9e:9d:fa:1f:f5:d5:e5:75:ac:9a: d2:a2:fd:ff:1f:b4:a3:0a:e8:ae:84:e9:68:ab:f4:38:4a:5b: 9b:16:75:40:c7:30:9e:7c:0c:97:87:69:1e:66:1d:6d:b4:93: f2:31:ed:d3:9b:ff:c5:80:79:81:d3:98:82:8e:94:da:73:fc: 15:fd:18:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQ1I/1btNa78X8K6meXP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGU2ODcwMmVmNWQ0OGM0ZjJiMDcyZDljYjQ3M2U2MmI4 N2IzZTQwHhcNMjUxMjI4MTQwMTA5WhcNMjUxMjI5MTQwMTA5WjAzMTEwLwYDVQQD EygzYjJiZjMzOGNiNWRmODNkZjY5NTViYmE3ZDkyMzM5YjZjMThiNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30N0Hus4iT1NP75oMN/g0osA3oPb Zq8HwOURTrsJKswaln+dVqiWCSA3k+OCGwEw8n22t1R94+WkPjNM73xf+muTZzbF /0BMM7ShriQ7LVYpeYm1SRlQRuN5oXkAaOqAdivJFSzO/Q8M5d8EUl6LjGIEQyrs VHl/zn7+d2U3dcMNMWShiIk253oZDZpMaYWc1gjoGRYpl9Mmu2UjpzZSY8svQIRq QpbVpCBAQqOTz+VO41qcRbhuETzVVJnqYdnDMSY6C2XPuG5A/BQ1wVyHzCTK4Rf/ VRRN3oemlpHDZxUMGcaU+dxJYMjkpyFh46RtLMF3yFzkHk47U2/HKURjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsr8zjLXfg99pVbun2SM5tsGLcdMB8GA1UdIwQY MBaAFEqOaHAu9dSMTysHLZy0c+Yrh7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWIt MWM0YmI1OGFiNzIwLzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWItMWM0YmI1OGFiNzIw LzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2bFiRlb Une/VHqCmbJS5llJzoPDCgFDDgTQlFfyyL4SdLK83xH9LlU0eFtKHBH9YiY17dL1 M4fbV2qvNhwV2hlpHCjT+9kIbHA2c4MojLwLrWYlgJNU44dvOGLxvoJRP/SEBGdV xK5K4kfqAoE1xup/8lJvlAt10mDphWLM5w59GrBvLaeEHvhEVooOTk7uBUMIwDg9 Tmmnd1S4hOeKeSG6MydOguq1fpkICYqb7RGvePQKs1JaUfu0QRaenfof9dXldaya 0qL9/x+0owroroTpaKv0OEpbmxZ1QMcwnnwMl4dpHmYdbbST8jHt05v/xYB5gdOY go6U2nP8Ff0Yqw== -----END CERTIFICATE-----Generated at Sun Dec 28 22:12:10 2025 by rpki-client