This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json) Hash identifier: BxpCQ6z/UiHFWi1HlupsRYxNWDdlqba6bGT/Ff1yoho= Subject key identifier: E9:67:30:5D:7E:47:14:50:01:DA:F3:E9:54:13:C6:96:94:E9:FE:A5 Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25 Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025 Certificate serial: 019B440060635EF4749F1DB21CA1A0EF2BBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft Manifest number: 015D Signing time: Mon 22 Dec 2025 03:00:33 +0000 Manifest this update: Mon 22 Dec 2025 03:00:33 +0000 Manifest next update: Tue 23 Dec 2025 03:00:33 +0000 Files and hashes: 1: p4n6DMVXRfxSNvujgZMUtP18wqQ.roa (hash: E3oRG9G+UtQqAk8G6rS3MWGj3sQbFqJ/BYIdf5UtbNU=) 2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: oJph/VNGn8l2zeG53kMpY7eJ7yzSBTR0QGhg9BY+RlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:60:63:5e:f4:74:9f:1d:b2:1c:a1:a0:ef:2b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025 Validity Not Before: Dec 22 03:00:33 2025 GMT Not After : Dec 23 03:00:33 2025 GMT Subject: CN=e967305d7e47145001daf3e95413c69694e9fea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:b5:2e:2c:83:8a:06:bd:98:a5:f3:d0:c5: c9:af:c9:44:a1:64:9a:6a:40:7c:d3:08:39:d5:01: ce:ff:6e:cc:a9:e1:9f:fa:53:56:4f:f6:59:0d:81: b2:ea:9d:d2:43:87:80:a4:6d:a1:ab:82:4e:17:38: a9:9a:42:ec:68:17:d4:45:28:e8:35:ee:6f:47:ec: 87:f7:e5:5a:f7:f3:48:2d:07:5c:c5:b2:b6:8d:9b: a9:1f:79:c2:16:16:4e:9e:0c:c7:59:d8:2f:cd:2d: 72:49:a4:29:3b:23:4a:3a:e7:34:f4:a1:f7:ae:ee: 5d:f4:3a:58:18:04:e0:7c:ee:a5:45:36:9b:82:ac: 03:33:16:de:0b:a8:ce:7a:c4:0e:3e:58:cd:a2:d1: 98:d9:95:0c:4d:79:38:e0:84:36:1c:d5:5e:9f:88: 5b:60:3f:3e:30:15:3d:d0:33:c5:c9:f0:ff:b7:c4: 82:2e:17:d5:65:db:40:18:72:d1:12:da:15:3b:54: fa:c0:2e:3a:c3:b6:b9:3a:6d:77:21:7c:92:a1:fe: b0:c2:82:a6:86:46:13:46:2a:ee:e8:4e:f0:e1:78: cc:ec:67:67:2b:59:36:8f:2e:b7:54:52:aa:72:53: 31:71:f8:16:bf:dd:c5:27:2b:a8:6f:81:f0:e8:e3: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:30:5D:7E:47:14:50:01:DA:F3:E9:54:13:C6:96:94:E9:FE:A5 X509v3 Authority Key Identifier: keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:79:c5:d2:ef:bf:5b:49:72:f4:00:a8:67:41:8a:79:35:84: 73:d6:9a:de:1e:0e:45:78:df:53:3f:d3:3b:9c:41:49:3c:be: ea:e0:22:32:2c:e2:93:93:b9:6b:c2:32:e8:ad:02:dd:04:6e: 90:d5:65:af:50:b0:32:70:1c:5a:bd:9c:be:90:c6:81:0a:e8: 13:88:96:76:82:8b:71:fd:f9:1e:d1:ae:8d:fb:8d:84:e0:37: 9b:16:a0:73:d5:d1:4c:2c:7d:05:5e:d3:06:7a:ba:c5:fd:d3: 77:06:76:c2:7f:04:45:27:b3:24:89:85:48:4b:f1:91:4b:5b: 16:4e:b3:88:12:fd:0b:49:94:ac:45:3a:a1:d5:bb:96:da:a0: 94:70:b2:bd:3c:5c:32:42:e9:7b:5b:9c:99:ec:fc:ca:11:17: 3a:c0:ee:99:a4:00:44:d9:2f:9b:8f:e4:de:d6:8f:1d:e8:2d: 8f:e3:fa:d7:24:25:e1:42:e7:bc:11:bc:b5:21:e0:0c:61:4b: 06:37:cc:9c:dd:6b:5f:0d:2e:12:4c:86:98:3a:c3:ba:ea:71: 64:27:da:c8:68:ee:48:b5:06:ba:d3:93:8f:6b:e7:bd:cd:81: 10:09:12:de:a3:be:84:fc:6e:f0:7d:fe:98:f0:c7:fc:4f:5b: 2e:95:2d:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAGBjXvR0nx2yHKGg7yu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZmYyNzNhOGZlMjEyMDkwYmExY2I3OGM2MzMxZjgwZTc4 YzMwMjUwHhcNMjUxMjIyMDMwMDMzWhcNMjUxMjIzMDMwMDMzWjAzMTEwLwYDVQQD EyhlOTY3MzA1ZDdlNDcxNDUwMDFkYWYzZTk1NDEzYzY5Njk0ZTlmZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQa1LiyDiga9mKXz0MXJr8lEoWSa akB80wg51QHO/27MqeGf+lNWT/ZZDYGy6p3SQ4eApG2hq4JOFzipmkLsaBfURSjo Ne5vR+yH9+Va9/NILQdcxbK2jZupH3nCFhZOngzHWdgvzS1ySaQpOyNKOuc09KH3 ru5d9DpYGATgfO6lRTabgqwDMxbeC6jOesQOPljNotGY2ZUMTXk44IQ2HNVen4hb YD8+MBU90DPFyfD/t8SCLhfVZdtAGHLREtoVO1T6wC46w7a5Om13IXySof6wwoKm hkYTRiru6E7w4XjM7GdnK1k2jy63VFKqclMxcfgWv93FJyuob4Hw6OOffQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlnMF1+RxRQAdrz6VQTxpaU6f6lMB8GA1UdIwQY MBaAFLD/JzqP4hIJC6HLeMYzH4DnjDAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQt ODhkM2NhOTAwNmQ1LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQtODhkM2NhOTAwNmQ1 LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXnF0u+/ W0ly9ACoZ0GKeTWEc9aa3h4ORXjfUz/TO5xBSTy+6uAiMizik5O5a8Iy6K0C3QRu kNVlr1CwMnAcWr2cvpDGgQroE4iWdoKLcf35HtGujfuNhOA3mxagc9XRTCx9BV7T Bnq6xf3TdwZ2wn8ERSezJImFSEvxkUtbFk6ziBL9C0mUrEU6odW7ltqglHCyvTxc MkLpe1ucmez8yhEXOsDumaQARNkvm4/k3taPHegtj+P61yQl4ULnvBG8tSHgDGFL BjfMnN1rXw0uEkyGmDrDuupxZCfayGjuSLUGutOTj2vnvc2BEAkS3qO+hPxu8H3+ mPDH/E9bLpUtRw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:30:31 2025 by rpki-client