This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json) Hash identifier: trDAYOYGLQZVqZ4EvibpcWMs4DLWVgLrOYqb/RrVIKk= Subject key identifier: 6A:F3:C1:9D:26:FA:13:99:55:E5:0C:2B:26:B4:7A:06:2E:27:0F:CF Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Certificate serial: 019B7222DD657F270C90D51A8D171F69CFC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft Manifest number: 1202 Signing time: Wed 31 Dec 2025 02:00:46 +0000 Manifest this update: Wed 31 Dec 2025 02:00:46 +0000 Manifest next update: Thu 01 Jan 2026 02:00:46 +0000 Files and hashes: 1: 89qbXuP3JJGKzWaNZO3dqnt1pdw.roa (hash: obr33L2CB/OVnTXprqPZCOQ9LeK6vQA821ilRu8qFT0=) 2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: tyich8hr2x3Aw7wwRLpE7OYlG7xH2q/dyRuSWKZvan8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:dd:65:7f:27:0c:90:d5:1a:8d:17:1f:69:cf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Validity Not Before: Dec 31 02:00:46 2025 GMT Not After : Jan 1 02:00:46 2026 GMT Subject: CN=6af3c19d26fa139955e50c2b26b47a062e270fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:58:eb:47:d4:42:25:42:77:af:96:83:9a: 2c:e0:f7:29:48:0b:f9:d0:01:23:dc:a0:a2:84:65: 6d:85:80:4a:b2:33:6a:ac:1a:5b:13:c2:49:97:b3: e2:40:3b:74:cf:4b:b9:81:c6:f8:1a:b2:31:cb:c2: 97:a0:a5:3e:1e:f3:12:59:87:60:7b:2c:2c:c2:64: 34:1f:19:c2:cd:e5:7b:47:af:06:93:99:b2:d4:fc: 8e:af:46:bf:ab:6d:e6:97:6d:59:eb:a1:f1:c5:b3: 60:a2:e5:2f:01:9a:08:05:a7:4b:e5:db:a3:fe:03: ea:12:87:0f:2d:35:28:85:fd:81:63:a6:e7:c3:f4: 7b:8e:08:6e:41:21:43:f5:26:48:10:dd:31:6d:88: fd:04:2f:15:52:59:c4:d8:d0:4c:ac:d0:d2:1e:3c: d2:e4:a9:fb:a4:fc:bd:b4:e4:53:bb:3c:53:9f:2f: 39:d4:2b:2b:07:b1:a4:a6:dc:56:33:d3:d8:5f:2b: 38:4e:70:10:78:ff:8c:4a:9f:7f:81:21:c1:7d:bc: cf:50:ae:3f:91:28:36:ab:ce:a3:92:bb:ae:20:1c: 16:27:c0:4b:78:a9:4f:fb:ff:be:3c:47:8c:da:75: 32:c9:78:97:17:a6:e8:1c:d3:59:44:67:e8:61:cf: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F3:C1:9D:26:FA:13:99:55:E5:0C:2B:26:B4:7A:06:2E:27:0F:CF X509v3 Authority Key Identifier: keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cb:49:4b:27:5b:cf:15:19:e5:0a:cb:02:85:bc:bd:f9:1d: cf:58:ae:34:9a:cb:7a:fa:fe:4b:3a:85:f3:85:dc:a0:b0:fc: c2:53:86:c3:7f:3a:f5:75:bd:c5:ac:8a:ca:f8:46:8e:88:13: 04:db:fb:3b:17:8e:46:50:dd:a9:ed:76:51:a4:03:07:22:5d: 6c:49:41:93:80:e1:94:9c:c8:96:8a:76:d6:3c:ff:d3:56:cf: 9f:06:03:3f:85:0e:29:64:d4:36:04:7c:37:ee:67:38:b4:99: cc:2b:52:47:65:7e:94:c2:6d:72:4d:ce:c3:ed:5d:54:5a:06: 7f:0e:5e:64:50:8c:17:8c:b4:e5:f7:db:ae:23:35:e1:3c:0d: d2:5f:33:39:c7:80:91:eb:9e:70:b1:b9:97:84:00:b0:1a:00: f0:df:9b:bc:10:55:1e:e7:f4:86:37:fc:47:3b:6a:c2:89:30: 46:a3:8c:f8:24:84:49:0f:4b:b5:e7:23:88:eb:5d:29:27:68: 1d:0a:37:4a:dc:8e:c2:f1:73:b7:55:ae:3e:19:30:4f:33:43: f9:a3:29:47:05:c3:ab:bf:73:45:90:a0:1a:09:98:0a:c2:33: 97:bd:4e:2d:ef:2d:8d:da:8f:7e:cf:ca:11:01:84:01:7f:28: 81:69:6e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIt1lfycMkNUajRcfac/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWQyMjY0M2MyZDk3YmQ3MWY4YjYzNGZiOGQxZDRmOWYw MWY0YTcwHhcNMjUxMjMxMDIwMDQ2WhcNMjYwMTAxMDIwMDQ2WjAzMTEwLwYDVQQD Eyg2YWYzYzE5ZDI2ZmExMzk5NTVlNTBjMmIyNmI0N2EwNjJlMjcwZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZNY60fUQiVCd6+Wg5os4PcpSAv5 0AEj3KCihGVthYBKsjNqrBpbE8JJl7PiQDt0z0u5gcb4GrIxy8KXoKU+HvMSWYdg eywswmQ0HxnCzeV7R68Gk5my1PyOr0a/q23ml21Z66HxxbNgouUvAZoIBadL5duj /gPqEocPLTUohf2BY6bnw/R7jghuQSFD9SZIEN0xbYj9BC8VUlnE2NBMrNDSHjzS 5Kn7pPy9tORTuzxTny851CsrB7GkptxWM9PYXys4TnAQeP+MSp9/gSHBfbzPUK4/ kSg2q86jkruuIBwWJ8BLeKlP+/++PEeM2nUyyXiXF6boHNNZRGfoYc9RGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrzwZ0m+hOZVeUMKya0egYuJw/PMB8GA1UdIwQY MBaAFLCtImQ8LZe9cfi2NPuNHU+fAfSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUt MDc0ZmZiNDIzYzEzLzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUtMDc0ZmZiNDIzYzEz LzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALctJSydb zxUZ5QrLAoW8vfkdz1iuNJrLevr+SzqF84XcoLD8wlOGw3869XW9xayKyvhGjogT BNv7OxeORlDdqe12UaQDByJdbElBk4DhlJzIlop21jz/01bPnwYDP4UOKWTUNgR8 N+5nOLSZzCtSR2V+lMJtck3Ow+1dVFoGfw5eZFCMF4y05ffbriM14TwN0l8zOceA keuecLG5l4QAsBoA8N+bvBBVHuf0hjf8RztqwokwRqOM+CSESQ9LtecjiOtdKSdo HQo3StyOwvFzt1WuPhkwTzND+aMpRwXDq79zRZCgGgmYCsIzl71OLe8tjdqPfs/K EQGEAX8ogWlu0g== -----END CERTIFICATE-----Generated at Wed Dec 31 05:55:48 2025 by rpki-client