This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json) Hash identifier: eoPbcpoPi5fOvL1og2OlDYgd+vTzCLC1tsmI5et0G/4= Subject key identifier: C5:FB:87:DB:33:6F:E6:F3:49:6E:43:67:29:8D:85:9E:56:95:E4:4C Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Certificate serial: 019B3A217DD7782673BDD56C4B28D96F6ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft Manifest number: 11E5 Signing time: Sat 20 Dec 2025 05:00:31 +0000 Manifest this update: Sat 20 Dec 2025 05:00:31 +0000 Manifest next update: Sun 21 Dec 2025 05:00:31 +0000 Files and hashes: 1: 89qbXuP3JJGKzWaNZO3dqnt1pdw.roa (hash: obr33L2CB/OVnTXprqPZCOQ9LeK6vQA821ilRu8qFT0=) 2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: oH8rGNoqOBZdTxu79MbHDM2njiMaHQx3UdP0IZrtc9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:7d:d7:78:26:73:bd:d5:6c:4b:28:d9:6f:6e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Validity Not Before: Dec 20 05:00:31 2025 GMT Not After : Dec 21 05:00:31 2025 GMT Subject: CN=c5fb87db336fe6f3496e4367298d859e5695e44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:2e:8b:d2:64:90:2c:82:87:93:fe:24:7c: fc:13:00:3e:b0:94:f5:30:6d:ae:25:86:c9:01:1e: 0b:2d:cd:2d:49:eb:58:52:57:ef:fd:80:60:91:34: 85:1c:b7:43:7a:64:8f:bb:ea:96:74:59:76:53:b7: c1:ae:1e:2d:fd:8a:b4:76:f3:8f:ab:43:a0:61:a2: 0e:00:7c:57:b4:bc:d6:8b:5c:2a:b7:2d:a8:49:99: ac:00:4e:14:32:8d:ff:48:8c:e4:f0:3a:e2:74:e6: 66:fc:66:2d:d1:d8:66:d1:b7:d7:a4:da:0b:d4:2f: 0c:90:8a:82:e4:fd:67:bd:57:81:a2:e4:a0:54:45: 41:40:2b:5e:9b:a6:2c:ef:6c:34:33:49:04:ca:4b: f9:3e:24:93:9a:e1:94:4f:03:00:75:dd:b2:ad:f5: 2f:8f:9b:29:cb:4b:73:41:f7:5c:9a:d5:d5:10:16: 3e:26:56:d3:04:59:d7:e0:3b:65:37:7e:98:f9:9a: c1:3b:6b:b8:51:a1:7e:e2:d8:83:28:82:dc:48:40: 4e:c4:0a:ab:98:c6:17:07:1d:91:67:b5:10:1a:51: ad:be:58:68:cb:e7:8d:ad:11:bc:bd:cc:57:23:35: 62:5d:85:de:11:52:93:e0:de:fa:6b:0f:7a:8d:6c: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FB:87:DB:33:6F:E6:F3:49:6E:43:67:29:8D:85:9E:56:95:E4:4C X509v3 Authority Key Identifier: keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1a:0c:1a:51:2e:38:7b:65:dc:16:b7:d7:86:14:f1:20:33: 15:81:a6:9e:71:7f:fd:1e:07:28:39:ff:b4:b6:20:c2:42:1c: ae:02:fb:cd:93:ab:45:68:a8:c9:d7:47:d4:c1:ef:e4:5b:40: d8:cd:00:d0:22:06:f8:af:9d:62:76:b7:59:8a:ba:95:7a:bc: 94:58:c3:2d:25:2d:83:38:16:65:8b:c9:20:31:fd:8c:2c:da: 49:7c:21:f1:21:66:96:2b:89:dc:83:d7:fd:7c:1c:1e:4d:ba: 98:ee:a0:eb:05:33:ac:e2:aa:21:2e:8d:eb:81:2e:74:e1:cb: e8:70:ca:59:b1:5c:2a:40:f2:0e:70:a2:39:24:b3:a3:09:5f: 54:f3:e6:ed:23:2c:be:37:10:5d:d8:60:f8:d4:28:c6:a5:a1: 9c:06:13:a9:43:c1:36:6d:b9:aa:31:a1:d1:bc:b4:88:eb:dd: 1b:56:e5:76:4a:fb:d0:94:c4:57:3c:7a:46:d5:fb:90:eb:89: 90:13:b4:67:df:2a:01:0e:7b:12:0d:62:6e:02:6c:73:b3:c9: bf:e6:11:03:af:8c:7e:e9:02:e6:f5:35:30:13:16:7d:6a:6b: 0b:2f:ee:d7:80:89:0d:d3:40:09:c6:48:f1:84:ab:ab:f4:b6: 09:05:5b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IX3XeCZzvdVsSyjZb27QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWQyMjY0M2MyZDk3YmQ3MWY4YjYzNGZiOGQxZDRmOWYw MWY0YTcwHhcNMjUxMjIwMDUwMDMxWhcNMjUxMjIxMDUwMDMxWjAzMTEwLwYDVQQD EyhjNWZiODdkYjMzNmZlNmYzNDk2ZTQzNjcyOThkODU5ZTU2OTVlNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGMui9JkkCyCh5P+JHz8EwA+sJT1 MG2uJYbJAR4LLc0tSetYUlfv/YBgkTSFHLdDemSPu+qWdFl2U7fBrh4t/Yq0dvOP q0OgYaIOAHxXtLzWi1wqty2oSZmsAE4UMo3/SIzk8DridOZm/GYt0dhm0bfXpNoL 1C8MkIqC5P1nvVeBouSgVEVBQCtem6Ys72w0M0kEykv5PiSTmuGUTwMAdd2yrfUv j5spy0tzQfdcmtXVEBY+JlbTBFnX4DtlN36Y+ZrBO2u4UaF+4tiDKILcSEBOxAqr mMYXBx2RZ7UQGlGtvlhoy+eNrRG8vcxXIzViXYXeEVKT4N76aw96jWwfAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX7h9szb+bzSW5DZymNhZ5WleRMMB8GA1UdIwQY MBaAFLCtImQ8LZe9cfi2NPuNHU+fAfSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUt MDc0ZmZiNDIzYzEzLzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUtMDc0ZmZiNDIzYzEz LzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBoMGlEu OHtl3Ba314YU8SAzFYGmnnF//R4HKDn/tLYgwkIcrgL7zZOrRWioyddH1MHv5FtA 2M0A0CIG+K+dYna3WYq6lXq8lFjDLSUtgzgWZYvJIDH9jCzaSXwh8SFmliuJ3IPX /XwcHk26mO6g6wUzrOKqIS6N64EudOHL6HDKWbFcKkDyDnCiOSSzowlfVPPm7SMs vjcQXdhg+NQoxqWhnAYTqUPBNm25qjGh0by0iOvdG1bldkr70JTEVzx6RtX7kOuJ kBO0Z98qAQ57Eg1ibgJsc7PJv+YRA6+MfukC5vU1MBMWfWprCy/u14CJDdNACcZI 8YSrq/S2CQVbQA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:04 2025 by rpki-client