This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json) Hash identifier: hdC0+qWTRjolAPfevVlohjYm2gMXtU++GtSWwh3SWVs= Subject key identifier: 6E:78:80:11:D2:2B:43:BF:52:04:D1:F9:91:9D:E7:71:0E:EF:22:54 Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Certificate serial: 019B668CB5EE5684998F2CEFCC3B45C876B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft Manifest number: 11FC Signing time: Sun 28 Dec 2025 20:00:56 +0000 Manifest this update: Sun 28 Dec 2025 20:00:56 +0000 Manifest next update: Mon 29 Dec 2025 20:00:56 +0000 Files and hashes: 1: 89qbXuP3JJGKzWaNZO3dqnt1pdw.roa (hash: obr33L2CB/OVnTXprqPZCOQ9LeK6vQA821ilRu8qFT0=) 2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: bHItzKjW2vMvOEcq+KQ4onsVVhnHK/vp//fyRhlDL/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:b5:ee:56:84:99:8f:2c:ef:cc:3b:45:c8:76:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Validity Not Before: Dec 28 20:00:56 2025 GMT Not After : Dec 29 20:00:56 2025 GMT Subject: CN=6e788011d22b43bf5204d1f9919de7710eef2254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:fe:0c:e8:e5:a1:d0:36:e5:68:77:61:cd: 28:3c:ed:0b:c6:71:c4:60:ca:bc:c9:f7:5d:a2:96: f6:70:5e:e3:f1:e9:b8:94:b8:50:0f:e3:ac:69:5e: b3:06:d6:a0:0e:35:c6:45:ad:c2:18:64:3e:48:50: 62:90:67:1e:31:e7:54:f1:7a:5e:ec:bf:07:f1:96: ce:3a:09:72:9c:2f:18:68:22:3b:dd:b1:01:48:d3: 7b:1a:1c:00:f1:4f:7e:c4:45:1e:85:df:97:74:1d: e6:9c:c3:46:77:a1:bb:e0:d7:e1:25:25:1f:22:26: f0:31:d5:a9:87:5c:4c:87:e1:3f:a4:12:3e:ca:87: 60:b3:f8:73:f1:6f:71:6a:ce:a1:ca:c6:93:4e:74: 47:f8:02:a6:f7:33:8f:13:43:8c:b6:f4:02:9e:44: d9:cf:a9:9f:d6:16:90:35:09:87:e8:88:36:29:40: 0b:cb:6d:6b:63:ab:af:9d:66:35:d1:a0:7a:53:8e: 62:f1:86:20:93:13:f4:cf:bc:2e:85:0e:a0:02:52: 2a:5f:0e:a5:e0:ec:ec:c6:35:51:b1:49:d0:d1:48: 18:9e:da:5c:70:fe:20:2e:0b:bf:1a:22:60:62:45: c2:9b:16:ad:d9:1c:1f:92:f7:9a:44:46:43:60:73: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:78:80:11:D2:2B:43:BF:52:04:D1:F9:91:9D:E7:71:0E:EF:22:54 X509v3 Authority Key Identifier: keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:87:4d:97:24:95:4e:ca:ef:e0:95:06:79:42:4a:4d:f9:45: 50:c9:78:50:49:e8:0f:44:c6:0d:0e:33:2e:71:33:8a:ca:64: 23:16:f4:f1:11:fc:55:e3:0c:33:3d:77:f6:20:27:84:a4:7e: 6f:98:cd:3b:87:71:b3:53:e7:0e:38:a2:02:60:dc:b1:42:df: 45:cd:05:3e:9b:45:06:c2:ff:82:10:e5:dc:d3:84:e5:c1:2b: 1e:a6:51:9e:08:67:0b:6d:4d:f1:09:ad:25:6b:4f:79:c4:f0: af:6d:34:64:3a:75:90:f2:cf:e1:08:04:bb:ea:9e:6a:0c:fc: 30:ec:f3:76:78:f1:85:7d:2b:da:23:11:90:39:4e:08:f2:67: 2b:a4:6d:18:1b:9d:45:bc:7f:04:cb:4d:44:8b:39:34:c2:84: 74:75:a6:29:de:aa:57:8e:3d:af:03:a4:68:10:03:6b:7f:74: be:ce:5f:74:2e:94:fe:bb:29:99:a1:bb:83:28:9c:6c:69:e8: 56:63:76:9a:9d:28:65:4e:ec:ed:29:99:c6:c5:f2:f6:aa:76: 58:20:b2:4b:f2:28:16:22:28:6b:04:e7:f3:56:4c:ab:8d:9d: a8:fe:9c:65:d1:18:40:b2:07:eb:f8:e5:9c:6d:2b:f7:e2:1c: fc:24:4a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjLXuVoSZjyzvzDtFyHayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWQyMjY0M2MyZDk3YmQ3MWY4YjYzNGZiOGQxZDRmOWYw MWY0YTcwHhcNMjUxMjI4MjAwMDU2WhcNMjUxMjI5MjAwMDU2WjAzMTEwLwYDVQQD Eyg2ZTc4ODAxMWQyMmI0M2JmNTIwNGQxZjk5MTlkZTc3MTBlZWYyMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvj+DOjlodA25Wh3Yc0oPO0LxnHE YMq8yfddopb2cF7j8em4lLhQD+OsaV6zBtagDjXGRa3CGGQ+SFBikGceMedU8Xpe 7L8H8ZbOOglynC8YaCI73bEBSNN7GhwA8U9+xEUehd+XdB3mnMNGd6G74NfhJSUf IibwMdWph1xMh+E/pBI+yodgs/hz8W9xas6hysaTTnRH+AKm9zOPE0OMtvQCnkTZ z6mf1haQNQmH6Ig2KUALy21rY6uvnWY10aB6U45i8YYgkxP0z7wuhQ6gAlIqXw6l 4OzsxjVRsUnQ0UgYntpccP4gLgu/GiJgYkXCmxat2RwfkveaREZDYHPtDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG54gBHSK0O/UgTR+ZGd53EO7yJUMB8GA1UdIwQY MBaAFLCtImQ8LZe9cfi2NPuNHU+fAfSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUt MDc0ZmZiNDIzYzEzLzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUtMDc0ZmZiNDIzYzEz LzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIdNlySV Tsrv4JUGeUJKTflFUMl4UEnoD0TGDQ4zLnEzispkIxb08RH8VeMMMz139iAnhKR+ b5jNO4dxs1PnDjiiAmDcsULfRc0FPptFBsL/ghDl3NOE5cErHqZRnghnC21N8Qmt JWtPecTwr200ZDp1kPLP4QgEu+qeagz8MOzzdnjxhX0r2iMRkDlOCPJnK6RtGBud Rbx/BMtNRIs5NMKEdHWmKd6qV449rwOkaBADa390vs5fdC6U/rspmaG7gyicbGno VmN2mp0oZU7s7SmZxsXy9qp2WCCyS/IoFiIoawTn81ZMq42dqP6cZdEYQLIH6/jl nG0r9+Ic/CRKsw== -----END CERTIFICATE-----Generated at Sun Dec 28 22:13:17 2025 by rpki-client