This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json) Hash identifier: OByrL0WFzT/r1Yoxvq9yrfkjCKHjSNKuYMqdrmdDdXg= Subject key identifier: A8:1D:54:68:73:04:80:FB:77:A9:B9:36:6E:DE:0A:A4:4A:19:98:D3 Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b Certificate serial: 019B4BF1F1D17FBBD9680FA5714D3B943FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 16:01:45 +0000 Manifest this update: Tue 23 Dec 2025 16:01:45 +0000 Manifest next update: Wed 24 Dec 2025 16:01:45 +0000 Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=) 2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: u8QtUiv9WDMYVCFkzcD9X+1uLfqDD6spCjKgvcp2WR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:f1:d1:7f:bb:d9:68:0f:a5:71:4d:3b:94:3f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b Validity Not Before: Dec 23 16:01:45 2025 GMT Not After : Dec 24 16:01:45 2025 GMT Subject: CN=a81d5468730480fb77a9b9366ede0aa44a1998d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:03:89:fb:a0:84:9b:ef:66:18:41:64:bf: 55:29:e6:34:e9:6f:6e:85:9a:48:45:99:1b:0f:6d: b1:f0:75:6e:b0:33:15:86:41:52:af:f6:77:f5:2f: 61:7d:dd:36:00:46:08:56:0c:be:da:03:48:36:ca: 6a:5c:e7:36:c4:15:1f:de:42:7f:e1:04:0d:bb:e5: a9:27:17:cd:ee:44:92:e0:70:48:5a:36:74:bd:e2: f9:30:05:53:b1:51:0f:bc:9f:ab:57:90:83:d4:e4: df:9a:f8:f9:5c:2e:61:9a:12:92:df:8d:96:dc:19: 4f:7c:b6:d4:5e:54:d4:29:e7:97:81:63:84:71:c2: ad:7e:ca:07:ae:52:82:b6:69:a7:0a:19:b6:bb:f2: 10:01:23:1f:91:1d:be:7f:63:c6:b2:f9:02:90:d2: 1b:6a:37:83:fb:ee:47:7e:ab:5b:41:dd:0c:30:d5: 16:27:98:5a:ec:83:62:d7:9b:9b:25:c4:c8:66:59: 61:39:7d:5c:54:ea:e9:19:0a:cd:a2:09:16:f5:26: 1d:d5:1c:6a:df:7b:6a:87:8b:50:e6:86:17:c6:5c: aa:ea:12:b0:d6:05:88:25:e8:af:b5:48:c4:33:8a: 0a:86:dd:de:29:72:c6:4f:5e:43:27:ad:25:96:9f: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1D:54:68:73:04:80:FB:77:A9:B9:36:6E:DE:0A:A4:4A:19:98:D3 X509v3 Authority Key Identifier: keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:22:7f:7f:cf:86:34:7d:8b:87:e3:02:a5:11:83:55:99:6e: 8f:3b:52:3e:9e:c8:7b:ab:93:2a:1b:cd:eb:9b:82:58:5f:18: 58:04:b2:44:28:d9:75:ef:88:5c:c9:a7:c8:30:71:d6:ef:c0: 7d:b4:45:32:d7:bf:3a:a8:5b:94:09:35:a6:bb:89:02:d7:8d: a7:f5:5a:58:02:20:0c:03:76:3e:f9:c9:96:d1:78:aa:1d:47: 7f:14:63:4c:3c:b0:d1:86:95:69:77:a2:66:6e:bb:2e:25:53: b3:86:d0:b5:12:2c:01:84:8a:87:f0:92:58:5f:ac:a9:18:aa: ec:bc:ea:04:15:6c:d5:19:ad:48:0a:98:f9:f9:82:11:9a:3a: 25:c8:69:5f:15:73:04:d4:e5:bf:f4:77:ab:27:57:d7:9a:af: 04:11:42:c7:27:5f:fa:77:24:dd:fc:bc:3a:1c:4f:f9:dd:a8: 62:6d:f7:87:c2:66:78:b4:91:94:7d:ff:eb:ba:a5:6e:80:7f: 94:8e:b9:73:21:c0:9f:4a:f5:a3:a3:8f:9f:a9:f8:28:a7:e8: 14:99:70:1d:5b:d9:17:3d:2e:e4:10:8f:96:ac:19:63:bb:29: c9:72:6f:7d:98:8f:06:11:ff:73:7c:7a:97:a5:62:41:4c:f1: 3b:19:9d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8fHRf7vZaA+lcU07lD/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzVlNmFlNTk4NzEwMDY2NGIyMzAzNGNlZmM3MmQ0N2Y4 ZjRiOWIwHhcNMjUxMjIzMTYwMTQ1WhcNMjUxMjI0MTYwMTQ1WjAzMTEwLwYDVQQD EyhhODFkNTQ2ODczMDQ4MGZiNzdhOWI5MzY2ZWRlMGFhNDRhMTk5OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1IDifughJvvZhhBZL9VKeY06W9u hZpIRZkbD22x8HVusDMVhkFSr/Z39S9hfd02AEYIVgy+2gNINspqXOc2xBUf3kJ/ 4QQNu+WpJxfN7kSS4HBIWjZ0veL5MAVTsVEPvJ+rV5CD1OTfmvj5XC5hmhKS342W 3BlPfLbUXlTUKeeXgWOEccKtfsoHrlKCtmmnChm2u/IQASMfkR2+f2PGsvkCkNIb ajeD++5HfqtbQd0MMNUWJ5ha7INi15ubJcTIZllhOX1cVOrpGQrNogkW9SYd1Rxq 33tqh4tQ5oYXxlyq6hKw1gWIJeivtUjEM4oKht3eKXLGT15DJ60llp/XaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgdVGhzBID7d6m5Nm7eCqRKGZjTMB8GA1UdIwQY MBaAFLDF5q5ZhxAGZLIwNM78ctR/j0ubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUt ZDU5ZTI2NGVlODNiLzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUtZDU5ZTI2NGVlODNi LzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiJ/f8+G NH2Lh+MCpRGDVZlujztSPp7Ie6uTKhvN65uCWF8YWASyRCjZde+IXMmnyDBx1u/A fbRFMte/OqhblAk1pruJAteNp/VaWAIgDAN2PvnJltF4qh1HfxRjTDyw0YaVaXei Zm67LiVTs4bQtRIsAYSKh/CSWF+sqRiq7LzqBBVs1RmtSAqY+fmCEZo6JchpXxVz BNTlv/R3qydX15qvBBFCxydf+nck3fy8OhxP+d2oYm33h8JmeLSRlH3/67qlboB/ lI65cyHAn0r1o6OPn6n4KKfoFJlwHVvZFz0u5BCPlqwZY7spyXJvfZiPBhH/c3x6 l6ViQUzxOxmduA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:18 2025 by rpki-client