This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json) Hash identifier: Bg2ToLKwud6RSLSXnaAP20MG20WjwmdRDIDDK6Z3sKQ= Subject key identifier: 91:85:9D:12:ED:9C:29:B4:FA:6B:64:39:61:89:15:B8:C3:A5:BE:85 Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e Certificate serial: 019B397D57CCA6B0A16DB6F391C710C9728F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 02:01:14 +0000 Manifest this update: Sat 20 Dec 2025 02:01:14 +0000 Manifest next update: Sun 21 Dec 2025 02:01:14 +0000 Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=) 2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=) 3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: lkGhK9mFNz/KBUuTd+uWXc60cy3Qwfkuz/DdLyDQD44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:57:cc:a6:b0:a1:6d:b6:f3:91:c7:10:c9:72:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e Validity Not Before: Dec 20 02:01:14 2025 GMT Not After : Dec 21 02:01:14 2025 GMT Subject: CN=91859d12ed9c29b4fa6b6439618915b8c3a5be85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:2d:d9:c3:01:1a:4c:ab:a9:73:d4:76:ba: a1:29:b8:ae:10:91:be:6b:c3:0c:d3:ff:c2:d7:0e: a3:56:b1:40:37:e0:a5:8f:c9:7e:a2:39:ba:ba:e2: 59:6c:38:aa:16:9f:b1:aa:9e:81:00:98:5b:71:f4: 31:fe:d3:8d:88:cd:d6:0c:92:13:40:81:0b:1e:7c: 52:a0:3b:ef:8e:e1:cd:c7:fc:f1:8e:4b:09:5e:12: c4:da:cb:82:c7:b3:c0:04:82:bb:d9:98:33:9c:ca: a8:ed:3c:6d:2f:f6:5d:08:47:a7:1e:ab:89:8d:22: 77:fa:1d:c7:9e:16:41:cd:ee:4e:cf:9d:93:21:03: 04:4e:f3:fd:1a:24:e2:e9:73:f2:77:d8:e3:0d:66: 89:6e:8d:73:0b:91:cd:ac:51:1b:8f:17:22:e3:2a: 78:38:14:9a:e7:f9:20:28:83:d9:b0:38:06:39:fa: d3:b7:1e:6e:e2:4c:3f:1b:73:d0:5f:bd:33:9a:02: 7b:bb:57:61:61:04:71:58:08:1b:d4:a2:71:6e:de: 11:df:8e:2e:4c:9a:fb:dc:e7:ca:9f:95:4e:62:61: 66:97:b7:93:4d:49:85:36:65:41:cf:8c:a4:22:5a: 92:d8:5c:d0:54:73:b5:73:c8:8e:9d:5d:8e:c2:6e: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:85:9D:12:ED:9C:29:B4:FA:6B:64:39:61:89:15:B8:C3:A5:BE:85 X509v3 Authority Key Identifier: keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:03:0d:81:06:28:ad:08:fa:46:bc:e3:d4:ce:44:b0:2e:2f: 1a:ca:9f:23:24:26:b2:d8:7f:fb:cc:3b:8b:5b:27:ca:72:a4: aa:16:d1:c6:6c:6f:cb:a7:2c:83:05:ed:e6:6a:74:97:2f:6f: d4:3c:b1:b9:c5:60:21:37:d7:90:01:0f:54:18:45:c7:9b:c0: 59:57:0d:2a:17:29:cc:f2:a7:a7:c5:98:b5:eb:f4:66:48:93: 0a:4c:bb:6d:3b:be:66:d2:ca:d7:12:d3:67:e4:dc:20:36:b0: c4:6d:d8:91:12:e0:7f:6b:46:4b:c7:1d:eb:91:64:05:4b:5e: d6:b8:94:2a:b5:3f:f6:a8:43:6a:30:14:f6:75:64:4f:2e:8a: 4d:83:7d:d8:57:82:4b:1f:f4:30:95:8a:e7:70:e9:ea:6e:9e: 72:f9:b5:91:81:72:39:a7:9a:d5:04:71:59:7d:e2:fd:ba:2d: f3:ab:c0:e6:47:14:06:23:9d:71:f1:6d:78:65:47:4e:fa:7b: 7b:04:3e:29:7d:42:2d:a8:b6:78:e1:fa:cb:5c:06:95:f8:6e: bd:7a:c5:97:eb:c0:f3:b7:79:45:69:15:f1:f4:3a:29:62:b0: 42:63:ef:70:5b:15:fc:10:5e:80:e5:60:45:4c:95:f1:51:f0: 33:f4:8c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fVfMprChbbbzkccQyXKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTQwZjAwMDk5NmViZmQyZGFiNzFjNDY5Y2M1MWVlODgx YjNmNWUwHhcNMjUxMjIwMDIwMTE0WhcNMjUxMjIxMDIwMTE0WjAzMTEwLwYDVQQD Eyg5MTg1OWQxMmVkOWMyOWI0ZmE2YjY0Mzk2MTg5MTViOGMzYTViZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQUt2cMBGkyrqXPUdrqhKbiuEJG+ a8MM0//C1w6jVrFAN+Clj8l+ojm6uuJZbDiqFp+xqp6BAJhbcfQx/tONiM3WDJIT QIELHnxSoDvvjuHNx/zxjksJXhLE2suCx7PABIK72ZgznMqo7TxtL/ZdCEenHquJ jSJ3+h3HnhZBze5Oz52TIQMETvP9GiTi6XPyd9jjDWaJbo1zC5HNrFEbjxci4yp4 OBSa5/kgKIPZsDgGOfrTtx5u4kw/G3PQX70zmgJ7u1dhYQRxWAgb1KJxbt4R344u TJr73OfKn5VOYmFml7eTTUmFNmVBz4ykIlqS2FzQVHO1c8iOnV2Owm7SZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGFnRLtnCm0+mtkOWGJFbjDpb6FMB8GA1UdIwQY MBaAFLGUDwAJluv9LatxxGnMUe6IGz9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEt YTVhYmIyMGQyNDYyLzEvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEtYTVhYmIyMGQyNDYy LzEvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwMNgQYo rQj6Rrzj1M5EsC4vGsqfIyQmsth/+8w7i1snynKkqhbRxmxvy6csgwXt5mp0ly9v 1DyxucVgITfXkAEPVBhFx5vAWVcNKhcpzPKnp8WYtev0ZkiTCky7bTu+ZtLK1xLT Z+TcIDawxG3YkRLgf2tGS8cd65FkBUte1riUKrU/9qhDajAU9nVkTy6KTYN92FeC Sx/0MJWK53Dp6m6ecvm1kYFyOaea1QRxWX3i/bot86vA5kcUBiOdcfFteGVHTvp7 ewQ+KX1CLai2eOH6y1wGlfhuvXrFl+vA87d5RWkV8fQ6KWKwQmPvcFsV/BBegOVg RUyV8VHwM/SM9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:02:04 2025 by rpki-client