This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json) Hash identifier: nOEeZ/X0zusEQHGvsedi2Ja6wkWUewcrNAn5iUcoJG0= Subject key identifier: BB:9E:5C:6C:E7:30:B0:B2:D6:53:2F:D3:75:A6:80:B1:60:E0:C1:8D Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e Certificate serial: 019B3FB62422FA9F6E72F5B72DA2F44D08FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 07:00:59 +0000 Manifest this update: Sun 21 Dec 2025 07:00:59 +0000 Manifest next update: Mon 22 Dec 2025 07:00:59 +0000 Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=) 2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=) 3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: mQ3caTlEk7YFOXrJic72OoVjWNo1ikqYUU9tZHXm2tI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:24:22:fa:9f:6e:72:f5:b7:2d:a2:f4:4d:08:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e Validity Not Before: Dec 21 07:00:59 2025 GMT Not After : Dec 22 07:00:59 2025 GMT Subject: CN=bb9e5c6ce730b0b2d6532fd375a680b160e0c18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:ee:8e:be:f4:8c:d7:7d:0c:64:1c:86:5a: 19:a5:d8:72:f6:9a:aa:4a:67:bd:1d:98:e6:56:83: 91:60:f2:d7:2d:40:b6:8c:cb:cd:2d:92:01:68:e9: 33:a8:d1:c8:c0:ef:9c:84:7c:45:21:93:ac:82:a8: 64:84:f4:81:37:67:08:26:c0:a2:65:db:4a:70:d1: 2f:1d:43:59:04:d4:d3:71:5f:65:bf:47:dd:42:15: 2f:3e:2d:3e:c8:64:13:4d:31:5f:7e:6e:b8:1d:ce: ba:79:69:cd:04:17:81:22:9d:50:21:76:fe:e8:d9: e3:b4:b7:06:6a:8e:bb:fd:ab:35:6a:ed:11:ce:c2: 91:23:08:77:e6:88:97:2b:f8:09:69:83:58:98:cc: 04:54:73:31:71:0a:f8:d2:68:17:52:ac:4d:b5:1a: b8:75:3b:ad:d5:83:7c:ac:8e:96:c6:af:72:fc:1d: 95:44:d9:5d:2f:ac:ee:19:88:86:01:71:ab:a7:02: 37:90:fb:c5:4c:43:a8:ad:d5:38:49:91:d0:b0:1d: 77:ff:1f:3a:5f:de:1a:5c:dc:05:92:e2:09:0e:1b: b1:9a:98:54:4d:6b:d5:ef:bb:e4:d0:24:00:3f:36: 86:84:c6:c0:65:ab:37:bd:c6:7f:c8:48:c1:f0:9d: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9E:5C:6C:E7:30:B0:B2:D6:53:2F:D3:75:A6:80:B1:60:E0:C1:8D X509v3 Authority Key Identifier: keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e7:7b:d4:a9:92:de:d5:f3:a9:7c:82:47:99:89:95:9e:ef: b2:73:8b:1d:c8:16:8e:a6:27:3e:42:e8:10:ae:3e:8c:a0:e0: 0a:e3:b6:f3:bb:f6:35:9d:56:a0:9d:97:1f:e0:fd:53:0c:16: 7d:ca:d5:e9:fc:35:e5:1b:4f:ad:b7:02:37:a2:6e:47:0b:44: 1a:9f:5c:93:20:23:62:bb:70:59:65:88:40:06:40:6e:4b:50: 00:52:35:c6:dc:f7:ed:3d:a2:88:bc:3a:72:65:aa:95:55:a6: 59:11:6f:1d:21:8b:19:f3:01:0e:75:1e:77:4f:92:ae:02:d3: 81:a2:07:b0:80:40:da:4f:ed:4f:a4:c1:e0:e5:5c:29:b9:49: 37:bb:91:11:3c:22:05:51:a9:b2:ff:44:a8:4c:45:07:eb:50: e8:f3:5b:92:cd:b2:dc:b3:e8:30:6b:01:7b:b5:79:85:49:3f: 2b:9c:35:b2:cb:04:e3:83:5a:31:22:2e:4f:e0:c6:86:d8:4c: 0f:53:bc:8d:ea:50:27:f3:4c:92:d3:2d:07:0c:b9:1e:6a:e9: fd:5a:f6:9d:b0:58:80:e8:b0:ad:bc:4b:20:13:ee:b2:00:96: 15:0a:f4:d5:df:48:ba:e4:31:3d:66:5f:6f:f5:63:1e:e3:a8: 93:9f:8a:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tiQi+p9ucvW3LaL0TQj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDYwMTAyODNhODIwMmVlYWEzZmVmMzI1MzRlM2U5N2Uw NDA3OWUwHhcNMjUxMjIxMDcwMDU5WhcNMjUxMjIyMDcwMDU5WjAzMTEwLwYDVQQD EyhiYjllNWM2Y2U3MzBiMGIyZDY1MzJmZDM3NWE2ODBiMTYwZTBjMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrTujr70jNd9DGQchloZpdhy9pqq Sme9HZjmVoORYPLXLUC2jMvNLZIBaOkzqNHIwO+chHxFIZOsgqhkhPSBN2cIJsCi ZdtKcNEvHUNZBNTTcV9lv0fdQhUvPi0+yGQTTTFffm64Hc66eWnNBBeBIp1QIXb+ 6NnjtLcGao67/as1au0RzsKRIwh35oiXK/gJaYNYmMwEVHMxcQr40mgXUqxNtRq4 dTut1YN8rI6Wxq9y/B2VRNldL6zuGYiGAXGrpwI3kPvFTEOordU4SZHQsB13/x86 X94aXNwFkuIJDhuxmphUTWvV77vk0CQAPzaGhMbAZas3vcZ/yEjB8J1YMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLueXGznMLCy1lMv03WmgLFg4MGNMB8GA1UdIwQY MBaAFLFGAQKDqCAu6qP+8yU04+l+BAeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWIt YzAzMDdiMGY2MmRjLzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWItYzAzMDdiMGY2MmRj LzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOd71KmS 3tXzqXyCR5mJlZ7vsnOLHcgWjqYnPkLoEK4+jKDgCuO287v2NZ1WoJ2XH+D9UwwW fcrV6fw15RtPrbcCN6JuRwtEGp9ckyAjYrtwWWWIQAZAbktQAFI1xtz37T2iiLw6 cmWqlVWmWRFvHSGLGfMBDnUed0+SrgLTgaIHsIBA2k/tT6TB4OVcKblJN7uRETwi BVGpsv9EqExFB+tQ6PNbks2y3LPoMGsBe7V5hUk/K5w1sssE44NaMSIuT+DGhthM D1O8jepQJ/NMktMtBwy5Hmrp/Vr2nbBYgOiwrbxLIBPusgCWFQr01d9IuuQxPWZf b/VjHuOok5+KDw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:10 2025 by rpki-client