This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json) Hash identifier: 4r9O0oa1x6r5PobDmiP8oEyFcefmXi4+MgD0gHmKqns= Subject key identifier: 8E:9A:AC:1B:7C:37:33:7B:A9:94:14:69:55:19:79:4F:E3:19:E4:56 Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9 Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9 Certificate serial: 019B3D90C9E58574D4DB215A3E4DF878D53B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft Manifest number: 09EC Signing time: Sat 20 Dec 2025 21:00:57 +0000 Manifest this update: Sat 20 Dec 2025 21:00:57 +0000 Manifest next update: Sun 21 Dec 2025 21:00:57 +0000 Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=) 2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: ffemvDVGkwydieUago9HxfBF3dJ+Spb8iv2QN62BrK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c9:e5:85:74:d4:db:21:5a:3e:4d:f8:78:d5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9 Validity Not Before: Dec 20 21:00:57 2025 GMT Not After : Dec 21 21:00:57 2025 GMT Subject: CN=8e9aac1b7c37337ba99414695519794fe319e456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:5b:5e:d8:d2:2d:24:e9:57:31:c3:14:72: fc:50:6a:da:c5:0b:af:ca:24:09:63:5d:78:70:03: aa:bb:f2:79:b2:2b:47:6b:40:a1:b6:3f:e6:54:42: 45:53:7b:24:82:95:25:69:4a:1f:9a:3f:ef:a9:d2: 27:af:c9:a1:3c:02:63:33:2e:89:3d:a4:be:ce:9c: c2:1a:c0:d9:30:a6:5b:f4:92:59:68:fa:3d:e4:fc: 93:5d:a8:27:3f:a5:07:fd:2e:8f:66:58:90:b1:36: 69:54:6f:e5:9b:c2:04:da:be:83:6c:75:83:5b:f3: 4f:f4:b8:c4:59:9b:08:93:fb:d9:8c:13:14:a3:42: 62:37:61:55:0a:04:69:e5:73:bb:cb:0b:aa:1f:dd: 1f:d4:ac:47:4e:26:9e:ae:cb:db:a7:5c:df:17:66: 0a:2d:26:57:8e:41:70:16:a4:2a:7c:9f:93:12:92: c1:2a:cf:07:38:dd:8b:02:d8:ce:18:02:f6:12:df: 60:9d:49:96:0a:9c:3b:80:5f:94:3d:53:12:48:6e: 85:ee:7d:dd:a2:37:fd:80:69:3f:96:b9:8b:22:05: 07:e0:b9:42:1c:15:11:fa:46:9e:75:4c:0f:21:e9: 14:6f:bf:0a:2c:04:44:c0:24:4f:68:68:43:2c:12: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:AC:1B:7C:37:33:7B:A9:94:14:69:55:19:79:4F:E3:19:E4:56 X509v3 Authority Key Identifier: keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7d:fb:e4:e3:bc:ab:d6:b8:73:89:07:e0:c8:41:5f:0d:30: cc:ae:d6:c4:8d:b3:7c:12:5a:e7:89:d8:1b:99:fa:19:78:82: 86:03:e4:dc:75:67:06:e3:2e:04:96:ef:fa:51:c6:df:33:0e: c7:20:09:0d:3a:fd:6a:e6:54:20:76:ff:29:91:e5:ca:a5:c0: d6:41:a8:6e:09:e5:74:72:d2:fa:70:ec:79:2a:fb:ae:ab:e0: bb:9d:89:a9:4c:23:29:4c:4f:95:04:12:d4:9c:39:6f:dd:46: 2f:53:8b:31:3c:c3:21:8e:b1:41:83:85:bc:e9:be:95:f0:7e: ca:04:a2:1e:44:80:c2:95:dc:f2:f0:14:8a:30:35:e4:c2:ff: 8a:e8:fb:e5:4b:32:37:d1:28:b8:58:2e:58:2e:d8:96:1d:5d: e0:52:b1:59:a2:a8:36:c7:1b:c3:f8:b0:c4:6a:e8:75:8b:69: 18:2f:f5:09:4d:27:f8:02:cf:5c:95:e9:7e:e5:85:13:08:4c: a4:c4:b7:3d:82:15:bb:11:a3:b7:01:21:94:6c:79:f9:8a:6d: 86:64:f7:bd:72:a9:d5:56:97:b7:2a:95:d8:c2:e4:5c:45:17: 43:ad:1a:1d:a0:ca:dd:15:52:f5:0f:a4:e3:30:3b:b7:93:9f: e6:e8:0c:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMnlhXTU2yFaPk34eNU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODQ3MjUwYjNhNzcxMjdkZjdjM2M3YjhkZWY4YzlkOTE5 ZGM0YjkwHhcNMjUxMjIwMjEwMDU3WhcNMjUxMjIxMjEwMDU3WjAzMTEwLwYDVQQD Eyg4ZTlhYWMxYjdjMzczMzdiYTk5NDE0Njk1NTE5Nzk0ZmUzMTllNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArldbXtjSLSTpVzHDFHL8UGraxQuv yiQJY114cAOqu/J5sitHa0Chtj/mVEJFU3skgpUlaUofmj/vqdInr8mhPAJjMy6J PaS+zpzCGsDZMKZb9JJZaPo95PyTXagnP6UH/S6PZliQsTZpVG/lm8IE2r6DbHWD W/NP9LjEWZsIk/vZjBMUo0JiN2FVCgRp5XO7ywuqH90f1KxHTiaersvbp1zfF2YK LSZXjkFwFqQqfJ+TEpLBKs8HON2LAtjOGAL2Et9gnUmWCpw7gF+UPVMSSG6F7n3d ojf9gGk/lrmLIgUH4LlCHBUR+kaedUwPIekUb78KLAREwCRPaGhDLBJ/GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6arBt8NzN7qZQUaVUZeU/jGeRWMB8GA1UdIwQY MBaAFLCEclCzp3En33w8e43vjJ2RncS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWIt Y2EzNTQ2OTU1M2NmLzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWItY2EzNTQ2OTU1M2Nm LzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQH375OO8 q9a4c4kH4MhBXw0wzK7WxI2zfBJa54nYG5n6GXiChgPk3HVnBuMuBJbv+lHG3zMO xyAJDTr9auZUIHb/KZHlyqXA1kGobgnldHLS+nDseSr7rqvgu52JqUwjKUxPlQQS 1Jw5b91GL1OLMTzDIY6xQYOFvOm+lfB+ygSiHkSAwpXc8vAUijA15ML/iuj75Usy N9EouFguWC7Ylh1d4FKxWaKoNscbw/iwxGrodYtpGC/1CU0n+ALPXJXpfuWFEwhM pMS3PYIVuxGjtwEhlGx5+YpthmT3vXKp1VaXtyqV2MLkXEUXQ60aHaDK3RVS9Q+k 4zA7t5Of5ugMRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:47:33 2025 by rpki-client