This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft File: SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft (raw, json) Hash identifier: Mb7PcmSBdNO6HeB03XmIStoSXoYYckOGWfur2VDQENs= Subject key identifier: 12:D8:95:CB:AA:7E:AE:BD:34:29:1C:C4:B6:D1:11:69:7A:0B:BE:07 Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86 Certificate issuer: /CN=4ab6d7c468d092c921314d66473cfa53851cd686 Certificate serial: 019B3B6B2DFF5671AC167DD41AE34013B11C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 11:00:38 +0000 Manifest this update: Sat 20 Dec 2025 11:00:38 +0000 Manifest next update: Sun 21 Dec 2025 11:00:38 +0000 Files and hashes: 1: 18JawMIQ4IIjxCBNljP_sugctIs.roa (hash: EGBShqy4nnzMqWs1NYZxzIjsKkDa8M7h19J8gjpdtvA=) 2: 9b23r5dTMPyh48lf-ARDs_h89Qw.roa (hash: WWbvC+50HLDLUoSb1icbjf3J+3CktO1G6aw8ss6OERc=) 3: C6gHQdBURBlm35x0GDwcWWNARyk.roa (hash: GaokyZWXRvMib4ncq4hEcNLu2IPcx/q3bdp2NSF7Jyk=) 4: QVs3JRJ54mdavYMKzmA8EI3DNl4.roa (hash: LgJPv3PoY+gQldztQf/0Gwj+6GMbnE4l+sQElujcqSY=) 5: SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl (hash: Hoo0Ltgo2ei9w0zLcROO3d2UNpmfkroJrK3Ub8x/fGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:2d:ff:56:71:ac:16:7d:d4:1a:e3:40:13:b1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686 Validity Not Before: Dec 20 11:00:38 2025 GMT Not After : Dec 21 11:00:38 2025 GMT Subject: CN=12d895cbaa7eaebd34291cc4b6d111697a0bbe07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:0d:f9:5a:e3:3c:83:3b:61:ad:fc:b9:8b: 8a:59:77:5e:e3:ef:f6:13:27:eb:d4:e7:d8:e8:52: 0f:32:c5:12:40:64:d0:0f:c9:fd:84:62:5c:9b:be: 12:db:4b:97:4b:8d:05:3b:f0:87:f1:63:74:14:93: f6:1b:14:02:1f:35:4c:b7:ba:b2:85:4f:9c:d7:39: 26:32:b5:df:80:49:ca:77:5e:37:b6:e5:e2:1d:ae: d8:44:4c:62:79:92:db:e9:cb:0c:b3:73:1f:86:c8: ae:82:bc:b3:7e:f1:a2:e6:fa:83:7c:58:14:6f:91: b2:d6:cf:b4:e6:18:fd:b5:4e:f8:02:66:2c:8c:9d: e0:2d:e5:7f:89:57:d5:d4:fc:76:0a:e2:ee:b0:98: 6a:c3:ad:ad:89:90:98:04:f6:ce:11:c6:7c:03:67: c1:d2:6e:8e:bd:a1:61:18:e9:ad:07:29:0f:f3:0b: 9f:89:0a:db:7f:56:c7:39:aa:71:eb:36:20:b8:d2: 82:9d:e5:0e:90:96:30:00:4d:ab:96:3b:ab:dd:58: 05:3c:ac:67:49:03:86:50:b1:5c:6a:7c:22:d9:c2: 84:28:49:00:fe:9c:b0:d5:05:9a:2b:cc:8b:f1:ad: e7:47:28:6a:3d:5f:ad:f3:a2:b5:53:c2:e1:85:d5: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:95:CB:AA:7E:AE:BD:34:29:1C:C4:B6:D1:11:69:7A:0B:BE:07 X509v3 Authority Key Identifier: keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:28:ac:a9:21:00:c4:e0:36:12:7b:d3:01:a1:e8:84:b8:94: f2:3c:5e:40:be:f9:1d:b1:89:cf:2d:0f:0b:49:fe:a9:99:87: 13:9c:86:35:7b:ad:fe:26:51:ef:41:c6:83:ea:d2:ac:f3:8f: 50:5a:16:ce:e5:33:0c:2c:3f:b9:4c:56:2d:73:76:c8:1f:e6: be:e4:ab:54:ba:a5:3e:53:6c:61:14:20:a8:3d:da:f0:65:dd: 58:8a:37:4b:8b:9d:61:a9:6a:20:4a:9a:2d:95:22:8b:66:12: d8:11:51:ad:3c:bf:1d:7c:27:a2:6e:cc:d7:32:dc:49:be:94: b0:97:e5:ea:c3:be:5a:da:37:cd:cb:e3:31:5b:f8:44:6d:82: e5:8b:60:5e:55:2c:5f:73:21:9e:ae:e0:ac:44:ff:d2:a8:79: c6:f9:e5:f7:5b:ca:d9:35:ab:2f:c7:29:a8:a4:68:d4:f6:97: 38:0b:1f:8d:05:10:ba:63:9a:8a:7a:1b:89:33:c5:74:dc:cd: 81:49:4d:1b:2d:5a:21:ff:1e:e2:19:d7:96:31:e4:a6:24:35: 7f:a4:24:1e:cc:06:dc:ed:32:77:0d:55:50:b4:50:5d:8b:4b: fb:f5:22:ae:06:9f:a0:59:e4:63:e1:bb:50:15:b5:73:94:8c: ca:9a:db:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ay3/VnGsFn3UGuNAE7EcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYjZkN2M0NjhkMDkyYzkyMTMxNGQ2NjQ3M2NmYTUzODUx Y2Q2ODYwHhcNMjUxMjIwMTEwMDM4WhcNMjUxMjIxMTEwMDM4WjAzMTEwLwYDVQQD EygxMmQ4OTVjYmFhN2VhZWJkMzQyOTFjYzRiNmQxMTE2OTdhMGJiZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AQN+VrjPIM7Ya38uYuKWXde4+/2 Eyfr1OfY6FIPMsUSQGTQD8n9hGJcm74S20uXS40FO/CH8WN0FJP2GxQCHzVMt7qy hU+c1zkmMrXfgEnKd143tuXiHa7YRExieZLb6csMs3MfhsiugryzfvGi5vqDfFgU b5Gy1s+05hj9tU74AmYsjJ3gLeV/iVfV1Px2CuLusJhqw62tiZCYBPbOEcZ8A2fB 0m6OvaFhGOmtBykP8wufiQrbf1bHOapx6zYguNKCneUOkJYwAE2rljur3VgFPKxn SQOGULFcanwi2cKEKEkA/pyw1QWaK8yL8a3nRyhqPV+t86K1U8LhhdVzjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLYlcuqfq69NCkcxLbREWl6C74HMB8GA1UdIwQY MBaAFEq218Ro0JLJITFNZkc8+lOFHNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQt MDU3NjRjN2VkYWE3LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQtMDU3NjRjN2VkYWE3 LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCisqSEA xOA2EnvTAaHohLiU8jxeQL75HbGJzy0PC0n+qZmHE5yGNXut/iZR70HGg+rSrPOP UFoWzuUzDCw/uUxWLXN2yB/mvuSrVLqlPlNsYRQgqD3a8GXdWIo3S4udYalqIEqa LZUii2YS2BFRrTy/HXwnom7M1zLcSb6UsJfl6sO+Wto3zcvjMVv4RG2C5YtgXlUs X3Mhnq7grET/0qh5xvnl91vK2TWrL8cpqKRo1PaXOAsfjQUQumOainobiTPFdNzN gUlNGy1aIf8e4hnXljHkpiQ1f6QkHswG3O0ydw1VULRQXYtL+/UirgafoFnkY+G7 UBW1c5SMyprb9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 19:47:46 2025 by rpki-client