This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json) Hash identifier: H6D3Wxp3tN7O0MbMA76LD/bLCBXsS7PlboOk55cDG6c= Subject key identifier: CC:65:F5:7B:26:3C:BB:2C:08:30:1D:56:1B:49:B9:08:33:72:0A:94 Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09 Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509 Certificate serial: 019B3C7EB7D6E4072F231CC1F3E394E4877A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 16:01:36 +0000 Manifest this update: Sat 20 Dec 2025 16:01:36 +0000 Manifest next update: Sun 21 Dec 2025 16:01:36 +0000 Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=) 2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: uOHQFSsFf8v/BPN1LZGFPqU/tjbbHi2dJRzDaUeauxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:b7:d6:e4:07:2f:23:1c:c1:f3:e3:94:e4:87:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509 Validity Not Before: Dec 20 16:01:36 2025 GMT Not After : Dec 21 16:01:36 2025 GMT Subject: CN=cc65f57b263cbb2c08301d561b49b90833720a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:d6:e9:6f:fd:3d:1b:aa:ca:65:1f:92:f3: 09:4d:b3:8c:44:b5:3c:f2:1e:16:15:82:37:f7:8b: fe:57:e1:64:c8:84:08:f2:26:f6:37:1f:3a:00:f4: ec:33:ad:64:dc:14:4b:ff:be:15:0a:75:b0:48:df: dc:4e:b5:6f:5e:16:07:75:01:38:9f:3e:b5:d3:c0: e1:cd:f4:18:26:ed:f7:48:9c:1b:66:59:b0:86:c1: 7a:e3:af:02:fd:f8:f3:b6:86:f9:3c:7c:1a:91:65: d9:7f:7d:93:be:c3:1a:51:a2:e6:6a:1d:e7:e2:2d: e7:a5:d1:20:8a:59:e0:56:aa:f7:b1:ad:e4:85:a8: 22:02:2a:d1:93:f0:ce:d1:3e:46:c3:df:86:16:30: 6f:88:37:11:c9:52:3c:fe:07:68:f0:ef:f9:20:59: be:eb:3d:1a:f4:c7:b4:bd:b4:85:bc:a0:6e:ef:13: 8b:2e:a9:b4:69:77:f3:21:16:37:d7:0b:fe:b4:28: f6:7f:b2:c8:0f:75:4c:c4:47:9f:08:13:90:23:42: 23:76:c7:59:d1:2c:2b:68:e5:b4:0b:9e:2b:6e:ad: 10:54:6f:ee:58:1e:58:5c:f1:da:a3:11:11:b3:89: 02:a5:ea:e0:56:d7:4f:51:21:cf:de:48:a4:0c:c1: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:65:F5:7B:26:3C:BB:2C:08:30:1D:56:1B:49:B9:08:33:72:0A:94 X509v3 Authority Key Identifier: keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:27:f2:a9:10:57:67:be:95:92:18:3d:12:65:ea:e2:32:cc: f9:8c:dc:87:4f:5c:c5:60:9e:bd:68:c1:9e:a7:52:4a:26:91: 78:21:aa:d8:07:72:39:69:94:d2:4d:a7:e9:fc:f8:2c:71:81: 3b:e6:4b:c1:bf:08:a8:fe:ed:fc:78:b9:71:12:cb:f7:f0:b5: d6:61:41:fd:66:7e:fb:34:43:8a:14:16:69:2e:17:d0:c1:56: 1f:9b:d0:f6:85:92:92:1d:f3:33:c0:13:32:52:81:e5:76:5d: ad:a5:43:27:59:88:e9:2e:f7:0e:99:96:4c:0e:56:b0:93:a3: 51:9d:74:a9:1a:eb:78:89:89:ae:82:d0:1c:b5:08:2f:7c:24: 11:5c:14:62:64:a6:de:6e:70:24:19:08:39:92:7c:ba:32:ef: 75:e6:71:7c:47:19:eb:bb:7e:7c:2f:a2:26:a9:d7:02:e3:cb: b9:a5:d1:b6:2c:9b:0b:58:a9:06:e2:67:de:f2:5c:d4:2d:ed: 97:f6:43:86:ff:df:59:b3:29:9d:b2:d0:be:42:5e:5b:b8:d7: 48:f2:64:e5:93:d2:27:c1:f8:cd:f6:af:37:6c:cc:fe:48:9a: 74:f9:18:33:d1:77:d2:80:77:b5:5e:87:82:63:8e:e8:d5:9c: d9:92:a5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frfW5AcvIxzB8+OU5Id6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYjlmOTAwYmE2MThiZThlN2M5MjA5NjNjZGY3NTdiOTA1 MGU1MDkwHhcNMjUxMjIwMTYwMTM2WhcNMjUxMjIxMTYwMTM2WjAzMTEwLwYDVQQD EyhjYzY1ZjU3YjI2M2NiYjJjMDgzMDFkNTYxYjQ5YjkwODMzNzIwYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S7W6W/9PRuqymUfkvMJTbOMRLU8 8h4WFYI394v+V+FkyIQI8ib2Nx86APTsM61k3BRL/74VCnWwSN/cTrVvXhYHdQE4 nz6108DhzfQYJu33SJwbZlmwhsF6468C/fjztob5PHwakWXZf32TvsMaUaLmah3n 4i3npdEgilngVqr3sa3khagiAirRk/DO0T5Gw9+GFjBviDcRyVI8/gdo8O/5IFm+ 6z0a9Me0vbSFvKBu7xOLLqm0aXfzIRY31wv+tCj2f7LID3VMxEefCBOQI0IjdsdZ 0SwraOW0C54rbq0QVG/uWB5YXPHaoxERs4kCpergVtdPUSHP3kikDMF8fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxl9XsmPLssCDAdVhtJuQgzcgqUMB8GA1UdIwQY MBaAFEq5+QC6YYvo58kgljzfdXuQUOUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQt OWUwYjE5NmEwNDg3LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQtOWUwYjE5NmEwNDg3 LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSfyqRBX Z76Vkhg9EmXq4jLM+Yzch09cxWCevWjBnqdSSiaReCGq2AdyOWmU0k2n6fz4LHGB O+ZLwb8IqP7t/Hi5cRLL9/C11mFB/WZ++zRDihQWaS4X0MFWH5vQ9oWSkh3zM8AT MlKB5XZdraVDJ1mI6S73DpmWTA5WsJOjUZ10qRrreImJroLQHLUIL3wkEVwUYmSm 3m5wJBkIOZJ8ujLvdeZxfEcZ67t+fC+iJqnXAuPLuaXRtiybC1ipBuJn3vJc1C3t l/ZDhv/fWbMpnbLQvkJeW7jXSPJk5ZPSJ8H4zfavN2zM/kiadPkYM9F30oB3tV6H gmOO6NWc2ZKlzw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:36 2025 by rpki-client