This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json) Hash identifier: 7ac9Ec5c9W1R+27LSCapSolOLFNAqS1528L8qY1ws18= Subject key identifier: 62:8D:F5:40:81:0A:8B:B3:4A:59:42:DC:75:18:D4:0D:A3:A8:F1:87 Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59 Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59 Certificate serial: 019B38A1AF70D810BF18E1ED0C173110DCAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft Manifest number: 1090 Signing time: Fri 19 Dec 2025 22:01:18 +0000 Manifest this update: Fri 19 Dec 2025 22:01:18 +0000 Manifest next update: Sat 20 Dec 2025 22:01:18 +0000 Files and hashes: 1: 349nznGmuYln7Euzs0toW3LL2Co.roa (hash: 2VcvoHu/ySd5oGJHcQApUau1Ip2UjCUmUdstoqEVP0Q=) 2: MhO0JIjv07z_oORlZPzio-JDr68.roa (hash: IGEtItNNMXdu/fJfMOFzDjAygiojo6AjHJXRHHSwZpo=) 3: cjuo7risFY0maWmiB6zw_cynUR8.roa (hash: fwEm242Ve1m7/7m7QExBWA9lRss1xiZPUH/+LoEjd/Y=) 4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: 49nxw8y+Nm2tCSaJJ4QqqQ0Fg3XI3pogF9hhGV3hQA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:af:70:d8:10:bf:18:e1:ed:0c:17:31:10:dc:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59 Validity Not Before: Dec 19 22:01:18 2025 GMT Not After : Dec 20 22:01:18 2025 GMT Subject: CN=628df540810a8bb34a5942dc7518d40da3a8f187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:f1:01:24:67:11:5b:41:14:29:4d:8d:dd: 20:0e:27:e5:81:4d:d6:35:1e:b4:9f:95:19:e9:fd: f1:93:48:7e:b6:06:ee:69:0a:eb:9e:be:46:ef:24: a5:c9:a7:6d:d6:87:b7:db:cd:38:f0:ad:a5:13:5b: 85:6a:9b:bc:12:67:b5:79:1b:af:34:0d:9d:2a:9c: e0:2a:0c:5d:9e:5a:ca:a9:fd:ff:f5:6a:08:57:17: d4:a3:75:8f:cf:71:48:23:ee:9e:1c:9b:d5:fb:2b: ae:7d:76:c5:5e:64:93:47:41:e8:77:c7:55:95:45: 24:f0:46:09:29:19:21:66:c0:c3:4a:91:59:6c:b6: b5:10:71:0e:aa:99:87:86:70:de:0f:96:b3:db:26: dd:7a:72:7c:8e:e3:b0:6d:82:33:0e:6f:8c:ed:9a: 11:a5:41:1f:20:b0:a5:e3:bb:cd:b7:cc:5b:9d:24: bb:3c:7f:03:4a:ab:1a:e9:a5:f8:d5:cc:ee:fa:5d: 79:25:f1:13:79:6d:9e:dd:88:0e:00:66:0f:f6:13: 27:6b:86:9f:6c:7c:9c:20:79:1e:d9:a8:9f:4f:11: 03:36:dd:ce:17:ab:dc:55:31:f3:f4:6f:ca:8f:d1: ce:a1:1b:43:c9:0e:98:5b:3f:2e:02:36:e9:27:15: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8D:F5:40:81:0A:8B:B3:4A:59:42:DC:75:18:D4:0D:A3:A8:F1:87 X509v3 Authority Key Identifier: keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:12:32:6c:1e:a7:b5:2d:e3:88:60:2c:b1:98:d0:47:56:c9: 2d:4d:01:2d:08:07:3c:2b:2e:0a:6e:50:33:b1:64:81:0f:ea: 28:d7:25:cb:9f:8b:b7:02:4a:22:7c:de:4b:95:6a:36:de:da: be:ce:eb:78:23:4f:db:7b:22:11:19:71:9c:a5:20:d9:53:79: bd:b6:10:4c:a6:5b:6c:96:39:6f:73:bd:90:36:f4:aa:f2:01: 7d:7d:6c:9f:3f:56:43:fc:e1:78:57:c8:aa:fc:ae:bc:99:19: 7c:15:fa:21:67:91:8f:f2:5e:04:cc:b3:52:24:cf:74:47:74: 07:2d:9f:c2:cf:e6:41:a2:6e:65:5d:8e:f2:cb:25:65:7e:a2: 17:1f:fa:e8:be:c7:76:85:20:31:6d:9c:e9:13:07:b8:dd:44: 69:3a:10:e4:50:03:9c:47:50:e2:d7:9c:3c:9e:a7:12:10:49: c9:bd:ef:a2:c2:ae:66:6a:44:46:13:f6:a3:96:3f:9a:8f:92: 93:b1:bd:1e:f6:8f:d7:a6:12:60:4d:81:57:bc:a8:09:97:43: 99:16:1a:79:02:3c:80:19:cc:10:14:cd:e1:38:57:ce:1f:e6: 4c:f4:f4:87:98:83:98:49:88:38:04:f3:5d:20:9a:bd:55:1f: 9a:15:96:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oa9w2BC/GOHtDBcxENyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODE0YTI4YThjMWViZTBhZGMzM2ExNTE5Yjk4ODNlMzA4 NGJiNTkwHhcNMjUxMjE5MjIwMTE4WhcNMjUxMjIwMjIwMTE4WjAzMTEwLwYDVQQD Eyg2MjhkZjU0MDgxMGE4YmIzNGE1OTQyZGM3NTE4ZDQwZGEzYThmMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hzxASRnEVtBFClNjd0gDiflgU3W NR60n5UZ6f3xk0h+tgbuaQrrnr5G7ySlyadt1oe328048K2lE1uFapu8Eme1eRuv NA2dKpzgKgxdnlrKqf3/9WoIVxfUo3WPz3FII+6eHJvV+yuufXbFXmSTR0Hod8dV lUUk8EYJKRkhZsDDSpFZbLa1EHEOqpmHhnDeD5az2ybdenJ8juOwbYIzDm+M7ZoR pUEfILCl47vNt8xbnSS7PH8DSqsa6aX41czu+l15JfETeW2e3YgOAGYP9hMna4af bHycIHke2aifTxEDNt3OF6vcVTHz9G/Kj9HOoRtDyQ6YWz8uAjbpJxVofwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKN9UCBCouzSllC3HUY1A2jqPGHMB8GA1UdIwQY MBaAFLGBSiiowevgrcM6FRm5iD4whLtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGIt ODFkYWJjODFjMDVjLzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGItODFkYWJjODFjMDVj LzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehIybB6n tS3jiGAssZjQR1bJLU0BLQgHPCsuCm5QM7FkgQ/qKNcly5+LtwJKInzeS5VqNt7a vs7reCNP23siERlxnKUg2VN5vbYQTKZbbJY5b3O9kDb0qvIBfX1snz9WQ/zheFfI qvyuvJkZfBX6IWeRj/JeBMyzUiTPdEd0By2fws/mQaJuZV2O8sslZX6iFx/66L7H doUgMW2c6RMHuN1EaToQ5FADnEdQ4tecPJ6nEhBJyb3vosKuZmpERhP2o5Y/mo+S k7G9HvaP16YSYE2BV7yoCZdDmRYaeQI8gBnMEBTN4ThXzh/mTPT0h5iDmEmIOATz XSCavVUfmhWWDg== -----END CERTIFICATE-----Generated at Sat Dec 20 03:01:46 2025 by rpki-client