This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json) Hash identifier: 12SqCJYcdqaT/mtEkQq+dscCT0E0vn63bHZgZsRhzyA= Subject key identifier: 14:C3:41:E7:57:52:86:B9:4F:EC:C9:1A:89:A4:A6:C3:94:88:A1:32 Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69 Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969 Certificate serial: 019B3F112222E1692FF7D3D0E563ACDFA56A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft Manifest number: 127B Signing time: Sun 21 Dec 2025 04:00:46 +0000 Manifest this update: Sun 21 Dec 2025 04:00:46 +0000 Manifest next update: Mon 22 Dec 2025 04:00:46 +0000 Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=) 2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: WUNvWEUrlVK+bHwozu8VetS0IrPnSBQePQDVWN5laqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:22:22:e1:69:2f:f7:d3:d0:e5:63:ac:df:a5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969 Validity Not Before: Dec 21 04:00:46 2025 GMT Not After : Dec 22 04:00:46 2025 GMT Subject: CN=14c341e7575286b94fecc91a89a4a6c39488a132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:75:58:5a:8b:71:2c:ad:1a:0b:4e:c4:e6: 5a:9f:8b:81:df:10:e3:e2:f8:b0:b1:06:89:d7:b4: 67:ae:6f:fc:e0:ce:89:44:27:ed:8e:45:80:d7:88: e2:38:1a:fe:fd:62:0a:34:c2:74:1b:b6:98:73:e0: b2:99:a2:c3:db:84:70:d0:f0:8f:9c:a0:70:c5:12: 96:9f:b5:2d:24:ee:7c:d2:e4:92:a7:ab:4c:d1:75: 95:95:7e:ad:10:59:12:d4:e0:21:1b:0f:fb:fd:3f: 52:23:d8:ed:3a:2c:1c:8b:a1:a0:f8:eb:47:df:c6: ef:34:50:16:22:ce:54:86:2a:4f:50:1b:ba:55:78: 21:76:3b:2e:0a:ab:c2:ac:90:c3:78:a7:78:87:a0: c2:14:4f:1b:8d:b4:aa:53:8e:61:f6:50:68:3d:46: 28:91:b1:41:a6:45:a0:aa:8f:eb:12:ba:87:15:b3: 6b:20:60:0c:a5:01:01:ff:8e:07:d1:fe:9d:a5:30: 17:ae:d6:56:92:c7:7d:30:3d:c8:e2:68:4f:a9:ab: cf:42:a7:6f:da:02:d1:03:61:90:ac:cb:fb:a6:a2: 48:65:a6:d2:b1:9a:ab:d7:86:82:f1:49:84:9c:3f: 81:1a:4e:e6:7b:46:9f:fe:e6:6b:a5:9f:1d:72:9f: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C3:41:E7:57:52:86:B9:4F:EC:C9:1A:89:A4:A6:C3:94:88:A1:32 X509v3 Authority Key Identifier: keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1d:17:79:92:a9:67:56:7c:e3:f7:c9:96:1c:58:30:11:55: 7c:b8:33:62:95:4a:6b:66:5b:fd:10:a0:aa:6b:e3:29:bd:a8: 03:e9:13:7d:f2:89:84:80:ff:4a:70:fe:a5:59:75:b6:f7:8f: a9:45:b5:4b:06:87:9e:4f:33:24:b2:a4:0e:7a:72:c6:aa:c7: 88:71:06:85:16:f7:bf:f5:62:89:ba:e8:1a:20:c1:3a:6b:61: ba:7e:b8:ea:ad:7f:14:59:cb:bb:5e:32:28:e7:f4:17:e7:45: 8d:e2:12:5d:9e:31:46:75:bd:2d:4e:01:ba:58:9f:47:45:9a: dd:ed:f2:a2:c0:56:4e:d4:9a:30:fe:9d:e9:6c:31:ec:fb:22: d8:ea:87:8c:f5:8c:93:87:60:0f:5e:d7:97:cc:8b:2b:4e:d7: 11:1b:52:87:03:65:8a:8e:b5:25:88:7d:cc:bd:71:7e:a1:01: ed:6f:96:d1:91:01:03:49:83:92:45:f4:4e:82:5f:fe:49:de: a7:b4:3b:af:dc:e9:db:74:1b:6b:9d:05:4c:1b:6d:a6:df:a4: 59:f3:28:f5:07:84:30:27:01:8a:8d:e7:73:b9:53:82:27:5e: 35:cd:5e:d0:95:38:0b:00:ef:98:e3:b7:4b:dd:4e:b9:40:a0: c1:53:20:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ESIi4Wkv99PQ5WOs36VqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZmEwYzdhYmMxMDc5NjkxNWUzMzViYTE5NzgwZTQ3M2Uw Mjc5NjkwHhcNMjUxMjIxMDQwMDQ2WhcNMjUxMjIyMDQwMDQ2WjAzMTEwLwYDVQQD EygxNGMzNDFlNzU3NTI4NmI5NGZlY2M5MWE4OWE0YTZjMzk0ODhhMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNN1WFqLcSytGgtOxOZan4uB3xDj 4viwsQaJ17Rnrm/84M6JRCftjkWA14jiOBr+/WIKNMJ0G7aYc+CymaLD24Rw0PCP nKBwxRKWn7UtJO580uSSp6tM0XWVlX6tEFkS1OAhGw/7/T9SI9jtOiwci6Gg+OtH 38bvNFAWIs5UhipPUBu6VXghdjsuCqvCrJDDeKd4h6DCFE8bjbSqU45h9lBoPUYo kbFBpkWgqo/rErqHFbNrIGAMpQEB/44H0f6dpTAXrtZWksd9MD3I4mhPqavPQqdv 2gLRA2GQrMv7pqJIZabSsZqr14aC8UmEnD+BGk7me0af/uZrpZ8dcp84awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTDQedXUoa5T+zJGomkpsOUiKEyMB8GA1UdIwQY MBaAFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMt ZGY4NTRmNDdiYWY0LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMtZGY4NTRmNDdiYWY0 LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh0XeZKp Z1Z84/fJlhxYMBFVfLgzYpVKa2Zb/RCgqmvjKb2oA+kTffKJhID/SnD+pVl1tveP qUW1SwaHnk8zJLKkDnpyxqrHiHEGhRb3v/ViibroGiDBOmthun646q1/FFnLu14y KOf0F+dFjeISXZ4xRnW9LU4BulifR0Wa3e3yosBWTtSaMP6d6Wwx7Psi2OqHjPWM k4dgD17Xl8yLK07XERtShwNlio61JYh9zL1xfqEB7W+W0ZEBA0mDkkX0ToJf/kne p7Q7r9zp23Qba50FTBttpt+kWfMo9QeEMCcBio3nc7lTgideNc1e0JU4CwDvmOO3 S91OuUCgwVMgNA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:43:47 2025 by rpki-client