This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json) Hash identifier: cYc9rgNtP8ox8K4Rg6EC4Tf3eypDJodfmDvdFgwffrs= Subject key identifier: 8B:59:D9:0B:5F:5D:4E:4C:FD:A6:74:02:1C:C2:1B:B3:62:A2:74:64 Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5 Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5 Certificate serial: 019B3D5A5FBC0405CA633C99ABB1B6461081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft Manifest number: 1390 Signing time: Sat 20 Dec 2025 20:01:31 +0000 Manifest this update: Sat 20 Dec 2025 20:01:31 +0000 Manifest next update: Sun 21 Dec 2025 20:01:31 +0000 Files and hashes: 1: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: u2xdR0r1l0WpsOeD3QXutz7scREOPv5EvfTSPni0hzU=) 2: ZyzamFxx31MI8DWtNOW9NjiSAdw.roa (hash: k0oTub67+XpNNg/oLxWWVGf2ml63S+4IV7J2xSqjNvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:5f:bc:04:05:ca:63:3c:99:ab:b1:b6:46:10:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5 Validity Not Before: Dec 20 20:01:31 2025 GMT Not After : Dec 21 20:01:31 2025 GMT Subject: CN=8b59d90b5f5d4e4cfda674021cc21bb362a27464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:e7:0e:3d:6b:00:f7:07:3e:4f:31:e8:76: af:e6:e2:b6:13:ca:44:bb:50:b4:db:da:e2:b8:43: 3e:18:22:e8:b8:42:ab:41:df:21:72:a1:ff:f1:3d: 14:e2:76:ef:c0:1b:cb:f6:3f:5c:a0:cc:57:43:3d: 35:d4:6d:1c:b3:0c:6d:92:23:f0:08:bd:17:22:2d: fe:71:03:2b:af:0e:cf:11:de:78:2d:8a:a4:e1:78: 6e:96:a1:89:d0:48:99:6d:98:10:48:8b:e5:3e:d6: d7:6e:66:4e:11:84:ad:4a:f2:0b:d0:e7:1f:5a:6f: 6e:81:ab:c8:41:f0:a3:a7:e0:58:98:a6:a4:7a:16: 4e:25:92:46:8a:de:64:0b:e0:30:48:e6:79:c0:52: 8f:93:76:bb:d8:1a:86:b8:f6:4a:a3:85:1d:19:67: 14:68:2b:44:fd:82:95:52:5f:50:5d:45:1f:ea:92: 93:3c:94:64:31:da:06:fb:88:48:ad:5d:d9:e0:2c: 85:77:55:ab:da:e4:ff:8d:c2:42:86:3c:24:1b:0f: cd:45:86:d8:07:36:bf:cb:b0:e5:39:da:dc:b4:d3: 07:4d:d4:2f:87:7b:03:a3:1d:70:52:d9:79:46:53: 37:e4:36:d0:8e:0c:6f:3c:f4:f7:07:f8:0f:96:f7: f3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:59:D9:0B:5F:5D:4E:4C:FD:A6:74:02:1C:C2:1B:B3:62:A2:74:64 X509v3 Authority Key Identifier: keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:cb:61:20:aa:94:28:30:cd:eb:55:ac:1d:fc:b3:2d:eb:f6: d4:d2:59:60:db:7d:47:d2:fc:77:d4:95:81:b2:6e:07:ec:83: 77:86:c2:de:ff:15:39:54:1f:cf:b7:0a:c7:6f:9a:0d:8e:eb: a7:3e:ea:98:81:57:4b:90:62:ff:a5:7f:b2:c6:05:fc:f0:99: b4:ec:f2:8d:8c:f0:3a:8f:87:1c:d2:5f:90:83:2f:00:53:61: de:8d:21:4d:f3:0d:b5:85:97:32:d2:ec:9a:26:ab:0c:63:1e: 71:3a:30:97:28:8e:60:d5:5b:6e:78:df:00:e7:e6:4a:a4:31: 64:e5:0d:47:e9:70:df:29:82:0e:90:15:94:c3:57:e9:09:77: b7:8f:cc:7e:ab:66:39:13:a8:05:ed:e9:a1:f3:49:30:ec:f8: a6:7c:f9:e6:8f:0a:1a:06:40:45:a3:ff:3a:81:89:92:50:ca: e2:d0:e4:83:7d:9c:c5:44:88:85:45:e8:a4:e0:22:5b:b9:ba: 2d:02:21:eb:56:44:c3:c5:1a:e6:40:4d:e6:6a:96:fe:b2:63: ca:d5:b8:43:06:75:36:79:46:82:49:21:31:89:f0:59:06:86: 02:1e:da:20:75:95:5f:a5:de:28:ed:53:1d:b9:e0:7e:96:8c: 8d:75:ba:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wl+8BAXKYzyZq7G2RhCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZWEzMGMwZjI4ZTAyMjY5YzU3NjViZjRhMDQ1Njc3Y2Ey Nzk0YTUwHhcNMjUxMjIwMjAwMTMxWhcNMjUxMjIxMjAwMTMxWjAzMTEwLwYDVQQD Eyg4YjU5ZDkwYjVmNWQ0ZTRjZmRhNjc0MDIxY2MyMWJiMzYyYTI3NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2bnDj1rAPcHPk8x6Hav5uK2E8pE u1C029riuEM+GCLouEKrQd8hcqH/8T0U4nbvwBvL9j9coMxXQz011G0cswxtkiPw CL0XIi3+cQMrrw7PEd54LYqk4XhulqGJ0EiZbZgQSIvlPtbXbmZOEYStSvIL0Ocf Wm9ugavIQfCjp+BYmKakehZOJZJGit5kC+AwSOZ5wFKPk3a72BqGuPZKo4UdGWcU aCtE/YKVUl9QXUUf6pKTPJRkMdoG+4hIrV3Z4CyFd1Wr2uT/jcJChjwkGw/NRYbY Bza/y7DlOdrctNMHTdQvh3sDox1wUtl5RlM35DbQjgxvPPT3B/gPlvfzCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItZ2QtfXU5M/aZ0AhzCG7NionRkMB8GA1UdIwQY MBaAFEjqMMDyjgImnFdlv0oEVnfKJ5SlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUt ZjI4YjRkNjQwYTQ5LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUtZjI4YjRkNjQwYTQ5 LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMthIKqU KDDN61WsHfyzLev21NJZYNt9R9L8d9SVgbJuB+yDd4bC3v8VOVQfz7cKx2+aDY7r pz7qmIFXS5Bi/6V/ssYF/PCZtOzyjYzwOo+HHNJfkIMvAFNh3o0hTfMNtYWXMtLs miarDGMecTowlyiOYNVbbnjfAOfmSqQxZOUNR+lw3ymCDpAVlMNX6Ql3t4/Mfqtm OROoBe3pofNJMOz4pnz55o8KGgZARaP/OoGJklDK4tDkg32cxUSIhUXopOAiW7m6 LQIh61ZEw8Ua5kBN5mqW/rJjytW4QwZ1NnlGgkkhMYnwWQaGAh7aIHWVX6XeKO1T HbngfpaMjXW6Pw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:01 2025 by rpki-client