This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json) Hash identifier: iXYv7fVRxkRAoIuXRdPoe5Z+8QlvqNRduWtE+Y8Hblg= Subject key identifier: 96:6E:D1:95:30:F8:0F:2F:8D:DF:14:94:DC:11:B1:84:FF:E1:06:0A Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c Certificate serial: 019B3AFD4B73C11067BA38CDA536E1EB84F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 09:00:36 +0000 Manifest this update: Sat 20 Dec 2025 09:00:36 +0000 Manifest next update: Sun 21 Dec 2025 09:00:36 +0000 Files and hashes: 1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=) 2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=) 3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: uWB+3Pyqlx/QhkjJhHUDTUrQAAdXhEZSJgSnG8gHn+E=) 4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:4b:73:c1:10:67:ba:38:cd:a5:36:e1:eb:84:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c Validity Not Before: Dec 20 09:00:36 2025 GMT Not After : Dec 21 09:00:36 2025 GMT Subject: CN=966ed19530f80f2f8ddf1494dc11b184ffe1060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:03:9a:b3:d9:96:48:e0:7b:2f:7e:ec:c3: 60:e2:89:c3:31:21:20:0c:73:06:48:98:49:39:92: bc:48:47:8f:81:4b:02:7b:d2:36:8e:a2:d9:0b:c8: b1:e0:d2:b4:7f:24:ab:f6:c4:83:31:bd:f8:6d:bd: 65:2a:b0:b1:1c:dd:41:f3:f6:e3:b4:c5:67:8d:4b: d9:1b:39:ab:b1:b8:cd:16:0a:bc:3a:43:70:cb:4b: 62:c3:47:0d:f3:b5:f5:f0:c1:18:bc:8f:0e:b0:fc: 64:de:13:cc:65:c9:19:91:3c:3b:a0:0f:78:88:c9: 9d:29:6e:02:8f:43:64:55:4b:1b:bc:28:0d:9e:d3: 51:cb:35:9e:20:ef:c1:36:e7:02:2b:d1:e2:da:af: 8f:cd:c4:fd:b8:43:a9:c1:f4:87:20:d0:44:e3:a1: 52:b4:28:9e:03:04:3b:3f:d8:74:f8:95:2a:ee:5e: a2:07:cd:8d:a5:f1:89:18:3e:b3:cf:d9:ae:86:71: b1:fa:e6:81:76:1c:eb:fc:fc:67:44:78:2c:72:7e: 11:ea:9d:32:d8:aa:5d:fc:08:24:15:0c:7f:d9:5b: cf:92:a7:25:ca:b3:3a:29:f2:db:8b:c5:fa:56:4b: ef:e8:f0:10:0f:d3:63:83:d9:fa:e7:ee:ff:92:85: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6E:D1:95:30:F8:0F:2F:8D:DF:14:94:DC:11:B1:84:FF:E1:06:0A X509v3 Authority Key Identifier: keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:43:b2:c9:f5:fc:13:e9:2f:1b:07:e8:26:4c:31:18:24:07: af:13:66:8e:60:54:65:23:36:a7:70:ed:8c:0b:10:17:53:77: d7:ec:8c:a9:c2:35:31:41:17:52:fa:e5:ca:71:b3:09:ae:6a: 78:d9:c6:9b:b1:1d:e4:4f:a9:f2:c8:68:b6:83:ba:c8:d3:6d: ad:44:53:cc:be:37:c9:54:b5:f1:db:07:5b:cf:ff:7c:16:a2: ee:c1:b9:64:27:17:21:63:45:e7:d1:03:ab:24:85:8f:4c:65: d3:14:b2:a8:88:bd:b2:a8:2d:f9:ea:a6:7e:b6:39:41:af:04: a5:de:dc:03:87:a5:c1:a3:80:64:56:a2:40:7d:d3:58:59:3b: ad:63:48:5d:a9:1f:35:f0:b7:95:8b:76:ce:49:84:f3:91:ca: 65:f1:ac:11:05:ba:7e:b0:ec:7c:a4:6c:03:74:9e:a2:a6:2f: 9e:c6:63:52:b1:3b:78:e0:3b:65:0e:16:cb:ad:a9:24:15:dc: 7a:1d:50:4b:29:cb:90:32:31:23:c4:99:94:d3:48:ca:1f:73: 37:95:c2:d1:42:b1:23:81:e3:c6:99:77:4e:85:7d:be:22:23: dc:08:97:d9:78:6c:40:d9:10:b1:cd:fa:90:c2:43:21:be:15: 15:c8:0e:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/UtzwRBnujjNpTbh64T1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODA5NTkyN2VlNTdjY2VlMjU2YWE0MzlmMTYzNjg2YjU4 YzU3MGMwHhcNMjUxMjIwMDkwMDM2WhcNMjUxMjIxMDkwMDM2WjAzMTEwLwYDVQQD Eyg5NjZlZDE5NTMwZjgwZjJmOGRkZjE0OTRkYzExYjE4NGZmZTEwNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupQDmrPZlkjgey9+7MNg4onDMSEg DHMGSJhJOZK8SEePgUsCe9I2jqLZC8ix4NK0fySr9sSDMb34bb1lKrCxHN1B8/bj tMVnjUvZGzmrsbjNFgq8OkNwy0tiw0cN87X18MEYvI8OsPxk3hPMZckZkTw7oA94 iMmdKW4Cj0NkVUsbvCgNntNRyzWeIO/BNucCK9Hi2q+PzcT9uEOpwfSHINBE46FS tCieAwQ7P9h0+JUq7l6iB82NpfGJGD6zz9muhnGx+uaBdhzr/PxnRHgscn4R6p0y 2Kpd/AgkFQx/2VvPkqclyrM6KfLbi8X6Vkvv6PAQD9Njg9n65+7/koWtjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZu0ZUw+A8vjd8UlNwRsYT/4QYKMB8GA1UdIwQY MBaAFEqAlZJ+5XzO4laqQ58WNoa1jFcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEt MGY5ZDQzZDg2NGJiLzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEtMGY5ZDQzZDg2NGJi LzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0OyyfX8 E+kvGwfoJkwxGCQHrxNmjmBUZSM2p3DtjAsQF1N31+yMqcI1MUEXUvrlynGzCa5q eNnGm7Ed5E+p8shotoO6yNNtrURTzL43yVS18dsHW8//fBai7sG5ZCcXIWNF59ED qySFj0xl0xSyqIi9sqgt+eqmfrY5Qa8Epd7cA4elwaOAZFaiQH3TWFk7rWNIXakf NfC3lYt2zkmE85HKZfGsEQW6frDsfKRsA3SeoqYvnsZjUrE7eOA7ZQ4Wy62pJBXc eh1QSynLkDIxI8SZlNNIyh9zN5XC0UKxI4Hjxpl3ToV9viIj3AiX2XhsQNkQsc36 kMJDIb4VFcgOKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:32:01 2025 by rpki-client