This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json) Hash identifier: C63Us3WIUihuyNyuiCZeDlIaRObExo0KunO8dwlwcTY= Subject key identifier: 9F:B7:0F:D6:EE:2A:90:BB:C6:DB:CB:A8:DB:64:3E:A8:75:92:F1:9F Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a Certificate serial: 019B3A91471EF7CB289CAE5184BB0C0FE0DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft Manifest number: 08E4 Signing time: Sat 20 Dec 2025 07:02:37 +0000 Manifest this update: Sat 20 Dec 2025 07:02:37 +0000 Manifest next update: Sun 21 Dec 2025 07:02:37 +0000 Files and hashes: 1: N75Q0uiaGqKgGJ2k7yeqIONc8k0.roa (hash: Q63lKGUZoNUeD8FAv4eG2ZAxCKPCbVbyxrGYOjEepus=) 2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: VY2dme4wE636MmvwFhU4dRgYE1OPzsguh+Bdu/V7ffQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:47:1e:f7:cb:28:9c:ae:51:84:bb:0c:0f:e0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a Validity Not Before: Dec 20 07:02:37 2025 GMT Not After : Dec 21 07:02:37 2025 GMT Subject: CN=9fb70fd6ee2a90bbc6dbcba8db643ea87592f19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:92:2e:13:ed:f9:de:ff:89:34:7e:32:ae: 09:8b:a2:f3:b1:74:3a:f2:15:05:35:58:01:6b:65: c1:29:4c:2e:bd:68:35:9e:ed:53:ec:80:8a:48:d8: df:c3:47:14:a6:3b:fd:dc:fc:35:2d:c9:13:20:bd: 8a:33:55:e0:02:40:99:a8:14:82:19:60:25:a0:ff: c0:17:e4:91:7d:7c:02:67:82:bb:0b:a0:6b:87:92: bb:87:b6:5c:e4:84:1d:ad:a5:9f:1f:d1:8f:82:b1: 48:75:45:a4:cd:97:2e:af:c8:4a:b8:8c:9e:70:f3: d6:e4:0a:aa:6c:8e:47:6b:11:de:10:c4:f2:fe:5d: 6d:aa:09:eb:16:fd:11:cf:4a:f7:c2:d6:9d:54:7b: e3:e5:4a:a3:29:44:db:5e:87:fd:76:97:06:0f:41: b1:77:5e:af:67:d7:81:81:53:30:4a:be:05:db:ca: 9e:ef:62:43:91:ae:2b:56:7c:8a:2d:6f:2d:c5:5d: 80:80:c8:d7:3d:29:2f:f7:38:ef:18:15:a9:2f:51: d0:d0:ff:39:04:ad:d8:d8:f1:ff:6b:7a:03:9b:9b: ea:36:ae:44:ae:48:a0:e1:6c:94:83:1a:cf:65:5c: a4:2f:8b:45:75:a0:43:35:14:45:7b:ae:65:50:ce: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B7:0F:D6:EE:2A:90:BB:C6:DB:CB:A8:DB:64:3E:A8:75:92:F1:9F X509v3 Authority Key Identifier: keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5c:06:5e:15:77:f0:67:45:13:ef:2c:51:03:47:c0:ea:bd: 97:f0:73:79:c0:71:d5:16:87:cc:30:d5:5d:c7:94:cf:9b:9d: 3f:78:13:a0:be:2e:e7:7a:a0:84:53:34:41:47:95:01:5b:06: b2:40:7c:05:4f:0c:f8:32:18:29:b9:bd:a1:4d:d3:22:4b:82: cd:e2:36:e1:c6:dd:76:f7:bc:6e:ce:87:d5:54:0f:e1:4a:2b: f1:e9:71:fe:91:42:06:87:0a:95:34:19:e0:76:d6:1c:58:d9: a7:93:66:09:9f:27:2b:dc:33:48:ee:ea:5e:6e:0e:63:d6:5c: 1c:e6:02:c8:1b:c1:f4:a9:7f:b0:fd:94:0f:53:e0:2a:9f:a3: b8:39:0b:9f:99:8d:31:db:47:02:58:71:c6:cb:15:b9:cd:1b: ba:7e:c1:ca:06:af:bc:39:a7:27:45:5d:44:45:36:22:86:a9: eb:0e:3f:fc:1c:a8:97:64:93:42:31:05:45:d5:1b:98:72:9d: c0:fc:b1:be:ca:96:c1:cb:22:0d:8a:25:f0:7f:7f:45:d6:12: 11:77:43:c5:fa:c0:65:37:b7:a9:59:23:1b:73:23:ac:6b:17: 60:76:c7:36:2c:30:30:92:06:14:0e:eb:46:f2:f4:08:d9:f5: 21:b7:58:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kUce98sonK5RhLsMD+DdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwN2ZhZmRiODZkMzhmMzdiZjBjMjZkM2YyNzMxZmRlZjZi MTRlNGEwHhcNMjUxMjIwMDcwMjM3WhcNMjUxMjIxMDcwMjM3WjAzMTEwLwYDVQQD Eyg5ZmI3MGZkNmVlMmE5MGJiYzZkYmNiYThkYjY0M2VhODc1OTJmMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYKSLhPt+d7/iTR+Mq4Ji6LzsXQ6 8hUFNVgBa2XBKUwuvWg1nu1T7ICKSNjfw0cUpjv93Pw1LckTIL2KM1XgAkCZqBSC GWAloP/AF+SRfXwCZ4K7C6Brh5K7h7Zc5IQdraWfH9GPgrFIdUWkzZcur8hKuIye cPPW5AqqbI5HaxHeEMTy/l1tqgnrFv0Rz0r3wtadVHvj5UqjKUTbXof9dpcGD0Gx d16vZ9eBgVMwSr4F28qe72JDka4rVnyKLW8txV2AgMjXPSkv9zjvGBWpL1HQ0P85 BK3Y2PH/a3oDm5vqNq5Erkig4WyUgxrPZVykL4tFdaBDNRRFe65lUM7MxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+3D9buKpC7xtvLqNtkPqh1kvGfMB8GA1UdIwQY MBaAFLB/r9uG0483vwwm0/JzH972sU5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNmQyNjMtMjlmOS00NjEzLWJiN2Qt NDkzOGI4ZDBjM2RlLzEvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNmQyNjMtMjlmOS00NjEzLWJiN2QtNDkzOGI4ZDBjM2Rl LzEvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElwGXhV3 8GdFE+8sUQNHwOq9l/BzecBx1RaHzDDVXceUz5udP3gToL4u53qghFM0QUeVAVsG skB8BU8M+DIYKbm9oU3TIkuCzeI24cbddve8bs6H1VQP4Uor8elx/pFCBocKlTQZ 4HbWHFjZp5NmCZ8nK9wzSO7qXm4OY9ZcHOYCyBvB9Kl/sP2UD1PgKp+juDkLn5mN MdtHAlhxxssVuc0bun7BygavvDmnJ0VdREU2Ioap6w4//Byol2STQjEFRdUbmHKd wPyxvsqWwcsiDYol8H9/RdYSEXdDxfrAZTe3qVkjG3MjrGsXYHbHNiwwMJIGFA7r RvL0CNn1IbdYqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:46:34 2025 by rpki-client