This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json) Hash identifier: kBfDp7CzTlz1hkVwo2U/j24+gWhNvdv79PULhHxtCc0= Subject key identifier: 3E:1A:DE:21:70:36:DD:C8:81:F5:77:FD:99:01:53:27:6A:91:FF:8B Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Certificate serial: 019B3D596E5532ABA0E24806820BDAB8A67B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:00:29 +0000 Manifest this update: Sat 20 Dec 2025 20:00:29 +0000 Manifest next update: Sun 21 Dec 2025 20:00:29 +0000 Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=) 2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=) 3: Npx18kARbKwhPsVOQp9AGtW-IRk.roa (hash: vuiB+5rGT82oxQbwKjm+/1tHrIOrr/bLoXItiD0HcWA=) 4: NsYwUgzVMnXieGE8ET2TEjto6eg.roa (hash: oLZXFnzZzj9unXv5slzpUpxTvQH/LdOTTYWq8r8y++4=) 5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: 7GHSREm0TjE3CWqC1BGdLztMUCDftH7rcYWyrNS1zh0=) 6: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:6e:55:32:ab:a0:e2:48:06:82:0b:da:b8:a6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Validity Not Before: Dec 20 20:00:29 2025 GMT Not After : Dec 21 20:00:29 2025 GMT Subject: CN=3e1ade217036ddc881f577fd990153276a91ff8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:b5:ca:c8:49:27:d3:54:11:0b:4f:1e:62: 5f:30:15:19:f2:0c:8a:14:32:8f:cd:da:19:84:d2: de:da:22:1f:c3:fd:eb:a2:0d:36:f8:5c:e4:75:32: 85:27:c0:53:11:ec:dd:3d:d7:e2:80:16:df:bb:15: cd:fd:08:30:b9:2b:72:77:29:28:ca:03:3a:d9:6d: 67:12:da:e9:81:c8:ee:89:2b:81:e3:2f:bb:5f:c9: 28:75:50:06:5b:85:f0:58:85:1b:f3:9d:d3:a1:85: 7e:43:e5:44:dc:fd:6f:9e:a3:c7:e5:17:17:83:e5: 79:51:70:d7:04:fd:21:7d:f6:f0:a7:f8:bc:67:a2: 77:9e:a2:47:35:23:59:7b:79:94:b2:ca:e9:ca:72: 46:b0:24:f0:54:4f:92:a8:39:c7:ed:06:ce:8d:a6: 1a:9b:71:ca:08:86:1e:44:58:c1:a2:24:c4:2e:3c: 0b:75:17:fc:d3:91:56:66:01:b3:78:04:f7:f0:e2: e4:54:8b:c7:69:73:22:82:0d:bc:f0:47:52:6d:36: 12:6c:ec:84:84:ac:fa:47:3d:8c:2c:82:ed:26:78: eb:39:46:b3:60:fa:91:6e:fe:bb:9f:7f:cb:83:20: 36:dc:a3:5b:79:4e:81:50:c5:0b:d4:8f:0b:16:10: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1A:DE:21:70:36:DD:C8:81:F5:77:FD:99:01:53:27:6A:91:FF:8B X509v3 Authority Key Identifier: keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5d:ad:88:0a:2b:59:28:fe:b3:c8:ec:70:81:66:80:d5:b6: e2:c1:10:39:89:1f:f2:41:09:bc:1b:2d:43:9b:9c:be:62:86: a7:f7:c3:58:68:55:90:c0:38:c1:56:0a:6d:ee:8a:cc:03:ef: 24:33:44:3e:d2:9d:0a:4a:76:55:13:23:11:2b:d5:65:3f:5a: b3:75:5a:44:e2:75:17:24:1e:14:36:50:31:19:83:d7:d3:92: 02:91:81:1d:4c:6a:6e:47:a4:13:3a:6e:49:49:6a:97:6b:4b: cb:9a:79:40:0e:d3:56:8d:2a:5a:d3:c2:12:a4:5a:84:0a:93: 97:b5:d7:75:c5:e0:48:6a:87:89:85:c8:59:a0:be:2d:14:66: 4e:1a:61:38:2b:80:32:b5:88:8e:a5:19:fe:89:61:46:cf:75: d3:7b:51:db:53:2d:61:21:5d:ff:cd:c2:a6:03:1e:e0:d1:2c: f8:d8:af:0c:1d:cf:16:d7:45:22:26:aa:8c:0a:8d:f5:57:8a: 2e:9c:d1:2f:61:de:d3:e8:27:6e:d2:9e:f7:bb:ad:ad:61:e4: c9:dc:6a:59:56:2b:34:34:b6:e9:89:5c:78:36:b8:c6:d2:4e: ad:2c:59:6c:23:d2:f0:52:5d:43:58:b9:04:31:9d:dc:18:4f: 5e:ad:69:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WW5VMqug4kgGggvauKZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5 NDkzNjAwHhcNMjUxMjIwMjAwMDI5WhcNMjUxMjIxMjAwMDI5WjAzMTEwLwYDVQQD EygzZTFhZGUyMTcwMzZkZGM4ODFmNTc3ZmQ5OTAxNTMyNzZhOTFmZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxy1yshJJ9NUEQtPHmJfMBUZ8gyK FDKPzdoZhNLe2iIfw/3rog02+FzkdTKFJ8BTEezdPdfigBbfuxXN/QgwuStydyko ygM62W1nEtrpgcjuiSuB4y+7X8kodVAGW4XwWIUb853ToYV+Q+VE3P1vnqPH5RcX g+V5UXDXBP0hffbwp/i8Z6J3nqJHNSNZe3mUssrpynJGsCTwVE+SqDnH7QbOjaYa m3HKCIYeRFjBoiTELjwLdRf805FWZgGzeAT38OLkVIvHaXMigg288EdSbTYSbOyE hKz6Rz2MLILtJnjrOUazYPqRbv67n3/LgyA23KNbeU6BUMUL1I8LFhBYSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4a3iFwNt3IgfV3/ZkBUydqkf+LMB8GA1UdIwQY MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt NjQxZGQ0Mjg4YzQwLzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV2tiAor WSj+s8jscIFmgNW24sEQOYkf8kEJvBstQ5ucvmKGp/fDWGhVkMA4wVYKbe6KzAPv JDNEPtKdCkp2VRMjESvVZT9as3VaROJ1FyQeFDZQMRmD19OSApGBHUxqbkekEzpu SUlql2tLy5p5QA7TVo0qWtPCEqRahAqTl7XXdcXgSGqHiYXIWaC+LRRmThphOCuA MrWIjqUZ/olhRs9103tR21MtYSFd/83CpgMe4NEs+NivDB3PFtdFIiaqjAqN9VeK LpzRL2He0+gnbtKe97utrWHkydxqWVYrNDS26YlceDa4xtJOrSxZbCPS8FJdQ1i5 BDGd3BhPXq1p2w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:09:54 2025 by rpki-client