This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft File: sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft (raw, json) Hash identifier: DTkui2DEBS9SocUVZPTk/53wx7H9ipB/QKaZquzCr1A= Subject key identifier: 77:1A:F3:6D:59:9C:0E:75:E3:F2:FE:52:C7:72:50:AA:B8:D8:F2:07 Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98 Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998 Certificate serial: 019B5C40024C235ECCB182E25F0BEB4AAACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft Manifest number: 130A Signing time: Fri 26 Dec 2025 20:00:57 +0000 Manifest this update: Fri 26 Dec 2025 20:00:57 +0000 Manifest next update: Sat 27 Dec 2025 20:00:57 +0000 Files and hashes: 1: HSNefFgXaRWCGcIv1fjoOpFklrI.roa (hash: cKpMHes+RehvKJ31+pA2N64A397k3fGtWACpN0dogjA=) 2: sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl (hash: w1d7XEixnGSgHYRO3xhjBRfwPxn1plQGgLhFy8y4SNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:02:4c:23:5e:cc:b1:82:e2:5f:0b:eb:4a:aa:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998 Validity Not Before: Dec 26 20:00:57 2025 GMT Not After : Dec 27 20:00:57 2025 GMT Subject: CN=771af36d599c0e75e3f2fe52c77250aab8d8f207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:ef:d1:97:15:0c:80:92:86:80:44:41:ce: 66:45:05:b2:c9:b3:4d:87:fa:d7:7f:cc:df:ef:65: 87:bc:4d:f6:37:82:f5:6e:ef:9d:39:30:28:d2:76: 89:bf:ae:7b:9a:f5:0a:80:6f:37:33:22:9d:f3:4e: d9:59:68:a1:c2:f4:6e:52:1f:80:4a:32:2f:5d:9a: fc:b7:b0:fd:80:02:8a:03:2f:8c:71:94:06:5c:9d: 15:36:00:d3:8f:3f:1a:8c:8b:f7:46:2a:13:1e:93: 63:79:40:95:15:64:3e:42:13:26:36:49:fb:0b:4a: ef:a6:e0:a2:99:60:d2:dd:bf:69:e1:49:78:80:7e: dd:b1:7c:cf:ae:c8:c3:ae:e3:db:ef:64:d1:db:dc: b5:1a:9f:ab:8b:8d:4e:a8:a2:67:8e:50:84:d9:a6: 6c:1e:66:f8:48:52:36:9d:13:a2:d5:4b:f6:39:21: d5:00:5b:6e:fe:e0:1c:b1:56:13:e2:d8:1e:db:cb: 39:e0:12:a5:e3:c9:b6:db:32:3a:fc:ff:73:bb:d9: c8:41:d6:a9:9d:be:f2:41:b6:d3:9e:d6:43:e0:92: ea:0f:db:c8:cc:39:25:b3:12:04:7e:3f:2d:d2:a6: 28:6b:cb:40:08:53:d2:ba:48:d5:60:b4:30:f7:59: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1A:F3:6D:59:9C:0E:75:E3:F2:FE:52:C7:72:50:AA:B8:D8:F2:07 X509v3 Authority Key Identifier: keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:67:dc:e9:aa:21:cf:25:5e:b1:a2:8a:f5:2f:f0:d0:e7:b5: 49:c9:ed:0c:5a:62:59:86:48:7e:76:56:3a:10:aa:85:06:68: ba:67:f4:ef:88:b8:0b:40:a8:09:ba:55:49:99:7d:c3:64:4c: 1a:c9:6e:88:66:c3:7b:05:ae:8e:72:0f:22:a4:1f:3c:9e:be: ca:e4:42:d3:bf:61:6c:2f:3c:22:3f:7f:8e:52:d1:03:bf:13: 58:d9:60:52:3d:23:79:2e:20:48:25:c4:cb:12:d5:c7:22:86: f3:23:7e:3a:a0:b2:d1:4d:71:13:0e:0b:58:2e:88:a1:c1:25: bf:3c:f3:70:ff:31:e1:9d:2c:ac:2b:69:a6:b3:a2:3a:ee:b0: fd:c3:ac:68:c7:40:4a:b8:96:a1:4e:24:53:38:36:8d:c0:a9: dd:5c:f1:af:04:6f:d1:60:9d:08:b7:d4:57:53:ab:89:b1:8e: 30:4f:b4:a8:47:53:09:2a:09:cd:aa:0c:68:0d:92:22:f2:a9: 30:c8:03:da:9b:18:ca:1a:2c:c5:d7:fa:a1:13:67:14:0c:40: c6:bd:62:3d:90:5f:6b:b1:b6:b8:47:77:71:29:35:e0:95:fd: c0:ac:bf:e2:b5:5d:a1:a9:53:8e:47:86:7b:f7:52:dc:a7:de: 03:bb:33:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQAJMI17MsYLiXwvrSqrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMWE1OWQwYTYxYWE2MTc0NDM4OTg4Y2M4MzU5OGRiZmVh NWE5OTgwHhcNMjUxMjI2MjAwMDU3WhcNMjUxMjI3MjAwMDU3WjAzMTEwLwYDVQQD Eyg3NzFhZjM2ZDU5OWMwZTc1ZTNmMmZlNTJjNzcyNTBhYWI4ZDhmMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlXv0ZcVDICShoBEQc5mRQWyybNN h/rXf8zf72WHvE32N4L1bu+dOTAo0naJv657mvUKgG83MyKd807ZWWihwvRuUh+A SjIvXZr8t7D9gAKKAy+McZQGXJ0VNgDTjz8ajIv3RioTHpNjeUCVFWQ+QhMmNkn7 C0rvpuCimWDS3b9p4Ul4gH7dsXzPrsjDruPb72TR29y1Gp+ri41OqKJnjlCE2aZs Hmb4SFI2nROi1Uv2OSHVAFtu/uAcsVYT4tge28s54BKl48m22zI6/P9zu9nIQdap nb7yQbbTntZD4JLqD9vIzDklsxIEfj8t0qYoa8tACFPSukjVYLQw91m9IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHca821ZnA514/L+UsdyUKq42PIHMB8GA1UdIwQY MBaAFLAaWdCmGqYXRDiYjMg1mNv+pamYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JwWjBLWWFwaGRFT0ppTXlEV1kyXzZscVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMGU4ZTMtYTRlNy00YTllLWI3OTgt MDRlMWZhODA4NDI2LzEvc0JwWjBLWWFwaGRFT0ppTXlEV1kyXzZscVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMGU4ZTMtYTRlNy00YTllLWI3OTgtMDRlMWZhODA4NDI2 LzEvc0JwWjBLWWFwaGRFT0ppTXlEV1kyXzZscVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2fc6aoh zyVesaKK9S/w0Oe1ScntDFpiWYZIfnZWOhCqhQZoumf074i4C0CoCbpVSZl9w2RM GsluiGbDewWujnIPIqQfPJ6+yuRC079hbC88Ij9/jlLRA78TWNlgUj0jeS4gSCXE yxLVxyKG8yN+OqCy0U1xEw4LWC6IocElvzzzcP8x4Z0srCtpprOiOu6w/cOsaMdA SriWoU4kUzg2jcCp3VzxrwRv0WCdCLfUV1OribGOME+0qEdTCSoJzaoMaA2SIvKp MMgD2psYyhosxdf6oRNnFAxAxr1iPZBfa7G2uEd3cSk14JX9wKy/4rVdoalTjkeG e/dS3KfeA7sz0g== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:35 2025 by rpki-client