This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json) Hash identifier: hsCk7A7aCO8I1z54c5NBJyQcv+OBkCdWd8Kw1ABHt5A= Subject key identifier: B0:37:CF:71:ED:5D:92:7C:2D:F9:25:F7:07:13:2C:62:2D:0A:EC:DF Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02 Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02 Certificate serial: 019B2D0C4760A621DF042B18AB6E5E9D2524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft Manifest number: 1785 Signing time: Wed 17 Dec 2025 16:02:17 +0000 Manifest this update: Wed 17 Dec 2025 16:02:17 +0000 Manifest next update: Thu 18 Dec 2025 16:02:17 +0000 Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=) 2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: m/5HXL+OJ73WGNpF/3dQfcWpx5eiSDA90/bv/ENCawY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:47:60:a6:21:df:04:2b:18:ab:6e:5e:9d:25:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02 Validity Not Before: Dec 17 16:02:17 2025 GMT Not After : Dec 18 16:02:17 2025 GMT Subject: CN=b037cf71ed5d927c2df925f707132c622d0aecdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:1f:62:b0:5a:60:99:a6:fa:00:3a:55:21: d7:55:e7:18:a7:b3:83:42:45:72:b1:90:c2:b0:ec: 5d:9d:b3:cf:d8:ae:7f:12:8b:7a:17:fc:06:1d:c3: 6f:13:a1:24:cf:32:20:31:39:b7:ad:72:4a:3e:53: 39:97:ac:c7:10:91:52:7b:80:63:6a:c2:5a:39:32: e6:92:70:a6:70:fa:fb:17:e4:d2:97:00:07:49:93: 39:97:2c:03:f7:87:72:23:36:ec:31:e0:67:95:cb: 5d:af:61:75:45:12:7d:0a:e4:44:64:4e:5e:e2:3c: b1:19:f3:a1:ac:f9:5e:83:a5:ba:4d:0f:16:7e:c8: 3e:d9:16:bf:43:6b:b0:6d:d3:36:08:92:cb:8b:28: 0c:c3:cb:70:3d:26:25:96:3b:fb:11:ac:45:ba:56: b7:b3:d1:09:03:5a:85:20:c9:8a:e3:80:8d:98:ed: 3a:ed:90:79:5f:2f:12:7b:65:d7:dc:0d:b6:68:c2: 21:28:6b:86:e9:98:72:86:4e:81:89:33:f4:17:9e: 0a:fa:bf:9d:85:37:4f:a1:15:4c:01:ee:a4:fe:2e: fa:89:c1:2e:b1:08:e4:56:0c:cf:37:15:8c:94:46: 0f:04:e2:f9:8a:09:d9:fc:00:3c:ca:ec:d1:fb:a6: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:37:CF:71:ED:5D:92:7C:2D:F9:25:F7:07:13:2C:62:2D:0A:EC:DF X509v3 Authority Key Identifier: keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4f:57:d6:fb:6b:71:e0:b7:4c:25:63:fc:25:5f:fa:07:22: ac:57:b6:e9:95:d4:ca:f5:b3:eb:d7:c6:bc:da:6b:03:3c:73: 06:99:61:64:d3:a0:aa:6d:17:2d:e2:10:a2:ad:3a:44:68:cd: 69:8a:e8:08:e3:65:6e:85:59:65:94:29:56:06:2b:44:bf:d5: e1:3d:35:12:c2:9e:5e:49:be:0b:3d:f5:bc:53:12:2f:2f:4c: 8e:dc:0e:72:4b:78:8b:16:63:db:2e:75:da:0f:a3:f1:6a:b4: 3c:eb:d9:32:0b:47:a3:6a:fc:29:f9:d3:7c:d7:0a:47:2b:32: 7a:ae:9b:84:a5:e7:51:b0:c3:fc:54:bf:b4:a8:db:8f:d3:09: 1a:1e:9e:70:b0:b7:e8:ac:b0:64:e7:ec:95:f8:09:5c:82:00: 8d:46:cd:05:70:1a:04:77:9d:32:c3:71:5c:3d:dd:78:a9:03: 1b:d1:0c:91:ac:32:56:e5:ba:f8:2c:5e:2e:bd:e5:e3:11:c9: 44:56:5c:9f:68:b1:d1:a9:b5:20:f2:7b:8d:df:52:99:10:a5: f4:d0:30:89:0a:30:24:e0:b4:82:c9:5e:37:58:29:6a:5d:e1: 07:d9:bd:cf:d6:5c:94:ee:03:b4:71:49:08:e4:fb:5e:79:a8: bd:70:e2:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDEdgpiHfBCsYq25enSUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NzhkMzI4YmNkZTUyOTRmMzcyNzY1YzExYWVlZjI4MTU1 YjBmMDIwHhcNMjUxMjE3MTYwMjE3WhcNMjUxMjE4MTYwMjE3WjAzMTEwLwYDVQQD EyhiMDM3Y2Y3MWVkNWQ5MjdjMmRmOTI1ZjcwNzEzMmM2MjJkMGFlY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtngfYrBaYJmm+gA6VSHXVecYp7OD QkVysZDCsOxdnbPP2K5/Eot6F/wGHcNvE6EkzzIgMTm3rXJKPlM5l6zHEJFSe4Bj asJaOTLmknCmcPr7F+TSlwAHSZM5lywD94dyIzbsMeBnlctdr2F1RRJ9CuREZE5e 4jyxGfOhrPleg6W6TQ8Wfsg+2Ra/Q2uwbdM2CJLLiygMw8twPSYlljv7EaxFula3 s9EJA1qFIMmK44CNmO067ZB5Xy8Se2XX3A22aMIhKGuG6Zhyhk6BiTP0F54K+r+d hTdPoRVMAe6k/i76icEusQjkVgzPNxWMlEYPBOL5ignZ/AA8yuzR+6aOTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLA3z3HtXZJ8Lfkl9wcTLGItCuzfMB8GA1UdIwQY MBaAFEl40yi83lKU83J2XBGu7ygVWw8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjkt OGM3ZDIwOTIzYjA4LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjktOGM3ZDIwOTIzYjA4 LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXU9X1vtr ceC3TCVj/CVf+gcirFe26ZXUyvWz69fGvNprAzxzBplhZNOgqm0XLeIQoq06RGjN aYroCONlboVZZZQpVgYrRL/V4T01EsKeXkm+Cz31vFMSLy9MjtwOckt4ixZj2y51 2g+j8Wq0POvZMgtHo2r8KfnTfNcKRysyeq6bhKXnUbDD/FS/tKjbj9MJGh6ecLC3 6KywZOfslfgJXIIAjUbNBXAaBHedMsNxXD3deKkDG9EMkawyVuW6+CxeLr3l4xHJ RFZcn2ix0am1IPJ7jd9SmRCl9NAwiQowJOC0gsleN1gpal3hB9m9z9ZclO4DtHFJ COT7XnmovXDi7w== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:39 2025 by rpki-client