This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json) Hash identifier: 1NVLsgTlGOu4YiGGarD1msqwfdz8qEDilor0/k4Zjjo= Subject key identifier: 45:14:B9:8B:E2:BC:77:B1:BB:D9:9C:D7:90:30:23:BF:4B:28:E4:57 Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Certificate serial: 019B4091BC6C2839EA72F6C1C0542BE86EF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft Manifest number: 147B Signing time: Sun 21 Dec 2025 11:00:51 +0000 Manifest this update: Sun 21 Dec 2025 11:00:51 +0000 Manifest next update: Mon 22 Dec 2025 11:00:51 +0000 Files and hashes: 1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=) 2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=) 3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=) 4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=) 5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=) 6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=) 7: q1aUxTH67vKCNVudozumhgFJnN0.roa (hash: Gev4Jmq/q5w1K/DLzN5ZlF/rU5AntRJHyQ0iiS7LMww=) 8: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: O+wNe8RYPR4kBPJg4N38yH7R5YvVtIYy2jkmV1bTk5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:bc:6c:28:39:ea:72:f6:c1:c0:54:2b:e8:6e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Validity Not Before: Dec 21 11:00:51 2025 GMT Not After : Dec 22 11:00:51 2025 GMT Subject: CN=4514b98be2bc77b1bbd99cd7903023bf4b28e457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:8c:8a:1c:aa:72:3d:c3:5a:d1:57:aa:7e: 62:46:32:3b:08:d2:e8:d8:a1:34:06:cd:e2:cd:6c: 7a:70:16:01:09:f7:d1:f2:71:10:c2:0d:2d:90:49: f5:09:03:05:12:55:65:b7:51:bc:81:e0:fb:d4:0e: e1:96:f6:d7:fd:14:39:57:0e:ab:2e:7d:01:72:fa: d2:69:68:63:9b:33:b3:62:b2:f1:d3:7f:c7:b8:a0: 65:b3:30:ab:a0:58:e4:ed:ef:1c:b7:f3:bf:a2:df: 3d:63:e3:c7:76:50:c2:ac:48:57:54:2f:6a:07:53: 67:60:a0:ff:1f:76:2a:ad:d9:38:f3:4e:54:68:7a: 71:46:56:55:23:b0:02:13:5f:ec:d4:e7:32:45:cb: 4e:38:fd:ab:02:a3:fd:4f:45:a5:15:3d:90:23:92: 10:76:f2:94:da:93:2c:37:5f:64:d3:18:76:60:18: e0:5b:27:1d:21:f4:51:93:11:35:9f:e8:f1:21:07: 40:c0:c1:bc:b9:da:f4:66:f4:a5:0f:df:bf:3f:0b: 95:23:17:7f:f3:e7:d1:85:de:05:c7:82:52:13:03: 4d:a5:24:92:d5:e2:44:f6:15:1b:0f:26:ba:ef:e7: 4e:9a:22:8e:97:63:47:62:73:b2:7f:21:3c:71:ff: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:14:B9:8B:E2:BC:77:B1:BB:D9:9C:D7:90:30:23:BF:4B:28:E4:57 X509v3 Authority Key Identifier: keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ae:4a:87:21:63:81:5a:0a:96:64:c9:6d:92:1d:25:e6:0a: 45:ba:80:a1:09:75:1e:70:f8:d1:bb:5f:42:0f:b1:8f:68:fc: f9:17:bd:41:36:50:a4:91:80:4e:f7:9a:07:d7:5a:95:a5:44: 78:88:dd:5a:6e:5a:b6:90:fa:4e:24:4a:42:98:e5:61:78:f8: 03:88:25:03:54:35:d8:0d:f7:24:2d:19:01:02:3f:d1:24:f9: 0e:a1:7c:ec:42:b1:c6:13:d1:9b:d2:ff:eb:2e:1d:32:49:42: b7:38:bb:e9:77:43:08:b6:89:53:48:73:40:75:2f:61:07:92: 64:3f:8f:8e:13:26:3b:73:c6:c5:de:90:72:25:59:8d:f8:85: 7d:84:7b:57:c1:10:17:63:9e:a6:42:a9:66:19:4b:35:67:de: 7b:e9:00:52:13:bf:42:48:95:9c:37:28:c1:20:12:7c:24:3a: ef:b8:1a:8e:54:67:43:88:4e:f7:d6:49:f5:36:64:eb:56:45: f9:33:9e:f6:70:7f:20:cb:b1:ce:32:d3:e1:2a:8a:fa:03:63: 6b:f6:8f:14:3f:93:f7:ea:26:1d:81:83:30:db:9a:f5:9a:e9: f3:fe:e9:0c:da:cf:34:7f:d2:1e:a7:89:18:54:62:56:bd:81: 4d:8c:e8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkbxsKDnqcvbBwFQr6G71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy YjAzYzAwHhcNMjUxMjIxMTEwMDUxWhcNMjUxMjIyMTEwMDUxWjAzMTEwLwYDVQQD Eyg0NTE0Yjk4YmUyYmM3N2IxYmJkOTljZDc5MDMwMjNiZjRiMjhlNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oSMihyqcj3DWtFXqn5iRjI7CNLo 2KE0Bs3izWx6cBYBCffR8nEQwg0tkEn1CQMFElVlt1G8geD71A7hlvbX/RQ5Vw6r Ln0BcvrSaWhjmzOzYrLx03/HuKBlszCroFjk7e8ct/O/ot89Y+PHdlDCrEhXVC9q B1NnYKD/H3Yqrdk4805UaHpxRlZVI7ACE1/s1OcyRctOOP2rAqP9T0WlFT2QI5IQ dvKU2pMsN19k0xh2YBjgWycdIfRRkxE1n+jxIQdAwMG8udr0ZvSlD9+/PwuVIxd/ 8+fRhd4Fx4JSEwNNpSSS1eJE9hUbDya67+dOmiKOl2NHYnOyfyE8cf8tBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUUuYvivHexu9mc15AwI79LKORXMB8GA1UdIwQY MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt YTcyNDdlOWQ1ZjNhLzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp65KhyFj gVoKlmTJbZIdJeYKRbqAoQl1HnD40btfQg+xj2j8+Re9QTZQpJGATveaB9dalaVE eIjdWm5atpD6TiRKQpjlYXj4A4glA1Q12A33JC0ZAQI/0ST5DqF87EKxxhPRm9L/ 6y4dMklCtzi76XdDCLaJU0hzQHUvYQeSZD+PjhMmO3PGxd6QciVZjfiFfYR7V8EQ F2OepkKpZhlLNWfee+kAUhO/QkiVnDcowSASfCQ677gajlRnQ4hO99ZJ9TZk61ZF +TOe9nB/IMuxzjLT4SqK+gNja/aPFD+T9+omHYGDMNua9Zrp8/7pDNrPNH/SHqeJ GFRiVr2BTYzoBQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:47:54 2025 by rpki-client