This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json) Hash identifier: zuLki/majhxn3BAgmaziiF8bfVPwcUyNFX7bx/gGR9g= Subject key identifier: 83:8D:E9:69:F5:41:47:42:4F:53:41:4B:12:9B:18:2A:1A:1D:90:49 Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46 Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046 Certificate serial: 019B503C870B378551130DAD4A7DE30E2729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft Manifest number: 0474 Signing time: Wed 24 Dec 2025 12:01:42 +0000 Manifest this update: Wed 24 Dec 2025 12:01:42 +0000 Manifest next update: Thu 25 Dec 2025 12:01:42 +0000 Files and hashes: 1: K12F-uP3adhB5XYkvRWOwtyWFxQ.roa (hash: 4K99rP4m/GgxDIw4+Su5OB+ocoFQK/2aIqkgeWKmoU4=) 2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: wq5IgThcp+7Vw76ztP2hRiARkpdYv1076BZ/I843Vtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:87:0b:37:85:51:13:0d:ad:4a:7d:e3:0e:27:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046 Validity Not Before: Dec 24 12:01:42 2025 GMT Not After : Dec 25 12:01:42 2025 GMT Subject: CN=838de969f54147424f53414b129b182a1a1d9049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:bf:e4:dd:40:52:07:5b:ae:8f:2d:02:c7: 0a:79:d1:13:2e:11:fa:61:d1:f7:e6:11:76:80:ff: 90:30:fb:f2:6d:2a:ed:e0:b1:90:29:7f:ab:88:6d: c0:53:db:cb:df:8a:be:da:8c:b8:d5:bf:7c:b4:89: 13:24:79:c1:75:45:1e:c9:fd:a0:09:64:f4:34:de: dc:8c:7c:97:88:63:7b:6a:3a:04:4e:4c:ae:df:04: d9:f0:30:7c:62:56:38:c2:1d:50:53:80:f1:89:c2: 3d:80:c7:c9:a9:08:40:b2:0d:4d:e9:21:b6:23:0d: 73:ee:ef:00:b2:61:20:c1:81:ef:18:2e:e7:85:9a: ca:8d:7d:16:b4:bf:ab:3b:37:3c:84:48:76:c1:c5: 58:03:57:1c:f0:97:ce:e8:db:e8:52:cf:69:a9:59: f4:99:ac:26:dc:9d:1a:a6:b8:29:55:98:11:e0:14: 51:b5:34:e1:88:a6:9e:94:4f:9a:ff:24:24:1a:7c: 52:7f:54:fc:be:ea:bc:eb:50:54:3c:85:e1:33:8c: 5e:2b:fe:7e:da:6e:6e:12:81:f2:e3:0e:77:76:34: 7a:be:03:89:fe:95:af:80:76:65:13:a7:0d:bc:bb: cd:53:cc:72:07:d4:d8:10:4a:59:b0:4d:99:8e:3a: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8D:E9:69:F5:41:47:42:4F:53:41:4B:12:9B:18:2A:1A:1D:90:49 X509v3 Authority Key Identifier: keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:80:f4:f0:bc:6f:0c:ec:73:8b:ff:c6:1f:fa:f4:07:dc:2f: 96:b8:12:89:fa:62:e1:61:f9:0c:ba:6d:06:b1:6d:e4:d5:a5: 78:6d:42:c0:81:ac:a4:cd:72:5b:77:04:d4:fb:16:21:dc:6b: f0:5b:d7:58:e9:d9:77:0c:7f:fd:38:30:d6:f9:60:6d:c6:f6: ab:5c:c0:9c:18:a9:d2:d8:19:1d:f2:02:a2:db:fe:52:89:72: b9:0c:9f:63:16:5e:83:4f:7d:d4:dd:44:ec:59:98:39:56:68: bc:bc:b4:6d:14:0d:73:f8:cf:df:a3:df:a7:f3:03:55:45:6a: 7d:2b:d6:13:d3:a6:07:22:be:43:1b:64:ba:6c:89:d2:74:9d: f1:6e:dd:91:96:66:c7:8f:a5:33:d7:ef:1f:1d:ea:6c:a7:1b: 22:61:7a:5a:47:b9:a3:65:a7:21:98:08:35:54:c2:eb:f6:60: 16:63:54:e1:3f:a3:45:69:1b:e1:34:15:a8:ed:01:47:cc:47: 07:bd:40:8e:27:aa:e8:5e:c9:56:a8:af:10:d9:ae:64:43:31: dc:39:87:45:8b:91:62:64:95:1e:d8:05:a6:f9:7b:e3:83:e2: 3f:58:2c:19:53:33:df:d2:c7:11:b6:77:0e:42:9c:69:9e:70: 9a:31:23:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPIcLN4VREw2tSn3jDicpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWQxYzI4OTFkODgwNDY5YTIwZDhiN2YxOGU0Y2Q4NjU0 MzAwNDYwHhcNMjUxMjI0MTIwMTQyWhcNMjUxMjI1MTIwMTQyWjAzMTEwLwYDVQQD Eyg4MzhkZTk2OWY1NDE0NzQyNGY1MzQxNGIxMjliMTgyYTFhMWQ5MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPK/5N1AUgdbro8tAscKedETLhH6 YdH35hF2gP+QMPvybSrt4LGQKX+riG3AU9vL34q+2oy41b98tIkTJHnBdUUeyf2g CWT0NN7cjHyXiGN7ajoETkyu3wTZ8DB8YlY4wh1QU4DxicI9gMfJqQhAsg1N6SG2 Iw1z7u8AsmEgwYHvGC7nhZrKjX0WtL+rOzc8hEh2wcVYA1cc8JfO6NvoUs9pqVn0 mawm3J0aprgpVZgR4BRRtTThiKaelE+a/yQkGnxSf1T8vuq861BUPIXhM4xeK/5+ 2m5uEoHy4w53djR6vgOJ/pWvgHZlE6cNvLvNU8xyB9TYEEpZsE2Zjjq94wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFION6Wn1QUdCT1NBSxKbGCoaHZBJMB8GA1UdIwQY MBaAFLMdHCiR2IBGmiDYt/GOTNhlQwBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAt YWYxYTBlMDBmODIzLzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAtYWYxYTBlMDBmODIz LzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYD08Lxv DOxzi//GH/r0B9wvlrgSifpi4WH5DLptBrFt5NWleG1CwIGspM1yW3cE1PsWIdxr 8FvXWOnZdwx//Tgw1vlgbcb2q1zAnBip0tgZHfICotv+UolyuQyfYxZeg0991N1E 7FmYOVZovLy0bRQNc/jP36Pfp/MDVUVqfSvWE9OmByK+QxtkumyJ0nSd8W7dkZZm x4+lM9fvHx3qbKcbImF6Wke5o2WnIZgINVTC6/ZgFmNU4T+jRWkb4TQVqO0BR8xH B71Ajieq6F7JVqivENmuZEMx3DmHRYuRYmSVHtgFpvl744PiP1gsGVMz39LHEbZ3 DkKcaZ5wmjEj1g== -----END CERTIFICATE-----Generated at Wed Dec 24 21:33:00 2025 by rpki-client