This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft File: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft (raw, json) Hash identifier: QxFATrImAxM7bH0967/UqnUBWbKPNlZOlhjEog2b3nE= Subject key identifier: 77:F9:A3:44:F3:75:0B:BE:0E:B8:9A:00:CB:39:EC:A4:BC:BD:D4:03 Authority key identifier: B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22 Certificate issuer: /CN=b2b5df65052ce94a37a8507947c527f0ccffa522 Certificate serial: 019B5976549B6AC556F7CB06B0FB9C622984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft Manifest number: 89 Signing time: Fri 26 Dec 2025 07:01:25 +0000 Manifest this update: Fri 26 Dec 2025 07:01:25 +0000 Manifest next update: Sat 27 Dec 2025 07:01:25 +0000 Files and hashes: 1: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl (hash: 16mvwpsqYNBvIT14yPvUqGBrkFTLFGlXE7s0lPqKqa8=) 2: zXAq3vkN_gcHOS3Bhh3xlgW3vM4.roa (hash: Udoboc8aZE7E7SL94DHmtXVyLEipg3wZ7Pa2hKpsaLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:54:9b:6a:c5:56:f7:cb:06:b0:fb:9c:62:29:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2b5df65052ce94a37a8507947c527f0ccffa522 Validity Not Before: Dec 26 07:01:25 2025 GMT Not After : Dec 27 07:01:25 2025 GMT Subject: CN=77f9a344f3750bbe0eb89a00cb39eca4bcbdd403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:49:1f:c6:72:56:06:87:3e:c1:55:5f:28: b0:14:e7:e1:b6:13:72:71:4f:c3:49:cd:42:b6:86: 2b:05:9a:1f:70:fa:d5:91:6a:6a:9f:3a:6a:8c:c4: c9:0c:a0:dd:cf:18:d8:6c:11:5b:be:ce:75:8d:24: 44:ed:74:b6:6d:d7:36:cf:dd:f8:ce:15:1d:fb:3c: 69:3c:fd:f8:30:8c:ff:74:52:f6:7e:a3:28:ec:07: 14:50:1f:56:ee:4c:36:13:a4:3a:b5:3f:80:1b:75: f7:eb:ae:f1:ad:13:4c:55:53:e2:76:8b:ca:07:79: 99:10:7d:50:0a:f6:4f:45:0f:c9:15:ce:64:cf:15: dd:a3:32:43:65:d8:91:57:bb:bb:19:7a:8f:7b:da: bf:10:03:41:00:c2:1d:4e:7f:4d:89:dc:74:01:1c: 2d:24:9b:27:a0:99:c8:75:2e:2b:1d:4f:ff:a3:04: 65:ac:4d:2b:79:cd:61:8f:67:ab:08:98:2e:e2:7c: 82:b1:34:cf:51:0b:52:52:c7:bf:83:41:b3:24:d7: 7a:64:99:d0:96:40:81:9b:28:f9:d1:29:84:16:84: 66:90:16:d5:84:ff:6f:6e:34:59:a0:17:b3:db:52: 27:13:4e:b0:3a:7c:d4:ec:38:52:21:97:28:40:fe: 23:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F9:A3:44:F3:75:0B:BE:0E:B8:9A:00:CB:39:EC:A4:BC:BD:D4:03 X509v3 Authority Key Identifier: keyid:B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fe:8b:b5:3e:21:f2:70:60:15:92:b7:36:56:9f:e9:08:1c: 96:71:d0:c2:ff:2d:45:97:c2:01:52:40:d7:9b:a6:14:67:b5: 7a:c9:b4:17:8e:82:a5:03:7a:83:00:fc:d1:45:82:a4:25:ea: 05:3d:0c:2c:97:5d:80:7f:d5:7a:81:6d:ea:a4:ec:3a:49:f1: f7:e6:89:93:6a:38:25:a9:7e:60:31:b6:58:94:61:84:b7:d1: 3e:d3:ae:bb:bd:b8:82:a3:ff:34:eb:d6:25:0f:ed:5c:54:92: f6:f2:d6:ec:ea:fe:ea:c5:15:06:fc:07:82:3a:42:a8:d0:e4: 6e:bc:d8:e6:13:cf:98:e9:98:1b:11:d9:71:f1:9c:bc:20:f0: 79:53:f4:1f:07:14:25:2b:7a:24:4d:95:4c:5b:d0:05:65:1a: 69:04:49:55:8a:af:41:b2:26:b7:37:b8:84:cb:7d:24:1d:f9: cc:88:cd:e1:a3:bc:75:06:a2:20:e6:a2:32:13:19:b1:6c:a8: ba:fa:53:5e:7d:df:67:54:a0:65:a7:bb:7f:ff:8d:19:d4:63: ea:ef:d5:9e:3c:6c:b6:53:75:e1:82:a5:6c:0c:1b:86:ac:63: b6:52:f4:a1:79:6a:66:fe:cc:d0:5b:bc:f6:8b:ad:ab:01:17: 0a:a8:c2:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdlSbasVW98sGsPucYimEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYjVkZjY1MDUyY2U5NGEzN2E4NTA3OTQ3YzUyN2YwY2Nm ZmE1MjIwHhcNMjUxMjI2MDcwMTI1WhcNMjUxMjI3MDcwMTI1WjAzMTEwLwYDVQQD Eyg3N2Y5YTM0NGYzNzUwYmJlMGViODlhMDBjYjM5ZWNhNGJjYmRkNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmVJH8ZyVgaHPsFVXyiwFOfhthNy cU/DSc1CtoYrBZofcPrVkWpqnzpqjMTJDKDdzxjYbBFbvs51jSRE7XS2bdc2z934 zhUd+zxpPP34MIz/dFL2fqMo7AcUUB9W7kw2E6Q6tT+AG3X3667xrRNMVVPidovK B3mZEH1QCvZPRQ/JFc5kzxXdozJDZdiRV7u7GXqPe9q/EANBAMIdTn9Nidx0ARwt JJsnoJnIdS4rHU//owRlrE0rec1hj2erCJgu4nyCsTTPUQtSUse/g0GzJNd6ZJnQ lkCBmyj50SmEFoRmkBbVhP9vbjRZoBez21InE06wOnzU7DhSIZcoQP4jDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf5o0TzdQu+DriaAMs57KS8vdQDMB8GA1UdIwQY MBaAFLK132UFLOlKN6hQeUfFJ/DM/6UiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NmNiYzItYmM3Yi00NzU5LTg3MjYt ZWQ3NWM2ZmIxNjk0LzEvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82NmNiYzItYmM3Yi00NzU5LTg3MjYtZWQ3NWM2ZmIxNjk0 LzEvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAof6LtT4h 8nBgFZK3Nlaf6QgclnHQwv8tRZfCAVJA15umFGe1esm0F46CpQN6gwD80UWCpCXq BT0MLJddgH/VeoFt6qTsOknx9+aJk2o4Jal+YDG2WJRhhLfRPtOuu724gqP/NOvW JQ/tXFSS9vLW7Or+6sUVBvwHgjpCqNDkbrzY5hPPmOmYGxHZcfGcvCDweVP0HwcU JSt6JE2VTFvQBWUaaQRJVYqvQbImtze4hMt9JB35zIjN4aO8dQaiIOaiMhMZsWyo uvpTXn3fZ1SgZae7f/+NGdRj6u/VnjxstlN14YKlbAwbhqxjtlL0oXlqZv7M0Fu8 9outqwEXCqjCqA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:19 2025 by rpki-client