This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json) Hash identifier: UBTBlTkWA5bygXcq5GOHAF0ImW7xgtt6pUY90KZ954U= Subject key identifier: 02:68:2B:92:F3:CE:BF:46:02:F7:D7:8A:8E:F7:6A:29:4F:6B:B4:29 Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Certificate serial: 019B1CBC05BBEF27FA0071804A4C7A2B3E5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 12:00:42 +0000 Manifest this update: Sun 14 Dec 2025 12:00:42 +0000 Manifest next update: Mon 15 Dec 2025 12:00:42 +0000 Files and hashes: 1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=) 2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=) 3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=) 4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: Y4O5X+f5LhiV7IjaxDx1NtxGFwhrzJ20jK17tNCimoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:05:bb:ef:27:fa:00:71:80:4a:4c:7a:2b:3e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Validity Not Before: Dec 14 12:00:42 2025 GMT Not After : Dec 15 12:00:42 2025 GMT Subject: CN=02682b92f3cebf4602f7d78a8ef76a294f6bb429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:91:3e:87:c2:c9:05:db:de:99:62:4b:82: 5a:ac:61:17:5c:a4:37:cc:e6:3e:3d:a1:6d:65:ff: b8:31:bb:4b:28:97:f9:de:cf:f2:28:8d:74:c8:43: cf:9c:ff:f5:5f:f0:34:41:93:7e:d3:30:e1:98:a8: 95:71:70:b3:d1:62:6f:bd:cb:b7:a3:bf:6e:61:c0: 92:64:93:39:2f:ea:dc:a7:3a:05:66:b7:11:c1:17: 86:ef:67:e0:c5:c2:16:74:5f:03:fd:7a:87:b3:f0: 5f:55:06:b2:70:89:0b:c6:30:21:83:bc:a7:2a:b3: cb:15:80:07:a0:c0:8f:3f:f6:46:5e:46:59:5b:7d: 2a:56:b0:19:1b:cf:9a:57:ac:1d:9c:0d:54:cf:23: 35:fe:b8:e5:d5:37:7c:28:fc:ee:b4:03:d2:89:2f: aa:47:0b:78:6a:80:6c:8a:ab:c2:e9:75:a7:d5:91: 61:5d:37:a4:e3:e1:f9:ec:6b:93:08:46:81:05:5a: 61:43:8f:06:33:52:46:f8:5a:4c:e1:2e:21:59:08: bf:44:76:f8:ad:a6:df:7d:d7:ab:b2:be:37:c6:1c: 80:80:e6:10:cb:47:60:25:20:2b:7a:97:ce:00:49: ae:e0:1a:04:ce:40:fa:99:b8:f1:51:5e:ae:32:29: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:68:2B:92:F3:CE:BF:46:02:F7:D7:8A:8E:F7:6A:29:4F:6B:B4:29 X509v3 Authority Key Identifier: keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6c:dc:e8:86:2a:ff:0e:ad:e4:6b:2a:26:12:30:2d:b5:3c: a6:5b:a2:8b:90:bb:bf:6d:3b:db:93:4c:4e:3d:9d:cd:6c:20: 0a:7c:d5:7e:c2:72:cb:d1:0e:b3:24:a8:d0:77:f3:63:99:2d: f5:b9:6a:26:b6:96:0b:d2:4a:1b:67:ee:c3:16:7f:e6:0c:7c: 8f:0d:6e:91:73:ec:83:bc:45:12:fe:2d:ec:29:a4:df:ba:60: 3d:3f:be:b4:a2:0c:63:4d:d8:ec:5f:26:a4:94:ff:17:d3:fd: ee:d6:c4:77:87:b0:2c:97:31:4f:ce:ea:1c:e3:5d:04:d0:7a: 48:7e:23:f9:9b:89:4b:c8:6b:59:05:44:8c:d1:62:5b:df:29: d7:30:2a:7e:12:db:c6:11:d4:38:94:ca:0f:0d:c7:5e:0d:a2: 7d:07:87:00:8b:d6:c2:3c:1a:46:fd:62:b3:e7:7a:89:6c:dc: 7f:84:98:07:30:0c:35:59:3d:f6:e0:6f:ed:cb:21:97:c1:d7: 72:f1:e8:3a:1e:f3:54:f7:7f:33:ba:3e:61:f2:35:8e:52:33: 7b:6f:f8:b9:e6:31:e1:ad:b6:06:73:ce:2a:76:04:5b:1d:06: 57:16:1a:15:74:36:69:30:93:2a:d3:49:81:a0:b4:34:38:dc: a1:3a:4e:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvAW77yf6AHGASkx6Kz5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz ZDM5MDgwHhcNMjUxMjE0MTIwMDQyWhcNMjUxMjE1MTIwMDQyWjAzMTEwLwYDVQQD EygwMjY4MmI5MmYzY2ViZjQ2MDJmN2Q3OGE4ZWY3NmEyOTRmNmJiNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fuRPofCyQXb3pliS4JarGEXXKQ3 zOY+PaFtZf+4MbtLKJf53s/yKI10yEPPnP/1X/A0QZN+0zDhmKiVcXCz0WJvvcu3 o79uYcCSZJM5L+rcpzoFZrcRwReG72fgxcIWdF8D/XqHs/BfVQaycIkLxjAhg7yn KrPLFYAHoMCPP/ZGXkZZW30qVrAZG8+aV6wdnA1UzyM1/rjl1Td8KPzutAPSiS+q Rwt4aoBsiqvC6XWn1ZFhXTek4+H57GuTCEaBBVphQ48GM1JG+FpM4S4hWQi/RHb4 rabffdersr43xhyAgOYQy0dgJSArepfOAEmu4BoEzkD6mbjxUV6uMik4eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJoK5Lzzr9GAvfXio73ailPa7QpMB8GA1UdIwQY MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt YTYwNTcxN2QzNGFlLzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGzc6IYq /w6t5GsqJhIwLbU8pluii5C7v20725NMTj2dzWwgCnzVfsJyy9EOsySo0HfzY5kt 9blqJraWC9JKG2fuwxZ/5gx8jw1ukXPsg7xFEv4t7Cmk37pgPT++tKIMY03Y7F8m pJT/F9P97tbEd4ewLJcxT87qHONdBNB6SH4j+ZuJS8hrWQVEjNFiW98p1zAqfhLb xhHUOJTKDw3HXg2ifQeHAIvWwjwaRv1is+d6iWzcf4SYBzAMNVk99uBv7cshl8HX cvHoOh7zVPd/M7o+YfI1jlIze2/4ueYx4a22BnPOKnYEWx0GVxYaFXQ2aTCTKtNJ gaC0NDjcoTpOZA== -----END CERTIFICATE-----Generated at Sun Dec 14 15:21:41 2025 by rpki-client