This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json) Hash identifier: vAZnEzi2ZtA8cAHyAEzkyy+IbNEwrEJLjNTXUIowOkY= Subject key identifier: BB:46:BC:E4:B4:47:9D:11:CB:A2:56:A9:74:DE:FA:A5:C2:38:71:E4 Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Certificate serial: 019B435BC57643D075AA0089C964048A5DD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 00:00:46 +0000 Manifest this update: Mon 22 Dec 2025 00:00:46 +0000 Manifest next update: Tue 23 Dec 2025 00:00:46 +0000 Files and hashes: 1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=) 2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=) 3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=) 4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: OO8EOF6UpSt6qF2SIlRxssMijhKq+QNgQX4HLT2pWvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:c5:76:43:d0:75:aa:00:89:c9:64:04:8a:5d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Validity Not Before: Dec 22 00:00:46 2025 GMT Not After : Dec 23 00:00:46 2025 GMT Subject: CN=bb46bce4b4479d11cba256a974defaa5c23871e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d2:52:b1:50:f1:d3:a6:5a:11:51:b6:78:35: c1:92:2e:7f:6c:8c:e6:54:19:3d:72:ca:0f:a6:44: 56:aa:2c:cc:64:e0:e6:c7:dd:f8:04:de:8e:4c:7f: 20:3e:1e:e6:93:68:ad:64:92:d9:39:c5:bd:ec:27: aa:9d:46:12:b7:18:8d:47:26:9d:8d:1a:8c:68:8f: 8e:b1:87:a7:61:42:51:df:84:f5:52:59:9d:e1:c1: 00:fd:6e:a7:49:9b:fd:38:40:43:3a:21:29:5c:69: 6e:3f:5f:bd:c9:9f:08:85:1c:dc:cd:fe:20:5c:bd: 17:1d:2b:1c:fa:e3:ba:10:b7:23:61:5a:9c:7d:c8: aa:bb:71:53:65:64:ec:69:1e:98:c1:ce:51:44:ab: 52:32:74:ee:bc:86:ee:97:c8:a9:eb:84:4e:c0:8a: 98:d2:23:c2:f0:c2:31:84:c4:e6:15:d4:af:c8:86: 2a:ef:aa:30:3f:e1:25:35:ce:89:83:ae:b5:88:dd: 7d:64:2f:bc:17:0f:e8:9e:a5:db:b8:8a:4c:5c:72: 2e:b4:53:55:6e:50:6a:69:3b:34:3f:cc:26:83:20: 55:f6:f9:3e:f0:f7:54:d0:d3:cf:fa:b5:42:7a:41: 42:94:8c:d5:01:3b:54:c3:01:08:9e:c3:23:de:dc: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:46:BC:E4:B4:47:9D:11:CB:A2:56:A9:74:DE:FA:A5:C2:38:71:E4 X509v3 Authority Key Identifier: keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:97:d5:b9:f0:3f:59:9c:73:e5:ac:49:4e:b8:77:c9:83:7c: 61:9d:d6:47:d0:fe:42:e2:41:f6:10:32:99:ca:70:ae:42:24: f5:67:16:44:cd:8d:9e:db:69:c2:f3:8e:15:2c:d7:0f:f8:32: 28:7f:21:51:e2:93:e7:7e:46:0f:01:f5:f9:f1:7c:5a:ab:ba: 67:d9:65:c0:1b:4d:88:0d:9e:91:62:5d:0c:ac:9b:8e:72:be: ad:db:8e:ba:b5:8d:43:27:79:6a:a1:59:ba:d2:0e:d9:59:72: 8f:b2:90:df:ee:a9:3e:f1:08:75:67:1e:ca:c5:8b:93:25:68: 87:9d:60:f6:ab:4a:8d:48:01:b8:25:93:19:53:71:96:f7:1e: 08:3a:e2:00:95:14:04:7a:da:81:b7:91:58:a8:4a:13:76:c1: 1a:3b:1e:6a:5d:2d:7d:b3:fe:59:3d:a7:cf:86:c0:76:55:c3: fd:72:ed:0b:d7:de:fa:14:e4:e1:a4:61:f6:2f:c2:34:91:0e: 71:ff:ff:9d:77:83:ab:bd:30:97:5b:c7:2e:87:38:92:07:02: ea:18:b5:3c:6c:0f:d3:75:28:20:b9:e9:f7:b4:9a:84:e4:c2: 7e:c7:d4:15:d0:ac:8d:f0:74:81:6f:e7:12:be:31:e6:f4:2b: 01:a0:69:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW8V2Q9B1qgCJyWQEil3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz ZDM5MDgwHhcNMjUxMjIyMDAwMDQ2WhcNMjUxMjIzMDAwMDQ2WjAzMTEwLwYDVQQD EyhiYjQ2YmNlNGI0NDc5ZDExY2JhMjU2YTk3NGRlZmFhNWMyMzg3MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NJSsVDx06ZaEVG2eDXBki5/bIzm VBk9csoPpkRWqizMZODmx934BN6OTH8gPh7mk2itZJLZOcW97CeqnUYStxiNRyad jRqMaI+OsYenYUJR34T1Ulmd4cEA/W6nSZv9OEBDOiEpXGluP1+9yZ8IhRzczf4g XL0XHSsc+uO6ELcjYVqcfciqu3FTZWTsaR6Ywc5RRKtSMnTuvIbul8ip64ROwIqY 0iPC8MIxhMTmFdSvyIYq76owP+ElNc6Jg661iN19ZC+8Fw/onqXbuIpMXHIutFNV blBqaTs0P8wmgyBV9vk+8PdU0NPP+rVCekFClIzVATtUwwEInsMj3txdMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtGvOS0R50Ry6JWqXTe+qXCOHHkMB8GA1UdIwQY MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt YTYwNTcxN2QzNGFlLzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZfVufA/ WZxz5axJTrh3yYN8YZ3WR9D+QuJB9hAymcpwrkIk9WcWRM2NnttpwvOOFSzXD/gy KH8hUeKT535GDwH1+fF8Wqu6Z9llwBtNiA2ekWJdDKybjnK+rduOurWNQyd5aqFZ utIO2Vlyj7KQ3+6pPvEIdWceysWLkyVoh51g9qtKjUgBuCWTGVNxlvceCDriAJUU BHragbeRWKhKE3bBGjseal0tfbP+WT2nz4bAdlXD/XLtC9fe+hTk4aRh9i/CNJEO cf//nXeDq70wl1vHLoc4kgcC6hi1PGwP03UoILnp97SahOTCfsfUFdCsjfB0gW/n Er4x5vQrAaBpyw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:21:16 2025 by rpki-client