This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft File: sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json) Hash identifier: VSNcds9Q7WdsKkXHKd1C0DYNUWWmY3bGo0prnfNKphc= Subject key identifier: 6F:30:DB:60:D0:A3:CD:D3:63:B1:C0:E7:86:6F:90:26:16:07:D5:C0 Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Certificate serial: 019B0E257EA1892BD6716BDAA900F4255382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft Manifest number: 131A Signing time: Thu 11 Dec 2025 16:01:36 +0000 Manifest this update: Thu 11 Dec 2025 16:01:36 +0000 Manifest next update: Fri 12 Dec 2025 16:01:36 +0000 Files and hashes: 1: HGyMO-gI6BJOthGGldBVkMwTP6M.roa (hash: LWkHdvqqdhuJkMVn2Z8NyBNjrEPjz4vXV3NQv+TmBQY=) 2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: KVBMT3f1y/pqezexZEzXm4uiB6Gb5iCnX2FtkDf9RkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:7e:a1:89:2b:d6:71:6b:da:a9:00:f4:25:53:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Validity Not Before: Dec 11 16:01:36 2025 GMT Not After : Dec 12 16:01:36 2025 GMT Subject: CN=6f30db60d0a3cdd363b1c0e7866f90261607d5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:f6:9a:25:c4:85:52:fd:5e:62:ba:4d:af: 3f:41:83:5e:68:47:25:15:c6:e6:71:d4:ef:1f:8b: 14:58:ae:ae:94:48:0e:23:61:4a:49:a7:fd:aa:7c: 5a:38:e4:37:bd:46:08:15:9b:76:88:de:04:e1:8b: 89:3c:3b:ee:02:9d:90:80:2f:a7:32:41:06:ac:f7: 62:53:60:45:bc:f5:69:94:68:eb:5e:57:43:aa:0a: e7:07:a0:08:7d:6e:27:b0:5d:ef:01:8f:eb:91:1f: 7f:c4:ef:54:80:48:12:21:19:7f:a4:21:75:5b:64: 4b:eb:94:c8:8e:92:71:a7:b8:cb:da:52:49:6e:9d: fc:04:63:37:c1:63:64:1b:b0:c9:4f:45:ab:5a:f2: 84:85:88:cf:1f:d6:41:c3:a8:82:5c:9a:e5:c4:69: 4b:9b:3d:af:04:7f:ec:4e:83:4f:72:a0:f0:63:5d: 7a:b7:8e:98:f9:92:53:c0:0d:b4:b9:bb:ce:74:54: 9d:b2:09:cb:db:69:eb:d1:6f:d5:84:e0:15:f8:2b: 89:44:ba:e8:cd:64:db:1e:5f:f5:7f:1e:38:f1:fc: 35:7f:b9:7c:be:95:8b:00:9d:86:0f:21:c0:c1:c3: ef:ec:ba:65:32:5e:d9:1d:d5:db:58:28:28:26:6c: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:30:DB:60:D0:A3:CD:D3:63:B1:C0:E7:86:6F:90:26:16:07:D5:C0 X509v3 Authority Key Identifier: keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9b:3e:5f:03:be:a8:f8:41:e3:5e:40:9d:a8:11:7e:41:cf: d7:5b:1d:ee:b1:53:c0:19:d0:c6:72:56:90:b8:4a:ff:0f:fb: 82:2c:d7:73:99:72:81:b8:ea:08:c3:95:72:9c:64:9b:cf:11: 09:a8:13:af:2a:ba:e3:de:c7:d7:a3:35:19:5a:17:b3:18:53: 3e:25:4f:38:ad:23:00:5f:90:a4:37:be:4c:fa:73:d9:9e:52: d9:a8:a3:96:49:c0:8e:e0:c4:8e:65:36:db:bd:d1:fe:0c:88: c5:2e:c6:a1:f7:cc:97:c4:91:33:b9:bd:23:20:eb:25:74:3b: ad:f4:9b:16:19:19:93:22:12:c8:20:b4:c6:40:bb:e1:1f:0b: a3:4d:3c:de:36:50:9b:53:75:31:a5:9e:e7:ec:05:84:e1:f8: ae:20:4b:ac:67:a0:72:48:4b:41:68:f3:9f:a1:35:f6:78:fa: 5c:53:0c:48:07:37:e6:ad:b2:60:8a:62:34:73:38:ae:f6:d9: 4d:9e:5b:b5:f9:35:3b:3a:49:b8:43:84:2a:f3:c8:a2:09:b0: d8:e9:b5:59:69:bc:21:53:b7:1d:46:b0:87:43:08:2d:f8:fa: f5:e4:32:69:b6:c7:5f:e4:84:55:dc:8d:2a:19:2a:e8:fa:8a: b8:3e:55:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJX6hiSvWcWvaqQD0JVOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWNhMmY2ODZkNGU0ODRhNzdjMzRjMTczNDc2YmY2OWQy MzdiN2QwHhcNMjUxMjExMTYwMTM2WhcNMjUxMjEyMTYwMTM2WjAzMTEwLwYDVQQD Eyg2ZjMwZGI2MGQwYTNjZGQzNjNiMWMwZTc4NjZmOTAyNjE2MDdkNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtv2miXEhVL9XmK6Ta8/QYNeaEcl FcbmcdTvH4sUWK6ulEgOI2FKSaf9qnxaOOQ3vUYIFZt2iN4E4YuJPDvuAp2QgC+n MkEGrPdiU2BFvPVplGjrXldDqgrnB6AIfW4nsF3vAY/rkR9/xO9UgEgSIRl/pCF1 W2RL65TIjpJxp7jL2lJJbp38BGM3wWNkG7DJT0WrWvKEhYjPH9ZBw6iCXJrlxGlL mz2vBH/sToNPcqDwY116t46Y+ZJTwA20ubvOdFSdsgnL22nr0W/VhOAV+CuJRLro zWTbHl/1fx448fw1f7l8vpWLAJ2GDyHAwcPv7LplMl7ZHdXbWCgoJmyDywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8w22DQo83TY7HA54ZvkCYWB9XAMB8GA1UdIwQY MBaAFLFcovaG1OSEp3w0wXNHa/adI3t9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2Qt Mzg1ZjNmNTJhOTZiLzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2QtMzg1ZjNmNTJhOTZi LzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHps+XwO+ qPhB415AnagRfkHP11sd7rFTwBnQxnJWkLhK/w/7gizXc5lygbjqCMOVcpxkm88R CagTryq6497H16M1GVoXsxhTPiVPOK0jAF+QpDe+TPpz2Z5S2aijlknAjuDEjmU2 273R/gyIxS7GoffMl8SRM7m9IyDrJXQ7rfSbFhkZkyISyCC0xkC74R8Lo0083jZQ m1N1MaWe5+wFhOH4riBLrGegckhLQWjzn6E19nj6XFMMSAc35q2yYIpiNHM4rvbZ TZ5btfk1OzpJuEOEKvPIogmw2Om1WWm8IVO3HUawh0MILfj69eQyabbHX+SEVdyN Khkq6PqKuD5VjQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:14 2025 by rpki-client