This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json) Hash identifier: ei2/ugn9HUa0aI1WZqykeGwMc4T3jQU47QYohipomfc= Subject key identifier: 38:06:C1:C7:6F:55:06:F3:43:AA:D7:2D:C4:F8:59:54:26:B6:FF:75 Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39 Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639 Certificate serial: 019B3AC6567E2BB51E6573772D2D74DA6461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft Manifest number: 0557 Signing time: Sat 20 Dec 2025 08:00:35 +0000 Manifest this update: Sat 20 Dec 2025 08:00:35 +0000 Manifest next update: Sun 21 Dec 2025 08:00:35 +0000 Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=) 2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: GMtpSX3FjM1WxEOglC/lNoE+5pe3ZoFXFtZ2AWLv7NA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:56:7e:2b:b5:1e:65:73:77:2d:2d:74:da:64:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639 Validity Not Before: Dec 20 08:00:35 2025 GMT Not After : Dec 21 08:00:35 2025 GMT Subject: CN=3806c1c76f5506f343aad72dc4f8595426b6ff75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:e2:2f:87:e2:f8:52:d5:9a:e3:84:6d:af: a0:d1:57:b3:14:68:4c:dc:9f:78:ec:64:a6:a6:66: 7c:32:85:8f:45:fa:85:ca:73:ef:c9:dd:1c:e4:db: f2:4d:43:8c:78:36:00:6c:0f:7e:55:21:34:3a:5c: 38:bb:15:c8:9c:39:01:04:b2:3f:ce:cc:c8:64:fb: 24:22:e8:ab:be:a0:87:10:45:ab:c3:02:e8:06:ee: 8a:1f:d6:da:33:a3:ef:8e:8f:69:70:2b:c2:48:01: ce:01:61:6f:1b:44:37:58:4c:38:51:86:24:b7:e8: cf:1c:97:94:97:4b:46:ae:c8:f6:d2:9f:cc:d6:b5: 04:98:36:4e:42:6b:b4:fc:24:a8:b2:84:2d:7c:ac: 05:26:27:3e:89:89:27:63:a4:ff:f7:61:d5:fe:16: 5e:51:20:52:94:0b:76:6c:b6:89:a2:c3:27:e4:e9: b0:f0:9a:d5:2a:b7:77:e0:9d:8b:3f:bf:80:08:37: 12:b1:32:9a:be:58:a6:62:40:16:2b:24:3c:b4:b3: aa:a3:e9:d5:21:81:ad:c5:b9:1e:c5:e3:dc:4d:19: 0b:f9:40:95:40:0d:3e:00:12:d5:56:7f:ae:6f:d5: 00:e5:b6:8c:07:0d:9b:5c:f6:89:02:6b:be:6f:a8: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:06:C1:C7:6F:55:06:F3:43:AA:D7:2D:C4:F8:59:54:26:B6:FF:75 X509v3 Authority Key Identifier: keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:39:34:60:09:b9:c3:57:d1:48:3a:0d:be:32:b5:e5:8f:b6: 9f:a1:75:fb:63:86:32:57:0b:fb:6e:ed:b0:5b:6d:20:ce:f8: 60:6d:61:9a:61:fa:94:35:df:1e:07:24:52:22:e1:d0:64:68: 15:0d:9f:9b:c5:8e:b0:6e:45:9a:8b:48:c3:c8:2f:61:a1:a0: d1:9c:94:42:96:ea:95:27:db:22:68:a3:52:67:bf:48:32:3a: 6f:c5:a4:f2:a8:53:cf:d4:ad:d1:d7:c9:e6:bd:cf:37:0d:c0: e7:42:48:87:34:c1:5e:19:de:94:91:07:cf:d6:4d:1b:27:c6: c2:4e:ba:2e:c1:37:72:d5:d6:c3:c9:19:ce:f2:81:1a:cb:e2: 77:aa:3d:5d:89:da:3e:6a:9c:91:cc:e1:5e:2f:b4:b5:02:93: 1f:d9:7e:17:a1:98:4f:d2:2f:23:a0:9f:05:43:22:17:b1:95: 57:91:64:32:33:93:25:71:a6:e0:3f:85:2b:1a:19:67:ba:9f: 90:5e:3e:9f:48:2a:3e:53:72:08:e0:68:5c:06:1a:d5:3a:4f: 9a:ec:cb:4b:1a:81:53:6e:db:ec:21:8a:d9:f5:48:52:6a:47: 29:10:3d:0e:d9:16:70:a0:3f:ed:12:01:a2:ec:1b:f7:1c:e4: 68:b1:81:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xlZ+K7UeZXN3LS102mRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw YWI2MzkwHhcNMjUxMjIwMDgwMDM1WhcNMjUxMjIxMDgwMDM1WjAzMTEwLwYDVQQD EygzODA2YzFjNzZmNTUwNmYzNDNhYWQ3MmRjNGY4NTk1NDI2YjZmZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkHiL4fi+FLVmuOEba+g0VezFGhM 3J947GSmpmZ8MoWPRfqFynPvyd0c5NvyTUOMeDYAbA9+VSE0Olw4uxXInDkBBLI/ zszIZPskIuirvqCHEEWrwwLoBu6KH9baM6Pvjo9pcCvCSAHOAWFvG0Q3WEw4UYYk t+jPHJeUl0tGrsj20p/M1rUEmDZOQmu0/CSosoQtfKwFJic+iYknY6T/92HV/hZe USBSlAt2bLaJosMn5Omw8JrVKrd34J2LP7+ACDcSsTKavlimYkAWKyQ8tLOqo+nV IYGtxbkexePcTRkL+UCVQA0+ABLVVn+ub9UA5baMBw2bXPaJAmu+b6hXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgGwcdvVQbzQ6rXLcT4WVQmtv91MB8GA1UdIwQY MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt ZTgxY2Q3MDIyNTUzLzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDk0YAm5 w1fRSDoNvjK15Y+2n6F1+2OGMlcL+27tsFttIM74YG1hmmH6lDXfHgckUiLh0GRo FQ2fm8WOsG5FmotIw8gvYaGg0ZyUQpbqlSfbImijUme/SDI6b8Wk8qhTz9St0dfJ 5r3PNw3A50JIhzTBXhnelJEHz9ZNGyfGwk66LsE3ctXWw8kZzvKBGsvid6o9XYna PmqckczhXi+0tQKTH9l+F6GYT9IvI6CfBUMiF7GVV5FkMjOTJXGm4D+FKxoZZ7qf kF4+n0gqPlNyCOBoXAYa1TpPmuzLSxqBU27b7CGK2fVIUmpHKRA9DtkWcKA/7RIB ouwb9xzkaLGBxg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:38 2025 by rpki-client