This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json) Hash identifier: M8jl3Tj1bPKdHrP2XRHsWeapijg6nvbxTflEflVlCIc= Subject key identifier: 22:12:9A:BF:55:29:29:2F:DC:8B:33:1B:7F:2C:8B:CF:92:95:F1:5B Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39 Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639 Certificate serial: 019B484B0C79A2F6BC6C7A96B0757F4D15DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft Manifest number: 055E Signing time: Mon 22 Dec 2025 23:00:36 +0000 Manifest this update: Mon 22 Dec 2025 23:00:36 +0000 Manifest next update: Tue 23 Dec 2025 23:00:36 +0000 Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=) 2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: 8bBCeLr4hA/jd4EOsDmD+gJbIgvXNtdI5B33grDpsUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:0c:79:a2:f6:bc:6c:7a:96:b0:75:7f:4d:15:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639 Validity Not Before: Dec 22 23:00:36 2025 GMT Not After : Dec 23 23:00:36 2025 GMT Subject: CN=22129abf5529292fdc8b331b7f2c8bcf9295f15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:7d:c5:d6:63:c6:ef:7e:bc:1d:79:9d:6c: 16:99:ef:3c:54:66:70:21:38:a4:63:ab:f5:5d:c0: 7b:6e:40:c6:e5:89:58:c2:a2:44:87:5c:2d:3d:46: 48:55:2f:5e:7f:a2:0a:df:8e:06:f1:31:70:9d:b3: 99:27:f8:13:31:9e:54:c1:c0:be:bd:93:bb:6b:fe: 88:07:25:bb:61:d6:19:e8:d3:95:8c:47:5c:15:07: c2:11:25:b3:ae:49:d4:e4:63:48:72:0f:9e:3f:9f: e0:4a:aa:f8:e7:28:9b:34:2f:bb:3b:81:e7:fb:9b: 35:bd:18:38:db:e5:db:d0:a4:ce:e6:d9:27:65:50: 49:03:29:c8:68:4e:ae:98:d3:8c:c9:4d:b8:56:45: 2a:d0:db:f0:2a:f1:30:3d:7a:3a:b1:d1:3d:03:f0: 5d:cc:05:9b:6f:f1:18:f6:af:24:e6:0a:2b:6f:3a: 4b:11:58:c8:c7:67:c1:6c:25:0f:fd:3b:d4:44:d1: a8:36:bc:d2:79:a0:81:26:25:06:f9:81:4f:50:5d: 41:36:18:0f:e4:d7:05:ea:cc:d8:39:4c:65:4a:2b: ea:3d:8f:52:49:62:1c:87:c0:bb:4d:8f:4a:71:7d: 1f:6b:ea:b5:01:c5:11:68:57:e1:71:15:99:fa:f3: 63:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:12:9A:BF:55:29:29:2F:DC:8B:33:1B:7F:2C:8B:CF:92:95:F1:5B X509v3 Authority Key Identifier: keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cf:ae:9f:15:df:8a:2f:92:41:8a:2e:c4:9f:55:a1:22:aa: 7d:65:64:38:9a:c7:df:88:97:68:b8:7b:19:38:2b:5b:9d:3a: 80:f2:6f:02:2f:9c:9a:a4:7a:fd:eb:d2:85:ad:75:76:11:2d: af:be:85:79:ae:2e:bc:94:49:33:bb:e5:c9:ed:23:62:51:e6: 5a:3c:f0:5b:01:c4:55:f7:8b:04:5a:8e:a4:98:29:7b:21:16: 0b:68:89:b5:b9:85:06:4b:ea:54:25:12:e5:59:e3:e6:eb:61: c4:db:42:af:65:b4:af:5a:66:d8:75:57:95:d5:02:e1:5f:06: 5f:b0:70:7f:58:c7:d2:5f:64:9e:b4:f6:7f:eb:4e:a9:24:d9: 9f:d8:6d:2b:27:00:07:4d:87:a1:16:8c:54:3c:6e:68:d7:c8: 07:74:1a:be:cc:0d:ce:57:79:1f:88:51:84:f8:af:da:83:38: 6d:1c:ec:71:5b:98:80:b2:7d:78:b6:05:8f:62:b0:e1:fc:0e: b0:d8:80:1a:ae:3b:8c:8c:ab:1f:c5:83:04:ca:59:93:fa:80: 08:28:18:cd:86:b8:6a:b2:4b:01:28:27:f5:32:5a:1e:ee:22: 09:d5:e9:1b:b0:b5:16:45:17:39:14:06:c6:65:fb:47:0a:3d: b9:a1:59:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISwx5ova8bHqWsHV/TRXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw YWI2MzkwHhcNMjUxMjIyMjMwMDM2WhcNMjUxMjIzMjMwMDM2WjAzMTEwLwYDVQQD EygyMjEyOWFiZjU1MjkyOTJmZGM4YjMzMWI3ZjJjOGJjZjkyOTVmMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU99xdZjxu9+vB15nWwWme88VGZw ITikY6v1XcB7bkDG5YlYwqJEh1wtPUZIVS9ef6IK344G8TFwnbOZJ/gTMZ5UwcC+ vZO7a/6IByW7YdYZ6NOVjEdcFQfCESWzrknU5GNIcg+eP5/gSqr45yibNC+7O4Hn +5s1vRg42+Xb0KTO5tknZVBJAynIaE6umNOMyU24VkUq0NvwKvEwPXo6sdE9A/Bd zAWbb/EY9q8k5gorbzpLEVjIx2fBbCUP/TvURNGoNrzSeaCBJiUG+YFPUF1BNhgP 5NcF6szYOUxlSivqPY9SSWIch8C7TY9KcX0fa+q1AcURaFfhcRWZ+vNjoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCISmr9VKSkv3IszG38si8+SlfFbMB8GA1UdIwQY MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt ZTgxY2Q3MDIyNTUzLzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALc+unxXf ii+SQYouxJ9VoSKqfWVkOJrH34iXaLh7GTgrW506gPJvAi+cmqR6/evSha11dhEt r76Fea4uvJRJM7vlye0jYlHmWjzwWwHEVfeLBFqOpJgpeyEWC2iJtbmFBkvqVCUS 5Vnj5uthxNtCr2W0r1pm2HVXldUC4V8GX7Bwf1jH0l9knrT2f+tOqSTZn9htKycA B02HoRaMVDxuaNfIB3QavswNzld5H4hRhPiv2oM4bRzscVuYgLJ9eLYFj2Kw4fwO sNiAGq47jIyrH8WDBMpZk/qACCgYzYa4arJLASgn9TJaHu4iCdXpG7C1FkUXORQG xmX7Rwo9uaFZzg== -----END CERTIFICATE-----Generated at Tue Dec 23 05:01:36 2025 by rpki-client