This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json) Hash identifier: xZmuY/YUqrJ4k0JLkyazIgVv5DUaZZr4BLLhD1y9qII= Subject key identifier: E2:70:BD:28:03:CD:03:EC:F3:6A:35:DC:B3:05:70:C2:6A:B9:11:C3 Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Certificate serial: 019B1049E9C5F792944F9480A45AB07789E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 02:00:37 +0000 Manifest this update: Fri 12 Dec 2025 02:00:37 +0000 Manifest next update: Sat 13 Dec 2025 02:00:37 +0000 Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=) 2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: joMXGxYDBoJ3Z4lepewtZrrNxk3+UaAFruGdrwkqWfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:e9:c5:f7:92:94:4f:94:80:a4:5a:b0:77:89:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Validity Not Before: Dec 12 02:00:37 2025 GMT Not After : Dec 13 02:00:37 2025 GMT Subject: CN=e270bd2803cd03ecf36a35dcb30570c26ab911c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:51:d7:45:cf:e4:6b:dd:d9:d3:78:34:d5: 4c:f5:98:5a:c5:41:0f:d2:96:f5:62:d0:76:6d:44: 74:dc:0a:e6:46:93:6e:7b:30:0b:0c:7d:19:3b:85: bc:6a:e8:ad:31:d0:84:46:29:75:60:58:5c:b4:9f: 06:53:2d:7f:3e:69:37:15:fd:56:88:4c:b5:25:b1: c4:f5:33:93:1c:20:10:95:8e:f4:1e:4b:dd:8b:75: fb:6c:58:fc:bb:4b:a2:79:0d:d5:67:08:50:74:8d: 44:bc:1e:cc:ab:80:55:40:a8:ef:ba:74:d9:c0:0f: 64:5a:16:b0:c9:8c:2e:99:f1:75:b2:73:b1:32:fc: 36:74:50:ce:ad:7b:7f:65:9b:3e:73:bc:08:11:20: c5:ed:3c:18:fb:d7:cb:9b:ac:86:a3:12:5e:e8:4e: ad:75:a8:56:50:d2:c8:4e:1f:52:e7:32:9c:51:dc: cc:0f:b3:62:2a:0a:06:6d:38:d7:a4:4a:7e:03:da: 91:e3:56:0e:47:95:4e:7c:83:ac:80:1f:68:2f:d3: 00:2f:56:20:f8:4d:c5:56:12:6a:6b:cc:34:ec:09: 84:5b:43:21:20:5f:7d:3a:a2:6b:88:0c:0e:5a:e8: 6a:5d:73:cc:bc:46:3d:77:df:b2:63:51:cf:4f:12: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:BD:28:03:CD:03:EC:F3:6A:35:DC:B3:05:70:C2:6A:B9:11:C3 X509v3 Authority Key Identifier: keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:16:34:8e:5d:c3:a6:40:75:0f:b3:50:c0:fe:c1:69:4a:a1: 43:9e:b9:b4:78:bd:cd:ef:94:2a:e8:cb:ae:7e:b5:49:0f:95: 0e:9c:e9:e1:30:08:01:d8:a8:c2:18:a4:6d:91:3e:ea:52:dd: b6:0f:f3:a5:57:94:01:d8:9c:a7:a2:ce:23:c5:4a:50:c5:f7: ce:c7:ca:23:1c:ee:b7:a7:6f:d6:e0:c5:96:0b:3b:75:84:be: b1:5d:b8:61:da:08:fe:69:c7:0f:4a:47:cf:9a:cf:32:be:23: c5:e9:10:08:70:28:0a:25:b9:38:7d:a6:da:5a:de:80:c0:ac: f1:20:21:fa:19:55:5c:0b:fe:5f:a4:14:4a:6a:ea:9b:10:e4: 3e:03:6d:5d:ee:9d:71:15:59:bd:eb:00:df:e9:f0:65:18:f2: 13:66:0b:9b:c9:7e:92:22:e6:62:9c:6f:61:ee:70:8c:7b:0a: 4d:5a:ae:43:4e:c6:a1:3e:ea:0b:26:24:3f:13:37:a7:b1:6a: 47:6d:fa:86:b1:1c:b0:0f:71:42:8f:d5:63:8d:01:45:9f:0c: de:39:ca:25:30:e2:87:8d:65:42:e8:4a:48:3b:45:06:c7:b0: b9:d9:a7:62:e3:4f:ce:e1:23:19:07:9e:89:9f:59:5a:c5:21: 48:e1:57:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSenF95KUT5SApFqwd4nkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWZkMGNiOTc3NWZmNDc4ZjE4NWY4Zjk4MGQ1YjFkOTJk NGJlNGYwHhcNMjUxMjEyMDIwMDM3WhcNMjUxMjEzMDIwMDM3WjAzMTEwLwYDVQQD EyhlMjcwYmQyODAzY2QwM2VjZjM2YTM1ZGNiMzA1NzBjMjZhYjkxMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ9R10XP5Gvd2dN4NNVM9ZhaxUEP 0pb1YtB2bUR03ArmRpNuezALDH0ZO4W8auitMdCERil1YFhctJ8GUy1/Pmk3Ff1W iEy1JbHE9TOTHCAQlY70Hkvdi3X7bFj8u0uieQ3VZwhQdI1EvB7Mq4BVQKjvunTZ wA9kWhawyYwumfF1snOxMvw2dFDOrXt/ZZs+c7wIESDF7TwY+9fLm6yGoxJe6E6t dahWUNLITh9S5zKcUdzMD7NiKgoGbTjXpEp+A9qR41YOR5VOfIOsgB9oL9MAL1Yg +E3FVhJqa8w07AmEW0MhIF99OqJriAwOWuhqXXPMvEY9d9+yY1HPTxJK+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJwvSgDzQPs82o13LMFcMJquRHDMB8GA1UdIwQY MBaAFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUt NmVmNWM0NzM1ZThhLzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUtNmVmNWM0NzM1ZThh LzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxY0jl3D pkB1D7NQwP7BaUqhQ565tHi9ze+UKujLrn61SQ+VDpzp4TAIAdiowhikbZE+6lLd tg/zpVeUAdicp6LOI8VKUMX3zsfKIxzut6dv1uDFlgs7dYS+sV24YdoI/mnHD0pH z5rPMr4jxekQCHAoCiW5OH2m2lregMCs8SAh+hlVXAv+X6QUSmrqmxDkPgNtXe6d cRVZvesA3+nwZRjyE2YLm8l+kiLmYpxvYe5wjHsKTVquQ07GoT7qCyYkPxM3p7Fq R236hrEcsA9xQo/VY40BRZ8M3jnKJTDih41lQuhKSDtFBsewudmnYuNPzuEjGQee iZ9ZWsUhSOFXWg== -----END CERTIFICATE-----Generated at Fri Dec 12 09:24:19 2025 by rpki-client