This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json) Hash identifier: 8b/38McSOaoVfO41KQiOyfOBo9YdhOsskOXw7K3rAZg= Subject key identifier: ED:CC:EC:E3:89:32:5E:9D:0F:CF:7E:95:34:C7:71:83:2A:80:4B:72 Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2 Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2 Certificate serial: 019B5976E29FBE7AE0332DFB54098BF3CCD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft Manifest number: 05DC Signing time: Fri 26 Dec 2025 07:02:01 +0000 Manifest this update: Fri 26 Dec 2025 07:02:01 +0000 Manifest next update: Sat 27 Dec 2025 07:02:01 +0000 Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=) 2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: dVLS70xc+ihmefHYIJJ26lVdzsQBA3vRFSIRWqjZyts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:e2:9f:be:7a:e0:33:2d:fb:54:09:8b:f3:cc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2 Validity Not Before: Dec 26 07:02:01 2025 GMT Not After : Dec 27 07:02:01 2025 GMT Subject: CN=edccece389325e9d0fcf7e9534c771832a804b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:f0:31:24:8e:75:e2:fc:3c:8b:1f:f5:44: 09:f2:07:14:31:92:99:b4:d1:a2:74:6d:11:10:5d: cd:f3:e2:b4:f3:82:d3:ea:f3:fb:41:d0:b7:95:7c: 92:89:cb:92:45:c8:e8:e3:4e:4e:2e:7a:19:95:94: b2:bf:6c:2c:69:0c:8a:f0:c8:e2:7a:2c:82:88:2d: 58:88:d5:e1:a3:ea:8f:11:54:c4:98:ba:ba:06:30: d9:02:dc:c2:bc:56:41:69:48:f7:a5:69:0f:40:52: fb:2c:d2:12:00:d6:68:91:9f:54:b9:ca:4e:bd:d9: 9f:68:1f:6b:ad:3c:3b:06:5f:37:c3:8f:25:5d:e5: 43:af:53:79:28:f2:0b:4b:95:82:21:ae:bf:c7:dd: 0a:79:c8:3f:43:37:a9:4c:d4:66:6f:5b:86:be:34: e3:41:85:72:13:d8:6d:86:6e:8f:18:21:f4:38:dd: 5d:d0:eb:c8:3e:44:6c:9f:03:df:4e:82:f8:0c:42: 46:34:c8:e3:84:3f:4f:cf:0e:14:1a:da:05:e1:55: a0:23:81:f4:3b:60:08:d3:06:8c:80:b6:21:92:8f: ef:77:59:93:9d:8b:d2:13:7f:74:1b:00:58:9e:e5: 5d:a9:62:5b:ef:ac:96:e8:92:b8:4a:ac:16:1b:b1: 50:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CC:EC:E3:89:32:5E:9D:0F:CF:7E:95:34:C7:71:83:2A:80:4B:72 X509v3 Authority Key Identifier: keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ce:a4:df:ec:7a:45:5d:8d:d7:f1:be:73:e4:d9:74:5b:b7: 1e:5f:1f:1f:67:e9:6f:4a:c4:f9:fb:3f:4d:fe:5c:95:9d:c2: ac:b3:3d:68:03:85:19:e6:56:0c:00:7e:1b:03:4d:17:09:3c: 20:b8:d9:96:3a:4c:36:22:a2:ec:83:33:0b:0e:b2:ac:09:3b: 5a:14:af:c0:ae:bb:c4:70:6f:27:1f:89:43:70:98:98:5d:e1: de:67:2d:0f:60:43:52:8e:4b:b3:d4:a2:3c:2d:9a:44:0f:dd: d8:ac:73:2f:ab:9c:f3:92:4e:48:96:89:e0:32:02:25:52:f2: 7b:e3:e3:63:ce:5e:0f:1f:ea:14:72:cd:0f:5e:e2:d8:17:9a: 48:47:04:76:b8:b5:d2:33:8e:1a:61:9c:46:59:5a:c8:d8:21: 97:40:43:4b:81:a1:7d:fd:68:a5:32:8a:ad:76:8a:e4:50:01: e3:40:c0:ed:ac:9a:59:d6:19:46:e9:b3:88:06:30:3e:b4:11: 7a:1d:4b:6c:bd:b2:ca:76:bd:dd:e3:fc:be:0c:d4:ce:e0:41: 16:d7:ac:e6:22:0d:79:a1:72:f6:4d:99:8c:22:9b:11:49:48: 12:6e:7d:b8:87:14:26:56:8d:ee:4f:f3:7e:df:ee:0a:89:a5: 05:47:46:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduKfvnrgMy37VAmL88zZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODBmODAwMWQ1OTkzMzM3M2ZlOGU1ODg0OWU0YjkxZGVh YTJiYjIwHhcNMjUxMjI2MDcwMjAxWhcNMjUxMjI3MDcwMjAxWjAzMTEwLwYDVQQD EyhlZGNjZWNlMzg5MzI1ZTlkMGZjZjdlOTUzNGM3NzE4MzJhODA0YjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9zwMSSOdeL8PIsf9UQJ8gcUMZKZ tNGidG0REF3N8+K084LT6vP7QdC3lXySicuSRcjo405OLnoZlZSyv2wsaQyK8Mji eiyCiC1YiNXho+qPEVTEmLq6BjDZAtzCvFZBaUj3pWkPQFL7LNISANZokZ9UucpO vdmfaB9rrTw7Bl83w48lXeVDr1N5KPILS5WCIa6/x90Kecg/QzepTNRmb1uGvjTj QYVyE9hthm6PGCH0ON1d0OvIPkRsnwPfToL4DEJGNMjjhD9Pzw4UGtoF4VWgI4H0 O2AI0waMgLYhko/vd1mTnYvSE390GwBYnuVdqWJb76yW6JK4SqwWG7FQJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3M7OOJMl6dD89+lTTHcYMqgEtyMB8GA1UdIwQY MBaAFLCA+AAdWZMzc/6OWISeS5HeqiuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDIyNjItZTM3Zi00MTQyLTlhMmMt OWYxNzZlMjRjMDM0LzEvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hMDIyNjItZTM3Zi00MTQyLTlhMmMtOWYxNzZlMjRjMDM0 LzEvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArs6k3+x6 RV2N1/G+c+TZdFu3Hl8fH2fpb0rE+fs/Tf5clZ3CrLM9aAOFGeZWDAB+GwNNFwk8 ILjZljpMNiKi7IMzCw6yrAk7WhSvwK67xHBvJx+JQ3CYmF3h3mctD2BDUo5Ls9Si PC2aRA/d2KxzL6uc85JOSJaJ4DICJVLye+PjY85eDx/qFHLND17i2BeaSEcEdri1 0jOOGmGcRllayNghl0BDS4Ghff1opTKKrXaK5FAB40DA7ayaWdYZRumziAYwPrQR eh1LbL2yyna93eP8vgzUzuBBFtes5iINeaFy9k2ZjCKbEUlIEm59uIcUJlaN7k/z ft/uComlBUdGLA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:59 2025 by rpki-client