This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json) Hash identifier: pFFalZvDtiErJwQgTNrbxnOXwJrXwxHDHxh+xt/Zz7I= Subject key identifier: 49:9C:FA:CE:77:9C:71:26:BE:25:8B:E0:A9:F9:30:4B:8C:D5:B2:26 Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a Certificate serial: 019B3757CB2939B51D9E4E265251BAC6F579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 16:00:59 +0000 Manifest this update: Fri 19 Dec 2025 16:00:59 +0000 Manifest next update: Sat 20 Dec 2025 16:00:59 +0000 Files and hashes: 1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=) 2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: cDAzaIzRINGhyy3QXMO8esc7KZ6oJdzoWPXzdJebDis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:cb:29:39:b5:1d:9e:4e:26:52:51:ba:c6:f5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a Validity Not Before: Dec 19 16:00:59 2025 GMT Not After : Dec 20 16:00:59 2025 GMT Subject: CN=499cface779c7126be258be0a9f9304b8cd5b226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:20:cf:32:c8:fb:1f:7d:4e:a6:c6:20:3b:5d: c0:07:71:8e:22:99:c1:43:f0:39:30:f8:8d:7f:aa: 85:65:80:97:f1:e1:6e:b3:52:f7:bd:bc:2e:d1:a5: b8:fb:85:82:a9:ca:36:fd:05:3b:30:95:23:6c:32: 26:29:6d:50:65:58:a1:99:34:be:06:33:a6:cb:3f: fb:8c:c2:31:37:00:89:d1:92:e9:a2:9d:58:d5:13: af:6a:1c:b2:d8:19:02:c0:a6:5e:35:37:f1:db:22: 12:dd:27:1d:91:8f:7c:09:cb:9b:e6:d6:3a:ad:e1: 97:1c:d2:d8:a7:c8:9f:b2:15:bf:7c:ec:48:f7:41: f1:eb:bf:7d:87:09:21:43:3a:b7:3c:a3:80:7e:a3: a3:75:0d:df:0c:87:dd:f2:b4:b4:dd:93:dc:0a:4e: 20:43:20:28:00:3b:52:fc:be:d8:13:5f:39:0f:00: e9:cb:8e:92:95:c2:da:0e:91:e6:c0:c9:21:55:6a: ac:37:6f:81:02:56:f8:4e:7b:c6:b2:61:8a:63:b2: 88:b3:bf:5a:96:59:13:2c:d8:cf:2f:1e:6b:2d:7b: 30:ee:90:ba:18:3a:fd:da:b8:82:bd:9c:06:ec:34: 23:2e:20:9d:db:a0:b1:4d:2f:68:2f:35:57:8f:7c: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9C:FA:CE:77:9C:71:26:BE:25:8B:E0:A9:F9:30:4B:8C:D5:B2:26 X509v3 Authority Key Identifier: keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:bb:fb:98:88:bf:bd:20:9a:c5:3a:72:ff:e4:6c:f6:5c:51: a8:97:b7:a8:c6:4f:ba:13:45:22:0b:47:63:17:4e:49:1e:94: 97:8e:f7:5e:29:06:43:75:21:b7:49:7c:dc:b3:43:26:dc:38: 58:f2:ab:c9:db:e1:b9:46:3b:cf:19:cf:7e:0e:e6:79:9e:0e: 61:89:6e:7e:4a:1b:1d:a4:6f:b9:dc:e1:cf:f1:68:d4:19:3e: 38:96:7f:bb:e4:b7:bd:1f:a0:e8:b5:10:d7:83:40:d3:c6:7a: f0:0d:62:4e:03:e9:18:78:97:bf:72:13:69:be:bc:13:06:bd: 27:36:a9:56:ea:0f:f9:6a:32:95:06:8b:26:1b:fb:8b:98:4b: b7:49:e2:f0:6a:9c:84:b0:cb:06:15:b3:ff:62:0b:fe:36:43: e0:f5:be:a2:bf:b7:68:0c:5d:11:6d:2f:7b:5b:65:7c:93:c1: 16:5b:d6:c1:30:a2:57:78:87:52:12:5d:64:a4:3a:63:30:80: bf:02:3e:58:3a:db:d0:9c:b7:3f:98:a8:81:49:7e:6c:ac:e1: 7a:40:c6:8b:7b:8a:41:b4:6d:8e:a8:d1:8e:e4:d5:18:c4:bb: 0e:26:fc:58:db:19:04:84:d0:8d:ec:44:6d:63:3b:f0:5c:8e: bd:70:52:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V8spObUdnk4mUlG6xvV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm Mjc3OWEwHhcNMjUxMjE5MTYwMDU5WhcNMjUxMjIwMTYwMDU5WjAzMTEwLwYDVQQD Eyg0OTljZmFjZTc3OWM3MTI2YmUyNThiZTBhOWY5MzA0YjhjZDViMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyDPMsj7H31OpsYgO13AB3GOIpnB Q/A5MPiNf6qFZYCX8eFus1L3vbwu0aW4+4WCqco2/QU7MJUjbDImKW1QZVihmTS+ BjOmyz/7jMIxNwCJ0ZLpop1Y1ROvahyy2BkCwKZeNTfx2yIS3ScdkY98Ccub5tY6 reGXHNLYp8ifshW/fOxI90Hx6799hwkhQzq3PKOAfqOjdQ3fDIfd8rS03ZPcCk4g QyAoADtS/L7YE185DwDpy46SlcLaDpHmwMkhVWqsN2+BAlb4TnvGsmGKY7KIs79a llkTLNjPLx5rLXsw7pC6GDr92riCvZwG7DQjLiCd26CxTS9oLzVXj3wh8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmc+s53nHEmviWL4Kn5MEuM1bImMB8GA1UdIwQY MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt YjM4ZDdmNzA5ZDcwLzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrv7mIi/ vSCaxTpy/+Rs9lxRqJe3qMZPuhNFIgtHYxdOSR6Ul473XikGQ3Uht0l83LNDJtw4 WPKrydvhuUY7zxnPfg7meZ4OYYlufkobHaRvudzhz/Fo1Bk+OJZ/u+S3vR+g6LUQ 14NA08Z68A1iTgPpGHiXv3ITab68Ewa9JzapVuoP+WoylQaLJhv7i5hLt0ni8Gqc hLDLBhWz/2IL/jZD4PW+or+3aAxdEW0ve1tlfJPBFlvWwTCiV3iHUhJdZKQ6YzCA vwI+WDrb0Jy3P5iogUl+bKzhekDGi3uKQbRtjqjRjuTVGMS7Dib8WNsZBITQjexE bWM78FyOvXBSPg== -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:49 2025 by rpki-client