This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json) Hash identifier: Fw6/21AMnKr/MGxqMK2f7gHrxH3VthrsN93Atm0BnhQ= Subject key identifier: 1B:38:14:DB:2A:E3:91:F0:8B:AF:31:7C:56:E7:C7:6C:39:B7:BE:8C Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b Certificate serial: 019B48B94D470257C697F975E0B1E3E14883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft Manifest number: 0488 Signing time: Tue 23 Dec 2025 01:01:01 +0000 Manifest this update: Tue 23 Dec 2025 01:01:01 +0000 Manifest next update: Wed 24 Dec 2025 01:01:01 +0000 Files and hashes: 1: TCbT2lKvimmPca_tcJyE61X19LM.roa (hash: qkxwRBCeRtuFBBppHywPPyPUPj2kdHg3WbKwG9y9ays=) 2: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=) 3: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: V3GXcvg6g2E1naa590yzPpujKejgYeYBevjUmbVerRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:4d:47:02:57:c6:97:f9:75:e0:b1:e3:e1:48:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b Validity Not Before: Dec 23 01:01:01 2025 GMT Not After : Dec 24 01:01:01 2025 GMT Subject: CN=1b3814db2ae391f08baf317c56e7c76c39b7be8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:3e:07:8d:16:e0:76:3e:02:09:8d:3f:36: b2:26:8d:93:be:ea:04:97:53:da:12:46:5e:f9:18: 74:75:8f:0c:8a:ff:9e:80:11:4b:2d:7f:a0:bd:4a: 92:6f:76:cd:7d:21:38:e3:44:6c:8c:4c:c4:4f:17: 2a:7f:71:ac:a5:26:cb:95:43:98:b6:01:36:9b:b9: f5:23:58:d0:fe:a7:3a:f0:80:31:44:a8:2f:75:7e: 74:ee:3e:c3:ae:fd:c4:3d:69:d2:2e:18:e3:ff:c8: 4c:4b:8c:bb:9b:b5:fd:0b:37:9f:ba:21:48:57:ac: d7:65:05:26:d1:92:98:20:e1:64:82:c3:77:48:01: 8b:e9:57:1c:45:e6:03:00:c4:74:14:3d:80:38:34: 6a:07:93:1d:ce:4c:74:ec:58:bd:34:46:82:1a:97: c9:42:f6:fe:c7:e1:a8:47:a5:10:49:80:6f:fa:11: 48:01:6d:44:b5:61:5c:6e:50:31:a3:5e:5c:cb:58: 6a:4e:92:e4:40:58:06:8b:48:5e:d6:b4:86:aa:90: c6:84:17:31:d7:2d:3d:d4:6f:d6:67:ef:94:f6:04: d9:94:fb:22:c4:ed:87:1c:4b:82:24:0c:b4:8a:93: 39:f8:3f:59:3e:50:03:7a:04:2b:4d:80:b3:b6:62: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:38:14:DB:2A:E3:91:F0:8B:AF:31:7C:56:E7:C7:6C:39:B7:BE:8C X509v3 Authority Key Identifier: keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3f:d8:3d:dc:09:07:fd:db:55:e0:61:4d:a5:ed:43:4e:3b: 5f:96:46:15:2c:17:a2:5d:37:67:1e:35:7a:53:b5:71:7f:79: 72:d9:af:38:f7:bb:49:c3:5f:24:b8:1c:23:5c:39:10:27:16: 09:59:ad:13:3c:a8:0f:41:15:66:88:63:e7:95:a4:44:28:3f: 45:ea:be:e4:c2:d7:a5:a6:14:00:12:25:cb:71:e5:69:d1:f5: 2d:46:d3:47:ba:10:7f:a8:26:5f:ed:a4:51:d8:1d:f5:ba:19: 15:b9:b2:b4:a6:a8:87:3b:14:9b:df:7f:87:ba:74:54:32:70: 09:58:af:63:2c:05:50:f1:56:05:82:ba:53:7e:a0:53:b3:3c: 3e:99:b5:c3:6f:89:91:10:23:97:be:3b:71:a6:8d:cc:e2:28: 58:b2:09:be:28:dd:11:11:0c:d0:a6:67:0a:6d:14:27:e8:4c: 6a:45:78:78:7f:44:80:e0:54:04:ee:f6:fe:dd:00:9e:da:e0: a3:72:da:cf:8d:1e:97:66:50:ea:ee:a0:fb:71:69:04:7c:9f: 48:ef:e4:20:35:1c:24:3e:a9:f5:42:95:12:b0:a6:0f:af:3c: 97:61:e1:7d:2c:d2:c9:03:df:b1:3d:74:13:5d:3b:07:7d:81: 35:aa:ef:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuU1HAlfGl/l14LHj4UiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMTE1N2M5OGYyNjI3OWZjM2VlZDJkYWIzY2YxMTgzNzJi ZGJlMWIwHhcNMjUxMjIzMDEwMTAxWhcNMjUxMjI0MDEwMTAxWjAzMTEwLwYDVQQD EygxYjM4MTRkYjJhZTM5MWYwOGJhZjMxN2M1NmU3Yzc2YzM5YjdiZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38M+B40W4HY+AgmNPzayJo2TvuoE l1PaEkZe+Rh0dY8Miv+egBFLLX+gvUqSb3bNfSE440RsjEzETxcqf3GspSbLlUOY tgE2m7n1I1jQ/qc68IAxRKgvdX507j7Drv3EPWnSLhjj/8hMS4y7m7X9CzefuiFI V6zXZQUm0ZKYIOFkgsN3SAGL6VccReYDAMR0FD2AODRqB5Mdzkx07Fi9NEaCGpfJ Qvb+x+GoR6UQSYBv+hFIAW1EtWFcblAxo15cy1hqTpLkQFgGi0he1rSGqpDGhBcx 1y091G/WZ++U9gTZlPsixO2HHEuCJAy0ipM5+D9ZPlADegQrTYCztmKySQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs4FNsq45Hwi68xfFbnx2w5t76MMB8GA1UdIwQY MBaAFLERV8mPJiefw+7S2rPPEYNyvb4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYt ZTBhY2FjYzEwZWY1LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYtZTBhY2FjYzEwZWY1 LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPz/YPdwJ B/3bVeBhTaXtQ047X5ZGFSwXol03Zx41elO1cX95ctmvOPe7ScNfJLgcI1w5ECcW CVmtEzyoD0EVZohj55WkRCg/Req+5MLXpaYUABIly3HladH1LUbTR7oQf6gmX+2k Udgd9boZFbmytKaohzsUm99/h7p0VDJwCVivYywFUPFWBYK6U36gU7M8Ppm1w2+J kRAjl747caaNzOIoWLIJvijdEREM0KZnCm0UJ+hMakV4eH9EgOBUBO72/t0Antrg o3Laz40el2ZQ6u6g+3FpBHyfSO/kIDUcJD6p9UKVErCmD688l2HhfSzSyQPfsT10 E107B32BNarvvg== -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:22 2025 by rpki-client