This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json) Hash identifier: GuL/97K8fTfPvTOWxGJJyOGNlGJM5Be+uKOSKmzQbnM= Subject key identifier: 97:60:AF:C9:F1:E0:2E:4B:CD:AB:B0:1C:92:F9:EA:C7:43:46:65:88 Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee Certificate serial: 019B0F3783D5DFF7AA5A729F12A79ADBBFBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft Manifest number: 0281 Signing time: Thu 11 Dec 2025 21:00:54 +0000 Manifest this update: Thu 11 Dec 2025 21:00:54 +0000 Manifest next update: Fri 12 Dec 2025 21:00:54 +0000 Files and hashes: 1: MhKg3zFeMWwt4nczszDXPl3rkdw.roa (hash: xWL0qt2yK+b8YqGsFpZ+gVcRydDsCjYBfNBZRZ/XtUk=) 2: gOfoa2pPlaad7aZSKOqxTDZnDnw.roa (hash: zWq54+d7Qdr/RiwPHS0cYGrr+8mtcUBj3tD3UQ2c23s=) 3: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: 0jWspotmHJBh7W+xSAMtGafteLlm4RI9fjRaBT0Qyug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:83:d5:df:f7:aa:5a:72:9f:12:a7:9a:db:bf:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee Validity Not Before: Dec 11 21:00:54 2025 GMT Not After : Dec 12 21:00:54 2025 GMT Subject: CN=9760afc9f1e02e4bcdabb01c92f9eac743466588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:5b:32:78:97:c4:dc:40:0c:4b:2b:54:df: c3:90:30:59:ca:02:0e:2a:75:f8:a2:a8:a9:1d:c5: 3d:14:de:57:8d:de:e6:18:98:74:51:cb:8f:9b:e9: 1b:3e:68:39:c7:21:f4:14:05:da:14:1d:8c:f6:ac: 1b:59:14:a5:0b:9c:51:a7:c7:c4:6e:17:c7:a1:65: 36:3f:3f:29:64:ba:7e:4a:0a:b9:d0:96:e1:5f:44: c5:39:f7:27:17:56:b6:f3:d0:be:92:d1:bd:2f:ae: 32:20:64:62:e9:09:08:08:53:2b:da:7d:f4:11:83: 00:5c:d1:89:bf:95:34:f4:2b:c9:35:c5:59:5d:c0: 11:dd:5f:9f:e2:5a:f9:58:74:ca:be:ec:a5:47:f8: 5b:3c:0b:a2:9d:3f:77:7b:63:a8:0a:20:f0:21:ff: 60:90:21:a5:e3:66:d5:dc:9e:6d:0c:f6:ac:9d:d0: 4a:92:ba:1f:58:ea:c6:6b:2a:87:0a:6d:52:5d:e2: 84:c0:39:99:3d:4a:88:bd:e8:60:e2:9d:f0:97:f7: f8:52:fc:98:81:6c:e5:8f:39:44:d3:41:46:4f:d1: e0:fb:53:c0:f2:fe:42:90:96:b2:a2:97:58:8d:5e: 92:3d:a1:41:ba:ee:c5:1f:82:0a:4f:92:ff:8e:77: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:60:AF:C9:F1:E0:2E:4B:CD:AB:B0:1C:92:F9:EA:C7:43:46:65:88 X509v3 Authority Key Identifier: keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c3:36:39:72:93:d1:e2:03:38:a4:3d:f8:b1:d4:63:c5:16: 12:09:b1:3e:93:22:fd:20:d7:91:10:ac:7b:a7:59:c8:22:a2: 04:3f:00:31:91:69:45:61:a0:2c:83:ef:c9:07:93:18:27:e9: 88:e8:82:2e:14:14:e0:bd:ac:a0:3e:1d:a8:5d:ec:5f:b3:d4: 4c:12:69:b9:ee:e4:bb:a5:30:0a:4b:5b:bc:2b:0a:a8:af:5a: 50:b0:b1:15:b4:3a:57:02:ab:ac:2e:dd:77:43:40:e6:e7:f3: e2:d3:c8:fa:4a:25:05:24:29:29:fa:ba:3f:06:ab:f0:7f:24: c5:08:8f:39:4a:9a:ba:83:4a:10:4d:23:e9:6a:3c:11:d0:45: 9f:37:9e:36:be:84:e0:d2:6c:a0:34:02:37:0f:ac:ae:b8:03: 95:90:8d:16:26:35:39:a0:71:6b:56:5c:b7:43:c2:7a:6f:6a: 21:cd:67:66:dc:bd:40:bc:de:a6:44:d9:e2:44:73:90:d6:24: 7c:00:a3:97:cb:cc:cc:40:81:e5:cf:47:2e:37:87:ab:0a:d3: 62:8e:1f:1d:17:fb:05:dd:f0:b2:ba:51:78:0b:ea:a1:43:be: 9e:40:f6:73:10:6c:8a:fc:e3:51:cb:ff:74:d9:c5:66:e9:4e: 4e:1d:ab:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN4PV3/eqWnKfEqea27+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NTRiMjJjNTU0MDUwOGQ5NjI5YTMxMWVmMWU4MzU0MzY1 N2M0ZWUwHhcNMjUxMjExMjEwMDU0WhcNMjUxMjEyMjEwMDU0WjAzMTEwLwYDVQQD Eyg5NzYwYWZjOWYxZTAyZTRiY2RhYmIwMWM5MmY5ZWFjNzQzNDY2NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq45bMniXxNxADEsrVN/DkDBZygIO KnX4oqipHcU9FN5Xjd7mGJh0UcuPm+kbPmg5xyH0FAXaFB2M9qwbWRSlC5xRp8fE bhfHoWU2Pz8pZLp+Sgq50JbhX0TFOfcnF1a289C+ktG9L64yIGRi6QkICFMr2n30 EYMAXNGJv5U09CvJNcVZXcAR3V+f4lr5WHTKvuylR/hbPAuinT93e2OoCiDwIf9g kCGl42bV3J5tDPasndBKkrofWOrGayqHCm1SXeKEwDmZPUqIvehg4p3wl/f4UvyY gWzljzlE00FGT9Hg+1PA8v5CkJayopdYjV6SPaFBuu7FH4IKT5L/jnfnEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdgr8nx4C5LzauwHJL56sdDRmWIMB8GA1UdIwQY MBaAFLdUsixVQFCNlimjEe8eg1Q2V8TuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUt NTZlYzEzMjY5YTFjLzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUtNTZlYzEzMjY5YTFj LzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcM2OXKT 0eIDOKQ9+LHUY8UWEgmxPpMi/SDXkRCse6dZyCKiBD8AMZFpRWGgLIPvyQeTGCfp iOiCLhQU4L2soD4dqF3sX7PUTBJpue7ku6UwCktbvCsKqK9aULCxFbQ6VwKrrC7d d0NA5ufz4tPI+kolBSQpKfq6Pwar8H8kxQiPOUqauoNKEE0j6Wo8EdBFnzeeNr6E 4NJsoDQCNw+srrgDlZCNFiY1OaBxa1Zct0PCem9qIc1nZty9QLzepkTZ4kRzkNYk fACjl8vMzECB5c9HLjeHqwrTYo4fHRf7Bd3wsrpReAvqoUO+nkD2cxBsivzjUcv/ dNnFZulOTh2r7Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:08:20 2025 by rpki-client