This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json) Hash identifier: 8+sQ75LeHrFJbJ03ICNByh7nE7pwa02SeI2k1tDGcfg= Subject key identifier: 05:51:49:DC:12:39:AB:FF:50:C5:F4:8F:CD:3A:09:A5:C6:86:92:EB Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca Certificate serial: 019B070FEB3E0BD5A439834D85E5F15133BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft Manifest number: 1700 Signing time: Wed 10 Dec 2025 07:00:42 +0000 Manifest this update: Wed 10 Dec 2025 07:00:42 +0000 Manifest next update: Thu 11 Dec 2025 07:00:42 +0000 Files and hashes: 1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=) 2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: DzN/s214vBZWRxg5FXK7IKqmeFakzrcWE2qdPfbr0N0=) 3: opT_I9F9NlBeldQr0GrqFI_DCW8.roa (hash: MFWRH48M0sUB0KCZQGPrxKIdCpAK4ygrD33P9KlMNcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:0f:eb:3e:0b:d5:a4:39:83:4d:85:e5:f1:51:33:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca Validity Not Before: Dec 10 07:00:42 2025 GMT Not After : Dec 11 07:00:42 2025 GMT Subject: CN=055149dc1239abff50c5f48fcd3a09a5c68692eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:c7:9d:99:99:a5:07:cd:97:4e:c7:12:06: 41:38:f1:1f:72:5e:b0:63:a7:d3:19:32:97:53:2d: d3:39:eb:8f:4e:17:a6:e9:d8:a8:4c:f0:60:f7:81: 60:96:fb:67:3a:22:45:35:71:2e:21:b5:16:d9:22: fc:fe:e4:8f:b3:cb:d6:47:a3:27:3d:2a:08:85:79: ee:f6:0a:11:85:b5:b4:66:d2:7f:df:8b:40:0a:6f: b2:ce:fd:4d:13:f6:e1:8b:a6:18:30:aa:8e:1d:06: 10:a8:3a:92:21:e6:a2:f5:6e:59:fb:4e:ac:ca:ac: 85:ec:eb:e7:5b:25:62:69:35:d6:f0:ee:ad:3f:9b: 4a:2a:2c:9f:20:7f:0f:b3:d2:b7:f8:6e:ed:2e:5a: 59:8d:95:2d:34:57:cd:36:f3:09:c9:50:e9:f8:77: 7c:1e:0f:b7:68:10:8f:e3:8d:ee:bb:f6:14:79:f6: b9:88:ce:48:a6:38:ce:78:ed:a5:1f:43:a0:d6:5e: 62:ef:12:cd:7d:30:be:e2:92:0c:ec:ca:6b:85:33: f3:37:26:c4:b3:b2:a3:e7:3a:7a:7e:f7:27:da:f1: 8d:d8:49:9f:6c:a4:7a:ac:8e:05:0e:50:89:9c:4c: 00:73:ce:50:f8:35:ae:ad:5c:46:ae:59:66:13:3d: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:49:DC:12:39:AB:FF:50:C5:F4:8F:CD:3A:09:A5:C6:86:92:EB X509v3 Authority Key Identifier: keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e1:b0:b7:6b:2b:40:a7:75:0b:00:11:93:f3:57:6b:14:ee: a2:f3:84:20:64:0a:37:30:6c:a0:ea:4a:5d:19:0b:0a:38:c7: 36:19:91:c4:ef:d9:8a:3c:56:af:de:5d:15:62:70:94:4b:03: 24:7d:23:28:7a:3e:e1:f0:1a:0e:69:58:4c:0e:a6:26:39:97: b5:4f:72:50:b1:82:7f:6a:87:f6:d3:52:f9:a8:0b:c8:dc:73: 99:a7:6b:48:11:bb:50:92:97:61:8a:94:cc:bb:40:f9:93:9c: 0d:41:d4:21:d6:14:73:51:3f:d7:cc:85:1c:67:76:f8:a3:f8: 6b:48:61:78:b3:f8:c8:8b:72:52:10:5a:27:b6:03:f8:54:55: e6:40:3e:7e:d5:b5:29:c7:36:d0:03:83:2e:7a:83:f2:4d:a3: b4:fd:b4:37:d1:14:45:f0:ef:2c:68:80:97:04:eb:d5:e4:47: 6f:e1:e4:41:14:47:a8:00:a8:67:c2:85:01:02:9e:6f:d4:38: b9:45:2a:ef:94:3f:dc:71:5c:1c:04:25:e4:17:c9:35:47:d2: 3c:97:01:f3:3b:c9:47:7f:1c:e0:f1:78:0b:73:da:47:4e:a4: 4b:a5:29:7b:81:7f:26:4d:1c:2f:d3:a5:46:fb:f7:91:3a:5e: 7e:ff:59:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHD+s+C9WkOYNNheXxUTO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NjE3ZDJlMDg2MzU4ZGRhN2JkYjBkYzQ2NmNhMWM4NmVk NGZlY2EwHhcNMjUxMjEwMDcwMDQyWhcNMjUxMjExMDcwMDQyWjAzMTEwLwYDVQQD EygwNTUxNDlkYzEyMzlhYmZmNTBjNWY0OGZjZDNhMDlhNWM2ODY5MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yTHnZmZpQfNl07HEgZBOPEfcl6w Y6fTGTKXUy3TOeuPThem6dioTPBg94FglvtnOiJFNXEuIbUW2SL8/uSPs8vWR6Mn PSoIhXnu9goRhbW0ZtJ/34tACm+yzv1NE/bhi6YYMKqOHQYQqDqSIeai9W5Z+06s yqyF7OvnWyViaTXW8O6tP5tKKiyfIH8Ps9K3+G7tLlpZjZUtNFfNNvMJyVDp+Hd8 Hg+3aBCP443uu/YUefa5iM5IpjjOeO2lH0Og1l5i7xLNfTC+4pIM7MprhTPzNybE s7Kj5zp6fvcn2vGN2EmfbKR6rI4FDlCJnEwAc85Q+DWurVxGrllmEz3l/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVRSdwSOav/UMX0j806CaXGhpLrMB8GA1UdIwQY MBaAFEVhfS4IY1jdp72w3EZsochu1P7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUldGOUxnaGpXTjJudmJEY1JteWh5RzdVX3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kODFiNTktYzA1YS00OGZlLWI1YjEt MTU4OTI3MzM3Njg5LzEvUldGOUxnaGpXTjJudmJEY1JteWh5RzdVX3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kODFiNTktYzA1YS00OGZlLWI1YjEtMTU4OTI3MzM3Njg5 LzEvUldGOUxnaGpXTjJudmJEY1JteWh5RzdVX3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuGwt2sr QKd1CwARk/NXaxTuovOEIGQKNzBsoOpKXRkLCjjHNhmRxO/ZijxWr95dFWJwlEsD JH0jKHo+4fAaDmlYTA6mJjmXtU9yULGCf2qH9tNS+agLyNxzmadrSBG7UJKXYYqU zLtA+ZOcDUHUIdYUc1E/18yFHGd2+KP4a0hheLP4yItyUhBaJ7YD+FRV5kA+ftW1 Kcc20AODLnqD8k2jtP20N9EURfDvLGiAlwTr1eRHb+HkQRRHqACoZ8KFAQKeb9Q4 uUUq75Q/3HFcHAQl5BfJNUfSPJcB8zvJR38c4PF4C3PaR06kS6Upe4F/Jk0cL9Ol Rvv3kTpefv9ZtA== -----END CERTIFICATE-----Generated at Wed Dec 10 10:09:39 2025 by rpki-client