This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft File: sVKsjTaZEe8sE_k_mZumY8GOETM.mft (raw, json) Hash identifier: 6A5Tv5ZzenRQ6VLLPiPCLS1Js03CujRWMEtfNQyKaVc= Subject key identifier: 85:D7:2F:36:BB:EF:6E:84:D6:15:51:6D:43:CF:DA:D8:34:01:27:20 Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33 Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133 Certificate serial: 019B221A07E19E5DAD232EFE470546392BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft Manifest number: 1282 Signing time: Mon 15 Dec 2025 13:01:29 +0000 Manifest this update: Mon 15 Dec 2025 13:01:29 +0000 Manifest next update: Tue 16 Dec 2025 13:01:29 +0000 Files and hashes: 1: ol7J2Hvjmb5X-K2OVwqn9laMR1o.roa (hash: eQqCRMd4r4yuoCt7TNNg0VZgfQMMOGRkxRWIPXje6c8=) 2: sVKsjTaZEe8sE_k_mZumY8GOETM.crl (hash: F+Y59vBHxnUwWnTN+xMF26RWjhRrb4hQFBZ6kYh5zwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:1a:07:e1:9e:5d:ad:23:2e:fe:47:05:46:39:2b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133 Validity Not Before: Dec 15 13:01:29 2025 GMT Not After : Dec 16 13:01:29 2025 GMT Subject: CN=85d72f36bbef6e84d615516d43cfdad834012720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:2b:a5:12:58:d2:d7:e6:a9:03:ae:c4:11: 4c:ac:b8:41:87:cc:cf:d6:93:0a:1e:a0:d2:97:96: 2e:78:4a:1e:30:d5:6c:2c:29:a6:6e:c2:c3:53:e2: 24:22:e7:16:a7:44:19:3d:4c:47:f7:56:25:74:4e: a6:5f:e1:43:99:5b:3b:0c:81:86:d2:05:5d:13:9c: f4:a2:dd:17:34:c8:0a:d3:6d:43:1d:5a:13:38:06: 9f:3a:97:e4:0e:2b:f9:1c:04:b1:38:74:87:6a:6e: dd:dd:06:09:7a:c4:e7:fd:2d:70:01:ed:9e:fd:f1: 70:7f:b0:a7:3d:ae:06:1f:3f:07:1a:ce:87:f1:99: c6:3e:2e:0c:a2:a8:3b:db:59:f4:7a:98:7d:e8:5d: ee:56:47:3c:ea:d0:aa:8d:0a:fb:49:4d:d4:b8:ff: fb:78:ed:16:1c:30:0c:4d:25:34:85:c8:57:b4:d3: 9f:ca:92:75:c3:f3:da:e5:61:9f:b9:dc:34:65:ce: 2f:ad:af:16:32:1d:98:73:67:22:55:b9:8d:38:27: 0e:f6:d7:00:54:f5:2a:7e:c3:8d:9b:ec:cd:ce:ef: 83:59:dc:7d:1a:8a:e7:9d:89:2f:33:71:c4:b4:ab: 1a:d6:2e:36:42:6c:4b:ab:3e:3c:73:61:b0:94:eb: 46:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D7:2F:36:BB:EF:6E:84:D6:15:51:6D:43:CF:DA:D8:34:01:27:20 X509v3 Authority Key Identifier: keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e2:1e:6c:06:69:8e:aa:ab:a6:92:3d:6e:27:a0:5e:3f:19: 4b:7f:34:82:8c:f9:a6:49:55:2e:40:61:1a:a8:8c:f4:cd:e4: 1c:bb:34:ff:ee:1b:da:5e:58:68:86:9f:85:0c:51:16:6c:69: 07:12:22:f2:55:de:07:95:8c:94:60:c2:01:bf:17:17:87:44: 5a:2e:83:5e:04:63:d8:a6:e0:d2:24:46:5b:08:60:32:4a:08: 40:93:b3:04:de:5a:92:51:d5:89:9d:3e:9a:35:99:19:5e:b7: 13:fb:c4:94:27:70:55:c1:c7:5f:59:75:4a:f3:62:39:1d:72: 5c:3c:10:53:46:74:11:77:28:b9:bd:39:ce:6a:61:4e:e6:20: 33:26:2d:2c:0d:79:4e:60:f4:47:5b:3c:75:a0:3f:7b:f6:cf: 88:67:1c:3c:1f:56:c8:2b:5a:05:47:92:61:f0:76:ed:3b:c9: c5:55:0d:ac:bc:b4:49:b5:9f:2b:4f:ce:34:c3:c0:d7:7a:f4: 63:7e:b3:9d:33:de:21:28:45:3b:02:ad:22:3d:1f:04:53:d3: 78:2f:88:e0:af:2b:3a:9e:c3:b4:10:c8:a8:a1:13:ed:6b:1b: 3d:df:0e:37:86:fb:60:45:ff:38:c5:d9:c3:b8:cd:f0:ef:c6: 29:4a:58:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGgfhnl2tIy7+RwVGOSuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTJhYzhkMzY5OTExZWYyYzEzZjkzZjk5OWJhNjYzYzE4 ZTExMzMwHhcNMjUxMjE1MTMwMTI5WhcNMjUxMjE2MTMwMTI5WjAzMTEwLwYDVQQD Eyg4NWQ3MmYzNmJiZWY2ZTg0ZDYxNTUxNmQ0M2NmZGFkODM0MDEyNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ4rpRJY0tfmqQOuxBFMrLhBh8zP 1pMKHqDSl5YueEoeMNVsLCmmbsLDU+IkIucWp0QZPUxH91YldE6mX+FDmVs7DIGG 0gVdE5z0ot0XNMgK021DHVoTOAafOpfkDiv5HASxOHSHam7d3QYJesTn/S1wAe2e /fFwf7CnPa4GHz8HGs6H8ZnGPi4Moqg721n0eph96F3uVkc86tCqjQr7SU3UuP/7 eO0WHDAMTSU0hchXtNOfypJ1w/Pa5WGfudw0Zc4vra8WMh2Yc2ciVbmNOCcO9tcA VPUqfsONm+zNzu+DWdx9GornnYkvM3HEtKsa1i42QmxLqz48c2GwlOtGZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXXLza7726E1hVRbUPP2tg0AScgMB8GA1UdIwQY MBaAFLFSrI02mRHvLBP5P5mbpmPBjhEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZLc2pUYVpFZThzRV9rX21adW1ZOEdPRVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NTQ0YjYtZTBhOS00ZGY4LTlkYjUt ZTkzNGRiZjkzNjMxLzEvc1ZLc2pUYVpFZThzRV9rX21adW1ZOEdPRVRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83NTQ0YjYtZTBhOS00ZGY4LTlkYjUtZTkzNGRiZjkzNjMx LzEvc1ZLc2pUYVpFZThzRV9rX21adW1ZOEdPRVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+IebAZp jqqrppI9biegXj8ZS380goz5pklVLkBhGqiM9M3kHLs0/+4b2l5YaIafhQxRFmxp BxIi8lXeB5WMlGDCAb8XF4dEWi6DXgRj2Kbg0iRGWwhgMkoIQJOzBN5aklHViZ0+ mjWZGV63E/vElCdwVcHHX1l1SvNiOR1yXDwQU0Z0EXcoub05zmphTuYgMyYtLA15 TmD0R1s8daA/e/bPiGccPB9WyCtaBUeSYfB27TvJxVUNrLy0SbWfK0/ONMPA13r0 Y36znTPeIShFOwKtIj0fBFPTeC+I4K8rOp7DtBDIqKET7WsbPd8ON4b7YEX/OMXZ w7jN8O/GKUpYuQ== -----END CERTIFICATE-----Generated at Mon Dec 15 18:58:57 2025 by rpki-client