This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json) Hash identifier: 1tQHjyDJTFyow4k8Q2O3q0qEaQ/t2oTC69MH8kKwAEY= Subject key identifier: 67:48:F9:DB:ED:38:F8:93:A3:E3:13:26:6E:AA:24:28:30:BF:1A:D7 Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48 Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548 Certificate serial: 019B348D607E093B06313DC4BD5D4FFDFDFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 03:00:38 +0000 Manifest this update: Fri 19 Dec 2025 03:00:38 +0000 Manifest next update: Sat 20 Dec 2025 03:00:38 +0000 Files and hashes: 1: G4p3T3vKIJwpoVG087GbMaXF5PU.roa (hash: S1k3o+lhMdQMdnd1dbHX7NQg9XvE842LHxXNFh07jnY=) 2: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: 6kBxwKWdhU+aJeX102qo5/sVvdBuFgr5vb1tVR08qe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:60:7e:09:3b:06:31:3d:c4:bd:5d:4f:fd:fd:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548 Validity Not Before: Dec 19 03:00:38 2025 GMT Not After : Dec 20 03:00:38 2025 GMT Subject: CN=6748f9dbed38f893a3e313266eaa242830bf1ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:5b:8c:93:2e:ac:2a:03:03:38:0d:38:8d: 88:13:53:15:a2:9c:13:92:ec:64:41:db:d5:df:38: 28:a4:ed:61:e9:e1:a9:d2:0f:4d:b3:10:fa:a9:80: 7d:cb:80:c5:05:41:5c:b5:f2:ec:4f:3e:6d:2a:a8: 3a:37:fa:97:f7:aa:a1:fb:72:f6:b5:7a:58:2e:c4: f6:bc:fa:a4:bb:a3:61:cc:6c:97:62:b0:52:2d:de: 53:df:6a:ca:7f:f7:08:ae:ff:77:3b:7a:c7:f5:c9: 7a:79:17:1d:ef:8c:d5:63:6d:79:a5:2a:b9:24:2a: 67:85:53:eb:4b:78:54:c6:d6:b0:3d:af:10:4f:44: 6b:53:2a:cd:73:3a:62:eb:85:d5:62:50:58:3a:99: 4a:28:5d:da:87:ea:27:86:be:62:cf:d1:1e:0c:b6: 28:19:5c:97:01:b7:e0:df:81:cf:90:47:fa:dd:f2: f3:5a:40:87:4c:7d:16:c7:c6:24:e4:ad:a3:b8:1f: b5:f0:97:28:30:0f:32:7d:f6:0a:95:08:ea:ee:a5: ec:12:68:25:7b:8d:3d:70:96:b3:4d:74:a8:0e:e7: 3f:b3:60:0e:7e:7c:46:35:56:70:8a:4a:6e:ad:21: ee:60:f7:fd:46:2d:80:d5:8f:31:b9:42:29:2f:2a: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:48:F9:DB:ED:38:F8:93:A3:E3:13:26:6E:AA:24:28:30:BF:1A:D7 X509v3 Authority Key Identifier: keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5c:5d:76:5c:0c:49:bb:1d:93:1b:f5:5b:0c:68:e9:2c:de: 51:fd:ef:4f:b9:d4:b2:ad:41:c3:56:20:37:4a:fa:15:ff:f4: c2:a0:3c:08:d2:f2:0f:b9:a2:6f:dc:08:ec:e7:ae:8c:ff:af: 64:01:65:96:f0:df:69:9e:fc:05:6c:06:bf:43:ef:f7:4e:39: 19:db:98:6a:e8:24:f2:1d:f8:b6:c0:56:08:ce:66:e7:b3:c5: 3d:c0:72:78:05:5b:6e:c7:95:54:cd:f8:6b:3f:7b:2e:6b:0b: 85:b4:f8:fb:84:e6:e6:bc:f7:5b:c4:5e:3e:8b:48:76:cd:2e: 10:ef:5d:b0:6d:00:d7:b2:50:17:a5:71:39:f0:ef:72:a2:23: 82:f2:d1:af:6f:5f:e8:46:6a:e4:ed:6f:e1:33:5b:c4:ba:26: 5f:50:cf:e9:47:5a:c8:45:00:91:3d:80:9e:8c:78:ad:06:5d: 5e:1f:52:d8:2a:c2:b5:20:74:2b:88:fe:da:13:9c:d8:86:44: 54:ba:c4:09:4d:d5:91:10:73:33:90:1e:26:64:7b:d0:26:57: 57:a3:a5:8a:44:1c:1f:d5:c5:1e:6b:b6:08:c9:50:63:c8:08: 37:5b:3f:53:50:9d:96:1b:03:0f:1d:c4:f3:fd:0b:17:0a:88: 66:56:c7:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jWB+CTsGMT3EvV1P/f38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODU5OTI5MmE2MzI0Mjk3ZTAyZmZmM2M1MTE5YmVlMGIz MTc1NDgwHhcNMjUxMjE5MDMwMDM4WhcNMjUxMjIwMDMwMDM4WjAzMTEwLwYDVQQD Eyg2NzQ4ZjlkYmVkMzhmODkzYTNlMzEzMjY2ZWFhMjQyODMwYmYxYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QpbjJMurCoDAzgNOI2IE1MVopwT kuxkQdvV3zgopO1h6eGp0g9NsxD6qYB9y4DFBUFctfLsTz5tKqg6N/qX96qh+3L2 tXpYLsT2vPqku6NhzGyXYrBSLd5T32rKf/cIrv93O3rH9cl6eRcd74zVY215pSq5 JCpnhVPrS3hUxtawPa8QT0RrUyrNczpi64XVYlBYOplKKF3ah+onhr5iz9EeDLYo GVyXAbfg34HPkEf63fLzWkCHTH0Wx8Yk5K2juB+18JcoMA8yffYKlQjq7qXsEmgl e409cJazTXSoDuc/s2AOfnxGNVZwikpurSHuYPf9Ri2A1Y8xuUIpLyrZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdI+dvtOPiTo+MTJm6qJCgwvxrXMB8GA1UdIwQY MBaAFLKFmSkqYyQpfgL/88URm+4LMXVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEt ZTM1YTY3ZTVkOWUyLzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEtZTM1YTY3ZTVkOWUy LzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1xddlwM Sbsdkxv1Wwxo6SzeUf3vT7nUsq1Bw1YgN0r6Ff/0wqA8CNLyD7mib9wI7OeujP+v ZAFllvDfaZ78BWwGv0Pv9045GduYaugk8h34tsBWCM5m57PFPcByeAVbbseVVM34 az97LmsLhbT4+4Tm5rz3W8RePotIds0uEO9dsG0A17JQF6VxOfDvcqIjgvLRr29f 6EZq5O1v4TNbxLomX1DP6UdayEUAkT2Anox4rQZdXh9S2CrCtSB0K4j+2hOc2IZE VLrECU3VkRBzM5AeJmR70CZXV6OlikQcH9XFHmu2CMlQY8gIN1s/U1CdlhsDDx3E 8/0LFwqIZlbHlw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:12:31 2025 by rpki-client