This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft File: sV9qUOakiH4XxTsPwQ5LfhST7rU.mft (raw, json) Hash identifier: vwOSMueMV/M1NwHLpCe/1i6puQi1WemgdSrIVhVmp3U= Subject key identifier: E2:21:32:68:83:04:4A:C0:68:D8:71:9D:A1:8F:17:DA:C2:CD:3A:6F Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 Certificate issuer: /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Certificate serial: 019B1C4EBE588B9864B71AB7B3CB28C8DF48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft Manifest number: 135F Signing time: Sun 14 Dec 2025 10:01:21 +0000 Manifest this update: Sun 14 Dec 2025 10:01:21 +0000 Manifest next update: Mon 15 Dec 2025 10:01:21 +0000 Files and hashes: 1: 3xl9gz2v2fThQZEEZ4zdC7JoKs4.roa (hash: Jx3hDEYSWvyg0teai/myn3+xGqI2AFge39hcH66bs6U=) 2: sV9qUOakiH4XxTsPwQ5LfhST7rU.crl (hash: RcB04syj6pYOlqmF9ezT4MKG/SmSULRV0FmANdV7f6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:be:58:8b:98:64:b7:1a:b7:b3:cb:28:c8:df:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Validity Not Before: Dec 14 10:01:21 2025 GMT Not After : Dec 15 10:01:21 2025 GMT Subject: CN=e221326883044ac068d8719da18f17dac2cd3a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:1a:26:ca:d6:8e:87:8d:be:46:d6:08:90: da:00:8f:91:46:c5:85:e5:85:0d:74:3b:ae:71:14: dd:0a:a3:5d:86:9b:94:99:bb:bc:58:f4:f6:3d:e5: c5:88:79:0d:ba:55:ee:78:f1:0c:09:b1:b5:d9:ce: 88:3c:86:af:89:4c:17:92:cf:58:b6:cd:db:2a:03: 8d:0f:69:98:8a:9e:79:d1:82:ab:e3:71:32:ef:d5: 0b:5e:60:68:e4:b5:66:2a:ff:ca:d5:2c:67:b0:8a: 3b:12:17:a3:39:41:bf:a1:37:df:e2:fe:6b:0f:8e: 0a:89:c4:31:56:72:f6:7d:af:f6:0d:cb:48:ff:fb: 0e:b1:7b:1e:51:a8:ac:7c:b9:c4:04:d2:fe:33:6b: 57:9b:58:55:04:1d:a2:da:68:22:6d:81:1d:c1:66: ec:a0:6a:60:c9:47:38:52:97:d7:74:5d:99:bd:c4: 86:bd:21:44:f3:dc:6c:a6:59:db:fd:78:e2:d4:ff: 25:7a:c1:01:9e:41:30:76:eb:60:a4:ae:83:5c:40: c7:bc:00:5e:e3:ee:6d:d5:f0:8f:b5:ae:c6:cc:9d: 50:8c:61:1c:74:14:b4:47:de:7f:96:69:72:b7:8c: b6:8c:c5:8f:3f:7b:fa:24:ec:bb:6c:41:7d:e4:af: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:21:32:68:83:04:4A:C0:68:D8:71:9D:A1:8F:17:DA:C2:CD:3A:6F X509v3 Authority Key Identifier: keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:18:5e:9c:bc:ca:e9:82:db:25:7d:b4:b6:24:dd:0a:34:cc: f8:da:0e:0b:44:28:6a:67:11:8b:78:0b:f6:11:05:a6:19:89: 68:8b:18:d9:7d:df:3c:7c:5d:c4:10:54:7a:ae:5a:34:c0:92: c6:e3:da:9c:bc:34:3c:34:0e:0c:cb:64:43:54:a6:a3:7a:4b: 2a:4d:9b:8d:3e:71:c9:e7:2f:d5:80:16:db:c5:1f:94:f3:7c: 61:8f:39:f6:0a:52:a3:15:bf:16:2e:ef:ef:7a:b1:51:e0:04: 11:29:67:89:47:5f:20:ce:b8:e8:6e:6b:8b:f4:94:4b:47:9a: b9:a2:7c:34:99:55:73:e8:ac:83:1e:69:50:83:62:56:57:e9: 90:85:ab:a7:06:bd:fa:4d:fa:83:ac:b1:73:b7:e1:db:42:19: 2e:d9:68:0b:17:1a:db:34:39:1d:cd:5f:fb:cc:e4:e1:de:79: 19:48:a3:7b:47:b5:77:0f:99:d3:71:3b:36:66:d1:60:8a:16: ed:32:53:c9:6c:a0:7a:5b:80:69:c3:d6:b0:a0:2a:8c:82:97: b6:fa:37:1c:18:b6:42:b2:ce:02:04:37:e5:e3:cd:48:43:9f: b7:a2:f9:09:cc:c5:2b:99:d9:01:d0:b4:f5:c6:99:b3:23:bf: e5:6c:21:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTr5Yi5hktxq3s8soyN9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWY2YTUwZTZhNDg4N2UxN2M1M2IwZmMxMGU0YjdlMTQ5 M2VlYjUwHhcNMjUxMjE0MTAwMTIxWhcNMjUxMjE1MTAwMTIxWjAzMTEwLwYDVQQD EyhlMjIxMzI2ODgzMDQ0YWMwNjhkODcxOWRhMThmMTdkYWMyY2QzYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTcaJsrWjoeNvkbWCJDaAI+RRsWF 5YUNdDuucRTdCqNdhpuUmbu8WPT2PeXFiHkNulXuePEMCbG12c6IPIaviUwXks9Y ts3bKgOND2mYip550YKr43Ey79ULXmBo5LVmKv/K1SxnsIo7EhejOUG/oTff4v5r D44KicQxVnL2fa/2DctI//sOsXseUaisfLnEBNL+M2tXm1hVBB2i2mgibYEdwWbs oGpgyUc4UpfXdF2ZvcSGvSFE89xsplnb/Xji1P8lesEBnkEwdutgpK6DXEDHvABe 4+5t1fCPta7GzJ1QjGEcdBS0R95/lmlyt4y2jMWPP3v6JOy7bEF95K9FCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIhMmiDBErAaNhxnaGPF9rCzTpvMB8GA1UdIwQY MBaAFLFfalDmpIh+F8U7D8EOS34Uk+61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2Ut Mjk4NDJiYzI3MTQ1LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2UtMjk4NDJiYzI3MTQ1 LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRhenLzK 6YLbJX20tiTdCjTM+NoOC0QoamcRi3gL9hEFphmJaIsY2X3fPHxdxBBUeq5aNMCS xuPanLw0PDQODMtkQ1Smo3pLKk2bjT5xyecv1YAW28UflPN8YY859gpSoxW/Fi7v 73qxUeAEESlniUdfIM646G5ri/SUS0eauaJ8NJlVc+isgx5pUINiVlfpkIWrpwa9 +k36g6yxc7fh20IZLtloCxca2zQ5Hc1f+8zk4d55GUije0e1dw+Z03E7NmbRYIoW 7TJTyWygeluAacPWsKAqjIKXtvo3HBi2QrLOAgQ35ePNSEOft6L5CczFK5nZAdC0 9caZsyO/5Wwh/A== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:39 2025 by rpki-client