This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json) Hash identifier: GDpG6kkqsciqmf2cLQ/XdvlT1jTuyFZvjdvvC53gtJw= Subject key identifier: 84:AE:2B:31:AF:57:1A:48:20:9C:7B:A6:D4:8C:2C:52:FA:8A:B5:09 Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8 Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8 Certificate serial: 019B4324DA839A907B24CB7DC4D6D32864D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 23:00:47 +0000 Manifest this update: Sun 21 Dec 2025 23:00:47 +0000 Manifest next update: Mon 22 Dec 2025 23:00:47 +0000 Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=) 2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=) 3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: +m6ee/MwV9BKLbVcDya3fPG3KzUy5i4bqpYwwtD3XFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:da:83:9a:90:7b:24:cb:7d:c4:d6:d3:28:64:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8 Validity Not Before: Dec 21 23:00:47 2025 GMT Not After : Dec 22 23:00:47 2025 GMT Subject: CN=84ae2b31af571a48209c7ba6d48c2c52fa8ab509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:e8:61:9b:fe:0c:76:7b:41:e8:58:78:ec: 99:7c:2d:8d:69:91:37:16:0c:95:09:7c:9d:22:66: 71:3c:fb:b3:f8:4a:79:59:be:fd:9e:59:8c:e4:8d: 8d:fa:4e:32:d5:19:63:0e:5f:b0:48:f7:a0:e3:d7: 8d:63:95:58:43:39:6c:7f:0d:9a:f6:e6:ae:03:9a: e9:73:7e:85:fe:93:db:42:00:53:7b:3d:99:fb:e8: 02:c3:8c:20:46:a2:5d:0c:4a:a0:05:4d:1b:87:9c: d4:39:f7:cd:89:38:e6:91:2b:bb:4f:68:3c:bd:b8: 01:8d:eb:83:70:29:53:96:39:fe:f1:73:99:38:bd: 8a:d1:44:a7:60:a8:e5:31:3f:c8:87:e0:22:3c:91: e4:95:1f:2a:3f:50:4f:b5:a2:df:f1:79:d4:5a:c3: 51:30:0d:5f:bf:be:5c:16:64:73:84:99:2f:fc:6f: 08:95:fa:f9:8c:b1:0f:4a:b2:f4:ef:bf:b9:32:94: 0e:f2:79:34:4d:6c:b2:77:eb:8f:e4:52:f9:6d:8f: 35:12:0c:c7:65:82:fa:46:39:6c:d8:3a:db:a8:61: 54:93:5f:27:15:c6:13:7a:61:78:f0:9c:5e:46:2e: d8:ca:d5:fa:63:2d:a7:7e:79:59:f8:67:72:1a:e7: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:2B:31:AF:57:1A:48:20:9C:7B:A6:D4:8C:2C:52:FA:8A:B5:09 X509v3 Authority Key Identifier: keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:30:d1:86:7a:c6:d6:e4:13:15:1f:3d:20:86:d9:06:2a:3c: 34:9e:db:a6:c7:2d:c3:5d:3b:36:6b:0b:d0:be:06:74:6b:55: 50:ec:74:0c:61:fb:85:24:59:aa:06:d0:48:b0:cb:df:c1:ae: 8b:f5:c7:47:99:54:58:ed:14:5e:39:ac:c7:6d:35:19:e9:eb: 37:ec:b1:21:3c:c5:79:17:89:21:b0:0b:e4:01:f8:bf:a5:f8: 22:c5:87:53:5e:9e:16:dd:80:c2:6b:07:ac:13:9d:eb:4b:91: 31:91:37:b3:9b:43:8b:97:2b:15:0c:33:02:27:54:1e:1f:70: 98:85:0a:f6:bf:c5:50:f5:09:3c:4b:3f:9b:cc:8e:f9:f2:45: 0f:64:97:6f:13:68:0a:26:f9:04:38:09:8c:fd:e9:16:3a:1e: b7:4b:d9:7a:81:22:1e:e5:fa:8c:55:34:73:a4:b1:2e:41:d3: df:af:37:80:58:9a:04:6a:bd:25:1b:8f:ac:f8:cd:36:06:49: e7:8c:79:c7:2c:f1:bd:8b:ec:36:9d:fc:e8:15:84:47:a6:ad: 95:f6:f6:aa:4e:9a:28:48:0f:53:b4:0c:c4:ed:e2:9c:eb:49: 03:d0:d1:12:b3:dc:59:d5:b9:7f:91:b5:10:a5:68:53:52:ef: 36:4a:b2:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJNqDmpB7JMt9xNbTKGTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzFlMmNhODI0Y2E4ZDU1NjI0MDZhNzAyMWFlM2MxM2Ex NDI1ZDgwHhcNMjUxMjIxMjMwMDQ3WhcNMjUxMjIyMjMwMDQ3WjAzMTEwLwYDVQQD Eyg4NGFlMmIzMWFmNTcxYTQ4MjA5YzdiYTZkNDhjMmM1MmZhOGFiNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHvoYZv+DHZ7QehYeOyZfC2NaZE3 FgyVCXydImZxPPuz+Ep5Wb79nlmM5I2N+k4y1RljDl+wSPeg49eNY5VYQzlsfw2a 9uauA5rpc36F/pPbQgBTez2Z++gCw4wgRqJdDEqgBU0bh5zUOffNiTjmkSu7T2g8 vbgBjeuDcClTljn+8XOZOL2K0USnYKjlMT/Ih+AiPJHklR8qP1BPtaLf8XnUWsNR MA1fv75cFmRzhJkv/G8Ilfr5jLEPSrL077+5MpQO8nk0TWyyd+uP5FL5bY81EgzH ZYL6Rjls2DrbqGFUk18nFcYTemF48JxeRi7YytX6Yy2nfnlZ+GdyGucv2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISuKzGvVxpIIJx7ptSMLFL6irUJMB8GA1UdIwQY MBaAFLAx4sqCTKjVViQGpwIa48E6FCXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt MTMwZTRkYzAxNWFiLzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi LzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2zDRhnrG 1uQTFR89IIbZBio8NJ7bpsctw107NmsL0L4GdGtVUOx0DGH7hSRZqgbQSLDL38Gu i/XHR5lUWO0UXjmsx201GenrN+yxITzFeReJIbAL5AH4v6X4IsWHU16eFt2AwmsH rBOd60uRMZE3s5tDi5crFQwzAidUHh9wmIUK9r/FUPUJPEs/m8yO+fJFD2SXbxNo Cib5BDgJjP3pFjoet0vZeoEiHuX6jFU0c6SxLkHT3683gFiaBGq9JRuPrPjNNgZJ 54x5xyzxvYvsNp386BWER6atlfb2qk6aKEgPU7QMxO3inOtJA9DRErPcWdW5f5G1 EKVoU1LvNkqySQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:03 2025 by rpki-client