This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json) Hash identifier: yGA0ia4aPgUbWWC8LHhgrY5HkRs8xkCnbS6mdI7ZZx0= Subject key identifier: 9B:CE:7F:53:71:EA:BE:08:5B:49:2B:D5:A0:C9:F7:A4:46:03:8A:E1 Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Certificate serial: 019B3E6DE04BA36DDB4C349E9EE745CD3269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft Manifest number: 151A Signing time: Sun 21 Dec 2025 01:02:26 +0000 Manifest this update: Sun 21 Dec 2025 01:02:26 +0000 Manifest next update: Mon 22 Dec 2025 01:02:26 +0000 Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=) 2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: 3dTkXF4bxrI9xWRdCfpJRdBlCzfX4MTqLr2tapAxp30=) 3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e0:4b:a3:6d:db:4c:34:9e:9e:e7:45:cd:32:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Validity Not Before: Dec 21 01:02:26 2025 GMT Not After : Dec 22 01:02:26 2025 GMT Subject: CN=9bce7f5371eabe085b492bd5a0c9f7a446038ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:2f:47:2a:2c:3f:89:42:08:5c:dd:55:71: b2:54:93:c5:f8:c4:8c:b4:b3:22:52:4c:50:13:5d: fe:3c:ca:38:b8:0a:af:7f:a9:09:b2:b0:54:38:33: 48:b9:9c:f5:7a:ad:5e:29:33:56:01:c8:96:b4:d8: 00:49:c3:7b:30:50:38:2a:93:55:1d:a5:44:42:f6: 10:71:18:b2:b6:ef:67:cb:b7:f6:1d:33:b5:91:41: 36:1f:0e:ca:21:78:c0:a0:df:79:39:b8:f0:b1:ba: 7a:b3:cf:b1:24:67:80:07:36:84:88:e0:2c:3d:2d: 77:76:cd:83:ff:69:c2:5b:3c:4a:b8:6f:f2:21:15: b3:9b:0d:03:85:3f:75:3b:45:68:ac:1a:6a:8f:b2: 25:31:2d:da:1d:53:49:d1:ea:8d:7b:f4:0e:7c:48: d5:37:8e:ef:bd:bb:9d:d1:ab:e5:54:a2:9d:df:7c: 74:6d:08:a8:fd:3c:3b:bc:08:73:c3:3a:e9:da:33: cb:64:05:b3:45:ba:5d:2e:18:92:3c:2a:b0:80:6c: a0:71:18:b9:84:57:55:28:e9:f1:93:1b:4b:72:a2: 40:13:5f:21:d1:67:5b:f2:5b:19:3c:07:4a:86:92: 91:09:58:76:18:f7:30:cb:85:90:13:bd:3b:af:c4: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CE:7F:53:71:EA:BE:08:5B:49:2B:D5:A0:C9:F7:A4:46:03:8A:E1 X509v3 Authority Key Identifier: keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ec:d9:89:3d:3b:ab:26:d5:d5:7f:32:30:ad:ef:4a:e7:78: 95:c0:77:fe:88:04:25:d7:29:db:a7:78:bf:06:23:3a:08:0c: 1f:e6:80:02:ca:b5:fe:f2:7c:40:74:91:f0:b6:8f:63:c8:77: 57:69:c4:cb:40:08:9a:67:2c:52:b5:5c:e2:44:57:09:76:c2: aa:69:90:cc:87:cd:e9:84:ee:96:9a:81:16:16:75:78:78:0f: 1f:0d:0f:39:bc:ce:2d:2d:ee:84:e6:ce:09:e5:5f:fc:cd:21: b1:c0:7c:b3:ad:45:05:68:ff:76:61:13:23:80:bf:85:ac:b6: 3d:c7:2e:67:ac:ac:6a:01:43:f6:8c:4f:5b:f4:a8:a3:7e:65: f4:36:58:ef:7e:e3:3f:e6:0f:0f:79:4a:87:4b:c9:3c:6a:04: da:72:4b:50:9e:a2:40:0b:a6:2b:a9:0e:bb:fa:69:86:b1:7b: 01:86:20:71:67:11:c3:18:47:60:b2:36:ad:d1:65:44:c0:11: 7f:0c:b8:4c:c7:2a:bb:2d:59:23:0f:19:12:40:e9:1f:3d:06: c0:af:89:eb:ee:79:83:14:30:69:38:85:92:31:76:bc:5b:f8: 1f:0b:3b:9d:78:21:06:45:f6:69:d5:4b:11:da:1a:49:89:69: bb:08:43:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+beBLo23bTDSenudFzTJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz NzI0OTYwHhcNMjUxMjIxMDEwMjI2WhcNMjUxMjIyMDEwMjI2WjAzMTEwLwYDVQQD Eyg5YmNlN2Y1MzcxZWFiZTA4NWI0OTJiZDVhMGM5ZjdhNDQ2MDM4YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNEvRyosP4lCCFzdVXGyVJPF+MSM tLMiUkxQE13+PMo4uAqvf6kJsrBUODNIuZz1eq1eKTNWAciWtNgAScN7MFA4KpNV HaVEQvYQcRiytu9ny7f2HTO1kUE2Hw7KIXjAoN95Objwsbp6s8+xJGeABzaEiOAs PS13ds2D/2nCWzxKuG/yIRWzmw0DhT91O0VorBpqj7IlMS3aHVNJ0eqNe/QOfEjV N47vvbud0avlVKKd33x0bQio/Tw7vAhzwzrp2jPLZAWzRbpdLhiSPCqwgGygcRi5 hFdVKOnxkxtLcqJAE18h0Wdb8lsZPAdKhpKRCVh2GPcwy4WQE707r8Qm8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvOf1Nx6r4IW0kr1aDJ96RGA4rhMB8GA1UdIwQY MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt OThmNzQ1NGJhNmNlLzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOzZiT07 qybV1X8yMK3vSud4lcB3/ogEJdcp26d4vwYjOggMH+aAAsq1/vJ8QHSR8LaPY8h3 V2nEy0AImmcsUrVc4kRXCXbCqmmQzIfN6YTulpqBFhZ1eHgPHw0PObzOLS3uhObO CeVf/M0hscB8s61FBWj/dmETI4C/hay2PccuZ6ysagFD9oxPW/Soo35l9DZY737j P+YPD3lKh0vJPGoE2nJLUJ6iQAumK6kOu/pphrF7AYYgcWcRwxhHYLI2rdFlRMAR fwy4TMcquy1ZIw8ZEkDpHz0GwK+J6+55gxQwaTiFkjF2vFv4Hws7nXghBkX2adVL EdoaSYlpuwhDqw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:46:51 2025 by rpki-client