This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json) Hash identifier: IMP9x0Z/YIPJRSZwytQwlQ/tw+Gtd0ANIzKAFvjIqoE= Subject key identifier: 71:29:A9:B9:82:EC:3B:63:59:41:0F:29:8F:EA:80:C9:A6:AB:51:C3 Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Certificate serial: 019B1D988D731148B3F0ECA667DB1E689FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft Manifest number: 1509 Signing time: Sun 14 Dec 2025 16:01:35 +0000 Manifest this update: Sun 14 Dec 2025 16:01:35 +0000 Manifest next update: Mon 15 Dec 2025 16:01:35 +0000 Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=) 2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: COxCpW2RdoSAHyxGzbehHUtDd5AbTJ1KbywaR26RZNY=) 3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:8d:73:11:48:b3:f0:ec:a6:67:db:1e:68:9f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Validity Not Before: Dec 14 16:01:35 2025 GMT Not After : Dec 15 16:01:35 2025 GMT Subject: CN=7129a9b982ec3b6359410f298fea80c9a6ab51c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:98:56:93:9c:a6:20:84:b5:da:a8:7a:93: e6:76:39:f7:6d:55:30:62:62:b4:52:11:79:28:5c: 35:8a:a8:99:af:84:0f:aa:c3:1a:13:f6:7b:4a:28: ba:66:f9:40:2d:30:cf:59:7d:34:1f:76:8d:91:10: fa:c1:be:40:f9:d7:52:2c:71:94:cf:26:17:11:fd: 01:77:10:ab:bb:fb:8b:a7:44:6f:88:06:a9:7a:82: 73:97:56:91:a0:59:e6:db:d1:d6:6b:27:89:49:bb: 50:a7:c8:93:48:9d:f2:25:28:b1:d2:d2:99:77:73: 84:7b:95:b0:be:dd:d0:9a:8f:21:ab:20:e3:dc:3d: 0f:ee:f7:58:b4:e0:5b:de:a8:98:ac:95:53:19:50: 02:2b:f7:23:74:c1:66:9e:f4:94:0e:da:0f:2b:72: 85:65:27:7b:85:99:ef:08:04:17:be:80:34:e9:ab: c7:16:98:cd:61:40:8b:49:24:37:9b:1f:2b:a3:b7: 3b:9c:a4:d4:23:2c:b0:e1:a3:c8:9e:5e:b7:f8:2c: d0:73:12:da:97:c5:67:2c:69:47:f3:d6:38:b7:a0: 90:32:2a:50:6a:98:c8:c6:4b:cd:92:48:4e:43:5d: 9c:3b:b4:0a:3a:b8:16:10:66:dd:a8:c7:0a:7b:d4: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:29:A9:B9:82:EC:3B:63:59:41:0F:29:8F:EA:80:C9:A6:AB:51:C3 X509v3 Authority Key Identifier: keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2c:8f:69:c1:a9:3c:5f:f6:27:77:23:82:a1:59:f8:53:8a: d9:aa:ab:58:c3:65:7a:a5:30:f6:0f:47:0d:2f:78:a9:17:19: 21:1b:b2:57:b1:d2:a6:b0:da:1f:f3:d1:0f:e5:0b:1a:29:b0: dc:e9:b6:01:18:2c:9b:02:52:f6:39:b9:11:23:3e:a7:99:4a: cc:1b:f7:c2:e6:86:03:07:ef:35:39:f8:ef:a6:f9:08:21:a6: 27:a6:e3:85:4c:40:9c:7c:92:cb:bd:79:b3:a5:07:63:36:1a: 5a:e5:20:a5:97:7d:8b:97:bd:c7:41:59:3b:18:6d:dc:d8:82: 1b:26:b1:b1:5c:7a:b1:60:d2:87:e3:85:3c:07:1a:3d:1a:ea: a6:d1:29:bd:ac:9a:45:dd:cd:13:c8:fd:79:2e:74:1f:35:64: 33:7a:b0:26:dc:04:3d:a3:b5:63:3c:79:3f:08:5b:a1:d1:a4: c1:ea:18:7a:c6:ea:5e:4b:da:95:21:2b:9c:6a:b2:f4:05:eb: b7:b3:b9:51:b2:3d:53:ab:4e:1c:c6:eb:7b:af:7c:81:44:47: 39:0e:76:76:a9:4f:4a:22:41:27:6c:b5:ca:17:0f:28:48:7c: f2:d5:a2:89:5b:36:07:ed:cc:ad:78:76:a7:62:72:ac:1f:65: 51:b4:ce:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmI1zEUiz8OymZ9seaJ/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz NzI0OTYwHhcNMjUxMjE0MTYwMTM1WhcNMjUxMjE1MTYwMTM1WjAzMTEwLwYDVQQD Eyg3MTI5YTliOTgyZWMzYjYzNTk0MTBmMjk4ZmVhODBjOWE2YWI1MWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ6YVpOcpiCEtdqoepPmdjn3bVUw YmK0UhF5KFw1iqiZr4QPqsMaE/Z7Sii6ZvlALTDPWX00H3aNkRD6wb5A+ddSLHGU zyYXEf0BdxCru/uLp0RviAapeoJzl1aRoFnm29HWayeJSbtQp8iTSJ3yJSix0tKZ d3OEe5Wwvt3Qmo8hqyDj3D0P7vdYtOBb3qiYrJVTGVACK/cjdMFmnvSUDtoPK3KF ZSd7hZnvCAQXvoA06avHFpjNYUCLSSQ3mx8ro7c7nKTUIyyw4aPInl63+CzQcxLa l8VnLGlH89Y4t6CQMipQapjIxkvNkkhOQ12cO7QKOrgWEGbdqMcKe9SaEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEpqbmC7DtjWUEPKY/qgMmmq1HDMB8GA1UdIwQY MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt OThmNzQ1NGJhNmNlLzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliyPacGp PF/2J3cjgqFZ+FOK2aqrWMNleqUw9g9HDS94qRcZIRuyV7HSprDaH/PRD+ULGimw 3Om2ARgsmwJS9jm5ESM+p5lKzBv3wuaGAwfvNTn476b5CCGmJ6bjhUxAnHySy715 s6UHYzYaWuUgpZd9i5e9x0FZOxht3NiCGyaxsVx6sWDSh+OFPAcaPRrqptEpvaya Rd3NE8j9eS50HzVkM3qwJtwEPaO1Yzx5PwhbodGkweoYesbqXkvalSErnGqy9AXr t7O5UbI9U6tOHMbre698gURHOQ52dqlPSiJBJ2y1yhcPKEh88tWiiVs2B+3MrXh2 p2JyrB9lUbTOUg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:37 2025 by rpki-client