This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json) Hash identifier: SxM50C9MfLRRkMaWWPa8L/XQgBzZuGO2pRMDrAARtik= Subject key identifier: EF:67:D3:CC:FF:CB:9F:E2:3A:95:2F:A7:1E:64:E3:07:50:B3:69:6E Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26 Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226 Certificate serial: 019B115D09491318C103F900BBFBCAF5D7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 07:01:08 +0000 Manifest this update: Fri 12 Dec 2025 07:01:08 +0000 Manifest next update: Sat 13 Dec 2025 07:01:08 +0000 Files and hashes: 1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=) 2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: iZMZ4/nIeW58THo8pqBKEk1GIgjDQB2XohxAubZATNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:09:49:13:18:c1:03:f9:00:bb:fb:ca:f5:d7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226 Validity Not Before: Dec 12 07:01:08 2025 GMT Not After : Dec 13 07:01:08 2025 GMT Subject: CN=ef67d3ccffcb9fe23a952fa71e64e30750b3696e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:43:11:87:ae:75:bb:42:1b:69:93:e2:90: 30:5a:a2:c6:38:54:89:2e:28:50:68:90:3e:be:91: f4:f8:52:29:27:15:88:7f:d7:f3:30:8f:ff:99:50: 38:24:0a:73:ea:37:e8:7f:da:06:9f:cc:cc:0d:3d: a1:42:3d:03:a1:a0:96:d5:34:18:1d:54:7b:6d:40: d5:31:f0:f8:02:1d:66:2d:b6:8b:a7:3d:97:8a:1a: 14:d1:b7:7f:58:93:bc:3d:79:de:7a:e6:85:95:b9: 91:9d:7e:96:ae:e7:95:03:2c:4a:34:60:32:73:80: e0:18:f4:58:14:38:a0:a6:02:9c:44:69:3e:2f:f0: 86:43:64:5b:03:ca:ca:ef:c1:d6:4e:ca:eb:11:83: 98:6d:d8:21:a4:63:4a:b7:af:1a:ea:13:2c:3d:c9: 98:6d:50:8d:d6:07:5f:6f:a0:3b:72:f4:07:4d:a4: 6f:2e:ea:62:8f:c4:83:42:43:8c:0e:cd:64:fa:d4: 75:29:05:55:bc:c0:ad:2e:d5:47:cf:54:8f:ea:85: fa:9f:69:e5:81:b5:9a:52:87:12:9c:95:58:ae:91: 18:b8:04:b2:97:14:99:4f:8a:97:b3:e3:02:58:38: e9:29:57:15:d6:1b:ca:fb:37:cb:fa:15:4b:33:e6: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:67:D3:CC:FF:CB:9F:E2:3A:95:2F:A7:1E:64:E3:07:50:B3:69:6E X509v3 Authority Key Identifier: keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ab:fd:83:79:d9:ba:a3:77:f6:36:06:2d:95:a1:04:06:13: 0e:97:0e:d2:86:6f:f6:ac:ad:70:4b:46:c9:98:76:b2:75:4e: 03:c2:2a:f5:3a:97:90:96:8e:33:b9:ff:24:16:39:3a:c5:30: 3b:ff:3f:0f:28:ef:0a:29:6a:c6:ed:e0:00:f9:41:f5:c4:80: c3:c0:fc:32:27:50:02:bf:a2:56:a8:35:a6:6d:aa:a3:f0:bc: 5f:e1:0f:6f:a7:a8:8d:34:a3:01:1e:b3:ad:b5:35:28:c8:b8: 2b:ee:2d:5b:e4:66:05:ca:41:e0:f2:94:75:0d:fe:35:20:3f: 5a:44:f6:ce:ea:5c:d0:68:85:ab:91:6d:b1:23:36:4a:42:82: 36:9e:ab:0f:0b:6b:d0:98:e6:56:f5:48:22:20:4b:a6:5b:69: 6d:e8:37:a9:4b:b6:2a:e2:04:3a:51:8c:2a:bb:5b:33:28:c7: a0:f7:58:fc:b8:db:40:c7:7d:8e:68:c0:4f:b4:12:96:e1:be: 34:7c:97:38:69:de:34:59:23:5d:f2:ca:fe:9e:c5:9b:55:42: 9a:82:29:b6:13:72:d7:01:53:e3:36:73:79:6e:3d:83:d2:e7: c9:d7:22:fb:63:02:04:ac:7c:ce:f2:91:6d:27:cf:ac:e5:87: 6c:b3:f6:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXQlJExjBA/kAu/vK9df3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy ZjEyMjYwHhcNMjUxMjEyMDcwMTA4WhcNMjUxMjEzMDcwMTA4WjAzMTEwLwYDVQQD EyhlZjY3ZDNjY2ZmY2I5ZmUyM2E5NTJmYTcxZTY0ZTMwNzUwYjM2OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKtDEYeudbtCG2mT4pAwWqLGOFSJ LihQaJA+vpH0+FIpJxWIf9fzMI//mVA4JApz6jfof9oGn8zMDT2hQj0DoaCW1TQY HVR7bUDVMfD4Ah1mLbaLpz2XihoU0bd/WJO8PXneeuaFlbmRnX6WrueVAyxKNGAy c4DgGPRYFDigpgKcRGk+L/CGQ2RbA8rK78HWTsrrEYOYbdghpGNKt68a6hMsPcmY bVCN1gdfb6A7cvQHTaRvLupij8SDQkOMDs1k+tR1KQVVvMCtLtVHz1SP6oX6n2nl gbWaUocSnJVYrpEYuASylxSZT4qXs+MCWDjpKVcV1hvK+zfL+hVLM+atdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9n08z/y5/iOpUvpx5k4wdQs2luMB8GA1UdIwQY MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqv9g3nZ uqN39jYGLZWhBAYTDpcO0oZv9qytcEtGyZh2snVOA8Iq9TqXkJaOM7n/JBY5OsUw O/8/DyjvCilqxu3gAPlB9cSAw8D8MidQAr+iVqg1pm2qo/C8X+EPb6eojTSjAR6z rbU1KMi4K+4tW+RmBcpB4PKUdQ3+NSA/WkT2zupc0GiFq5FtsSM2SkKCNp6rDwtr 0JjmVvVIIiBLpltpbeg3qUu2KuIEOlGMKrtbMyjHoPdY/LjbQMd9jmjAT7QSluG+ NHyXOGneNFkjXfLK/p7Fm1VCmoIpthNy1wFT4zZzeW49g9Lnydci+2MCBKx8zvKR bSfPrOWHbLP2XA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:36:37 2025 by rpki-client