This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json) Hash identifier: WFQAvOjzFgHY4/yb8K9u8qx0M6MlEDRQLkb0pAU7ij8= Subject key identifier: 45:8E:BC:78:66:33:60:6D:35:45:1F:B9:1F:E7:79:A3:D3:E4:59:33 Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26 Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226 Certificate serial: 019B37FCBE2E5EE78849803BB6D95BA56C84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 19:01:09 +0000 Manifest this update: Fri 19 Dec 2025 19:01:09 +0000 Manifest next update: Sat 20 Dec 2025 19:01:09 +0000 Files and hashes: 1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=) 2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: hxmzqw1MjOP4XMEC1jEOtcS51rHoU45c96QFfxR6+28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:be:2e:5e:e7:88:49:80:3b:b6:d9:5b:a5:6c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226 Validity Not Before: Dec 19 19:01:09 2025 GMT Not After : Dec 20 19:01:09 2025 GMT Subject: CN=458ebc786633606d35451fb91fe779a3d3e45933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:94:c9:e7:7e:af:97:c5:2f:be:ce:e2:90: 8a:d7:c6:b4:41:bd:c5:32:ac:b5:b4:bb:4a:ae:24: 50:08:e2:33:8f:ff:dd:5a:43:44:e1:e9:19:57:89: 95:eb:61:d6:9d:f4:25:50:2c:07:1c:67:57:52:af: a7:a0:3a:ea:44:00:80:fd:c7:65:da:fd:c9:dc:81: 92:fc:25:87:ee:f3:57:5a:20:64:58:7a:01:c7:9e: c8:33:f6:87:13:0c:10:b9:69:89:3f:4f:86:dc:95: 50:da:7e:19:ed:80:30:14:46:bd:14:db:95:ac:8e: 62:85:9a:31:db:bd:f5:28:71:c2:0e:1f:2a:ae:20: e3:9b:d1:f7:d6:b2:31:03:ed:fd:87:89:5e:b6:c0: 32:0e:dd:2a:f0:4f:e9:55:a4:e8:1e:a0:85:00:ce: 89:1b:5c:52:ee:b9:e2:f3:8f:cd:44:88:e1:79:51: b4:b2:9a:02:4d:6b:00:e6:8b:d5:13:9f:46:52:7e: 09:8f:1b:6d:6d:c5:06:5c:d0:36:97:ba:61:db:db: cf:1a:43:06:43:57:bb:a6:b2:00:ad:24:32:20:d1: a4:00:0f:c5:1e:b2:98:a7:48:d2:fe:a9:cf:8e:34: 0d:a0:fb:c6:e2:e4:08:ea:63:21:29:e4:7d:d6:24: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8E:BC:78:66:33:60:6D:35:45:1F:B9:1F:E7:79:A3:D3:E4:59:33 X509v3 Authority Key Identifier: keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a5:50:9f:db:c0:08:26:5b:64:41:53:c5:d2:38:e4:8f:07: 83:dc:7a:52:a8:ae:09:23:5d:a2:46:b9:75:5c:8c:a8:14:02: 42:fb:f5:36:15:25:e6:cb:44:66:b7:93:0c:17:76:08:82:f3: 0c:46:7c:14:71:01:09:e1:9d:42:6b:34:05:5b:fc:a8:a4:24: 66:a1:4f:cd:31:23:8e:38:93:b1:67:1a:70:69:01:54:db:1d: 77:23:d1:4f:c0:44:b2:b4:36:ce:c6:a3:a3:e1:63:24:98:5a: 7e:23:56:d0:4b:da:1c:ba:bb:3c:5c:c2:e5:67:65:74:7c:44: bc:73:86:02:f0:a4:06:d6:e4:c0:1e:6b:6e:68:01:20:06:98: 06:d6:d3:cd:7b:8c:78:a0:b5:42:ee:2c:c2:90:ee:5f:53:7c: c7:0d:03:13:64:2b:aa:05:9e:1e:aa:ce:1b:b2:7b:d6:16:03: 4c:06:34:52:43:17:99:4f:8b:8b:23:49:ec:79:4f:03:8a:0d: 7e:37:e5:a1:4f:f9:cd:3d:58:9e:47:35:0a:98:22:83:9c:d2: 1d:14:2e:1a:1d:fd:dc:45:15:76:48:7f:90:3d:0a:55:33:6c: f2:ef:20:1e:10:ef:f1:5a:8e:10:96:cc:be:cd:84:e4:ff:86: 5b:52:69:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/L4uXueISYA7ttlbpWyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy ZjEyMjYwHhcNMjUxMjE5MTkwMTA5WhcNMjUxMjIwMTkwMTA5WjAzMTEwLwYDVQQD Eyg0NThlYmM3ODY2MzM2MDZkMzU0NTFmYjkxZmU3NzlhM2QzZTQ1OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7eUyed+r5fFL77O4pCK18a0Qb3F Mqy1tLtKriRQCOIzj//dWkNE4ekZV4mV62HWnfQlUCwHHGdXUq+noDrqRACA/cdl 2v3J3IGS/CWH7vNXWiBkWHoBx57IM/aHEwwQuWmJP0+G3JVQ2n4Z7YAwFEa9FNuV rI5ihZox2731KHHCDh8qriDjm9H31rIxA+39h4letsAyDt0q8E/pVaToHqCFAM6J G1xS7rni84/NRIjheVG0spoCTWsA5ovVE59GUn4JjxttbcUGXNA2l7ph29vPGkMG Q1e7prIArSQyINGkAA/FHrKYp0jS/qnPjjQNoPvG4uQI6mMhKeR91iS5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWOvHhmM2BtNUUfuR/neaPT5FkzMB8GA1UdIwQY MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6VQn9vA CCZbZEFTxdI45I8Hg9x6UqiuCSNdoka5dVyMqBQCQvv1NhUl5stEZreTDBd2CILz DEZ8FHEBCeGdQms0BVv8qKQkZqFPzTEjjjiTsWcacGkBVNsddyPRT8BEsrQ2zsaj o+FjJJhafiNW0EvaHLq7PFzC5WdldHxEvHOGAvCkBtbkwB5rbmgBIAaYBtbTzXuM eKC1Qu4swpDuX1N8xw0DE2QrqgWeHqrOG7J71hYDTAY0UkMXmU+LiyNJ7HlPA4oN fjfloU/5zT1Ynkc1Cpgig5zSHRQuGh393EUVdkh/kD0KVTNs8u8gHhDv8VqOEJbM vs2E5P+GW1JpUQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:53:45 2025 by rpki-client