This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json) Hash identifier: unqqo2j7BRS1vxvLyBWlZcqIVgw1Uc9ZT1vWKdNBg8Q= Subject key identifier: 36:AA:14:D2:00:25:B5:49:E6:08:96:61:C0:A7:E3:D9:18:AD:DB:9A Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25 Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025 Certificate serial: 019B593ED5B34C295ACAF3A4B08BC0EA5CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft Manifest number: 0168 Signing time: Fri 26 Dec 2025 06:00:48 +0000 Manifest this update: Fri 26 Dec 2025 06:00:48 +0000 Manifest next update: Sat 27 Dec 2025 06:00:48 +0000 Files and hashes: 1: p4n6DMVXRfxSNvujgZMUtP18wqQ.roa (hash: E3oRG9G+UtQqAk8G6rS3MWGj3sQbFqJ/BYIdf5UtbNU=) 2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: 0vo2lWouGAlck8r9Rou2Qg3va3BVNKPRvd6RuzAftlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:d5:b3:4c:29:5a:ca:f3:a4:b0:8b:c0:ea:5c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025 Validity Not Before: Dec 26 06:00:48 2025 GMT Not After : Dec 27 06:00:48 2025 GMT Subject: CN=36aa14d20025b549e6089661c0a7e3d918addb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:2a:60:4c:ec:bc:91:30:1c:55:ff:f9:34: ba:94:7e:1a:64:25:f6:8a:e9:41:09:32:e2:5b:ad: 6e:96:ab:24:f9:b6:d9:21:eb:45:28:86:7a:f5:c1: 8e:54:a5:fe:21:ba:ef:2b:fc:fe:a5:dd:85:c4:bb: b9:06:74:f1:5b:7e:16:e0:a2:52:b9:cc:a6:81:be: c6:e1:6b:68:b5:a2:06:70:58:24:e2:af:bb:2a:eb: cc:3a:35:32:b4:f7:79:8b:40:a6:e5:44:f4:fa:8c: ee:b1:6c:2c:13:83:6f:8b:9e:1a:64:51:9e:84:83: 1f:1e:6c:54:28:4d:e1:8c:b9:76:a5:09:08:d1:6c: b0:bd:a9:08:0f:88:b2:bd:67:b3:81:8e:50:d5:f0: e0:87:1e:2e:2d:aa:5f:e0:34:d9:c8:0e:17:b3:73: f7:11:a4:fb:10:52:b6:b4:db:f4:9c:c9:20:f3:3a: e7:65:d2:00:e5:5d:bd:58:09:d3:b8:45:c4:23:7c: 5c:f3:11:f7:ff:5a:a4:39:f0:74:09:be:e8:a1:22: 66:67:da:c3:bc:60:65:ed:1d:e8:e2:e4:50:71:7e: 11:45:14:02:0c:1c:36:77:7b:5a:f2:4f:98:03:5d: 03:9c:27:05:5a:bf:62:d1:c0:02:fc:e1:56:ad:0f: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AA:14:D2:00:25:B5:49:E6:08:96:61:C0:A7:E3:D9:18:AD:DB:9A X509v3 Authority Key Identifier: keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:87:ae:91:d3:b6:cf:43:83:1d:e2:bd:05:34:2b:7d:16:3b: d2:65:f4:b8:be:82:9e:a1:b2:69:40:7e:d0:17:87:18:da:08: 0e:42:a0:b7:d0:9c:96:f9:f1:5e:86:9d:ba:1f:3b:16:69:f1: 8d:ee:fe:b6:32:81:b1:c6:46:11:03:57:11:ae:12:38:96:e4: ae:06:0d:86:39:ef:16:f1:16:42:d7:73:e8:09:82:0a:20:aa: 87:27:92:80:12:07:e3:58:2d:57:0f:d7:f5:43:e3:f9:f0:94: 4c:ef:c8:76:7b:9e:9a:d5:be:05:6c:89:5f:5b:75:b5:70:37: 83:32:95:be:71:1c:8d:f8:38:b5:6d:6b:25:38:50:c9:98:80: 27:cb:63:de:ae:a3:56:ad:15:bf:6b:62:54:ae:51:40:5e:d6: c9:19:df:12:95:28:6d:94:cc:7f:f2:91:fa:df:7c:f4:6f:7c: ca:d4:30:b2:e8:d1:1b:19:dc:71:14:76:ae:40:25:ce:a3:2a: 6a:04:c1:5a:5a:3f:f8:f0:0e:3e:9b:54:79:6e:9d:32:c6:53: c1:75:4f:7d:b5:37:5c:24:53:fc:0e:59:5e:76:e1:30:3d:8a: 3a:59:84:a2:d5:cc:ee:70:b0:5d:c2:2c:8d:34:42:47:61:61: 07:45:fe:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtWzTClayvOksIvA6lztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZmYyNzNhOGZlMjEyMDkwYmExY2I3OGM2MzMxZjgwZTc4 YzMwMjUwHhcNMjUxMjI2MDYwMDQ4WhcNMjUxMjI3MDYwMDQ4WjAzMTEwLwYDVQQD EygzNmFhMTRkMjAwMjViNTQ5ZTYwODk2NjFjMGE3ZTNkOTE4YWRkYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ4qYEzsvJEwHFX/+TS6lH4aZCX2 iulBCTLiW61ulqsk+bbZIetFKIZ69cGOVKX+IbrvK/z+pd2FxLu5BnTxW34W4KJS ucymgb7G4WtotaIGcFgk4q+7KuvMOjUytPd5i0Cm5UT0+ozusWwsE4Nvi54aZFGe hIMfHmxUKE3hjLl2pQkI0WywvakID4iyvWezgY5Q1fDghx4uLapf4DTZyA4Xs3P3 EaT7EFK2tNv0nMkg8zrnZdIA5V29WAnTuEXEI3xc8xH3/1qkOfB0Cb7ooSJmZ9rD vGBl7R3o4uRQcX4RRRQCDBw2d3ta8k+YA10DnCcFWr9i0cAC/OFWrQ9b+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaqFNIAJbVJ5giWYcCn49kYrduaMB8GA1UdIwQY MBaAFLD/JzqP4hIJC6HLeMYzH4DnjDAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQt ODhkM2NhOTAwNmQ1LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQtODhkM2NhOTAwNmQ1 LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIeukdO2 z0ODHeK9BTQrfRY70mX0uL6CnqGyaUB+0BeHGNoIDkKgt9CclvnxXoaduh87Fmnx je7+tjKBscZGEQNXEa4SOJbkrgYNhjnvFvEWQtdz6AmCCiCqhyeSgBIH41gtVw/X 9UPj+fCUTO/IdnuemtW+BWyJX1t1tXA3gzKVvnEcjfg4tW1rJThQyZiAJ8tj3q6j Vq0Vv2tiVK5RQF7WyRnfEpUobZTMf/KR+t989G98ytQwsujRGxnccRR2rkAlzqMq agTBWlo/+PAOPptUeW6dMsZTwXVPfbU3XCRT/A5ZXnbhMD2KOlmEotXM7nCwXcIs jTRCR2FhB0X+CA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:28 2025 by rpki-client