This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: DV6MTdigp5bKG8I5kde8iQ3rdf5QoDC/Ac8ZQMPeJHg= Subject key identifier: 49:FC:90:DD:92:76:C9:D5:00:80:ED:2A:A5:E9:81:EA:64:C6:7A:03 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019B3A5871C00938B3BEE1B25CA7A22CACF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 17A4 Signing time: Sat 20 Dec 2025 06:00:33 +0000 Manifest this update: Sat 20 Dec 2025 06:00:33 +0000 Manifest next update: Sun 21 Dec 2025 06:00:33 +0000 Files and hashes: 1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=) 2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=) 3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=) 4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=) 5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=) 6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=) 7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=) 8: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=) 9: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=) 10: jRnezGVaOi1QOyrXxlfgxiep6nE.roa (hash: DjVR+ZhkBN5Nk+jdaTuiMYjRv07SOyCMcvKgx8Rd+VI=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: 8j6ADIG+R3KFslDlJVzOv8DEJoO8O2jZ7yzLWwWKR+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:71:c0:09:38:b3:be:e1:b2:5c:a7:a2:2c:ac:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Dec 20 06:00:33 2025 GMT Not After : Dec 21 06:00:33 2025 GMT Subject: CN=49fc90dd9276c9d50080ed2aa5e981ea64c67a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:25:58:02:c8:5d:37:e9:76:89:97:1a:83: c9:fd:18:25:10:e0:42:90:ac:4e:3a:87:8d:ea:77: fc:6f:b3:fe:45:6f:9b:ec:47:f0:53:8f:23:31:4b: fc:57:27:2e:57:d1:e6:84:b1:30:24:e1:70:65:45: 31:be:75:14:a4:35:00:04:de:e9:eb:d4:d6:ff:81: 12:11:bb:6f:77:a0:e9:51:cb:69:36:f4:d1:b0:c7: 06:ec:af:2e:36:7d:2c:ad:41:b4:c2:dd:f8:ef:d9: 63:86:56:7a:d5:30:6b:cf:e4:09:66:18:50:92:23: 6f:0d:7e:d9:23:a0:09:d8:b3:e3:07:ed:6a:a9:f8: 1d:48:b3:05:ee:88:35:b9:cf:79:9c:b2:4b:e5:96: 48:e7:36:a1:c0:9b:42:51:1c:71:dd:4e:d7:b2:8b: aa:4c:1f:d9:3e:4c:ac:64:e4:5f:f9:1d:95:67:a9: 6c:15:46:86:ef:7a:9b:94:25:49:58:5d:15:29:8d: 78:d6:a8:7c:59:2d:6a:e7:53:b0:5d:50:16:51:e6: ba:c4:8f:ca:6d:4a:9f:b4:89:d9:df:3f:4d:ad:83: 9b:05:ec:c2:43:f4:c2:e0:ee:63:98:5b:09:c0:a9: f5:d4:96:3d:b4:ce:c7:78:1f:0b:bc:e0:ed:b9:03: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FC:90:DD:92:76:C9:D5:00:80:ED:2A:A5:E9:81:EA:64:C6:7A:03 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:20:69:a3:37:b2:b1:dd:90:8c:61:80:cc:b0:06:06:8e:b9: d2:11:c9:74:63:f7:ba:22:80:35:b5:93:34:8a:d0:5b:a6:09: 89:cb:a2:dd:5c:c7:55:9f:12:31:84:8f:e7:59:bc:c7:05:d1: 01:c6:85:01:c3:38:f2:fa:3d:70:30:ba:5e:73:61:0f:1b:6f: e4:a1:47:54:3d:9d:08:fb:5c:8a:96:33:e2:bc:fc:72:0e:32: 95:74:92:b2:95:81:0a:3e:1c:43:03:5e:d1:b7:2c:6b:92:0f: db:7c:02:00:54:6d:c5:ff:7d:ca:13:fb:7b:21:52:c8:83:85: e8:cd:e9:f3:70:f0:46:ba:d7:b6:55:79:86:d2:58:8d:5d:b6: 1d:23:1d:03:04:77:3b:1a:10:f8:42:84:30:2e:68:46:2b:ad: 3d:b9:6f:52:5e:a9:50:8b:09:25:87:45:67:8a:c1:b8:d5:ea: 6d:7a:a2:5a:98:73:b6:07:fa:43:28:74:8e:3c:f5:01:a9:dc: a3:e1:58:7e:70:a3:81:7a:90:fc:65:91:f2:31:dd:3e:11:60: 3a:8b:33:9d:9a:7e:99:b0:6e:27:ec:87:61:04:4b:28:3f:75: fd:85:44:50:d9:47:dd:b9:c9:07:31:7f:30:8a:0f:bb:25:ce: 93:43:31:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHHACTizvuGyXKeiLKz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjUxMjIwMDYwMDMzWhcNMjUxMjIxMDYwMDMzWjAzMTEwLwYDVQQD Eyg0OWZjOTBkZDkyNzZjOWQ1MDA4MGVkMmFhNWU5ODFlYTY0YzY3YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYQlWALIXTfpdomXGoPJ/RglEOBC kKxOOoeN6nf8b7P+RW+b7EfwU48jMUv8VycuV9HmhLEwJOFwZUUxvnUUpDUABN7p 69TW/4ESEbtvd6DpUctpNvTRsMcG7K8uNn0srUG0wt3479ljhlZ61TBrz+QJZhhQ kiNvDX7ZI6AJ2LPjB+1qqfgdSLMF7og1uc95nLJL5ZZI5zahwJtCURxx3U7Xsouq TB/ZPkysZORf+R2VZ6lsFUaG73qblCVJWF0VKY141qh8WS1q51OwXVAWUea6xI/K bUqftInZ3z9NrYObBezCQ/TC4O5jmFsJwKn11JY9tM7HeB8LvODtuQPGNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEn8kN2SdsnVAIDtKqXpgepkxnoDMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyBpozey sd2QjGGAzLAGBo650hHJdGP3uiKANbWTNIrQW6YJicui3VzHVZ8SMYSP51m8xwXR AcaFAcM48vo9cDC6XnNhDxtv5KFHVD2dCPtcipYz4rz8cg4ylXSSspWBCj4cQwNe 0bcsa5IP23wCAFRtxf99yhP7eyFSyIOF6M3p83DwRrrXtlV5htJYjV22HSMdAwR3 OxoQ+EKEMC5oRiutPblvUl6pUIsJJYdFZ4rBuNXqbXqiWphztgf6Qyh0jjz1Aanc o+FYfnCjgXqQ/GWR8jHdPhFgOosznZp+mbBuJ+yHYQRLKD91/YVEUNlH3bnJBzF/ MIoPuyXOk0MxAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:17 2025 by rpki-client