This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json) Hash identifier: W6wbtRG1SUnEcT3jFVYVc494NY/An+gC6ndx+UqCWAw= Subject key identifier: E2:A1:D0:42:68:EF:D9:5B:A6:BC:44:04:2F:86:49:9F:25:1F:31:47 Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9 Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9 Certificate serial: 019B33E8D7C6BE2C15273B1DBC167184D278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft Manifest number: 09E7 Signing time: Fri 19 Dec 2025 00:00:56 +0000 Manifest this update: Fri 19 Dec 2025 00:00:56 +0000 Manifest next update: Sat 20 Dec 2025 00:00:56 +0000 Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=) 2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: bCHGchG1+/kniSSfsRx0tB8fTn8i0tfoexKN/6WNzug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:d7:c6:be:2c:15:27:3b:1d:bc:16:71:84:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9 Validity Not Before: Dec 19 00:00:56 2025 GMT Not After : Dec 20 00:00:56 2025 GMT Subject: CN=e2a1d04268efd95ba6bc44042f86499f251f3147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:bb:5f:7c:d4:06:d3:24:8d:9b:16:d8:eb: f9:c0:62:57:18:17:f9:1c:86:58:59:3c:4a:ef:92: e2:50:94:8d:14:9e:4e:6f:a7:87:a9:0d:b0:d7:b9: 4f:62:1c:e4:1c:a0:66:36:62:c2:07:8b:f1:e6:8e: d9:bc:59:f0:40:62:4e:cf:53:b6:05:11:5c:99:1c: 1f:76:aa:27:4d:f4:e6:9a:c9:ea:e6:9b:83:06:45: b1:6c:67:5b:c3:ee:a3:8e:ef:75:6a:4f:0c:c6:f6: b3:3f:34:1d:6a:57:33:10:3a:69:14:e7:8b:3e:be: 8d:69:bc:96:0d:4d:cb:48:b2:9f:29:00:c1:1a:e8: 92:1d:aa:80:13:47:dc:51:b3:ab:39:55:74:f7:a0: c7:a0:d1:05:44:3f:50:01:ac:2c:47:bb:4e:af:32: 3c:8c:b7:17:5e:3b:de:7a:44:e7:50:33:39:8c:68: 90:9e:10:ac:59:89:09:e6:cd:49:d6:2b:7a:fd:99: f3:1c:c7:97:30:bb:96:f6:54:f8:5f:dc:05:f6:72: f0:1c:b2:60:55:87:67:ad:0f:4e:97:48:24:6e:ea: 7e:0a:b7:d2:28:3f:29:ec:ce:7a:1f:52:92:05:f2: 74:33:2c:29:c4:a9:b7:9b:8f:2a:50:99:7b:5f:9d: 83:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A1:D0:42:68:EF:D9:5B:A6:BC:44:04:2F:86:49:9F:25:1F:31:47 X509v3 Authority Key Identifier: keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:db:ae:18:93:7d:e9:d6:9c:54:47:85:13:a3:66:18:c4:69: 74:7b:e0:02:8f:f4:02:70:73:c8:3f:fb:57:b7:50:41:19:dd: 08:52:e7:83:e2:4c:cd:12:32:34:4e:66:57:f3:c9:46:f2:6d: db:d5:d7:75:6b:0a:4b:5d:ea:c5:1b:07:dd:c8:ec:79:6e:5d: 8d:a0:19:57:fb:b0:75:ac:4e:21:cd:75:e0:1c:26:5a:d0:04: 6b:ae:11:6f:c6:75:0f:2d:5d:05:f8:d6:c9:82:76:fb:1c:ab: 61:95:e8:e5:3e:8c:f8:a4:ca:50:93:b6:d5:2e:65:d3:79:5a: 2d:10:4b:1e:f2:ba:b1:05:6e:00:3d:dd:fd:62:4b:6b:43:72: 12:55:0d:7b:25:20:26:b0:07:33:c3:90:96:20:56:a3:03:b0: 3f:53:83:55:b7:aa:d8:e3:43:3f:cc:4f:a5:e9:9b:a3:95:15: ed:93:e0:7e:2a:e2:1f:44:87:d3:84:ff:38:9b:eb:37:93:19: 5e:45:60:c7:d0:aa:94:67:93:4f:a3:42:ea:4d:76:02:cc:68: a7:01:1a:68:be:44:b8:a2:b8:53:24:d2:c9:31:d6:10:dd:4f: f4:99:63:7c:19:42:95:6f:fe:df:c6:b7:0a:ae:f7:94:0f:29: 6e:61:20:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6NfGviwVJzsdvBZxhNJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODQ3MjUwYjNhNzcxMjdkZjdjM2M3YjhkZWY4YzlkOTE5 ZGM0YjkwHhcNMjUxMjE5MDAwMDU2WhcNMjUxMjIwMDAwMDU2WjAzMTEwLwYDVQQD EyhlMmExZDA0MjY4ZWZkOTViYTZiYzQ0MDQyZjg2NDk5ZjI1MWYzMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBe7X3zUBtMkjZsW2Ov5wGJXGBf5 HIZYWTxK75LiUJSNFJ5Ob6eHqQ2w17lPYhzkHKBmNmLCB4vx5o7ZvFnwQGJOz1O2 BRFcmRwfdqonTfTmmsnq5puDBkWxbGdbw+6jju91ak8MxvazPzQdalczEDppFOeL Pr6NabyWDU3LSLKfKQDBGuiSHaqAE0fcUbOrOVV096DHoNEFRD9QAawsR7tOrzI8 jLcXXjveekTnUDM5jGiQnhCsWYkJ5s1J1it6/ZnzHMeXMLuW9lT4X9wF9nLwHLJg VYdnrQ9Ol0gkbup+CrfSKD8p7M56H1KSBfJ0MywpxKm3m48qUJl7X52DxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKh0EJo79lbprxEBC+GSZ8lHzFHMB8GA1UdIwQY MBaAFLCEclCzp3En33w8e43vjJ2RncS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWIt Y2EzNTQ2OTU1M2NmLzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWItY2EzNTQ2OTU1M2Nm LzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgduuGJN9 6dacVEeFE6NmGMRpdHvgAo/0AnBzyD/7V7dQQRndCFLng+JMzRIyNE5mV/PJRvJt 29XXdWsKS13qxRsH3cjseW5djaAZV/uwdaxOIc114BwmWtAEa64Rb8Z1Dy1dBfjW yYJ2+xyrYZXo5T6M+KTKUJO21S5l03laLRBLHvK6sQVuAD3d/WJLa0NyElUNeyUg JrAHM8OQliBWowOwP1ODVbeq2ONDP8xPpembo5UV7ZPgfiriH0SH04T/OJvrN5MZ XkVgx9CqlGeTT6NC6k12AsxopwEaaL5EuKK4UyTSyTHWEN1P9JljfBlClW/+38a3 Cq73lA8pbmEg/w== -----END CERTIFICATE-----Generated at Fri Dec 19 07:53:44 2025 by rpki-client