This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json) Hash identifier: /JPHsnVP9un1ApRrLHv7hnSq0CDmiDFIs8X9pqwAjNQ= Subject key identifier: 2F:13:1C:1D:1C:EA:57:19:9B:01:85:DC:AA:F7:E4:F1:14:E8:52:31 Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd Certificate serial: 019B38D89086B918E2BE76AEECA5C163D515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft Manifest number: 1392 Signing time: Fri 19 Dec 2025 23:01:15 +0000 Manifest this update: Fri 19 Dec 2025 23:01:15 +0000 Manifest next update: Sat 20 Dec 2025 23:01:15 +0000 Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=) 2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: rMSwb1XP+mtqzxjcKbOnzvdQirCkr/slPhWR2Km741g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:90:86:b9:18:e2:be:76:ae:ec:a5:c1:63:d5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd Validity Not Before: Dec 19 23:01:15 2025 GMT Not After : Dec 20 23:01:15 2025 GMT Subject: CN=2f131c1d1cea57199b0185dcaaf7e4f114e85231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:21:b4:e9:48:3a:d7:8d:99:ef:f8:88:ea: 2c:b7:ea:c9:dd:99:a0:9a:5c:26:c6:9d:73:fb:22: e1:21:cc:bd:cd:50:48:55:1d:b7:5f:70:90:c3:b4: a2:89:d8:91:2a:d2:ef:b3:14:52:15:b7:2f:9f:32: 96:ea:c4:a9:51:e6:f7:46:c2:56:8b:28:99:58:1b: cf:73:2c:c4:dc:fe:6e:d2:a8:33:b0:6b:d1:e6:a5: db:8d:8a:c6:b6:e5:c7:f3:7a:ed:27:d6:bc:72:d4: 57:a7:dc:0f:3c:44:3f:8d:8c:08:69:b0:4d:a6:bf: 22:de:96:0f:3e:19:45:23:3d:38:54:af:99:23:a2: f2:ed:b8:36:7c:38:31:c5:1b:78:c4:e9:c8:94:55: d0:81:55:a8:3c:98:fa:04:a6:b6:b8:81:58:3d:d7: 03:68:99:0c:d9:53:ea:6d:79:ee:5d:3f:f8:a6:0f: 11:b9:6d:ae:ff:09:da:9f:63:d2:2c:65:3f:43:05: 5a:1b:1f:07:b7:bc:99:ec:af:d0:6a:de:1d:f7:c5: 49:23:ff:09:72:f3:b8:0e:93:d7:8f:a0:3a:70:67: df:fc:15:df:15:fc:5b:83:63:22:c6:49:c3:2c:8e: 89:c3:47:7f:15:e7:f6:4b:c2:19:69:b9:8f:95:14: b1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:13:1C:1D:1C:EA:57:19:9B:01:85:DC:AA:F7:E4:F1:14:E8:52:31 X509v3 Authority Key Identifier: keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:61:de:b1:9e:7e:e3:54:b9:56:c8:12:51:61:d3:3c:e8:02: 30:bf:33:8b:a1:7d:03:0c:21:05:68:55:c5:ad:0f:32:01:34: 34:3a:e3:ba:ca:84:6d:89:68:2a:6b:57:ff:bf:e1:2c:66:1f: 3e:14:67:bf:6d:25:fb:73:b3:57:ed:e1:03:56:8f:05:41:dc: 48:ad:3f:27:47:7b:db:ae:e0:48:c4:45:38:0e:f0:8c:b8:df: 59:fe:e9:a1:8c:0b:48:bf:e3:91:39:3d:e8:8c:c5:11:71:dd: 9d:7c:cb:11:1b:c1:9f:88:a6:39:b3:00:d9:da:0b:67:9a:12: 2a:a9:97:4f:99:84:33:a7:27:5a:69:1d:89:cb:4e:9a:be:23: ee:cb:f0:60:ef:02:e0:ae:ee:91:26:89:ec:28:01:7c:bc:eb: 54:39:79:7f:cb:6b:9a:96:9c:36:63:b9:6a:a0:31:02:9a:a0: 07:68:59:93:04:eb:db:d5:36:4d:4a:89:7e:21:81:bc:b0:cd: d7:ac:9f:cb:00:ad:d8:3c:c6:4e:6d:45:f6:78:8b:3c:d3:ec: 3b:40:a5:ca:f9:26:eb:72:c8:2c:ea:46:bc:65:01:a4:d5:c3: 42:1d:ba:06:de:db:2c:ac:48:01:83:59:a3:bf:0e:d1:9d:19: 72:80:78:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42JCGuRjivnau7KXBY9UVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMGUyNWY1NWViYmFjYjA2OWYxMDNhY2IwODY2NzAzODM1 Y2ZjY2QwHhcNMjUxMjE5MjMwMTE1WhcNMjUxMjIwMjMwMTE1WjAzMTEwLwYDVQQD EygyZjEzMWMxZDFjZWE1NzE5OWIwMTg1ZGNhYWY3ZTRmMTE0ZTg1MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7YhtOlIOteNme/4iOost+rJ3Zmg mlwmxp1z+yLhIcy9zVBIVR23X3CQw7SiidiRKtLvsxRSFbcvnzKW6sSpUeb3RsJW iyiZWBvPcyzE3P5u0qgzsGvR5qXbjYrGtuXH83rtJ9a8ctRXp9wPPEQ/jYwIabBN pr8i3pYPPhlFIz04VK+ZI6Ly7bg2fDgxxRt4xOnIlFXQgVWoPJj6BKa2uIFYPdcD aJkM2VPqbXnuXT/4pg8RuW2u/wnan2PSLGU/QwVaGx8Ht7yZ7K/Qat4d98VJI/8J cvO4DpPXj6A6cGff/BXfFfxbg2MixknDLI6Jw0d/Fef2S8IZabmPlRSxJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8THB0c6lcZmwGF3Kr35PEU6FIxMB8GA1UdIwQY MBaAFLAOJfVeu6ywafEDrLCGZwODXPzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYt OGI0MjE1ZTU4MDI4LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYtOGI0MjE1ZTU4MDI4 LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmHesZ5+ 41S5VsgSUWHTPOgCML8zi6F9AwwhBWhVxa0PMgE0NDrjusqEbYloKmtX/7/hLGYf PhRnv20l+3OzV+3hA1aPBUHcSK0/J0d7267gSMRFOA7wjLjfWf7poYwLSL/jkTk9 6IzFEXHdnXzLERvBn4imObMA2doLZ5oSKqmXT5mEM6cnWmkdictOmr4j7svwYO8C 4K7ukSaJ7CgBfLzrVDl5f8trmpacNmO5aqAxApqgB2hZkwTr29U2TUqJfiGBvLDN 16yfywCt2DzGTm1F9niLPNPsO0Clyvkm63LILOpGvGUBpNXDQh26Bt7bLKxIAYNZ o78O0Z0ZcoB4Sg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:07:30 2025 by rpki-client