This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json) Hash identifier: cFzFWwwd1dBPn+Dn1lB6Un8FkK1pXKjZL95DXsPjBHA= Subject key identifier: 7E:8F:2D:DF:EB:D8:68:FE:A7:94:90:B1:F9:EF:59:94:9D:65:73:02 Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd Certificate serial: 019B40920FBD4E4AFE31605F87103F1BF234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft Manifest number: 1396 Signing time: Sun 21 Dec 2025 11:01:12 +0000 Manifest this update: Sun 21 Dec 2025 11:01:12 +0000 Manifest next update: Mon 22 Dec 2025 11:01:12 +0000 Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=) 2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: kogBZgGK+I7XTpLsQrX5+gl7JfrlM3fSgur0zaM0eyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:0f:bd:4e:4a:fe:31:60:5f:87:10:3f:1b:f2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd Validity Not Before: Dec 21 11:01:12 2025 GMT Not After : Dec 22 11:01:12 2025 GMT Subject: CN=7e8f2ddfebd868fea79490b1f9ef59949d657302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:f4:48:ad:51:31:2c:b0:61:19:59:3b:d9: d5:19:67:be:79:af:11:59:6e:c1:5e:07:83:e1:21: 62:ad:a4:9e:8a:2e:ea:25:d6:78:76:62:9b:ce:77: 60:cd:8d:f0:c4:d3:a3:f0:98:e7:cd:14:77:5e:56: ba:cb:02:96:4f:f4:44:51:2f:35:2c:0b:d4:0b:ff: 6d:4f:17:a2:12:55:6a:a6:67:d8:4b:a2:ab:75:8b: 4c:bd:a4:dd:03:8e:97:e4:83:94:a1:c1:a0:92:cd: a9:65:0d:1f:c3:f8:7f:31:1c:17:fa:27:ac:c9:63: 61:17:63:e1:a1:6a:71:7e:61:36:68:dc:07:05:9a: d8:bf:42:40:a5:8a:2d:7d:bc:34:c9:e5:9d:0a:b0: d5:80:94:1f:75:18:3b:8e:2b:39:cb:68:fb:7a:81: b3:02:5b:92:02:fc:b8:35:5b:10:ee:f4:1d:bb:42: f1:cf:14:47:db:34:0d:a9:40:cb:a6:3c:1e:a7:d8: 98:02:ee:9a:5f:9c:d0:15:8f:cd:8f:44:55:e9:ff: 40:31:16:51:c3:d7:75:d9:5a:5f:30:64:79:78:c8: a9:92:10:a1:6a:30:e8:1e:31:6b:b7:5c:aa:e0:81: 6b:92:94:51:82:cc:18:3c:15:eb:f9:d8:1b:04:75: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8F:2D:DF:EB:D8:68:FE:A7:94:90:B1:F9:EF:59:94:9D:65:73:02 X509v3 Authority Key Identifier: keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:49:49:41:40:d7:2f:70:c0:25:9d:4c:94:0a:6b:ae:f4:c7: ed:77:4c:77:a1:ad:8a:47:8e:90:22:8d:80:1d:79:cf:1d:53: b8:49:2a:44:cb:98:8d:a8:f1:7f:1a:16:58:e1:59:21:38:0e: 02:cc:72:3a:c3:4d:ee:b2:70:ae:79:d7:de:74:c9:9c:df:70: 73:0f:b8:09:6f:12:4c:13:64:8e:98:24:d9:1e:fb:4d:57:b1: 2d:dc:78:1a:e1:d3:65:5d:45:00:39:aa:6a:d1:f5:e6:7a:f2: f3:ab:9c:9b:8e:5b:f2:80:2c:da:6d:0c:e8:4e:ac:66:58:68: d7:ab:d3:22:80:c6:05:34:fc:5b:50:70:d3:a8:b1:a0:dc:bd: 9b:c3:52:7f:2e:50:ed:28:b9:ed:3c:36:33:bd:5e:42:78:f8: 2c:ea:ea:33:17:47:c0:8a:72:c5:66:2f:8c:8d:bf:94:36:e4: eb:dc:27:58:d0:23:e6:58:fe:dc:7e:0f:c3:38:6e:09:d1:f1: 49:39:00:33:7b:f5:c9:26:2c:4f:d9:d0:95:08:ee:09:8a:fe: c5:78:fb:35:c5:4a:a2:27:2d:74:bd:c8:7e:58:e0:6a:c1:d5: 60:b6:68:16:e1:dc:01:38:99:5f:f6:fa:91:1b:12:3b:bb:66: f6:6b:c0:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkg+9Tkr+MWBfhxA/G/I0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMGUyNWY1NWViYmFjYjA2OWYxMDNhY2IwODY2NzAzODM1 Y2ZjY2QwHhcNMjUxMjIxMTEwMTEyWhcNMjUxMjIyMTEwMTEyWjAzMTEwLwYDVQQD Eyg3ZThmMmRkZmViZDg2OGZlYTc5NDkwYjFmOWVmNTk5NDlkNjU3MzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+v0SK1RMSywYRlZO9nVGWe+ea8R WW7BXgeD4SFiraSeii7qJdZ4dmKbzndgzY3wxNOj8JjnzRR3Xla6ywKWT/REUS81 LAvUC/9tTxeiElVqpmfYS6KrdYtMvaTdA46X5IOUocGgks2pZQ0fw/h/MRwX+ies yWNhF2PhoWpxfmE2aNwHBZrYv0JApYotfbw0yeWdCrDVgJQfdRg7jis5y2j7eoGz AluSAvy4NVsQ7vQdu0LxzxRH2zQNqUDLpjwep9iYAu6aX5zQFY/Nj0RV6f9AMRZR w9d12VpfMGR5eMipkhChajDoHjFrt1yq4IFrkpRRgswYPBXr+dgbBHWTqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6PLd/r2Gj+p5SQsfnvWZSdZXMCMB8GA1UdIwQY MBaAFLAOJfVeu6ywafEDrLCGZwODXPzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYt OGI0MjE1ZTU4MDI4LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYtOGI0MjE1ZTU4MDI4 LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUlJQUDX L3DAJZ1MlAprrvTH7XdMd6GtikeOkCKNgB15zx1TuEkqRMuYjajxfxoWWOFZITgO AsxyOsNN7rJwrnnX3nTJnN9wcw+4CW8STBNkjpgk2R77TVexLdx4GuHTZV1FADmq atH15nry86ucm45b8oAs2m0M6E6sZlho16vTIoDGBTT8W1Bw06ixoNy9m8NSfy5Q 7Si57Tw2M71eQnj4LOrqMxdHwIpyxWYvjI2/lDbk69wnWNAj5lj+3H4PwzhuCdHx STkAM3v1ySYsT9nQlQjuCYr+xXj7NcVKoictdL3IfljgasHVYLZoFuHcATiZX/b6 kRsSO7tm9mvAoA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:43 2025 by rpki-client