This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json) Hash identifier: RjOCPyTNP1s5HksJbFJ9TjGDy+0N2c3pDv5TzHXot4s= Subject key identifier: F9:BE:B2:FB:15:5D:84:C7:45:ED:AD:CE:91:E5:54:21:0C:DF:D1:E4 Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09 Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509 Certificate serial: 019B2EFA2176BCE2CACE0BA52333F7FF0D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 01:01:43 +0000 Manifest this update: Thu 18 Dec 2025 01:01:43 +0000 Manifest next update: Fri 19 Dec 2025 01:01:43 +0000 Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=) 2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: bneQHE2ZosvkBFtxkDpHY+k1MDSSu0hyHVdNRxuFIZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:21:76:bc:e2:ca:ce:0b:a5:23:33:f7:ff:0d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509 Validity Not Before: Dec 18 01:01:43 2025 GMT Not After : Dec 19 01:01:43 2025 GMT Subject: CN=f9beb2fb155d84c745edadce91e554210cdfd1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:26:01:8e:6f:c8:e6:80:1f:64:52:42:8b: 4c:39:b2:a8:75:98:97:f6:01:01:35:ed:90:1c:16: 5c:32:c5:06:22:5a:6f:2f:86:9a:8e:75:c1:e4:40: cc:1d:37:71:f5:69:61:8a:f4:6d:47:77:8f:dd:e0: a1:46:52:7a:14:e0:80:da:2e:39:b5:73:bb:77:e5: d4:b0:0a:66:fb:a9:b2:59:01:fc:26:43:b7:01:3d: 6d:df:c7:aa:03:ca:4e:eb:ad:c8:bd:98:b3:44:9a: 2a:d3:4e:f9:da:cc:5c:48:3b:ab:7e:63:cc:15:f6: 94:ae:9d:bc:0d:08:d4:cf:7e:8d:05:a9:18:6f:54: 53:51:73:cb:b0:15:55:f4:8f:e5:10:cf:f7:a4:9f: 13:77:d1:24:42:85:41:e2:93:58:b8:32:a9:fb:c1: 65:82:e0:83:95:92:1c:78:1e:9a:cd:71:ac:4d:6a: 00:d3:4c:e2:57:ff:23:ca:d8:c9:1d:22:0a:06:ec: 24:b3:1b:95:88:fb:29:cd:bd:29:aa:be:7f:7b:8d: 98:12:1b:62:6a:50:06:d3:c7:c1:f8:c5:cc:f5:f3: e2:c1:66:38:e4:e8:98:a0:1a:42:01:26:10:ec:3a: 4a:6b:0d:aa:fa:c9:e4:39:83:d2:05:07:70:20:13: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BE:B2:FB:15:5D:84:C7:45:ED:AD:CE:91:E5:54:21:0C:DF:D1:E4 X509v3 Authority Key Identifier: keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:12:fa:86:09:bb:c6:36:1e:9d:91:06:1f:7a:7f:ba:d0:d0: 2b:37:ee:cd:32:8e:a8:6e:24:3a:40:5e:59:1d:59:06:57:2e: 01:18:0c:0b:49:83:f0:d6:7f:21:ba:2d:20:7d:4d:c8:6e:7b: 71:d4:1a:5d:20:ef:45:7b:7d:b8:aa:50:81:f9:1f:93:69:e3: 93:17:b3:d4:23:dd:bd:e2:d8:36:e5:a5:e6:15:d0:41:68:5d: 8c:ea:ed:2b:9c:14:82:1e:ec:f7:a7:c3:3d:01:da:79:26:98: 18:f2:c9:65:22:81:35:41:38:81:d2:1d:33:00:c6:b3:d7:1e: 3a:43:01:c2:3a:a9:ce:b8:d9:e5:81:db:93:8f:7b:47:87:99: bd:c3:74:f3:06:97:17:77:d2:e7:27:ff:d9:e8:59:9f:4c:2d: 82:ab:7e:ac:de:25:7a:75:6c:ca:de:13:79:c4:56:2c:9d:ee: 87:c1:23:b8:03:be:a9:b9:fc:ed:5e:c0:a2:13:aa:17:bf:c5: 32:b5:10:66:25:4a:71:d0:13:b0:ce:6c:c5:c1:ed:ad:17:b9: 48:72:0b:04:e7:28:48:39:1c:b6:59:70:be:c4:3b:d8:c1:df: c3:64:66:58:27:c6:70:6b:7a:b4:11:c7:26:34:35:16:67:63: 50:5a:2f:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+iF2vOLKzgulIzP3/w05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYjlmOTAwYmE2MThiZThlN2M5MjA5NjNjZGY3NTdiOTA1 MGU1MDkwHhcNMjUxMjE4MDEwMTQzWhcNMjUxMjE5MDEwMTQzWjAzMTEwLwYDVQQD EyhmOWJlYjJmYjE1NWQ4NGM3NDVlZGFkY2U5MWU1NTQyMTBjZGZkMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSAmAY5vyOaAH2RSQotMObKodZiX 9gEBNe2QHBZcMsUGIlpvL4aajnXB5EDMHTdx9WlhivRtR3eP3eChRlJ6FOCA2i45 tXO7d+XUsApm+6myWQH8JkO3AT1t38eqA8pO663IvZizRJoq00752sxcSDurfmPM FfaUrp28DQjUz36NBakYb1RTUXPLsBVV9I/lEM/3pJ8Td9EkQoVB4pNYuDKp+8Fl guCDlZIceB6azXGsTWoA00ziV/8jytjJHSIKBuwksxuViPspzb0pqr5/e42YEhti alAG08fB+MXM9fPiwWY45OiYoBpCASYQ7DpKaw2q+snkOYPSBQdwIBOA2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPm+svsVXYTHRe2tzpHlVCEM39HkMB8GA1UdIwQY MBaAFEq5+QC6YYvo58kgljzfdXuQUOUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQt OWUwYjE5NmEwNDg3LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQtOWUwYjE5NmEwNDg3 LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBL6hgm7 xjYenZEGH3p/utDQKzfuzTKOqG4kOkBeWR1ZBlcuARgMC0mD8NZ/IbotIH1NyG57 cdQaXSDvRXt9uKpQgfkfk2njkxez1CPdveLYNuWl5hXQQWhdjOrtK5wUgh7s96fD PQHaeSaYGPLJZSKBNUE4gdIdMwDGs9ceOkMBwjqpzrjZ5YHbk497R4eZvcN08waX F3fS5yf/2ehZn0wtgqt+rN4lenVsyt4TecRWLJ3uh8EjuAO+qbn87V7AohOqF7/F MrUQZiVKcdATsM5sxcHtrRe5SHILBOcoSDkctllwvsQ72MHfw2RmWCfGcGt6tBHH JjQ1FmdjUFovbA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:16 2025 by rpki-client