This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json) Hash identifier: /wvOfqYfVDsLEtwGYkbS4NWmUs1SXLFD5DnmNfQTQyU= Subject key identifier: F4:A1:BB:EC:F6:1E:F8:D7:D1:CD:6A:8C:7F:E4:55:2B:24:FD:B5:F6 Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6 Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6 Certificate serial: 019B18DF4409E1242FA18A2AE0558B7BE439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 18:00:43 +0000 Manifest this update: Sat 13 Dec 2025 18:00:43 +0000 Manifest next update: Sun 14 Dec 2025 18:00:43 +0000 Files and hashes: 1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=) 2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: WNAZ0631mhiMCa23phb3hdV4kIvFcMhp5mArOyDEFe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:44:09:e1:24:2f:a1:8a:2a:e0:55:8b:7b:e4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6 Validity Not Before: Dec 13 18:00:43 2025 GMT Not After : Dec 14 18:00:43 2025 GMT Subject: CN=f4a1bbecf61ef8d7d1cd6a8c7fe4552b24fdb5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:01:86:a5:9e:27:c4:ef:a7:f6:97:89:1b: 33:cd:78:b2:b3:6e:e5:c7:7a:08:72:e2:f5:6e:b8: c0:10:37:82:9b:e3:ba:87:75:55:ba:8c:2d:e8:bc: 1c:0a:d7:39:da:00:9f:17:9b:38:a3:36:20:36:99: cc:de:db:36:dc:ec:87:eb:77:6b:c4:87:30:73:15: 3b:60:23:a2:c2:e8:4a:fa:45:60:92:95:0f:08:28: ab:36:48:54:ad:42:20:b9:35:a4:66:84:8e:dc:71: 4e:86:ea:cf:c4:af:2c:cb:b1:90:e2:e5:73:8f:35: fe:88:f9:58:21:a6:9d:f7:5b:22:12:1d:3e:52:01: 99:98:48:71:d2:70:bb:75:7a:ab:9e:23:74:49:45: 6e:2b:ef:77:ef:15:70:76:eb:fc:7c:bb:6b:e9:bb: 29:64:c7:dc:69:30:e0:f2:da:4e:9a:38:58:d0:f1: ac:7a:2a:03:7f:e0:92:55:c1:e6:19:9a:55:17:f4: 41:5e:ed:c2:92:11:4b:37:15:fb:47:fd:4e:7c:d2: f8:bc:4d:58:fd:83:90:11:0c:d9:1f:19:39:b2:7d: c3:e3:6a:99:c8:c3:7c:52:96:4a:53:71:ae:6a:65: 97:97:d3:bb:9e:56:04:ae:0c:10:3f:2c:ab:d3:20: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A1:BB:EC:F6:1E:F8:D7:D1:CD:6A:8C:7F:E4:55:2B:24:FD:B5:F6 X509v3 Authority Key Identifier: keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5c:83:3f:4f:d9:1f:3d:2a:62:bc:61:b1:b4:9c:25:d0:40: 48:fa:36:b4:cc:5c:d5:9f:0f:0e:e6:da:29:c2:2e:01:8d:43: 84:04:59:54:ce:92:b6:46:74:14:ca:b4:fd:92:3f:9a:84:16: 4f:93:7d:52:7d:2a:67:8a:0c:cd:23:bc:98:92:50:f7:1a:ff: 47:6b:cd:78:ba:40:64:96:a3:c8:92:b3:82:7e:af:82:ba:e6: 4a:40:74:38:e7:79:df:b1:19:d5:e5:e1:26:c3:9f:16:ea:65: 09:71:b9:7c:f2:4d:ab:26:b8:99:16:bc:56:7e:4c:29:b9:13: 05:ce:52:67:69:94:b9:48:f2:30:94:aa:3c:f5:04:5c:6c:41: 32:7f:b2:1c:fc:9c:92:77:cc:f0:b4:8e:a9:a5:47:c7:19:90: 92:63:43:7a:22:8c:6f:6a:d3:96:61:56:d1:7c:98:5a:b3:4f: 92:37:b5:2d:62:47:9e:95:04:d4:6e:d8:e0:24:f5:04:95:04: 32:ce:c1:03:af:7c:88:72:3b:d2:fd:53:f9:f2:a3:2e:ff:08: cd:85:10:bf:44:a1:a6:ce:50:6f:75:ca:ba:a0:bd:5f:3f:90: b5:fd:9f:ea:dc:4d:da:9e:da:e7:96:92:fc:7b:45:d1:b3:31: e1:30:31:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY30QJ4SQvoYoq4FWLe+Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWRmMDVhZmVmNmY2NWZhMTlhNjFjMzBhZTRmYjExYzdj ZjI1YjYwHhcNMjUxMjEzMTgwMDQzWhcNMjUxMjE0MTgwMDQzWjAzMTEwLwYDVQQD EyhmNGExYmJlY2Y2MWVmOGQ3ZDFjZDZhOGM3ZmU0NTUyYjI0ZmRiNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6UBhqWeJ8Tvp/aXiRszzXiys27l x3oIcuL1brjAEDeCm+O6h3VVuowt6LwcCtc52gCfF5s4ozYgNpnM3ts23OyH63dr xIcwcxU7YCOiwuhK+kVgkpUPCCirNkhUrUIguTWkZoSO3HFOhurPxK8sy7GQ4uVz jzX+iPlYIaad91siEh0+UgGZmEhx0nC7dXqrniN0SUVuK+937xVwduv8fLtr6bsp ZMfcaTDg8tpOmjhY0PGseioDf+CSVcHmGZpVF/RBXu3CkhFLNxX7R/1OfNL4vE1Y /YOQEQzZHxk5sn3D42qZyMN8UpZKU3GuamWXl9O7nlYErgwQPyyr0yAwQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPShu+z2HvjX0c1qjH/kVSsk/bX2MB8GA1UdIwQY MBaAFLCt8Fr+9vZfoZphwwrk+xHHzyW2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMt NWYyZDBlMmFlNzE0LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMtNWYyZDBlMmFlNzE0 LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblyDP0/Z Hz0qYrxhsbScJdBASPo2tMxc1Z8PDubaKcIuAY1DhARZVM6StkZ0FMq0/ZI/moQW T5N9Un0qZ4oMzSO8mJJQ9xr/R2vNeLpAZJajyJKzgn6vgrrmSkB0OOd537EZ1eXh JsOfFuplCXG5fPJNqya4mRa8Vn5MKbkTBc5SZ2mUuUjyMJSqPPUEXGxBMn+yHPyc knfM8LSOqaVHxxmQkmNDeiKMb2rTlmFW0XyYWrNPkje1LWJHnpUE1G7Y4CT1BJUE Ms7BA698iHI70v1T+fKjLv8IzYUQv0Shps5Qb3XKuqC9Xz+Qtf2f6txN2p7a55aS /HtF0bMx4TAxrA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:23 2025 by rpki-client