This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json) Hash identifier: nODO3HddGrYAdfXNrUr/wfoDxuh/U7yx8aNAoAf+evc= Subject key identifier: F0:DF:E7:B1:12:6B:33:6F:68:9A:E5:CC:97:24:2E:7D:8A:25:38:9F Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a Certificate serial: 019B59778A1603A1B3AB20AC37829445BC77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft Manifest number: 08F4 Signing time: Fri 26 Dec 2025 07:02:44 +0000 Manifest this update: Fri 26 Dec 2025 07:02:44 +0000 Manifest next update: Sat 27 Dec 2025 07:02:44 +0000 Files and hashes: 1: N75Q0uiaGqKgGJ2k7yeqIONc8k0.roa (hash: Q63lKGUZoNUeD8FAv4eG2ZAxCKPCbVbyxrGYOjEepus=) 2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: 3p4p/8AzhKnKsEDZLe7Q3rwl6y+OU2UOiDUanfI56ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:8a:16:03:a1:b3:ab:20:ac:37:82:94:45:bc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a Validity Not Before: Dec 26 07:02:44 2025 GMT Not After : Dec 27 07:02:44 2025 GMT Subject: CN=f0dfe7b1126b336f689ae5cc97242e7d8a25389f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:55:24:7c:24:6d:a9:86:72:98:d1:ae:9f: 87:d4:df:19:45:17:45:d4:72:59:29:58:14:40:e5: 86:fc:b1:06:d5:cf:5b:64:e8:5b:30:0a:32:c6:a5: 92:82:48:72:f1:1e:75:ed:70:b7:4e:62:f0:2b:9f: 46:90:23:28:0f:97:a8:60:7e:5f:f4:7e:71:4a:c6: a7:75:5b:0f:cf:eb:97:ef:19:62:22:08:e5:3b:03: 04:81:08:2c:8f:0d:80:64:7e:91:10:51:c0:e4:c7: 52:7f:d8:e3:6f:2d:e0:65:03:e9:36:9d:ad:9b:7c: 13:3c:e2:7f:3b:4d:2d:3f:2a:9d:fd:2d:03:5f:dd: 8a:14:a0:71:df:fe:01:9d:9e:51:66:ce:06:82:5d: de:e6:2c:b7:1b:de:a2:18:99:89:33:17:b2:b6:2d: 4b:49:7e:e8:42:71:8e:1c:a9:6a:47:66:5a:a7:3a: 20:01:33:ca:04:22:67:f0:dc:78:57:44:cf:d9:66: 28:e4:c8:82:75:4b:d2:ce:45:df:7a:8b:82:cb:f6: 96:62:c8:48:d2:db:a0:b4:b8:b3:04:69:fa:1f:fd: e0:4e:6b:44:22:d3:b9:2a:89:13:2b:ff:ff:fd:a9: 2b:25:12:25:f7:d6:39:0f:74:51:3d:b2:c3:c5:60: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DF:E7:B1:12:6B:33:6F:68:9A:E5:CC:97:24:2E:7D:8A:25:38:9F X509v3 Authority Key Identifier: keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:b4:cc:ab:1d:70:1c:b7:77:94:1d:25:d9:e6:ed:ca:98:3d: df:b7:cc:29:4b:33:d7:ce:db:f6:3d:62:63:b3:88:69:3b:40: 65:e0:1b:45:29:eb:d7:98:6c:b9:73:0d:75:1a:fa:07:64:b0: 71:0b:a3:31:a7:3a:c5:60:8a:7e:75:d0:d7:4e:d4:0f:7e:03: 8f:bd:97:85:84:30:19:de:aa:a0:b7:1d:6e:06:b7:06:29:e2: 65:c0:68:9d:5b:86:df:03:e7:ae:52:16:7e:1b:52:21:a3:d3: d5:ee:12:89:3f:98:18:be:a9:17:1c:bf:7c:b5:1c:a6:3a:f7: b9:cc:27:b6:27:8d:81:2d:37:9a:93:ed:dc:81:37:62:05:ec: 5b:7f:fe:f7:35:51:74:87:ed:53:5d:8d:65:8d:28:9a:e1:0b: c4:39:12:b7:71:38:d7:cf:38:8b:15:a2:31:96:6d:20:d6:66: 27:ce:28:3c:ef:b8:f2:31:8e:86:62:d2:47:60:74:97:34:24: b2:0f:d6:f3:77:7f:46:5d:81:85:97:63:7e:c9:14:87:2d:e7: 57:f9:54:ea:51:cf:76:d2:04:6f:a0:b7:dc:e2:07:85:a3:ad: 54:87:69:97:d3:9c:69:6e:78:c2:2f:a0:d2:43:a6:b6:6f:be: ae:d4:c5:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd4oWA6GzqyCsN4KURbx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwN2ZhZmRiODZkMzhmMzdiZjBjMjZkM2YyNzMxZmRlZjZi MTRlNGEwHhcNMjUxMjI2MDcwMjQ0WhcNMjUxMjI3MDcwMjQ0WjAzMTEwLwYDVQQD EyhmMGRmZTdiMTEyNmIzMzZmNjg5YWU1Y2M5NzI0MmU3ZDhhMjUzODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKZVJHwkbamGcpjRrp+H1N8ZRRdF 1HJZKVgUQOWG/LEG1c9bZOhbMAoyxqWSgkhy8R517XC3TmLwK59GkCMoD5eoYH5f 9H5xSsandVsPz+uX7xliIgjlOwMEgQgsjw2AZH6REFHA5MdSf9jjby3gZQPpNp2t m3wTPOJ/O00tPyqd/S0DX92KFKBx3/4BnZ5RZs4Ggl3e5iy3G96iGJmJMxeyti1L SX7oQnGOHKlqR2ZapzogATPKBCJn8Nx4V0TP2WYo5MiCdUvSzkXfeouCy/aWYshI 0tugtLizBGn6H/3gTmtEItO5KokTK////akrJRIl99Y5D3RRPbLDxWCeXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDf57ESazNvaJrlzJckLn2KJTifMB8GA1UdIwQY MBaAFLB/r9uG0483vwwm0/JzH972sU5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNmQyNjMtMjlmOS00NjEzLWJiN2Qt NDkzOGI4ZDBjM2RlLzEvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNmQyNjMtMjlmOS00NjEzLWJiN2QtNDkzOGI4ZDBjM2Rl LzEvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7TMqx1w HLd3lB0l2ebtypg937fMKUsz187b9j1iY7OIaTtAZeAbRSnr15hsuXMNdRr6B2Sw cQujMac6xWCKfnXQ107UD34Dj72XhYQwGd6qoLcdbga3BiniZcBonVuG3wPnrlIW fhtSIaPT1e4SiT+YGL6pFxy/fLUcpjr3ucwntieNgS03mpPt3IE3YgXsW3/+9zVR dIftU12NZY0omuELxDkSt3E41884ixWiMZZtINZmJ84oPO+48jGOhmLSR2B0lzQk sg/W83d/Rl2BhZdjfskUhy3nV/lU6lHPdtIEb6C33OIHhaOtVIdpl9OcaW54wi+g 0kOmtm++rtTF8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:27 2025 by rpki-client