This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json) Hash identifier: 4f/poUd4Fu0dYF8pcT7NyeuD1Av8uZUypU3r7MfBvxI= Subject key identifier: 5B:27:86:72:65:E8:94:9F:89:26:A9:0E:25:6F:C5:B7:90:FE:B0:9D Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Certificate serial: 019B378EFBD421C361DDFB4DF06954F502FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 17:01:15 +0000 Manifest this update: Fri 19 Dec 2025 17:01:15 +0000 Manifest next update: Sat 20 Dec 2025 17:01:15 +0000 Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=) 2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=) 3: Npx18kARbKwhPsVOQp9AGtW-IRk.roa (hash: vuiB+5rGT82oxQbwKjm+/1tHrIOrr/bLoXItiD0HcWA=) 4: NsYwUgzVMnXieGE8ET2TEjto6eg.roa (hash: oLZXFnzZzj9unXv5slzpUpxTvQH/LdOTTYWq8r8y++4=) 5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: kLygCJ767UES+D1FsoERXsq4AA/M6PSHtHvbdAvRcE8=) 6: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:fb:d4:21:c3:61:dd:fb:4d:f0:69:54:f5:02:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Validity Not Before: Dec 19 17:01:15 2025 GMT Not After : Dec 20 17:01:15 2025 GMT Subject: CN=5b27867265e8949f8926a90e256fc5b790feb09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:6f:19:ba:06:c8:9d:03:c2:85:e0:fe:ad: 84:ff:65:e2:1c:13:18:7c:af:af:9d:5f:f4:74:62: 42:6b:ca:a8:da:bb:89:98:57:8f:de:90:f8:c0:a6: 7e:8b:0d:d5:20:52:05:c8:6a:43:8c:0d:7e:d3:02: b7:c0:43:56:9b:fd:94:fe:42:dc:a0:51:11:dd:8c: 5e:97:b7:c6:02:33:30:00:ba:9f:eb:74:b5:dc:41: 22:31:ca:9d:87:da:97:65:79:8d:2a:aa:67:ec:b1: 70:ad:47:c9:5b:4b:28:7b:1d:ee:90:c3:c8:3e:b8: ec:cd:e9:ec:58:2f:98:5d:98:9e:0b:a1:8b:60:b2: 14:63:18:22:59:3e:e2:b6:b6:18:bb:9b:06:a2:cf: 1f:26:e3:09:64:78:44:c7:ab:93:f2:61:ea:ed:94: f7:c3:9e:97:bc:95:44:f7:11:84:aa:4c:6b:f3:15: ac:ab:4c:88:23:9d:d5:0a:fd:8e:07:c0:cd:fd:01: d5:0f:e6:2c:68:61:ba:52:a9:d0:e3:23:72:3e:f6: 61:90:6a:7a:b8:9b:6c:de:52:82:1f:02:e8:43:bd: fe:6e:3d:99:36:91:b2:39:e3:fb:07:92:71:12:62: 0b:7c:78:b2:a4:22:3c:8b:4b:35:a1:8d:95:29:65: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:27:86:72:65:E8:94:9F:89:26:A9:0E:25:6F:C5:B7:90:FE:B0:9D X509v3 Authority Key Identifier: keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2d:b3:5c:06:47:b1:bd:1a:a3:da:81:32:c3:a1:18:16:d1: d2:90:2b:80:1c:22:ae:50:33:5a:a4:39:69:2f:1c:95:f0:5b: 2c:ed:b6:3f:81:1c:4a:f6:eb:66:f4:32:2b:b0:a2:93:db:88: 03:1c:a9:84:9e:d7:6a:a2:38:8f:22:cc:91:8f:9e:ff:78:58: f9:70:d2:42:28:16:05:25:55:7b:9e:ed:8c:3c:3e:87:b3:05: 97:7b:06:73:f1:b9:d1:18:65:7d:12:85:59:07:73:b5:ae:c7: c9:5e:76:9f:a2:da:32:d4:05:f7:c5:98:f9:e4:8b:72:45:70: 31:42:c0:f0:d5:b7:0e:eb:38:34:01:9f:e5:08:ef:e7:fe:f6: 88:3c:1e:4a:cf:cc:85:15:ed:d2:6a:d6:c4:cf:c4:05:fe:4e: 41:74:77:21:d9:04:7d:2c:4b:bd:59:af:12:b1:74:2b:85:d1: a2:b0:a8:5e:a2:e9:06:76:bf:4d:30:5f:11:44:74:69:51:09: 8c:ca:1f:60:49:36:fd:2e:00:0f:84:7f:da:82:a9:ef:8a:04: da:f7:1d:db:63:ec:5f:8a:03:47:de:9f:26:72:cb:2c:b1:3f: cf:48:c7:92:d3:2d:a0:20:6b:92:da:a6:6f:fe:44:0e:74:42: e9:b4:d9:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jvvUIcNh3ftN8GlU9QL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5 NDkzNjAwHhcNMjUxMjE5MTcwMTE1WhcNMjUxMjIwMTcwMTE1WjAzMTEwLwYDVQQD Eyg1YjI3ODY3MjY1ZTg5NDlmODkyNmE5MGUyNTZmYzViNzkwZmViMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj9vGboGyJ0DwoXg/q2E/2XiHBMY fK+vnV/0dGJCa8qo2ruJmFeP3pD4wKZ+iw3VIFIFyGpDjA1+0wK3wENWm/2U/kLc oFER3Yxel7fGAjMwALqf63S13EEiMcqdh9qXZXmNKqpn7LFwrUfJW0soex3ukMPI PrjszensWC+YXZieC6GLYLIUYxgiWT7itrYYu5sGos8fJuMJZHhEx6uT8mHq7ZT3 w56XvJVE9xGEqkxr8xWsq0yII53VCv2OB8DN/QHVD+YsaGG6UqnQ4yNyPvZhkGp6 uJts3lKCHwLoQ73+bj2ZNpGyOeP7B5JxEmILfHiypCI8i0s1oY2VKWWTnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsnhnJl6JSfiSapDiVvxbeQ/rCdMB8GA1UdIwQY MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt NjQxZGQ0Mjg4YzQwLzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMC2zXAZH sb0ao9qBMsOhGBbR0pArgBwirlAzWqQ5aS8clfBbLO22P4EcSvbrZvQyK7Cik9uI AxyphJ7XaqI4jyLMkY+e/3hY+XDSQigWBSVVe57tjDw+h7MFl3sGc/G50RhlfRKF WQdzta7HyV52n6LaMtQF98WY+eSLckVwMULA8NW3Dus4NAGf5Qjv5/72iDweSs/M hRXt0mrWxM/EBf5OQXR3IdkEfSxLvVmvErF0K4XRorCoXqLpBna/TTBfEUR0aVEJ jMofYEk2/S4AD4R/2oKp74oE2vcd22PsX4oDR96fJnLLLLE/z0jHktMtoCBrktqm b/5EDnRC6bTZ3w== -----END CERTIFICATE-----Generated at Sat Dec 20 03:16:53 2025 by rpki-client