This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft File: SO3JpU4ccjtWqu330BVAxbNr2rY.mft (raw, json) Hash identifier: 258GepA6fOnUViyiQ1EKibX8WhQTmgfkJycHdXVnthA= Subject key identifier: E1:70:70:5C:20:64:2C:2A:C9:6E:65:19:F9:AA:91:19:03:51:14:05 Authority key identifier: 48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6 Certificate issuer: /CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6 Certificate serial: 019AF3C03CC9E84A83096070B04FF3D42D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft Manifest number: 0156 Signing time: Sat 06 Dec 2025 13:00:53 +0000 Manifest this update: Sat 06 Dec 2025 13:00:53 +0000 Manifest next update: Sun 07 Dec 2025 13:00:53 +0000 Files and hashes: 1: SO3JpU4ccjtWqu330BVAxbNr2rY.crl (hash: a3EYzptdupTe/qyiY7N0BUEWZLGlC5J82Sff/6mDwyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:3c:c9:e8:4a:83:09:60:70:b0:4f:f3:d4:2d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6 Validity Not Before: Dec 6 13:00:53 2025 GMT Not After : Dec 7 13:00:53 2025 GMT Subject: CN=e170705c20642c2ac96e6519f9aa911903511405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cc:49:08:df:09:ac:fe:29:8a:53:e6:f5:18: 54:f3:1c:c9:e8:4d:88:c3:10:92:f4:6c:49:ac:ec: 46:2a:0a:1d:92:2a:6d:55:e5:3c:2a:87:e3:c3:8c: b0:78:f5:e8:16:e0:f5:c5:80:1d:1a:5f:d9:8f:7e: 8a:8b:92:58:ca:a8:6a:44:a1:e1:71:85:19:94:b4: b0:1c:74:50:b8:57:a2:0e:92:35:68:85:77:1e:11: 93:2b:86:14:aa:98:56:aa:82:27:ee:c5:b3:d3:cc: a0:4d:f4:59:47:6a:c5:fe:f6:f6:9c:1f:6a:c2:32: 33:ec:69:80:95:da:a5:69:31:13:94:8b:b0:2b:7d: 60:8e:95:36:b9:7a:f5:87:b8:0b:45:56:12:c8:1e: 50:26:39:aa:f7:0f:63:6f:d2:2d:77:54:61:12:09: 6f:b9:2b:50:0f:bf:86:f3:fb:4e:9f:48:de:04:84: 61:73:4d:d2:0c:40:8d:51:56:d6:1d:ff:14:db:78: 14:2b:5a:d3:55:55:e3:bc:b0:b0:b1:4f:9e:a8:1e: 4a:51:91:80:dc:c7:8b:ba:c9:aa:11:f6:f7:01:2c: f7:57:ed:64:9f:b8:a4:6a:fe:35:93:13:e0:fb:6e: 6e:59:9c:09:98:14:96:b0:79:2e:38:4f:f1:c9:17: 15:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:70:70:5C:20:64:2C:2A:C9:6E:65:19:F9:AA:91:19:03:51:14:05 X509v3 Authority Key Identifier: keyid:48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a7:3e:da:94:51:e8:06:7c:4d:c3:c4:ed:0a:b2:4b:fb:c7: 30:ea:be:ea:d9:7c:45:9b:df:d8:d6:25:52:05:6b:a9:25:dc: 9b:37:66:ac:61:23:ca:a8:ea:27:14:ae:3a:bb:f9:63:05:24: 5b:62:fd:77:43:4c:a6:19:e4:13:0c:c6:8a:5a:6b:91:ea:f6: 7d:15:83:bc:bb:84:e4:4f:bb:67:d6:53:11:87:11:c4:70:93: 76:ac:a2:de:97:76:a5:ed:4d:14:0f:7f:e0:90:bf:7c:a6:58: d7:93:dd:65:c2:10:9a:d9:54:23:6e:85:37:dd:5e:f1:f6:5b: 9a:92:1d:66:7d:a7:4e:cb:17:42:5d:7c:90:c2:c0:4d:e1:20: e9:51:9b:a0:53:b5:2e:e1:ad:7b:f6:6d:b0:1a:48:f7:84:03: ea:ff:29:e2:83:26:46:a3:ac:00:88:56:5f:4f:0f:7f:20:39: dc:a2:d2:82:fb:0b:cc:a7:9b:5e:7e:09:a5:f1:a0:ac:f6:a4: cd:11:de:49:25:5a:01:c8:9b:6d:35:24:83:45:88:eb:2a:53: 7d:5d:92:54:17:e8:70:03:5d:c3:57:48:bc:08:5d:ed:0d:0b: 57:0c:02:43:51:74:9a:5a:1b:d9:1e:44:5c:8a:39:e6:6e:b0: 35:4d:fe:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDzJ6EqDCWBwsE/z1C1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZWRjOWE1NGUxYzcyM2I1NmFhZWRmN2QwMTU0MGM1YjM2 YmRhYjYwHhcNMjUxMjA2MTMwMDUzWhcNMjUxMjA3MTMwMDUzWjAzMTEwLwYDVQQD EyhlMTcwNzA1YzIwNjQyYzJhYzk2ZTY1MTlmOWFhOTExOTAzNTExNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cxJCN8JrP4pilPm9RhU8xzJ6E2I wxCS9GxJrOxGKgodkiptVeU8Kofjw4ywePXoFuD1xYAdGl/Zj36Ki5JYyqhqRKHh cYUZlLSwHHRQuFeiDpI1aIV3HhGTK4YUqphWqoIn7sWz08ygTfRZR2rF/vb2nB9q wjIz7GmAldqlaTETlIuwK31gjpU2uXr1h7gLRVYSyB5QJjmq9w9jb9Itd1RhEglv uStQD7+G8/tOn0jeBIRhc03SDECNUVbWHf8U23gUK1rTVVXjvLCwsU+eqB5KUZGA 3MeLusmqEfb3ASz3V+1kn7ikav41kxPg+25uWZwJmBSWsHkuOE/xyRcVFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFwcFwgZCwqyW5lGfmqkRkDURQFMB8GA1UdIwQY MBaAFEjtyaVOHHI7Vqrt99AVQMWza9q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU08zSnBVNGNjanRXcXUzMzBCVkF4Yk5yMnJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83ODBlZjYtNTNkOC00NzU0LWE4ZTMt YzJhNmFlMGJmNmJlLzEvU08zSnBVNGNjanRXcXUzMzBCVkF4Yk5yMnJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83ODBlZjYtNTNkOC00NzU0LWE4ZTMtYzJhNmFlMGJmNmJl LzEvU08zSnBVNGNjanRXcXUzMzBCVkF4Yk5yMnJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqc+2pRR 6AZ8TcPE7QqyS/vHMOq+6tl8RZvf2NYlUgVrqSXcmzdmrGEjyqjqJxSuOrv5YwUk W2L9d0NMphnkEwzGilprker2fRWDvLuE5E+7Z9ZTEYcRxHCTdqyi3pd2pe1NFA9/ 4JC/fKZY15PdZcIQmtlUI26FN91e8fZbmpIdZn2nTssXQl18kMLATeEg6VGboFO1 LuGte/ZtsBpI94QD6v8p4oMmRqOsAIhWX08PfyA53KLSgvsLzKebXn4JpfGgrPak zRHeSSVaAcibbTUkg0WI6ypTfV2SVBfocANdw1dIvAhd7Q0LVwwCQ1F0mlob2R5E XIo55m6wNU3+yw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:57 2025 by rpki-client