This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json) Hash identifier: LTfuVZingRfdsh89b0WYm9NyXZBp5JQXHSXiEB1KEmg= Subject key identifier: 70:E1:D5:ED:05:18:6A:A5:36:94:6F:BD:5A:0E:7E:22:13:72:37:DC Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Certificate serial: 019B3CB4FBDA698933E359CE6C0A6C3577A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft Manifest number: 1479 Signing time: Sat 20 Dec 2025 17:00:52 +0000 Manifest this update: Sat 20 Dec 2025 17:00:52 +0000 Manifest next update: Sun 21 Dec 2025 17:00:52 +0000 Files and hashes: 1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=) 2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=) 3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=) 4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=) 5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=) 6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=) 7: q1aUxTH67vKCNVudozumhgFJnN0.roa (hash: Gev4Jmq/q5w1K/DLzN5ZlF/rU5AntRJHyQ0iiS7LMww=) 8: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: MwdDtr1n5rO1p0YdhwjnVc5bPavJfZldNNyvrACNLQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:fb:da:69:89:33:e3:59:ce:6c:0a:6c:35:77:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Validity Not Before: Dec 20 17:00:52 2025 GMT Not After : Dec 21 17:00:52 2025 GMT Subject: CN=70e1d5ed05186aa536946fbd5a0e7e22137237dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:fd:a4:7e:4d:cb:90:45:d9:98:40:f9:1e: e7:61:7b:1f:12:f3:9c:9c:b8:05:1b:d7:42:4d:f1: f0:3c:15:e1:7a:75:5d:b3:cd:c1:f7:a2:32:28:f3: b5:93:36:2d:76:f7:7b:42:71:fe:33:02:16:ed:7a: 34:0f:4c:7a:52:5c:5d:55:55:90:22:65:c8:4a:e6: 32:a0:91:93:9e:dd:fe:76:cd:0a:02:29:2e:6e:99: d1:2d:ed:9d:01:94:0e:ff:4a:b8:06:10:25:d8:14: 9e:6b:b8:d7:41:e4:71:7b:06:2a:f5:62:27:a4:13: 83:8b:5e:4e:a5:9f:c8:d5:4d:3d:41:70:0b:24:da: 11:e4:94:32:28:f1:64:e0:59:a2:06:8b:c1:d4:52: 0c:1a:41:96:d8:27:de:b6:36:d8:6b:f1:09:f8:3a: d1:f5:03:e3:3c:27:01:96:5a:6a:0c:4c:4e:e1:db: a6:8e:3e:55:73:75:03:f5:72:bd:9b:27:bc:21:aa: 9c:c9:d8:f5:45:a3:0e:d3:d4:6b:e4:d0:a3:12:60: 47:a2:88:6b:dc:0b:a7:e2:5b:67:9f:d0:bb:e1:fb: ef:d3:1e:20:27:66:c2:96:d4:a9:04:b5:91:9d:21: 73:05:4d:89:0f:3d:97:ca:b4:6b:0b:d0:f0:71:4b: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E1:D5:ED:05:18:6A:A5:36:94:6F:BD:5A:0E:7E:22:13:72:37:DC X509v3 Authority Key Identifier: keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9a:4b:0b:9e:cb:74:e0:70:38:cc:62:30:f4:ec:71:f3:ec: 4f:2f:ba:2f:55:88:61:2d:7f:6a:22:92:3c:39:91:cf:be:2a: e0:92:59:d4:48:9a:a5:79:4c:60:06:67:00:3e:63:3f:76:7e: 5c:e8:04:9d:99:53:39:cf:27:42:4a:02:37:72:c3:13:e3:8d: 46:ae:48:fb:b0:cf:35:be:d8:36:1c:8f:0d:36:b7:86:d1:63: c7:9d:59:65:62:9f:a1:01:53:54:e7:f3:1d:be:04:8d:97:16: af:0c:51:94:a4:9b:3c:39:56:17:40:92:f7:bf:44:a0:b8:71: b5:5f:b2:a5:7e:11:93:59:0f:aa:22:40:b8:f3:2d:cf:ab:ac: 5a:90:94:a1:43:42:5a:0c:f4:10:c1:58:eb:63:7f:91:78:ba: b2:0f:97:77:3f:e3:10:d7:0c:c6:66:ec:31:ef:0d:fb:b1:29: 5e:0b:8b:ef:17:24:04:78:7b:5d:32:fa:33:c3:7a:01:69:e1: bb:38:f5:43:42:8e:b8:0a:6b:ed:0f:ee:5d:a8:10:7b:5c:5d: 99:90:75:e7:a0:7e:a9:d1:b3:fe:d6:29:97:1b:86:dc:42:05: 08:6f:8e:eb:23:95:01:4e:4b:20:17:9b:31:b2:a8:0c:64:24: 49:66:c8:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPvaaYkz41nObApsNXenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy YjAzYzAwHhcNMjUxMjIwMTcwMDUyWhcNMjUxMjIxMTcwMDUyWjAzMTEwLwYDVQQD Eyg3MGUxZDVlZDA1MTg2YWE1MzY5NDZmYmQ1YTBlN2UyMjEzNzIzN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OP9pH5Ny5BF2ZhA+R7nYXsfEvOc nLgFG9dCTfHwPBXhenVds83B96IyKPO1kzYtdvd7QnH+MwIW7Xo0D0x6UlxdVVWQ ImXISuYyoJGTnt3+ds0KAikubpnRLe2dAZQO/0q4BhAl2BSea7jXQeRxewYq9WIn pBODi15OpZ/I1U09QXALJNoR5JQyKPFk4FmiBovB1FIMGkGW2CfetjbYa/EJ+DrR 9QPjPCcBllpqDExO4dumjj5Vc3UD9XK9mye8Iaqcydj1RaMO09Rr5NCjEmBHoohr 3Aun4ltnn9C74fvv0x4gJ2bCltSpBLWRnSFzBU2JDz2XyrRrC9DwcUs1IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDh1e0FGGqlNpRvvVoOfiITcjfcMB8GA1UdIwQY MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt YTcyNDdlOWQ1ZjNhLzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZpLC57L dOBwOMxiMPTscfPsTy+6L1WIYS1/aiKSPDmRz74q4JJZ1EiapXlMYAZnAD5jP3Z+ XOgEnZlTOc8nQkoCN3LDE+ONRq5I+7DPNb7YNhyPDTa3htFjx51ZZWKfoQFTVOfz Hb4EjZcWrwxRlKSbPDlWF0CS979EoLhxtV+ypX4Rk1kPqiJAuPMtz6usWpCUoUNC Wgz0EMFY62N/kXi6sg+Xdz/jENcMxmbsMe8N+7EpXguL7xckBHh7XTL6M8N6AWnh uzj1Q0KOuApr7Q/uXagQe1xdmZB156B+qdGz/tYplxuG3EIFCG+O6yOVAU5LIBeb MbKoDGQkSWbIBA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:04:46 2025 by rpki-client