This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json) Hash identifier: /tVGC/jv3yL1RI+we8jR+gWIDFqL/zPNQKuu3qVFz3U= Subject key identifier: 7F:DC:6A:6E:82:06:A6:98:5E:4F:B8:D5:21:D4:A1:FD:07:B1:08:67 Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95 Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95 Certificate serial: 019B2C9D45119A2ADAE01B47A9428BE7F148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft Manifest number: 13CC Signing time: Wed 17 Dec 2025 14:01:02 +0000 Manifest this update: Wed 17 Dec 2025 14:01:02 +0000 Manifest next update: Thu 18 Dec 2025 14:01:02 +0000 Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=) 2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=) 3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=) 4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: pNIZcmkTiQXeiGHsm6ulkT4JN/5eGHI7mNh9XwJyu20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:45:11:9a:2a:da:e0:1b:47:a9:42:8b:e7:f1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95 Validity Not Before: Dec 17 14:01:02 2025 GMT Not After : Dec 18 14:01:02 2025 GMT Subject: CN=7fdc6a6e8206a6985e4fb8d521d4a1fd07b10867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:e8:a2:94:65:b5:b2:2d:99:7e:34:85:41: cb:26:fc:68:78:42:ca:58:27:f8:9f:84:4b:b1:01: 0d:80:08:c7:74:c4:c5:cf:38:77:82:ee:b6:5a:e9: 7b:d2:19:f6:fd:1a:31:d5:a5:54:7e:5e:70:37:0e: c1:cd:72:3d:62:91:d2:70:70:70:69:fa:74:06:7d: 40:68:77:ca:eb:93:8e:36:ca:5a:6b:01:38:db:a6: d4:1b:5d:1c:75:c3:a1:0a:71:cb:5c:c7:ad:35:ca: 26:62:c9:a4:d0:1a:77:5b:98:e4:75:00:98:a6:4f: 65:f4:32:4c:54:fd:43:2d:ec:63:b9:72:01:33:0d: a9:22:8e:12:8f:2a:0c:34:5a:7d:67:24:e6:64:bf: a0:fd:fa:57:ab:c5:78:9a:ed:9e:d8:83:ff:6a:6a: a3:55:9b:1d:04:2e:a4:8d:ea:7d:72:04:be:e6:6c: 33:e7:7d:53:83:31:0d:73:36:01:b3:cb:21:87:95: 5d:e1:ec:92:2b:d4:70:55:91:ea:c5:a6:6c:c6:6a: ca:ad:ac:79:df:72:45:30:71:96:91:d5:61:fc:70: f6:11:3b:4b:59:a3:18:08:8d:c7:c5:bf:68:38:a2: f9:9c:9f:08:5c:81:3a:e5:a5:5a:1c:d0:8f:7d:8a: 6e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DC:6A:6E:82:06:A6:98:5E:4F:B8:D5:21:D4:A1:FD:07:B1:08:67 X509v3 Authority Key Identifier: keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ab:47:af:4b:f3:4b:23:db:dc:67:04:e3:ef:ae:71:ae:c1: 94:b1:82:f9:27:41:ac:85:df:66:62:d2:ba:bb:96:0a:a3:9c: 91:f5:0c:7b:42:3c:3a:b0:cc:fb:02:d7:48:f7:be:21:89:b3: bb:aa:36:5c:20:6f:e2:70:fd:1b:e4:26:05:8a:c9:06:6d:eb: 59:6f:56:64:e3:88:98:ab:c5:76:ac:63:43:fd:c8:2f:56:b2: 1a:45:26:fc:ba:7c:92:93:09:6d:cc:52:d3:72:a9:14:d5:dc: 42:62:47:c9:d9:0d:1e:7e:d5:61:4f:f5:47:38:0c:e2:05:06: f2:61:47:f2:da:74:4a:db:a2:11:98:f1:b4:2f:1e:43:81:8c: a4:9f:0c:5c:3b:d5:32:3a:c4:17:81:d1:49:ef:c5:76:f8:a1: 7f:c5:7c:24:5e:b0:5b:c4:c0:af:af:f5:15:cd:8a:81:f7:f6: c2:ae:ea:48:91:58:6c:3d:bb:e9:4d:79:05:cd:e7:2e:b7:36: 27:a3:dc:5b:ee:57:6f:72:1a:a2:f7:fc:92:aa:9c:30:50:41: 37:a3:88:37:35:0b:8d:92:49:bb:39:e8:99:a2:2e:cb:58:cd: 4f:5f:8c:98:8c:ca:b0:0a:1a:cb:71:b1:0b:a0:0a:af:d0:f2: af:2a:62:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnUURmira4BtHqUKL5/FIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzQwYzRjMDc5ZjJkMWRlZTg1NDM5ZjgyNzgxYjliYWU3 NTZhOTUwHhcNMjUxMjE3MTQwMTAyWhcNMjUxMjE4MTQwMTAyWjAzMTEwLwYDVQQD Eyg3ZmRjNmE2ZTgyMDZhNjk4NWU0ZmI4ZDUyMWQ0YTFmZDA3YjEwODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY7oopRltbItmX40hUHLJvxoeELK WCf4n4RLsQENgAjHdMTFzzh3gu62Wul70hn2/Rox1aVUfl5wNw7BzXI9YpHScHBw afp0Bn1AaHfK65OONspaawE426bUG10cdcOhCnHLXMetNcomYsmk0Bp3W5jkdQCY pk9l9DJMVP1DLexjuXIBMw2pIo4SjyoMNFp9ZyTmZL+g/fpXq8V4mu2e2IP/amqj VZsdBC6kjep9cgS+5mwz531TgzENczYBs8shh5Vd4eySK9RwVZHqxaZsxmrKrax5 33JFMHGWkdVh/HD2ETtLWaMYCI3Hxb9oOKL5nJ8IXIE65aVaHNCPfYpuywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/cam6CBqaYXk+41SHUof0HsQhnMB8GA1UdIwQY MBaAFLF0DEwHny0d7oVDn4J4G5uudWqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQt ZWYwNjcxYzdjMGRmLzEvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQtZWYwNjcxYzdjMGRm LzEvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqtHr0vz SyPb3GcE4++uca7BlLGC+SdBrIXfZmLSuruWCqOckfUMe0I8OrDM+wLXSPe+IYmz u6o2XCBv4nD9G+QmBYrJBm3rWW9WZOOImKvFdqxjQ/3IL1ayGkUm/Lp8kpMJbcxS 03KpFNXcQmJHydkNHn7VYU/1RzgM4gUG8mFH8tp0StuiEZjxtC8eQ4GMpJ8MXDvV MjrEF4HRSe/Fdvihf8V8JF6wW8TAr6/1Fc2Kgff2wq7qSJFYbD276U15Bc3nLrc2 J6PcW+5Xb3Iaovf8kqqcMFBBN6OINzULjZJJuznomaIuy1jNT1+MmIzKsAoay3Gx C6AKr9Dyrypirw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:25:09 2025 by rpki-client