This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft File: sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json) Hash identifier: 8vCDtoCjKQvxboGwRx+6ElQ7OcMgZKqjOz047jCVNPQ= Subject key identifier: 31:33:9A:81:D3:81:6E:8B:A4:7F:AA:93:61:AA:77:66:5F:48:94:8F Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Certificate serial: 019AF50AE65F425B922778F5FB56E4C427AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft Manifest number: 130D Signing time: Sat 06 Dec 2025 19:02:03 +0000 Manifest this update: Sat 06 Dec 2025 19:02:03 +0000 Manifest next update: Sun 07 Dec 2025 19:02:03 +0000 Files and hashes: 1: HGyMO-gI6BJOthGGldBVkMwTP6M.roa (hash: LWkHdvqqdhuJkMVn2Z8NyBNjrEPjz4vXV3NQv+TmBQY=) 2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: LPXOvRUKFKYPqKLXovhGTxaYCxW9zxYA0dRDVgihuqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e6:5f:42:5b:92:27:78:f5:fb:56:e4:c4:27:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Validity Not Before: Dec 6 19:02:03 2025 GMT Not After : Dec 7 19:02:03 2025 GMT Subject: CN=31339a81d3816e8ba47faa9361aa77665f48948f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:8b:3b:90:ca:c0:31:13:0e:6a:d4:51:da: c0:90:14:8a:9b:0e:ae:14:1f:b4:3e:7c:b9:8a:16: 3a:3f:81:31:a3:d4:86:e4:47:1f:51:58:98:30:6a: b8:a5:89:4e:c6:66:45:5e:c2:23:81:21:9e:db:10: b4:7f:53:23:4d:d1:7f:b0:22:d8:af:9e:83:cc:86: 40:4c:3b:94:e7:a8:61:14:44:4a:ab:e3:9d:ac:6a: 09:9a:ec:e9:c4:88:ff:5a:5e:90:aa:21:4e:8f:a9: c4:04:a1:58:cc:ea:b7:da:de:f9:eb:88:11:9c:5e: 29:f2:a6:f1:b4:7d:41:f4:18:59:85:a9:c2:bd:d5: 28:24:bf:f8:0c:8d:e4:5a:8f:79:6f:ff:46:30:d6: 4d:e0:03:c6:7a:cf:89:8b:a3:84:f4:54:7f:51:ac: 5f:2e:ea:81:a0:d9:2f:26:90:43:97:17:a6:21:8d: 4e:05:fb:4b:73:04:93:73:e7:1b:22:08:44:45:2a: ab:bc:ee:50:0a:81:d3:e4:69:e9:96:0c:43:9b:ac: 1e:70:4f:5b:51:14:03:41:bb:99:18:21:d9:9b:06: 33:92:c6:ee:cb:70:14:a8:32:cc:a7:78:da:13:9d: a2:b8:b7:c2:47:0e:33:c6:07:c4:f2:88:d6:6a:ea: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:33:9A:81:D3:81:6E:8B:A4:7F:AA:93:61:AA:77:66:5F:48:94:8F X509v3 Authority Key Identifier: keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8a:e3:ef:c1:49:44:b5:5a:8c:c1:93:65:e4:d0:85:11:d8: e3:35:6c:0b:a0:7d:4a:2f:b7:6e:02:e1:35:5d:7c:12:52:9d: 27:ff:4a:ac:0d:25:65:70:12:77:6f:39:9e:6f:15:68:8b:0d: b2:6d:84:76:04:07:74:8b:ec:c1:4a:34:86:bb:c3:4b:53:01: 1f:13:5a:5d:02:99:ee:a4:6d:a6:22:ac:fe:03:e7:66:2a:2d: b1:34:88:c0:15:cc:e3:6b:55:b2:d5:12:55:3d:36:b3:b6:f2: 1d:dd:46:06:e2:68:dd:44:72:0c:23:0d:e2:aa:0e:83:cc:4d: 5a:5f:f1:0d:41:b4:5b:3e:03:f0:0a:4c:9c:5e:6b:33:e2:48: 8d:b3:9e:ca:0d:ac:eb:17:2a:ca:ca:3c:e6:10:c0:15:4d:c9: 68:62:1b:b6:48:48:85:4d:ce:56:0a:bc:75:f3:de:49:e9:e0: a9:91:d0:9b:54:63:2b:74:39:fc:4e:97:64:ef:b3:e6:bd:ce: 6d:07:37:83:c0:72:d7:ad:bd:16:70:45:29:73:93:31:82:31: 2e:99:89:d6:96:ce:c4:3d:34:bf:91:6e:8b:b7:59:92:62:7e: 7e:d8:b6:a6:e5:eb:75:25:28:fc:cc:03:4a:19:9a:61:47:06: b4:5d:8a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuZfQluSJ3j1+1bkxCesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWNhMmY2ODZkNGU0ODRhNzdjMzRjMTczNDc2YmY2OWQy MzdiN2QwHhcNMjUxMjA2MTkwMjAzWhcNMjUxMjA3MTkwMjAzWjAzMTEwLwYDVQQD EygzMTMzOWE4MWQzODE2ZThiYTQ3ZmFhOTM2MWFhNzc2NjVmNDg5NDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumyLO5DKwDETDmrUUdrAkBSKmw6u FB+0Pny5ihY6P4Exo9SG5EcfUViYMGq4pYlOxmZFXsIjgSGe2xC0f1MjTdF/sCLY r56DzIZATDuU56hhFERKq+OdrGoJmuzpxIj/Wl6QqiFOj6nEBKFYzOq32t7564gR nF4p8qbxtH1B9BhZhanCvdUoJL/4DI3kWo95b/9GMNZN4APGes+Ji6OE9FR/Uaxf LuqBoNkvJpBDlxemIY1OBftLcwSTc+cbIghERSqrvO5QCoHT5GnplgxDm6wecE9b URQDQbuZGCHZmwYzksbuy3AUqDLMp3jaE52iuLfCRw4zxgfE8ojWaupsGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEzmoHTgW6LpH+qk2Gqd2ZfSJSPMB8GA1UdIwQY MBaAFLFcovaG1OSEp3w0wXNHa/adI3t9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2Qt Mzg1ZjNmNTJhOTZiLzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2QtMzg1ZjNmNTJhOTZi LzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIrj78FJ RLVajMGTZeTQhRHY4zVsC6B9Si+3bgLhNV18ElKdJ/9KrA0lZXASd285nm8VaIsN sm2EdgQHdIvswUo0hrvDS1MBHxNaXQKZ7qRtpiKs/gPnZiotsTSIwBXM42tVstUS VT02s7byHd1GBuJo3URyDCMN4qoOg8xNWl/xDUG0Wz4D8ApMnF5rM+JIjbOeyg2s 6xcqyso85hDAFU3JaGIbtkhIhU3OVgq8dfPeSengqZHQm1RjK3Q5/E6XZO+z5r3O bQc3g8By1629FnBFKXOTMYIxLpmJ1pbOxD00v5Fui7dZkmJ+fti2puXrdSUo/MwD ShmaYUcGtF2K6w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:22 2025 by rpki-client