This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json) Hash identifier: 3jLIIibse+/XlcI2gvxzO6ZakvmNCVVUF1z9ja17LfQ= Subject key identifier: D7:C3:72:B3:87:52:69:4A:6B:A0:43:43:DB:6D:70:83:7A:12:13:31 Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47 Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947 Certificate serial: 019AF209AACB9C9945B96BA3E9874D02F97D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft Manifest number: 0A81 Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: 8jrlCuISNwRSH+ToMFtzJx6Rn3wskC2P5gOh+IeN1zc=) 2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:aa:cb:9c:99:45:b9:6b:a3:e9:87:4d:02:f9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947 Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=d7c372b38752694a6ba04343db6d70837a121331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:30:b6:72:61:e4:ce:ff:aa:8b:28:ca:c0: ed:0d:73:df:5e:83:c9:57:bf:ec:a1:1a:af:8a:fc: 6d:c8:84:02:4f:25:d6:a8:35:08:ab:42:98:dc:e4: 81:73:8b:2a:9c:31:67:ef:52:57:e9:0d:d7:14:d0: 47:7d:fa:c1:f6:14:fd:bb:0f:dd:6c:98:46:18:21: 97:11:62:86:8b:b6:c6:9c:35:b6:31:28:ba:80:09: ad:2d:fa:6a:d2:28:1c:80:1c:dc:47:59:46:61:40: a2:95:11:48:db:11:0a:ec:0d:95:8f:46:43:8e:40: 2b:93:d6:e6:17:0b:86:8a:79:31:fe:fb:e4:c9:0c: 9f:6d:1a:84:98:d3:66:30:9b:f7:0a:fc:55:03:dc: 73:d5:dc:55:65:28:e1:43:bc:89:e1:c9:df:ef:f0: ed:02:b5:e6:ce:aa:85:f7:d2:06:85:7b:13:82:49: 25:63:92:e9:a0:47:75:05:99:8e:1e:ef:5f:e8:ef: 39:ae:78:db:b8:8d:c6:91:58:c1:ca:7e:0e:9d:58: 2d:c0:f8:b3:58:8d:37:99:48:17:70:d1:0b:59:da: b3:bb:05:ab:9e:b5:c9:69:af:cd:82:c6:1f:67:85: 86:e0:94:db:3b:fe:3b:1f:eb:f8:53:86:e5:38:79: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C3:72:B3:87:52:69:4A:6B:A0:43:43:DB:6D:70:83:7A:12:13:31 X509v3 Authority Key Identifier: keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:01:62:ca:58:26:a0:66:f7:76:30:20:97:43:32:49:e1: ec:1f:1d:7b:49:70:ce:f1:7d:7a:8c:f2:24:7f:34:b5:64:c2: a3:c4:71:8a:87:f2:48:29:83:8f:c2:9a:cf:16:9e:2e:e7:c5: 36:b5:a7:a2:81:45:9d:96:96:bd:4a:fc:98:80:46:47:b1:03: 00:f1:94:be:0c:2c:f5:c3:ba:f1:b6:36:63:35:03:9c:4f:b2: 6b:0f:55:9e:f6:c1:81:0a:ba:3a:23:42:33:a4:35:32:e8:46: bb:c7:7f:8f:dd:af:49:79:d0:84:a7:20:d4:d2:8b:2b:1d:aa: dc:42:8e:c6:88:f2:11:92:3e:ee:37:0b:d1:a7:19:a8:8d:a3: 44:04:53:e4:23:0b:ff:b0:8c:78:4e:e7:20:67:2e:7c:7b:e5: 61:d7:98:c0:01:9a:6a:61:c8:4d:47:92:a7:57:6c:5f:63:0b: 0f:7c:d0:ae:c4:19:14:5d:11:10:7b:8f:38:45:38:fe:93:b9: 3a:2e:80:7f:0d:a7:c2:d5:d4:74:ef:ce:d6:57:95:f4:f3:f7: 7b:76:ef:9e:64:0c:15:23:cd:b5:b0:07:10:b2:e8:13:5b:e2: cf:6e:c0:84:85:32:24:3d:cb:74:59:66:9e:a4:a3:ae:3a:c2: 1f:2c:51:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCarLnJlFuWuj6YdNAvl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODU5ZjNkMmNkMjgzZTdkYjkwZjAyZmUxYjBkNGY2MTU2 MDU5NDcwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD EyhkN2MzNzJiMzg3NTI2OTRhNmJhMDQzNDNkYjZkNzA4MzdhMTIxMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15YwtnJh5M7/qosoysDtDXPfXoPJ V7/soRqvivxtyIQCTyXWqDUIq0KY3OSBc4sqnDFn71JX6Q3XFNBHffrB9hT9uw/d bJhGGCGXEWKGi7bGnDW2MSi6gAmtLfpq0igcgBzcR1lGYUCilRFI2xEK7A2Vj0ZD jkArk9bmFwuGinkx/vvkyQyfbRqEmNNmMJv3CvxVA9xz1dxVZSjhQ7yJ4cnf7/Dt ArXmzqqF99IGhXsTgkklY5LpoEd1BZmOHu9f6O85rnjbuI3GkVjByn4OnVgtwPiz WI03mUgXcNELWdqzuwWrnrXJaa/NgsYfZ4WG4JTbO/47H+v4U4blOHld1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfDcrOHUmlKa6BDQ9ttcIN6EhMxMB8GA1UdIwQY MBaAFLGFnz0s0oPn25DwL+Gw1PYVYFlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUt MmFhZGM1YzNjNTdkLzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUtMmFhZGM1YzNjNTdk LzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzsBYspY JqBm93YwIJdDMknh7B8de0lwzvF9eozyJH80tWTCo8RxiofySCmDj8KazxaeLufF NrWnooFFnZaWvUr8mIBGR7EDAPGUvgws9cO68bY2YzUDnE+yaw9VnvbBgQq6OiNC M6Q1MuhGu8d/j92vSXnQhKcg1NKLKx2q3EKOxojyEZI+7jcL0acZqI2jRART5CML /7CMeE7nIGcufHvlYdeYwAGaamHITUeSp1dsX2MLD3zQrsQZFF0REHuPOEU4/pO5 Oi6Afw2nwtXUdO/O1leV9PP3e3bvnmQMFSPNtbAHELLoE1viz27AhIUyJD3LdFlm nqSjrjrCHyxROQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:31 2025 by rpki-client