This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json) Hash identifier: 2jBEENvqYVSiJcF4t4m71HB9AcAa7TeHI5ZUhg7Kh1M= Subject key identifier: FE:EA:6F:F5:7E:74:63:68:52:5A:4E:59:DD:12:4D:F2:AB:0E:5F:20 Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a Certificate serial: 019AF5E58B1AA428777974B0C7BEC6177AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft Manifest number: 116D Signing time: Sat 06 Dec 2025 23:00:52 +0000 Manifest this update: Sat 06 Dec 2025 23:00:52 +0000 Manifest next update: Sun 07 Dec 2025 23:00:52 +0000 Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: YN24VLSiCKilp0Q2XsjUYC+rPPpDs7rX5StMoVzNEZM=) 2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:8b:1a:a4:28:77:79:74:b0:c7:be:c6:17:7a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a Validity Not Before: Dec 6 23:00:52 2025 GMT Not After : Dec 7 23:00:52 2025 GMT Subject: CN=feea6ff57e746368525a4e59dd124df2ab0e5f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:91:41:00:41:72:6c:da:1e:0d:72:80:84: b1:60:11:1f:f7:4f:ba:48:67:71:43:de:85:22:17: 0b:6b:f9:a3:ce:6b:0a:3b:5e:e6:59:55:de:1f:ea: 21:42:21:d3:29:31:2c:3d:5b:2a:3c:b7:db:40:11: f0:c9:61:74:a1:0b:87:14:eb:83:d4:f2:9a:69:b4: b1:71:fb:76:e6:aa:e6:d1:1b:6d:6b:21:ba:4a:40: f0:59:2b:c9:aa:e1:0c:13:16:e7:99:0e:ff:d5:f1: c8:22:4a:ec:f7:3d:71:cf:99:fc:2c:5b:38:9d:30: 34:fd:40:93:c3:06:5c:b5:3a:d8:1c:57:11:3d:a1: 78:6f:35:36:ab:0f:89:07:9b:bb:f2:35:e6:ef:f5: 55:56:5f:9c:ad:27:e7:fc:88:3f:76:22:c3:4e:54: 18:78:d7:cb:8d:7d:bf:d3:fe:e8:4b:18:43:5f:c5: 23:63:f7:a7:2d:dc:92:6d:7a:dc:fb:f8:43:55:1d: 60:ca:88:66:94:2d:00:53:57:6a:8c:5a:5a:4c:6e: c3:15:fa:23:e8:e5:cc:5c:d6:9a:09:17:c7:79:1a: 8c:db:5d:9b:23:46:1b:19:f9:c6:da:3e:8f:50:b5: ae:2a:28:2a:e4:d5:79:87:7a:90:61:29:45:89:db: 9d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EA:6F:F5:7E:74:63:68:52:5A:4E:59:DD:12:4D:F2:AB:0E:5F:20 X509v3 Authority Key Identifier: keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d4:3d:1d:17:ee:3a:8c:72:81:56:94:fc:95:73:14:52:df: 82:9f:b6:f5:94:7f:0e:53:5c:2a:21:14:a0:5d:ee:5d:23:c6: df:b1:34:2e:9e:3b:2d:07:c3:ce:70:5b:e9:61:21:70:fc:55: f0:f1:5c:e3:ff:89:39:0b:ef:b9:cf:84:88:d3:96:15:e0:e7: 22:f4:5e:2a:a2:9f:88:95:89:2c:c1:f9:41:61:c1:b9:97:cc: 56:35:11:97:4f:97:9a:c4:1d:b5:6e:59:71:e8:8a:f0:7a:75: 30:a9:48:58:60:b5:80:f1:9e:de:2d:c5:84:db:20:2c:12:ab: 3e:2b:c6:43:ca:a2:5f:e1:79:b1:03:e5:84:bf:f5:6d:dc:36: 48:2c:dd:b6:cc:96:78:af:52:5b:8b:83:42:42:3e:f5:c2:55: 97:7a:0f:48:5c:f2:c5:8f:63:d6:f7:a4:e9:b8:d3:28:d4:78: 64:03:00:71:de:d4:a1:bf:b7:fe:63:63:fc:aa:9e:74:e8:12: 21:d9:02:26:a0:31:4c:4e:29:04:98:a7:20:6f:cc:6d:3d:61: 07:58:85:01:33:28:0a:49:89:5d:66:34:4c:2a:1e:2b:09:85: 1a:91:1d:9a:f9:56:b0:8c:a5:45:26:80:7d:04:7e:cc:c4:fd: 87:2f:81:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15YsapCh3eXSwx77GF3r9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODNlZTdkY2MzMjgzN2IwYmE1Yjg5MWQ4ZjE0NTQzNWFi M2I2MGEwHhcNMjUxMjA2MjMwMDUyWhcNMjUxMjA3MjMwMDUyWjAzMTEwLwYDVQQD EyhmZWVhNmZmNTdlNzQ2MzY4NTI1YTRlNTlkZDEyNGRmMmFiMGU1ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlWRQQBBcmzaHg1ygISxYBEf90+6 SGdxQ96FIhcLa/mjzmsKO17mWVXeH+ohQiHTKTEsPVsqPLfbQBHwyWF0oQuHFOuD 1PKaabSxcft25qrm0RttayG6SkDwWSvJquEMExbnmQ7/1fHIIkrs9z1xz5n8LFs4 nTA0/UCTwwZctTrYHFcRPaF4bzU2qw+JB5u78jXm7/VVVl+crSfn/Ig/diLDTlQY eNfLjX2/0/7oSxhDX8UjY/enLdySbXrc+/hDVR1gyohmlC0AU1dqjFpaTG7DFfoj 6OXMXNaaCRfHeRqM212bI0YbGfnG2j6PULWuKigq5NV5h3qQYSlFidudrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7qb/V+dGNoUlpOWd0STfKrDl8gMB8GA1UdIwQY MBaAFEqD7n3MMoN7C6W4kdjxRUNas7YKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81MTNlOGEtYWQ1Yi00MmJlLTliNmUt YjQyNjk0NjNiY2U4LzEvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81MTNlOGEtYWQ1Yi00MmJlLTliNmUtYjQyNjk0NjNiY2U4 LzEvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNQ9HRfu OoxygVaU/JVzFFLfgp+29ZR/DlNcKiEUoF3uXSPG37E0Lp47LQfDznBb6WEhcPxV 8PFc4/+JOQvvuc+EiNOWFeDnIvReKqKfiJWJLMH5QWHBuZfMVjURl0+XmsQdtW5Z ceiK8Hp1MKlIWGC1gPGe3i3FhNsgLBKrPivGQ8qiX+F5sQPlhL/1bdw2SCzdtsyW eK9SW4uDQkI+9cJVl3oPSFzyxY9j1vek6bjTKNR4ZAMAcd7Uob+3/mNj/KqedOgS IdkCJqAxTE4pBJinIG/MbT1hB1iFATMoCkmJXWY0TCoeKwmFGpEdmvlWsIylRSaA fQR+zMT9hy+BRw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:56 2025 by rpki-client