This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft File: SiHJG2O7vaiASnSfPWEOiyF_m3M.mft (raw, json) Hash identifier: 6+Znctwz4awGg1zt6cn1Bbuagm1OOAsQD8fK9ffT3K8= Subject key identifier: 3C:7A:21:B5:F3:19:75:18:27:8F:1E:BD:E8:25:45:D1:DB:1A:53:93 Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73 Certificate issuer: /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73 Certificate serial: 019B337B83EA84489E07788CE069D59B3416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft Manifest number: 1381 Signing time: Thu 18 Dec 2025 22:01:31 +0000 Manifest this update: Thu 18 Dec 2025 22:01:31 +0000 Manifest next update: Fri 19 Dec 2025 22:01:31 +0000 Files and hashes: 1: 1Z1yWNgRSnqR3pt5WlApDelQe4o.roa (hash: 7G52qXZFDFq0XDjJ+/lW8m4SCa70rkFS2r1Ec1zORA4=) 2: SiHJG2O7vaiASnSfPWEOiyF_m3M.crl (hash: ZIYl3k8hNby3CwcJ6xUWWqd2uFcOjOZmJtaZaLkaCmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:83:ea:84:48:9e:07:78:8c:e0:69:d5:9b:34:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73 Validity Not Before: Dec 18 22:01:31 2025 GMT Not After : Dec 19 22:01:31 2025 GMT Subject: CN=3c7a21b5f3197518278f1ebde82545d1db1a5393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:b2:10:0d:33:06:f9:8f:8e:ab:f4:eb:44: c9:7a:83:17:d9:0f:36:ab:84:b3:a3:e1:29:79:d0: ec:6c:09:0c:c6:c1:c9:b5:65:56:65:1b:8b:05:d1: f3:31:44:a8:90:67:ad:c6:ba:94:55:6e:37:60:dd: 07:46:45:40:aa:c1:87:13:73:68:e0:e4:0c:f2:4d: b5:9d:60:be:a2:aa:a6:b5:33:18:db:1b:30:af:73: 95:cd:fa:09:e9:12:a7:91:6b:fc:53:91:ce:0e:1b: f4:c3:e4:ce:82:7e:79:d3:e4:ed:c3:b3:c3:bd:86: 03:fb:ef:f2:5d:45:99:44:20:54:d2:87:ef:67:0e: 91:62:43:e4:33:b0:dd:0d:6c:08:95:51:cd:54:26: e3:6b:f1:c9:f1:ba:31:c0:45:63:37:b4:b1:2c:8e: 4d:ab:ce:92:32:4d:a7:f5:4c:9a:23:e8:38:30:75: 2d:e4:69:9b:e8:5c:d9:94:99:df:c7:f2:c1:1a:b2: 2f:2a:3d:96:06:31:14:2d:7a:75:d4:44:b8:4a:d0: 46:11:fe:57:9e:54:29:cc:ce:89:ea:e7:77:92:e9: 25:a6:e0:94:6b:72:f2:fa:03:83:d7:25:ae:08:89: f6:32:76:99:44:81:e7:38:6d:83:a4:ff:ea:7d:94: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7A:21:B5:F3:19:75:18:27:8F:1E:BD:E8:25:45:D1:DB:1A:53:93 X509v3 Authority Key Identifier: keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f9:54:cd:d8:fc:30:b4:8f:ef:6a:28:04:30:88:dc:17:cf: d0:31:ac:89:61:05:79:6e:ed:bb:4f:a9:4f:02:c8:ad:7d:33: e9:2a:c4:cd:07:0f:b0:d6:57:2f:9b:74:f1:8c:63:f9:a0:ec: 1a:c7:2c:15:0e:41:8a:a0:fc:a7:51:a2:a5:db:0e:c1:e4:b7: 33:97:47:99:11:4b:15:d7:bd:cd:6d:cf:76:bf:82:d0:65:0d: 1f:76:ad:bc:90:f1:89:b6:ef:04:cd:4f:1e:3c:f8:11:4d:f9: 36:25:67:42:cf:fb:43:b7:a7:fc:6a:4a:ca:9c:5e:2d:fc:f7: 8f:38:7e:56:81:2e:bf:14:bd:e4:55:bd:01:ae:1d:77:96:fe: e7:be:f1:01:e9:5d:cb:0b:75:c6:05:b5:a6:df:ed:0b:d7:a4: 06:ce:97:4f:8c:a0:ca:52:3c:c7:c9:21:42:ea:32:13:6a:f4: 8d:ba:da:41:f9:b4:23:28:dc:f7:92:46:ec:22:2c:07:ee:20: e6:ca:a4:d7:60:0e:fa:44:3b:74:b9:7d:70:ab:44:92:ac:a7: 68:c1:71:48:d9:0e:1d:7c:9b:90:c0:8f:2d:32:32:32:29:5e: 3b:b9:d5:61:7e:f0:bc:ca:12:e6:fe:d4:ed:62:36:84:d5:6c: 79:f4:1b:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze4PqhEieB3iM4GnVmzQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMjFjOTFiNjNiYmJkYTg4MDRhNzQ5ZjNkNjEwZThiMjE3 ZjliNzMwHhcNMjUxMjE4MjIwMTMxWhcNMjUxMjE5MjIwMTMxWjAzMTEwLwYDVQQD EygzYzdhMjFiNWYzMTk3NTE4Mjc4ZjFlYmRlODI1NDVkMWRiMWE1MzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q2yEA0zBvmPjqv060TJeoMX2Q82 q4Szo+EpedDsbAkMxsHJtWVWZRuLBdHzMUSokGetxrqUVW43YN0HRkVAqsGHE3No 4OQM8k21nWC+oqqmtTMY2xswr3OVzfoJ6RKnkWv8U5HODhv0w+TOgn550+Ttw7PD vYYD++/yXUWZRCBU0ofvZw6RYkPkM7DdDWwIlVHNVCbja/HJ8boxwEVjN7SxLI5N q86SMk2n9UyaI+g4MHUt5Gmb6FzZlJnfx/LBGrIvKj2WBjEULXp11ES4StBGEf5X nlQpzM6J6ud3kuklpuCUa3Ly+gOD1yWuCIn2MnaZRIHnOG2DpP/qfZSV3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDx6IbXzGXUYJ48eveglRdHbGlOTMB8GA1UdIwQY MBaAFEohyRtju72ogEp0nz1hDoshf5tzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82ZThjYTAtY2Q0MC00NmZkLThlZTQt NDdmYmU0YzRhNGZkLzEvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82ZThjYTAtY2Q0MC00NmZkLThlZTQtNDdmYmU0YzRhNGZk LzEvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy/lUzdj8 MLSP72ooBDCI3BfP0DGsiWEFeW7tu0+pTwLIrX0z6SrEzQcPsNZXL5t08Yxj+aDs GscsFQ5BiqD8p1GipdsOweS3M5dHmRFLFde9zW3Pdr+C0GUNH3atvJDxibbvBM1P Hjz4EU35NiVnQs/7Q7en/GpKypxeLfz3jzh+VoEuvxS95FW9Aa4dd5b+577xAeld ywt1xgW1pt/tC9ekBs6XT4ygylI8x8khQuoyE2r0jbraQfm0Iyjc95JG7CIsB+4g 5sqk12AO+kQ7dLl9cKtEkqynaMFxSNkOHXybkMCPLTIyMileO7nVYX7wvMoS5v7U 7WI2hNVsefQbyA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:52:44 2025 by rpki-client