This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json) Hash identifier: EJ1kjkNY8bQWdc4HgZbtkEsLYJIQPK28fvUmODiZFBk= Subject key identifier: EA:AE:6D:5F:91:A2:88:4E:35:48:1F:F9:19:AC:AB:74:AB:EA:4A:B3 Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a Certificate serial: 019B2F9E34CC69BE62A89F58518A83584F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 04:00:55 +0000 Manifest this update: Thu 18 Dec 2025 04:00:55 +0000 Manifest next update: Fri 19 Dec 2025 04:00:55 +0000 Files and hashes: 1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=) 2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: AVQo89AVZF/h9x4/NGTcziqUx2AMb38xCQ5X50/+KUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:34:cc:69:be:62:a8:9f:58:51:8a:83:58:4f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a Validity Not Before: Dec 18 04:00:55 2025 GMT Not After : Dec 19 04:00:55 2025 GMT Subject: CN=eaae6d5f91a2884e35481ff919acab74abea4ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:07:0c:ad:8e:c4:38:e1:2f:63:ac:e7:e8: 28:b5:f2:5d:83:dc:f9:67:59:03:f5:24:14:ff:52: de:c9:d3:0d:5e:ec:4b:fe:71:18:c2:1c:e6:02:20: 0f:05:25:04:16:09:e7:60:76:d0:2e:c8:b1:f5:1e: 74:08:cb:f1:94:7f:45:c0:2a:5e:84:63:50:5f:44: 24:40:0a:4f:f9:ef:ee:0e:3b:ec:9e:71:bf:6e:52: de:2e:b5:47:05:57:7c:38:34:6f:6e:c2:03:2f:e6: 6a:4f:fb:39:57:54:9f:7b:45:a2:6d:3e:6b:67:d5: 77:f3:0f:e2:5b:93:4a:a2:bd:4f:0a:f6:2f:80:45: d8:35:96:d5:3b:8e:a8:51:54:02:ad:c5:20:1c:b2: 40:24:6d:04:de:96:2b:c7:0e:59:f3:09:e5:1b:d7: 85:a3:89:0a:bb:36:75:17:ee:7c:00:72:75:76:8c: c5:30:08:20:df:e6:ce:37:cf:81:20:6a:05:ba:53: 18:68:96:63:ba:80:2b:91:c9:c6:db:d9:24:85:7b: 8a:68:2f:98:3a:c0:4a:1a:14:8d:00:5e:f0:d2:48: 27:e3:a3:2c:1c:b0:28:13:2e:57:b3:3d:34:44:9a: cf:d1:8b:59:c2:15:0e:92:a5:5c:8c:62:64:75:ad: 1c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AE:6D:5F:91:A2:88:4E:35:48:1F:F9:19:AC:AB:74:AB:EA:4A:B3 X509v3 Authority Key Identifier: keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9c:82:4d:b0:5e:72:14:ac:e4:eb:37:22:26:81:3f:ae:20: 44:2b:fd:6d:f0:bd:6d:cb:ea:6f:70:27:59:c4:6c:bd:d8:16: 0d:c6:9c:81:31:67:9c:11:fd:55:f4:bd:7f:b6:9c:8f:e9:f9: 46:1a:4c:fb:15:53:41:b0:89:18:b7:56:a0:0a:f1:ac:a0:6e: 01:cb:c4:76:c8:9c:38:10:68:3c:c9:c9:97:9b:3e:0f:bd:52: b2:8e:c3:bc:13:30:fb:f1:bb:e6:f3:0b:7b:3e:82:67:67:54: da:ab:a6:52:f7:6f:8e:62:4b:78:fd:81:98:ba:15:bf:b0:f1: 97:98:4a:47:d9:93:2d:da:7e:b5:11:27:5d:c2:5f:16:48:ec: 5b:0a:32:1a:b6:85:ae:90:e7:e3:3d:60:28:62:47:cb:2e:72: 0d:80:98:7f:0a:a2:7d:9f:d4:21:3e:c1:bb:cb:a5:43:bc:b9: 10:94:49:02:b6:bc:1f:45:16:b0:4f:9b:8e:4f:6c:58:94:90: 99:13:20:46:47:f3:f2:5c:3b:90:32:3c:fa:d7:0b:e4:52:59: 15:96:e9:10:f0:6e:0d:f6:bd:3f:b0:88:d6:ff:4b:2a:1b:14: 47:80:f4:36:71:b9:40:4e:05:c8:90:f7:47:72:ea:e6:ca:5c: 55:77:64:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnjTMab5iqJ9YUYqDWE9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm Mjc3OWEwHhcNMjUxMjE4MDQwMDU1WhcNMjUxMjE5MDQwMDU1WjAzMTEwLwYDVQQD EyhlYWFlNmQ1ZjkxYTI4ODRlMzU0ODFmZjkxOWFjYWI3NGFiZWE0YWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLYHDK2OxDjhL2Os5+gotfJdg9z5 Z1kD9SQU/1LeydMNXuxL/nEYwhzmAiAPBSUEFgnnYHbQLsix9R50CMvxlH9FwCpe hGNQX0QkQApP+e/uDjvsnnG/blLeLrVHBVd8ODRvbsIDL+ZqT/s5V1Sfe0WibT5r Z9V38w/iW5NKor1PCvYvgEXYNZbVO46oUVQCrcUgHLJAJG0E3pYrxw5Z8wnlG9eF o4kKuzZ1F+58AHJ1dozFMAgg3+bON8+BIGoFulMYaJZjuoArkcnG29kkhXuKaC+Y OsBKGhSNAF7w0kgn46MsHLAoEy5Xsz00RJrP0YtZwhUOkqVcjGJkda0cqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqubV+RoohONUgf+Rmsq3Sr6kqzMB8GA1UdIwQY MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt YjM4ZDdmNzA5ZDcwLzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJyCTbBe chSs5Os3IiaBP64gRCv9bfC9bcvqb3AnWcRsvdgWDcacgTFnnBH9VfS9f7acj+n5 RhpM+xVTQbCJGLdWoArxrKBuAcvEdsicOBBoPMnJl5s+D71Sso7DvBMw+/G75vML ez6CZ2dU2qumUvdvjmJLeP2BmLoVv7Dxl5hKR9mTLdp+tREnXcJfFkjsWwoyGraF rpDn4z1gKGJHyy5yDYCYfwqifZ/UIT7Bu8ulQ7y5EJRJAra8H0UWsE+bjk9sWJSQ mRMgRkfz8lw7kDI8+tcL5FJZFZbpEPBuDfa9P7CI1v9LKhsUR4D0NnG5QE4FyJD3 R3Lq5spcVXdkoQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:04 2025 by rpki-client