This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json) Hash identifier: xnosx1qXsswMNj8GWfBg4TMm6t16riIf8LvXLx6wl54= Subject key identifier: 7E:F2:7A:A2:54:DE:40:81:57:9D:FB:F6:C2:AB:50:ED:CF:23:59:ED Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3 Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3 Certificate serial: 019AF0BF2F4EC589BA46E2A64F3899B4345B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft Manifest number: 14F4 Signing time: Fri 05 Dec 2025 23:00:52 +0000 Manifest this update: Fri 05 Dec 2025 23:00:52 +0000 Manifest next update: Sat 06 Dec 2025 23:00:52 +0000 Files and hashes: 1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=) 2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: hRJ4pvIsPTx/ToGaJ8wUR92Ktim4j02hquprO5Kj5JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2f:4e:c5:89:ba:46:e2:a6:4f:38:99:b4:34:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3 Validity Not Before: Dec 5 23:00:52 2025 GMT Not After : Dec 6 23:00:52 2025 GMT Subject: CN=7ef27aa254de4081579dfbf6c2ab50edcf2359ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:04:1a:5a:45:21:50:77:21:51:b6:33:a2: 92:dc:a8:76:88:dc:a5:12:96:83:f8:dc:f3:c2:fd: 0f:2b:d5:ed:5d:29:a8:5f:14:4e:56:a8:68:0f:e7: 2c:32:5f:2e:20:a8:c8:08:6e:14:83:d8:5d:fe:53: 98:79:20:76:88:bb:09:f3:83:60:8c:66:86:cc:b4: 01:20:90:91:f4:38:4a:30:15:ad:b8:b5:64:cc:4c: 6d:97:ce:df:48:9f:38:ef:24:db:95:67:6a:56:06: c9:4e:6a:e5:c9:51:96:5d:91:4e:bf:c2:8c:55:27: ef:7e:ee:57:0e:f5:2b:87:f2:42:b1:ba:3c:f3:20: d3:7f:44:77:45:f1:16:e0:cc:1e:77:c0:89:7a:8f: 6d:59:49:01:08:d1:29:bb:5a:85:88:4b:62:76:97: 3b:f0:5d:be:b5:98:60:da:87:d8:d7:b8:0f:41:11: d2:71:5f:5e:f5:64:b8:3d:fd:68:93:58:a3:45:b1: 3d:73:e3:18:42:88:41:3f:da:7a:01:49:9c:67:02: 6d:df:c4:b5:25:fd:7c:9f:d4:c2:df:fe:79:f4:00: cc:02:cb:8d:cf:a8:0e:06:ca:9f:db:5d:41:88:7b: 63:3a:2c:99:a6:7a:1c:ad:92:ea:79:55:ef:06:23: 56:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F2:7A:A2:54:DE:40:81:57:9D:FB:F6:C2:AB:50:ED:CF:23:59:ED X509v3 Authority Key Identifier: keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:bf:61:3d:0d:21:40:94:5d:43:7a:08:45:14:3b:de:dc:d3: d0:35:e6:c1:1d:5c:d9:a7:ce:2a:87:05:14:07:fc:03:1e:88: 45:9c:2b:35:2b:83:6b:b1:a2:36:f4:3d:28:2f:a1:e7:d2:0a: de:97:af:65:71:77:06:03:9d:a1:3e:db:d1:34:9a:6b:16:4d: 90:80:b2:0a:89:f7:68:d8:ab:98:7b:36:94:6a:62:ca:a0:6a: f0:d8:66:2e:b8:cf:f8:78:be:43:74:86:4b:19:8e:55:5b:dc: a9:72:9e:01:49:c2:ba:99:7a:72:8e:c3:fb:da:07:d8:dd:5f: 29:57:75:fd:4d:a6:ff:4e:05:be:68:be:a6:b5:58:8d:b4:a2: 40:5b:a2:c0:cc:f1:41:ca:43:b7:e6:b2:d0:03:cd:d9:7d:5a: 04:c5:78:1b:1b:4e:fd:2a:78:6e:34:d2:f8:d8:20:c1:2a:f5: 0e:f9:58:6c:42:ac:0f:85:20:f0:cb:09:47:bf:12:43:f7:62: 6b:20:5d:83:83:ed:cf:3e:51:6a:b8:93:df:b7:c9:20:02:cc: 8e:11:f0:40:9e:a1:3c:61:b6:76:af:30:7f:08:d7:9c:9d:81: 1f:02:ae:41:70:80:ff:49:dc:d4:f1:03:1d:16:b8:5d:d9:9c: 92:ef:cc:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvy9OxYm6RuKmTziZtDRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZjhhODg1Zjc3NzZkMmFiOTliYjRmMjBlODRkMzA2ZTAz OTRhYTMwHhcNMjUxMjA1MjMwMDUyWhcNMjUxMjA2MjMwMDUyWjAzMTEwLwYDVQQD Eyg3ZWYyN2FhMjU0ZGU0MDgxNTc5ZGZiZjZjMmFiNTBlZGNmMjM1OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV0EGlpFIVB3IVG2M6KS3Kh2iNyl EpaD+Nzzwv0PK9XtXSmoXxROVqhoD+csMl8uIKjICG4Ug9hd/lOYeSB2iLsJ84Ng jGaGzLQBIJCR9DhKMBWtuLVkzExtl87fSJ847yTblWdqVgbJTmrlyVGWXZFOv8KM VSfvfu5XDvUrh/JCsbo88yDTf0R3RfEW4Mwed8CJeo9tWUkBCNEpu1qFiEtidpc7 8F2+tZhg2ofY17gPQRHScV9e9WS4Pf1ok1ijRbE9c+MYQohBP9p6AUmcZwJt38S1 Jf18n9TC3/559ADMAsuNz6gOBsqf211BiHtjOiyZpnocrZLqeVXvBiNWCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7yeqJU3kCBV5379sKrUO3PI1ntMB8GA1UdIwQY MBaAFLD4qIX3d20quZu08g6E0wbgOUqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iMTI4MmYtNzFjNS00N2U3LWFlYTEt NGQwNTQ5OGFhOTdkLzEvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iMTI4MmYtNzFjNS00N2U3LWFlYTEtNGQwNTQ5OGFhOTdk LzEvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1b9hPQ0h QJRdQ3oIRRQ73tzT0DXmwR1c2afOKocFFAf8Ax6IRZwrNSuDa7GiNvQ9KC+h59IK 3pevZXF3BgOdoT7b0TSaaxZNkICyCon3aNirmHs2lGpiyqBq8NhmLrjP+Hi+Q3SG SxmOVVvcqXKeAUnCupl6co7D+9oH2N1fKVd1/U2m/04Fvmi+prVYjbSiQFuiwMzx QcpDt+ay0APN2X1aBMV4GxtO/Sp4bjTS+NggwSr1DvlYbEKsD4Ug8MsJR78SQ/di ayBdg4Ptzz5RariT37fJIALMjhHwQJ6hPGG2dq8wfwjXnJ2BHwKuQXCA/0nc1PED HRa4Xdmcku/M+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:48 2025 by rpki-client