This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json) Hash identifier: ZrbplWLdkH98Q65xwHVAnsU/wlJBIMkrFYcHBr8IycY= Subject key identifier: 41:04:5E:27:A7:3D:CF:05:83:A1:34:F6:01:99:22:7B:45:76:75:61 Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0 Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0 Certificate serial: 019B35D6F9C0D1BB920CADA2A5D61DACEA3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft Manifest number: 14BF Signing time: Fri 19 Dec 2025 09:00:39 +0000 Manifest this update: Fri 19 Dec 2025 09:00:39 +0000 Manifest next update: Sat 20 Dec 2025 09:00:39 +0000 Files and hashes: 1: BzSGdKXS_5WRE8i4u-1soKeFtzM.roa (hash: vrT1E18BTpX1mS9gu66zvt/nerXMjovuRA/4FT5P190=) 2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: C5uNcwn5AOpfAA+v/YcFC+SgRA3GuV6YcdM2tyQJdFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:f9:c0:d1:bb:92:0c:ad:a2:a5:d6:1d:ac:ea:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0 Validity Not Before: Dec 19 09:00:39 2025 GMT Not After : Dec 20 09:00:39 2025 GMT Subject: CN=41045e27a73dcf0583a134f60199227b45767561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:1e:60:d3:c4:3a:a7:50:0c:70:ba:5d:c5: d6:f9:b3:c5:3d:79:f9:52:49:07:4b:d6:44:fe:79: c7:ae:be:65:3a:51:d6:53:6f:08:fa:8b:a5:34:1b: 21:d6:81:ab:22:0e:0a:cc:6c:f0:95:4b:68:d5:fb: a1:8c:cd:d5:54:c8:92:87:d6:6e:32:c0:4c:a3:e6: 25:7c:b2:1b:8a:b7:cf:ae:f5:1f:76:71:48:ed:de: 69:30:d9:1e:95:92:59:30:83:e9:0e:45:ee:35:b9: 70:b4:29:06:92:5c:4a:c2:39:82:31:38:35:38:1a: 9e:55:9f:62:51:e4:d9:0f:83:50:f7:7c:75:9d:e6: c5:76:47:3d:71:9f:e6:86:f2:83:3e:c7:98:4e:e3: cf:41:f9:61:ba:3a:76:e3:62:45:e3:36:c5:cd:19: 29:29:a6:5c:5d:8a:d5:47:50:ae:71:14:db:3e:8a: b1:16:11:8f:30:94:8a:b4:39:8c:60:50:11:89:18: 26:e5:51:c2:c4:8a:03:eb:62:ef:90:df:23:f6:96: 25:dd:3f:bf:1c:0f:5e:90:9b:b4:a5:5a:28:8c:bd: 7b:29:2c:6e:e4:c6:9a:1b:b8:be:e2:1b:3a:91:4f: 50:e5:0c:63:79:1d:af:f9:33:64:9b:4c:3a:f6:bc: c4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:04:5E:27:A7:3D:CF:05:83:A1:34:F6:01:99:22:7B:45:76:75:61 X509v3 Authority Key Identifier: keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d0:32:ff:1f:ed:97:ac:a8:89:12:c2:3a:f8:71:1c:b8:18: 21:29:e1:63:8b:7d:4b:44:b4:6d:68:28:27:7b:d6:70:54:76: 8f:45:bb:e1:cd:22:70:e8:8f:cb:04:df:2e:3d:5b:cc:3f:d4: 27:15:d1:14:f0:17:a1:68:8e:14:51:50:65:75:b8:4f:9d:f2: 34:71:6e:a0:f1:21:7f:a6:e8:65:49:97:ff:bc:4f:b3:8f:8d: b3:d8:56:74:26:7d:5f:33:a0:44:87:47:a1:ce:56:79:72:f4: 26:d0:25:d2:15:55:da:39:1b:e9:77:80:df:75:d7:ba:05:de: 38:4b:40:c3:c9:5d:fb:6b:41:61:07:12:3b:83:ed:b5:9c:86: 9b:61:04:da:9b:1d:25:80:77:4c:6a:75:eb:6a:44:1f:70:0a: ed:06:84:7a:67:35:f7:de:31:cc:06:af:f4:a1:a9:e5:a0:77: 4a:7f:7c:6a:26:6d:a9:90:0e:cb:30:ec:b9:f4:86:d1:7b:ac: 0f:bb:35:82:3e:3e:88:22:42:60:cb:ae:ec:81:c2:ad:b4:79: e9:b7:fc:6e:94:3d:fe:71:b8:c6:38:ba:90:15:af:4c:85:af: 63:c8:bb:be:cb:aa:83:e7:ce:36:92:04:76:6a:f8:4f:91:ab: 68:09:46:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11vnA0buSDK2ipdYdrOo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NjRhMjZmNzYzNTUxNDBhYTY5NmUwYTRmMWYwYzMxMmI3 Mjc3YzAwHhcNMjUxMjE5MDkwMDM5WhcNMjUxMjIwMDkwMDM5WjAzMTEwLwYDVQQD Eyg0MTA0NWUyN2E3M2RjZjA1ODNhMTM0ZjYwMTk5MjI3YjQ1NzY3NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdgeYNPEOqdQDHC6XcXW+bPFPXn5 UkkHS9ZE/nnHrr5lOlHWU28I+oulNBsh1oGrIg4KzGzwlUto1fuhjM3VVMiSh9Zu MsBMo+YlfLIbirfPrvUfdnFI7d5pMNkelZJZMIPpDkXuNblwtCkGklxKwjmCMTg1 OBqeVZ9iUeTZD4NQ93x1nebFdkc9cZ/mhvKDPseYTuPPQflhujp242JF4zbFzRkp KaZcXYrVR1CucRTbPoqxFhGPMJSKtDmMYFARiRgm5VHCxIoD62LvkN8j9pYl3T+/ HA9ekJu0pVoojL17KSxu5MaaG7i+4hs6kU9Q5QxjeR2v+TNkm0w69rzE0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEEXienPc8Fg6E09gGZIntFdnVhMB8GA1UdIwQY MBaAFKdkom92NVFAqmluCk8fDDErcnfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYt ZmZhNDk1MGExY2NiLzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYtZmZhNDk1MGExY2Ni LzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9Ay/x/t l6yoiRLCOvhxHLgYISnhY4t9S0S0bWgoJ3vWcFR2j0W74c0icOiPywTfLj1bzD/U JxXRFPAXoWiOFFFQZXW4T53yNHFuoPEhf6boZUmX/7xPs4+Ns9hWdCZ9XzOgRIdH oc5WeXL0JtAl0hVV2jkb6XeA33XXugXeOEtAw8ld+2tBYQcSO4PttZyGm2EE2psd JYB3TGp162pEH3AK7QaEemc1994xzAav9KGp5aB3Sn98aiZtqZAOyzDsufSG0Xus D7s1gj4+iCJCYMuu7IHCrbR56bf8bpQ9/nG4xji6kBWvTIWvY8i7vsuqg+fONpIE dmr4T5GraAlGAA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:50:24 2025 by rpki-client