This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json) Hash identifier: ynxYV8UfF8pXLnJsXhjTI2MtXoPwb59v7yJuB8RZ16U= Subject key identifier: 7D:6E:60:EB:CD:90:13:4F:4D:FC:EA:76:77:AE:AF:33:19:DC:41:EA Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5 Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5 Certificate serial: 019AF3C06E31A012CBD4502E86F2CAD10356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft Manifest number: 1776 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: hQibRiNrRVPOjxS+Qe9SPFcXHji2tU4RZ8xIdE5tfIU=) 2: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=) 3: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=) 4: aBxSYhVn_anxC7-03zZfXGAPrRA.roa (hash: 4z8vPSTGN/KrBGvUG7yKZHmMHGsa+QLaisXrVqvvKq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6e:31:a0:12:cb:d4:50:2e:86:f2:ca:d1:03:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5 Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=7d6e60ebcd90134f4dfcea7677aeaf3319dc41ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:d0:4e:4c:1c:b0:cb:2f:12:8e:79:a0:a0: 55:e0:d5:b5:e1:27:d0:2f:81:22:0a:a0:97:93:d7: 8b:5a:1d:65:fb:ee:78:a4:a0:d5:dc:29:1e:c6:98: ec:0d:fd:ce:52:79:b7:4e:4d:f0:24:0e:42:89:4c: 04:c3:d6:13:19:80:db:a9:19:57:2f:71:37:6e:0a: 9e:7e:bb:33:11:26:91:e8:66:db:cb:c1:87:29:e9: 3d:7b:2b:f0:fe:71:65:b4:62:ec:5f:cd:2c:ad:7c: 72:3d:ef:42:f6:6e:ba:9c:51:af:61:14:9a:10:78: c3:99:f1:c2:b5:f3:db:a1:f5:b3:4e:a5:c0:0a:2e: b2:88:d2:9c:3a:6f:10:bb:0b:9b:54:95:c7:4d:06: 80:ee:65:9b:60:47:2d:99:28:42:22:9a:19:59:3d: 53:c2:57:f6:c7:c7:1c:a3:06:07:0e:3c:9c:66:1a: 57:55:c3:47:94:9b:13:cd:e2:35:e2:5d:13:95:e3: ac:86:db:05:65:8f:ec:47:56:f2:31:4b:12:88:f1: 4d:af:ee:b7:f1:da:b9:cc:00:4c:b3:d2:ea:a4:c7: 27:29:0f:1b:85:52:d4:71:4d:d8:c8:7c:44:13:15: 5f:5e:69:2d:a8:5b:d1:08:88:f2:03:5e:7f:97:9e: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6E:60:EB:CD:90:13:4F:4D:FC:EA:76:77:AE:AF:33:19:DC:41:EA X509v3 Authority Key Identifier: keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:94:b3:34:74:26:ca:7a:b1:c1:44:77:8a:b4:41:98:02:0c: da:5b:71:f8:46:8b:9e:83:dc:fe:d6:7a:02:04:8d:2f:21:29: 84:4c:00:e9:e8:b8:0e:29:e0:2c:01:a7:33:4c:fd:d4:ba:e3: e0:85:e1:05:80:f5:63:87:85:67:45:3f:45:8e:0f:42:ad:86: e8:a7:69:fd:76:73:48:03:e3:5b:a4:55:82:69:67:f0:f5:19: d6:70:f0:a2:8b:09:ba:db:b6:f3:a2:2e:4e:57:b3:ba:1b:f4: 61:bb:90:de:07:78:4f:ae:cd:a7:69:25:fe:6e:bc:8c:03:03: 5d:9e:44:d7:9a:e3:b3:9c:37:22:b2:04:91:34:72:34:80:48: 6d:2e:8e:17:fa:28:05:c3:94:3b:9c:0d:93:dc:29:0b:70:cb: 23:30:2d:52:1e:a4:6b:7a:6c:a4:c0:18:12:30:d5:36:e9:6c: 60:28:7f:b2:dd:78:b6:6e:04:11:cd:ea:c8:01:da:43:0d:41: 6c:e3:a5:cf:ba:55:9b:6d:fa:c6:c4:c9:c5:37:d2:ec:77:2a: 58:e6:6d:06:09:4c:2d:bb:3d:ca:4a:a6:f8:a2:2a:b6:13:55: 61:1f:b2:19:ec:f7:ce:0a:c1:37:75:fd:ba:72:82:58:ec:09: 4e:df:17:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwG4xoBLL1FAuhvLK0QNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm NThiZTUwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD Eyg3ZDZlNjBlYmNkOTAxMzRmNGRmY2VhNzY3N2FlYWYzMzE5ZGM0MWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVnQTkwcsMsvEo55oKBV4NW14SfQ L4EiCqCXk9eLWh1l++54pKDV3CkexpjsDf3OUnm3Tk3wJA5CiUwEw9YTGYDbqRlX L3E3bgqefrszESaR6Gbby8GHKek9eyvw/nFltGLsX80srXxyPe9C9m66nFGvYRSa EHjDmfHCtfPbofWzTqXACi6yiNKcOm8QuwubVJXHTQaA7mWbYEctmShCIpoZWT1T wlf2x8ccowYHDjycZhpXVcNHlJsTzeI14l0TleOshtsFZY/sR1byMUsSiPFNr+63 8dq5zABMs9LqpMcnKQ8bhVLUcU3YyHxEExVfXmktqFvRCIjyA15/l56vswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1uYOvNkBNPTfzqdneurzMZ3EHqMB8GA1UdIwQY MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt YWIxYTg3ZWNkZjFiLzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpSzNHQm ynqxwUR3irRBmAIM2ltx+EaLnoPc/tZ6AgSNLyEphEwA6ei4DingLAGnM0z91Lrj 4IXhBYD1Y4eFZ0U/RY4PQq2G6Kdp/XZzSAPjW6RVgmln8PUZ1nDwoosJutu286Iu Tlezuhv0YbuQ3gd4T67Np2kl/m68jAMDXZ5E15rjs5w3IrIEkTRyNIBIbS6OF/oo BcOUO5wNk9wpC3DLIzAtUh6ka3pspMAYEjDVNulsYCh/st14tm4EEc3qyAHaQw1B bOOlz7pVm236xsTJxTfS7HcqWOZtBglMLbs9ykqm+KIqthNVYR+yGez3zgrBN3X9 unKCWOwJTt8XTw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:02 2025 by rpki-client