This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft File: sV9qUOakiH4XxTsPwQ5LfhST7rU.mft (raw, json) Hash identifier: GrXZvzmK3CoXT83kc9PWzcN6ALOlqbVEHkiHhj+dLBs= Subject key identifier: C0:DF:3B:76:C6:B3:3C:49:4B:79:57:C3:3E:A0:AA:09:3A:46:0B:E7 Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 Certificate issuer: /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Certificate serial: 019AF1D2287B85CA2CD4DEB256874AAC730A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft Manifest number: 1349 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: 3xl9gz2v2fThQZEEZ4zdC7JoKs4.roa (hash: Jx3hDEYSWvyg0teai/myn3+xGqI2AFge39hcH66bs6U=) 2: sV9qUOakiH4XxTsPwQ5LfhST7rU.crl (hash: DUup1M6J8/ykr0C9jemhjQL24YuhrxAxDTCuVVDNgIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:28:7b:85:ca:2c:d4:de:b2:56:87:4a:ac:73:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=c0df3b76c6b33c494b7957c33ea0aa093a460be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:0c:b1:78:87:81:ce:2f:08:c7:6b:66:04: f9:29:98:99:df:97:c8:d4:b5:03:32:2c:b0:bc:93: 97:3e:0c:d1:1c:c5:d6:7c:e1:15:02:0a:b4:cc:c7: ca:b8:ea:db:fa:c2:80:7c:83:ff:0b:6e:e6:13:a5: e5:c2:d2:35:cf:6c:a6:ec:5c:ad:4e:29:cb:0c:31: 16:8b:66:14:62:db:39:77:9b:ec:c2:19:65:31:ba: 47:90:28:1e:b3:c9:13:2e:55:d1:e4:74:6d:33:04: 0b:07:f5:d8:40:b1:14:b8:4d:64:ef:bd:9d:5b:bf: 53:c0:86:d0:46:1a:23:ec:b6:c6:79:24:e3:5b:d5: 8d:29:b0:c9:91:24:a5:ee:13:72:72:79:a2:f5:d7: 01:03:74:19:ce:2c:e6:de:ad:6b:2a:80:ba:27:2f: aa:22:34:7f:5b:80:2d:69:d2:8e:92:9c:19:66:46: 24:0d:28:32:9c:56:4b:57:e8:54:aa:6a:a2:88:dc: 20:45:3b:d0:c0:2f:99:9a:81:6a:f7:06:3c:32:40: 18:5b:66:e9:ac:71:33:de:c3:4c:b5:8c:0b:f2:c5: 7c:15:a7:2b:c4:81:6e:9f:fe:47:56:38:65:d4:b3: 31:f7:a3:18:f4:c1:80:75:22:33:2d:a8:24:ff:9d: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DF:3B:76:C6:B3:3C:49:4B:79:57:C3:3E:A0:AA:09:3A:46:0B:E7 X509v3 Authority Key Identifier: keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e8:9f:e9:82:33:1c:03:15:6e:01:ce:94:fe:2f:56:88:67: 01:c1:19:bb:e1:eb:03:f1:60:7f:df:83:48:28:09:03:e8:ae: da:40:5e:2d:53:8b:d3:e9:8c:e5:6b:93:01:7e:7a:ec:39:27: 2d:a5:75:95:1b:3e:07:fb:37:ba:01:78:23:aa:68:45:64:66: 09:7b:12:06:5a:27:3c:84:c8:2e:b7:8e:61:d0:79:f8:a8:3c: 70:6d:7d:c9:07:76:01:52:1f:20:6f:a3:0f:85:3a:47:58:de: 0d:29:e0:55:fb:8e:a5:31:82:b7:68:2e:68:ff:19:9e:45:83: 57:70:e2:84:e6:6e:7d:a9:cc:92:de:7e:89:4b:1b:5c:21:8a: 7f:85:b9:a8:77:d2:3d:89:71:cb:2b:d1:c9:96:d6:25:f0:af: 40:a9:2c:90:86:0e:30:0d:70:73:eb:c3:15:eb:bf:4a:c1:e7: c4:3f:c4:27:9d:62:63:98:7a:72:8e:46:e4:be:4f:50:ad:13: 9f:01:57:42:16:5f:47:6c:85:cd:db:5b:7b:71:92:98:8e:95: 3d:92:94:ee:cb:72:56:2b:d7:08:9e:df:35:1b:cb:18:6a:a7: 58:49:1f:e1:28:e3:8b:b9:55:96:fa:ec:38:56:bb:9c:9d:08: e5:bc:e7:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ih7hcos1N6yVodKrHMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWY2YTUwZTZhNDg4N2UxN2M1M2IwZmMxMGU0YjdlMTQ5 M2VlYjUwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EyhjMGRmM2I3NmM2YjMzYzQ5NGI3OTU3YzMzZWEwYWEwOTNhNDYwYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgEMsXiHgc4vCMdrZgT5KZiZ35fI 1LUDMiywvJOXPgzRHMXWfOEVAgq0zMfKuOrb+sKAfIP/C27mE6XlwtI1z2ym7Fyt TinLDDEWi2YUYts5d5vswhllMbpHkCges8kTLlXR5HRtMwQLB/XYQLEUuE1k772d W79TwIbQRhoj7LbGeSTjW9WNKbDJkSSl7hNycnmi9dcBA3QZzizm3q1rKoC6Jy+q IjR/W4AtadKOkpwZZkYkDSgynFZLV+hUqmqiiNwgRTvQwC+ZmoFq9wY8MkAYW2bp rHEz3sNMtYwL8sV8FacrxIFun/5HVjhl1LMx96MY9MGAdSIzLagk/50RwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDfO3bGszxJS3lXwz6gqgk6RgvnMB8GA1UdIwQY MBaAFLFfalDmpIh+F8U7D8EOS34Uk+61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2Ut Mjk4NDJiYzI3MTQ1LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2UtMjk4NDJiYzI3MTQ1 LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuif6YIz HAMVbgHOlP4vVohnAcEZu+HrA/Fgf9+DSCgJA+iu2kBeLVOL0+mM5WuTAX567Dkn LaV1lRs+B/s3ugF4I6poRWRmCXsSBlonPITILreOYdB5+Kg8cG19yQd2AVIfIG+j D4U6R1jeDSngVfuOpTGCt2guaP8ZnkWDV3DihOZufanMkt5+iUsbXCGKf4W5qHfS PYlxyyvRyZbWJfCvQKkskIYOMA1wc+vDFeu/SsHnxD/EJ51iY5h6co5G5L5PUK0T nwFXQhZfR2yFzdtbe3GSmI6VPZKU7styVivXCJ7fNRvLGGqnWEkf4Sjji7lVlvrs OFa7nJ0I5bznvA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:44 2025 by rpki-client