This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft File: sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json) Hash identifier: wwchu9Gb5rhsJDMBGbpoL/nzx8I0LUWacExXrny/OnE= Subject key identifier: A8:C9:C0:C1:E3:F0:0F:F7:A5:59:C4:AF:F7:DD:15:26:17:81:76:A5 Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF Certificate issuer: /CN=b154b4611b8ce8287275bc47a69afa378b4140bf Certificate serial: 019B4091EC8E1E3047BD50CD0DDDB6E9D50B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft Manifest number: 040C Signing time: Sun 21 Dec 2025 11:01:03 +0000 Manifest this update: Sun 21 Dec 2025 11:01:03 +0000 Manifest next update: Mon 22 Dec 2025 11:01:03 +0000 Files and hashes: 1: _cD4yVpG6lnwIeREBiUBwAEeAKA.roa (hash: jnUyAI5YI7WapRKSFkmTN6SUzj6iHT0vp3PMP0QrWlQ=) 2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: MkzRptMrwDkRk5Ny7LyF19MgCx8C7wyLxeI03l79IEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:ec:8e:1e:30:47:bd:50:cd:0d:dd:b6:e9:d5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf Validity Not Before: Dec 21 11:01:03 2025 GMT Not After : Dec 22 11:01:03 2025 GMT Subject: CN=a8c9c0c1e3f00ff7a559c4aff7dd1526178176a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:a7:02:8a:14:56:36:c6:6e:1d:a5:4d:a0: 38:16:4c:32:83:5a:ac:da:22:fa:05:6e:6f:5c:10: c0:f1:8a:82:7f:e8:66:97:aa:1c:44:4e:ba:39:b1: 0b:de:e5:6f:22:ae:4f:a8:d8:ff:a1:10:4f:36:67: 70:1f:f1:70:b5:bc:7c:5b:9b:49:18:b2:c4:4f:90: f5:f6:03:fe:05:2e:b1:ae:bb:e4:22:95:f8:6a:6e: c3:69:94:fd:30:b1:fb:df:43:c9:4c:bc:50:96:bd: 5f:7d:02:2d:ca:72:04:cc:8a:a7:b8:3f:d1:8d:36: f1:72:d6:ae:2e:21:74:24:a5:0d:6c:12:ff:1e:68: 0b:b3:8f:77:22:1c:1d:b6:69:df:7f:b9:ed:81:97: b4:a4:7e:66:94:c1:11:b5:c3:6f:18:88:e2:55:48: 5d:1b:bf:7a:f4:cb:4a:4a:31:e1:31:92:a8:63:91: 9d:cc:f3:7f:31:b6:fc:5d:4a:45:57:e3:0a:a9:e6: 71:7a:4c:f7:86:61:9c:c4:18:91:01:4d:d4:de:f1: f3:4f:60:74:a0:18:20:de:86:cf:49:25:24:8b:e2: 92:54:05:90:38:a7:ad:6d:36:82:af:2f:88:1e:f9: 6a:04:ed:5f:d0:8e:7a:98:49:e1:6a:58:8d:d9:31: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C9:C0:C1:E3:F0:0F:F7:A5:59:C4:AF:F7:DD:15:26:17:81:76:A5 X509v3 Authority Key Identifier: keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:25:55:ea:54:34:57:00:3f:e5:6f:7e:d2:40:52:f9:a1:10: 70:f2:6d:78:0f:5c:ce:a0:bc:ca:71:80:fa:5c:e7:f9:a1:f2: 0e:02:84:04:2c:1c:0f:49:5e:b4:eb:e9:cd:25:7e:d7:10:32: 7b:90:10:da:f1:99:fc:0e:6b:80:00:fd:1d:52:c7:ec:a8:04: c1:bd:57:46:0e:08:1c:e8:62:8d:e9:b0:5f:74:5f:c9:69:4e: f2:7b:0f:3b:85:ee:6e:6e:06:c2:8a:fc:46:21:3b:6e:60:2f: 43:24:74:d6:12:bb:e4:04:ac:45:40:50:51:40:67:1d:76:22: 87:6d:dc:ee:15:17:cc:21:27:95:6a:41:ff:25:48:2f:c6:2e: 01:15:f9:ce:80:a6:17:bd:e0:1d:89:48:d1:4a:37:8d:64:7e: 64:41:14:69:95:55:cf:85:8e:72:db:ca:fb:56:eb:c7:e9:41: 79:0d:ca:37:56:8e:a2:f0:ac:c9:f5:02:a8:47:7b:b2:72:4a: 45:f9:89:7e:a9:d8:20:7f:8e:89:c2:01:05:e7:fb:21:10:2b: 27:ad:65:3a:34:6a:30:37:90:8e:f6:1f:da:ba:dd:27:46:8a: d9:05:d4:cc:36:39:0e:46:5d:16:fc:43:fe:9d:05:ab:1c:30: 20:5a:2d:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkeyOHjBHvVDNDd226dULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTRiNDYxMWI4Y2U4Mjg3Mjc1YmM0N2E2OWFmYTM3OGI0 MTQwYmYwHhcNMjUxMjIxMTEwMTAzWhcNMjUxMjIyMTEwMTAzWjAzMTEwLwYDVQQD EyhhOGM5YzBjMWUzZjAwZmY3YTU1OWM0YWZmN2RkMTUyNjE3ODE3NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsOnAooUVjbGbh2lTaA4Fkwyg1qs 2iL6BW5vXBDA8YqCf+hml6ocRE66ObEL3uVvIq5PqNj/oRBPNmdwH/Fwtbx8W5tJ GLLET5D19gP+BS6xrrvkIpX4am7DaZT9MLH730PJTLxQlr1ffQItynIEzIqnuD/R jTbxctauLiF0JKUNbBL/HmgLs493Ihwdtmnff7ntgZe0pH5mlMERtcNvGIjiVUhd G7969MtKSjHhMZKoY5GdzPN/Mbb8XUpFV+MKqeZxekz3hmGcxBiRAU3U3vHzT2B0 oBgg3obPSSUki+KSVAWQOKetbTaCry+IHvlqBO1f0I56mEnhaliN2TE+rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjJwMHj8A/3pVnEr/fdFSYXgXalMB8GA1UdIwQY MBaAFLFUtGEbjOgocnW8R6aa+jeLQUC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZTMFlSdU02Q2h5ZGJ4SHBwcjZONHRCUUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iZjJjMjUtNjkyOC00YmNiLTg0ZmIt NGIxMjQ3NTg1MWI4LzEvc1ZTMFlSdU02Q2h5ZGJ4SHBwcjZONHRCUUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9iZjJjMjUtNjkyOC00YmNiLTg0ZmItNGIxMjQ3NTg1MWI4 LzEvc1ZTMFlSdU02Q2h5ZGJ4SHBwcjZONHRCUUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSVV6lQ0 VwA/5W9+0kBS+aEQcPJteA9czqC8ynGA+lzn+aHyDgKEBCwcD0letOvpzSV+1xAy e5AQ2vGZ/A5rgAD9HVLH7KgEwb1XRg4IHOhijemwX3RfyWlO8nsPO4Xubm4Gwor8 RiE7bmAvQyR01hK75ASsRUBQUUBnHXYih23c7hUXzCEnlWpB/yVIL8YuARX5zoCm F73gHYlI0Uo3jWR+ZEEUaZVVz4WOctvK+1brx+lBeQ3KN1aOovCsyfUCqEd7snJK RfmJfqnYIH+OicIBBef7IRArJ61lOjRqMDeQjvYf2rrdJ0aK2QXUzDY5DkZdFvxD /p0FqxwwIFot1w== -----END CERTIFICATE-----Generated at Sun Dec 21 15:46:08 2025 by rpki-client