This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json) Hash identifier: vaDDTv+KMBRbZq4RF7DgTkx6zE7248rCULAGD5IIAm4= Subject key identifier: 54:D1:DE:65:2A:2A:43:8B:82:2A:60:EE:71:6E:0B:B8:C7:D5:64:4B Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6 Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6 Certificate serial: 019AF0BEFA07AAE35A25DDE617F825A51E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft Manifest number: 048F Signing time: Fri 05 Dec 2025 23:00:38 +0000 Manifest this update: Fri 05 Dec 2025 23:00:38 +0000 Manifest next update: Sat 06 Dec 2025 23:00:38 +0000 Files and hashes: 1: OfdMOcUbbc7oEojb1zo08qkIRuQ.roa (hash: IicrU+y2VcBYbd4QyyTDfZZRjrYA59p1rvePkvFgFRg=) 2: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: LJ0rIkUgkCEWJk2/LQ/s402ikXrnEJmZTUpkqwmBaE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:fa:07:aa:e3:5a:25:dd:e6:17:f8:25:a5:1e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6 Validity Not Before: Dec 5 23:00:38 2025 GMT Not After : Dec 6 23:00:38 2025 GMT Subject: CN=54d1de652a2a438b822a60ee716e0bb8c7d5644b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:ea:bb:4d:67:d5:63:ce:31:90:ec:e1:c4: b2:64:d9:c8:f4:97:1b:70:43:3c:c3:b8:02:1b:79: 2a:c9:00:90:1b:9a:1f:38:16:a8:26:14:38:28:d2: a7:72:c4:b5:31:bd:2a:3f:5a:41:cd:2f:a9:ba:83: 19:6d:c9:c0:e6:60:91:49:c9:47:7b:38:db:c9:47: d0:d1:0d:67:a8:f2:51:b0:3e:f9:30:f3:34:70:1e: 9a:01:dd:f1:95:af:68:17:4e:eb:7e:bd:6e:d8:ad: 26:63:71:e9:37:6f:fa:42:4d:ba:c0:72:f1:1e:26: ef:6a:46:0a:46:ba:a5:c6:d1:60:99:5e:78:71:d3: fc:2b:4b:1a:49:5a:a3:54:1e:5a:9d:f8:13:20:d9: a2:36:4d:76:78:3f:d8:12:b2:18:e0:a5:37:62:0c: d6:4d:5e:13:ed:d5:d1:05:9b:25:6c:e3:12:f4:83: 90:f0:40:a7:8b:66:71:54:9a:e3:1e:3d:5d:e1:0e: 74:19:95:60:00:e0:5e:56:53:56:5f:0d:ae:e1:6f: 26:0a:44:da:3d:f0:77:29:f8:aa:23:2e:ca:ec:49: f1:e8:d2:34:0e:40:eb:47:ec:5a:c8:3a:2d:52:94: a0:76:c7:0c:07:91:57:ac:62:f5:a0:f5:3a:90:83: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D1:DE:65:2A:2A:43:8B:82:2A:60:EE:71:6E:0B:B8:C7:D5:64:4B X509v3 Authority Key Identifier: keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:fa:fa:a6:cb:75:a8:0a:24:7c:bb:bb:85:da:d6:46:8d:75: cb:ce:fd:78:52:0b:81:1d:9b:06:2e:45:97:13:91:49:79:88: 4d:d1:4a:cf:65:d9:b9:e9:68:3c:7f:26:66:12:1a:58:fa:de: 58:76:13:3d:0d:09:7c:a6:ab:5f:47:1b:ea:26:c8:3c:58:e8: 18:6b:c4:fd:e3:92:6d:d1:f9:16:9e:9f:af:45:99:27:c8:30: 54:08:19:58:23:f9:a9:78:1e:c8:86:54:78:41:ad:26:db:f5: b9:81:ae:88:f7:20:fa:50:a7:a0:ab:7a:15:80:0f:5d:69:c0: 9e:a6:11:27:0a:78:0b:a6:3f:47:1c:6b:c1:9a:e7:4e:90:92: 7d:a3:6e:30:49:07:7b:da:7b:43:35:f4:ff:42:60:70:47:70: 3a:cd:7f:ed:36:23:62:f3:59:25:c2:f3:1e:a7:15:79:4b:f4: 5e:51:a3:6e:9c:f4:1b:9d:72:0a:b0:31:21:62:1e:95:06:07: 95:c5:4a:ee:ab:7a:a7:4b:8e:b4:d9:31:36:8e:95:30:5a:b8: 31:d0:b9:10:01:63:8a:4f:45:15:a1:a4:db:14:02:9e:20:72: 2a:61:63:ba:14:f7:a3:e2:5d:58:36:66:ad:ac:34:71:3e:a5: c8:ca:8d:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvoHquNaJd3mF/glpR4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODdjY2VjNDlhYTVmNjZhYTAyNjQ4ZDkxYjRhMmVlOGZm N2JkZTYwHhcNMjUxMjA1MjMwMDM4WhcNMjUxMjA2MjMwMDM4WjAzMTEwLwYDVQQD Eyg1NGQxZGU2NTJhMmE0MzhiODIyYTYwZWU3MTZlMGJiOGM3ZDU2NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmXqu01n1WPOMZDs4cSyZNnI9Jcb cEM8w7gCG3kqyQCQG5ofOBaoJhQ4KNKncsS1Mb0qP1pBzS+puoMZbcnA5mCRSclH ezjbyUfQ0Q1nqPJRsD75MPM0cB6aAd3xla9oF07rfr1u2K0mY3HpN2/6Qk26wHLx HibvakYKRrqlxtFgmV54cdP8K0saSVqjVB5anfgTINmiNk12eD/YErIY4KU3YgzW TV4T7dXRBZslbOMS9IOQ8ECni2ZxVJrjHj1d4Q50GZVgAOBeVlNWXw2u4W8mCkTa PfB3KfiqIy7K7Enx6NI0DkDrR+xayDotUpSgdscMB5FXrGL1oPU6kIMcUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTR3mUqKkOLgipg7nFuC7jH1WRLMB8GA1UdIwQY MBaAFLGHzOxJql9mqgJkjZG0ou6P973mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYt MTdmNGUwZjZjZGViLzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYtMTdmNGUwZjZjZGVi LzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/r6pst1 qAokfLu7hdrWRo11y879eFILgR2bBi5FlxORSXmITdFKz2XZueloPH8mZhIaWPre WHYTPQ0JfKarX0cb6ibIPFjoGGvE/eOSbdH5Fp6fr0WZJ8gwVAgZWCP5qXgeyIZU eEGtJtv1uYGuiPcg+lCnoKt6FYAPXWnAnqYRJwp4C6Y/RxxrwZrnTpCSfaNuMEkH e9p7QzX0/0JgcEdwOs1/7TYjYvNZJcLzHqcVeUv0XlGjbpz0G51yCrAxIWIelQYH lcVK7qt6p0uOtNkxNo6VMFq4MdC5EAFjik9FFaGk2xQCniByKmFjuhT3o+JdWDZm raw0cT6lyMqNBA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:54 2025 by rpki-client