This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json) Hash identifier: fUoUUCdY7CZ7wGYsI7HXu00iDA7Dt45CrmbfzJdW2Sg= Subject key identifier: 93:17:F5:CB:FF:8F:29:B1:29:D4:01:BC:90:56:70:4F:9B:C7:92:80 Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7 Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7 Certificate serial: 019AF1D1D34904630E7CACC5620E6D0B764A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: AyQiICL01HgsmeNNpkSurXY1OFDlLfDSaQzx+B22gdw=) 2: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (hash: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d3:49:04:63:0e:7c:ac:c5:62:0e:6d:0b:76:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=9317f5cbff8f29b129d401bc9056704f9bc79280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:9d:1d:8a:bd:e5:88:14:9b:f9:e2:2d:11: 38:34:b5:10:f6:44:e4:37:bd:cb:70:14:9f:43:83: b1:9c:fb:ff:a9:32:cf:02:72:6e:9e:ba:da:cb:e3: ce:da:18:e3:34:c3:38:9d:ad:2e:51:0f:10:0f:1e: a8:8d:16:44:df:bd:fc:af:76:3c:22:b5:0d:c1:b0: 24:6c:09:dc:be:de:a0:d0:a5:31:0e:ad:93:fc:9e: 2c:0a:eb:e4:16:1f:6c:85:35:74:5f:ca:3a:3c:3c: 04:77:5e:c5:11:12:a3:91:3f:f7:73:f0:0e:12:cc: e7:e5:52:0f:c4:db:6e:a6:fc:d0:27:1b:cd:c5:6c: 92:af:c4:e1:f2:c4:e3:e0:72:b1:ff:45:4d:98:35: 97:5f:da:cd:61:ca:a8:22:80:f7:17:92:b9:7b:de: 8e:ef:cf:07:6b:14:6b:7c:8c:1b:cc:ab:a3:b7:f3: 3a:bb:1d:d7:45:93:5c:d0:58:e0:a9:c2:7e:8b:01: 2c:63:4e:04:ba:94:ef:2e:66:15:f6:e8:67:6f:9a: d9:14:66:c6:a3:25:a4:37:13:68:69:1e:2b:cd:94: 50:75:e8:ee:a5:14:2e:b9:38:d0:8e:3c:9b:db:6b: 21:b8:30:18:93:90:c3:ce:c6:0e:ec:af:3e:45:b1: 85:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:17:F5:CB:FF:8F:29:B1:29:D4:01:BC:90:56:70:4F:9B:C7:92:80 X509v3 Authority Key Identifier: keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ba:0f:58:3c:d7:4c:0e:40:0d:c7:0c:86:79:8c:75:3d:96: 9b:fa:23:d4:19:d3:be:db:be:1f:3f:82:2d:e2:7b:53:88:2e: 5a:d5:e6:ae:e3:c9:ac:60:82:52:7b:60:e8:e2:01:e5:a7:7b: 03:67:d7:ad:87:32:cf:9e:b4:df:1a:be:80:a6:bb:43:aa:a7: e7:14:f6:73:15:3b:91:f7:97:58:cf:e6:7a:8c:e8:c3:59:72: 28:15:6b:4e:2e:9b:8f:ec:d4:e4:24:7c:22:34:fe:79:54:24: a7:a3:72:29:b7:b3:d5:de:df:a0:b2:54:a4:f6:5c:d5:18:35: d9:4d:1c:f6:a0:0a:c8:c4:ef:74:06:a8:22:17:b2:0f:69:16: 4b:66:c7:e6:44:ad:4c:09:06:0d:f5:fd:e1:ff:a9:f4:d5:b7: ef:29:56:a0:57:81:32:2c:8b:76:84:de:7f:fc:a9:5e:42:44: 1e:6c:62:90:6b:24:d1:83:1c:c1:2d:41:b1:d1:1f:15:bf:03: af:51:7a:eb:1d:82:da:22:eb:d0:6d:95:81:c8:00:a6:41:01: 62:85:96:cd:fb:da:98:82:40:13:18:3d:23:f5:c1:d4:6a:12: 7c:99:28:38:60:db:55:d8:cd:55:df:93:e8:8e:4f:05:bb:70: 22:76:c3:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dNJBGMOfKzFYg5tC3ZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMjIyZWQxYjhhNTMzODU4ZjQ2NThjNWQyNTM5ZmFmNTJh YmRhYTcwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD Eyg5MzE3ZjVjYmZmOGYyOWIxMjlkNDAxYmM5MDU2NzA0ZjliYzc5MjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eSdHYq95YgUm/niLRE4NLUQ9kTk N73LcBSfQ4OxnPv/qTLPAnJunrray+PO2hjjNMM4na0uUQ8QDx6ojRZE3738r3Y8 IrUNwbAkbAncvt6g0KUxDq2T/J4sCuvkFh9shTV0X8o6PDwEd17FERKjkT/3c/AO Eszn5VIPxNtupvzQJxvNxWySr8Th8sTj4HKx/0VNmDWXX9rNYcqoIoD3F5K5e96O 788HaxRrfIwbzKujt/M6ux3XRZNc0FjgqcJ+iwEsY04EupTvLmYV9uhnb5rZFGbG oyWkNxNoaR4rzZRQdejupRQuuTjQjjyb22shuDAYk5DDzsYO7K8+RbGFGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMX9cv/jymxKdQBvJBWcE+bx5KAMB8GA1UdIwQY MBaAFEoiLtG4pTOFj0ZYxdJTn69Sq9qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUt ODM3ZDAwMzFiM2QxLzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUtODM3ZDAwMzFiM2Qx LzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAProPWDzX TA5ADccMhnmMdT2Wm/oj1BnTvtu+Hz+CLeJ7U4guWtXmruPJrGCCUntg6OIB5ad7 A2fXrYcyz5603xq+gKa7Q6qn5xT2cxU7kfeXWM/meozow1lyKBVrTi6bj+zU5CR8 IjT+eVQkp6NyKbez1d7foLJUpPZc1Rg12U0c9qAKyMTvdAaoIheyD2kWS2bH5kSt TAkGDfX94f+p9NW37ylWoFeBMiyLdoTef/ypXkJEHmxikGsk0YMcwS1BsdEfFb8D r1F66x2C2iLr0G2VgcgApkEBYoWWzfvamIJAExg9I/XB1GoSfJkoOGDbVdjNVd+T 6I5PBbtwInbDcw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:08 2025 by rpki-client