This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json) Hash identifier: KXul8viZDrghvOYqb/exh9PrOTEf6sK3s3o2ePLrfow= Subject key identifier: 7B:F7:0B:DF:40:8F:C1:AD:25:B2:FA:DE:D2:9C:56:E4:21:24:C0:B3 Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Certificate serial: 019AF31C5DDE0ECAF815A45B53E4937F9870 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft Manifest number: 14F3 Signing time: Sat 06 Dec 2025 10:01:53 +0000 Manifest this update: Sat 06 Dec 2025 10:01:53 +0000 Manifest next update: Sun 07 Dec 2025 10:01:53 +0000 Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=) 2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: tkdblyZjk2NBvmqbE3km9vNdnYJ2dYu7KgHi11gXBUM=) 3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5d:de:0e:ca:f8:15:a4:5b:53:e4:93:7f:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496 Validity Not Before: Dec 6 10:01:53 2025 GMT Not After : Dec 7 10:01:53 2025 GMT Subject: CN=7bf70bdf408fc1ad25b2faded29c56e42124c0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:70:a7:27:27:2e:8e:86:38:aa:85:08:4e: 01:1c:9d:8f:a8:7e:62:2e:27:aa:22:e1:18:ce:cd: d7:3a:3f:fe:e3:51:c8:d9:0b:ae:d4:cb:65:73:8d: a3:32:d4:f9:a6:55:ed:4b:41:16:d8:74:51:1d:83: 6a:a6:36:db:79:9f:6c:9e:b4:79:19:9f:d6:33:a7: b2:4a:04:c7:37:57:71:ba:df:7d:ce:c4:25:f4:72: c0:b6:9e:b8:81:aa:e9:4c:18:5f:8c:ad:84:68:15: f0:59:2e:df:e0:4d:5a:e1:9a:3f:09:f2:d7:20:5d: 97:60:3e:81:b7:19:de:16:d3:09:26:4c:34:8a:ea: 95:b2:df:34:5c:56:99:58:ed:c4:3e:75:c2:21:b4: a8:e3:04:bd:d8:07:27:e7:32:6f:4c:26:ea:fb:09: 7a:08:9f:72:ad:ae:8f:b0:a3:fe:f3:22:04:53:da: 2f:fa:be:a1:76:0a:a5:84:b2:14:22:9e:4b:8d:a7: bb:4f:fa:37:ee:35:0e:a5:a3:53:15:1a:c3:4c:2c: 01:41:76:d7:3e:f7:b9:ec:83:91:87:c9:08:c5:3a: 54:40:73:25:4c:84:01:11:01:24:39:55:30:71:a6: d5:27:49:26:ea:2e:ce:11:07:14:d4:74:93:ed:4e: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F7:0B:DF:40:8F:C1:AD:25:B2:FA:DE:D2:9C:56:E4:21:24:C0:B3 X509v3 Authority Key Identifier: keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f5:b1:bb:53:53:6c:f8:18:17:80:ae:32:d3:ef:65:ed:d8: 40:16:1b:d9:a6:64:c1:64:c7:ee:d4:f4:99:f3:13:52:62:cb: 7c:e5:e2:80:d6:ae:f7:aa:d4:84:76:f2:e8:57:13:1a:9c:b8: 01:72:be:66:85:f9:ca:d0:6c:09:af:71:f8:e8:80:50:f1:2f: 42:91:6c:cd:be:02:bd:ea:94:09:68:19:63:a5:c9:90:de:b4: 1a:6d:9d:47:a5:fe:44:71:fe:57:ec:bd:34:df:b8:e6:06:c5: a4:92:d9:8f:95:69:b6:97:27:11:93:b2:23:3f:a6:4c:e5:09: aa:ad:11:b3:eb:22:a0:e5:ed:71:5b:f0:3a:5b:7d:7b:21:ed: 80:6b:5b:f8:74:91:37:ef:68:0c:5e:fd:e7:70:6e:a4:f5:a3: 37:43:71:03:aa:c9:a5:47:06:da:22:d1:3c:b7:07:d7:67:bc: 90:fe:fe:8c:5e:5f:b1:fe:f4:12:96:3c:f6:a0:5e:dc:e6:32: d4:d9:de:f7:a2:67:72:ae:c5:73:df:40:a4:2c:e2:1b:95:76: 90:7d:9d:e5:78:97:66:6a:29:4d:c1:ad:8c:2a:6d:65:86:2b: 84:53:7b:3e:68:63:92:53:30:58:68:0c:8d:95:f4:5b:3f:7f: 0d:42:4a:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHF3eDsr4FaRbU+STf5hwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz NzI0OTYwHhcNMjUxMjA2MTAwMTUzWhcNMjUxMjA3MTAwMTUzWjAzMTEwLwYDVQQD Eyg3YmY3MGJkZjQwOGZjMWFkMjViMmZhZGVkMjljNTZlNDIxMjRjMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmItwpycnLo6GOKqFCE4BHJ2PqH5i LieqIuEYzs3XOj/+41HI2Quu1Mtlc42jMtT5plXtS0EW2HRRHYNqpjbbeZ9snrR5 GZ/WM6eySgTHN1dxut99zsQl9HLAtp64garpTBhfjK2EaBXwWS7f4E1a4Zo/CfLX IF2XYD6BtxneFtMJJkw0iuqVst80XFaZWO3EPnXCIbSo4wS92Acn5zJvTCbq+wl6 CJ9yra6PsKP+8yIEU9ov+r6hdgqlhLIUIp5Ljae7T/o37jUOpaNTFRrDTCwBQXbX Pve57IORh8kIxTpUQHMlTIQBEQEkOVUwcabVJ0km6i7OEQcU1HST7U6GLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv3C99Aj8GtJbL63tKcVuQhJMCzMB8GA1UdIwQY MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt OThmNzQ1NGJhNmNlLzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/Wxu1NT bPgYF4CuMtPvZe3YQBYb2aZkwWTH7tT0mfMTUmLLfOXigNau96rUhHby6FcTGpy4 AXK+ZoX5ytBsCa9x+OiAUPEvQpFszb4CveqUCWgZY6XJkN60Gm2dR6X+RHH+V+y9 NN+45gbFpJLZj5VptpcnEZOyIz+mTOUJqq0Rs+sioOXtcVvwOlt9eyHtgGtb+HSR N+9oDF7953BupPWjN0NxA6rJpUcG2iLRPLcH12e8kP7+jF5fsf70EpY89qBe3OYy 1Nne96Jncq7Fc99ApCziG5V2kH2d5XiXZmopTcGtjCptZYYrhFN7PmhjklMwWGgM jZX0Wz9/DUJKfg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:00:38 2025 by rpki-client