This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json) Hash identifier: wAqDnaJ12ZvKkjO399KBEzZdh6yIAXgvkXqWOAlEeCY= Subject key identifier: 6A:CE:B1:4C:D6:65:3F:47:B3:B8:52:12:DC:70:B1:0F:F7:B3:FD:32 Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26 Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226 Certificate serial: 019AF276ED96FE9AEC6562E98F843963F9F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=) 2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: IlWqTI3fTPxUg75cpVh7QQp4I6nscPnmkoT9L1liMfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ed:96:fe:9a:ec:65:62:e9:8f:84:39:63:f9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=6aceb14cd6653f47b3b85212dc70b10ff7b3fd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:b2:bb:db:34:1e:d8:05:ed:f4:fa:cc:5b: 91:35:69:2e:94:3c:08:4b:6f:54:8b:f1:fc:8f:50: 18:25:46:6f:f4:7d:b7:fb:83:bf:f4:7f:33:7b:48: 6e:77:df:46:3c:86:fb:77:1f:f5:1f:06:b0:ad:dd: b8:19:1e:03:30:a1:80:0d:2f:df:63:15:0d:e6:fe: 05:75:ee:c7:a0:58:ba:26:bb:ae:45:a6:de:0f:39: cc:61:74:a6:01:ad:79:0f:ee:ca:7b:3e:27:93:dd: 95:47:1b:75:0c:9f:db:90:c4:4e:06:e7:0e:bf:79: 9a:54:3f:bd:f3:00:42:85:fd:5e:83:95:ae:2b:61: 40:f5:96:6a:fd:ea:ac:92:ea:be:59:49:e5:a1:fb: d4:11:a3:b2:a2:a9:e4:98:11:33:3b:22:e2:c8:85: 0d:5a:6a:88:d6:14:9c:23:cf:f7:53:26:fe:52:54: 12:01:71:e0:43:7a:77:53:5a:90:db:85:d3:43:c9: 8b:72:ba:97:71:31:eb:e9:67:9e:84:3e:51:a0:b8: 44:a4:d6:96:4c:65:71:16:a9:0f:e2:37:22:54:51: 30:5a:72:d9:9e:97:9e:03:1e:d6:05:1b:16:19:d7: cd:31:4b:3d:af:19:2a:f2:36:1c:f3:53:88:25:64: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CE:B1:4C:D6:65:3F:47:B3:B8:52:12:DC:70:B1:0F:F7:B3:FD:32 X509v3 Authority Key Identifier: keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7f:11:b1:27:a7:05:e1:e4:22:d5:0b:3d:10:42:45:20:97: f4:2d:24:44:a7:70:15:84:a8:6f:79:da:2a:53:ed:2d:39:0a: 3a:70:b1:1a:2e:cf:8e:72:50:60:12:4d:ef:08:56:20:71:e0: 10:21:b3:1d:cf:5c:a0:c7:1b:d4:50:80:5f:f8:c5:86:0b:c9: 7b:85:a2:eb:9a:31:72:00:ca:62:16:85:89:57:da:87:8c:87: c0:b9:d3:d4:17:f7:ad:c1:0c:f4:2f:0e:e8:23:17:26:f8:e0: c4:cb:e1:95:cf:63:88:b0:7a:c3:1e:85:7a:27:c4:fb:34:76: 30:8f:24:70:d8:c1:d9:af:79:2d:19:50:01:0e:90:ec:13:f0: 78:c1:9c:7b:f1:89:b7:7a:29:e3:af:22:17:ec:75:8e:c2:03: 04:6c:f7:57:96:1f:fe:a5:8e:b4:3f:dd:3f:3d:11:74:82:3b: 5b:26:d0:95:48:41:97:e4:08:a6:83:fd:ca:78:e6:f1:8e:87: 31:46:da:75:55:14:f1:12:95:79:e1:46:9e:76:0f:34:f8:58: fd:08:ad:1b:f8:51:c5:80:cf:2e:a2:c9:90:83:c1:6d:df:85: 18:e8:16:75:24:b0:03:0d:d7:87:a0:55:6d:c8:78:74:e4:23: 08:01:87:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydu2W/prsZWLpj4Q5Y/n2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy ZjEyMjYwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD Eyg2YWNlYjE0Y2Q2NjUzZjQ3YjNiODUyMTJkYzcwYjEwZmY3YjNmZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveqyu9s0HtgF7fT6zFuRNWkulDwI S29Ui/H8j1AYJUZv9H23+4O/9H8ze0hud99GPIb7dx/1Hwawrd24GR4DMKGADS/f YxUN5v4Fde7HoFi6JruuRabeDznMYXSmAa15D+7Kez4nk92VRxt1DJ/bkMROBucO v3maVD+98wBChf1eg5WuK2FA9ZZq/eqskuq+WUnlofvUEaOyoqnkmBEzOyLiyIUN WmqI1hScI8/3Uyb+UlQSAXHgQ3p3U1qQ24XTQ8mLcrqXcTHr6WeehD5RoLhEpNaW TGVxFqkP4jciVFEwWnLZnpeeAx7WBRsWGdfNMUs9rxkq8jYc81OIJWRrewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrOsUzWZT9Hs7hSEtxwsQ/3s/0yMB8GA1UdIwQY MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW38RsSen BeHkItULPRBCRSCX9C0kRKdwFYSob3naKlPtLTkKOnCxGi7PjnJQYBJN7whWIHHg ECGzHc9coMcb1FCAX/jFhgvJe4Wi65oxcgDKYhaFiVfah4yHwLnT1Bf3rcEM9C8O 6CMXJvjgxMvhlc9jiLB6wx6FeifE+zR2MI8kcNjB2a95LRlQAQ6Q7BPweMGce/GJ t3op468iF+x1jsIDBGz3V5Yf/qWOtD/dPz0RdII7WybQlUhBl+QIpoP9ynjm8Y6H MUbadVUU8RKVeeFGnnYPNPhY/QitG/hRxYDPLqLJkIPBbd+FGOgWdSSwAw3Xh6BV bch4dOQjCAGH8w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:35 2025 by rpki-client