This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json) Hash identifier: FEmlmOWS2KsIno4hwPm6PhrQVhQEXzPcn7XRYhf6BY0= Subject key identifier: 0B:D4:6C:97:A1:15:09:5C:62:F0:0D:9F:04:1F:C1:35:1D:8B:03:AB Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Certificate serial: 019AF1642CC64472B15A25EAAE7E121B8A23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=) 2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: 0VzdTzcU7rLTNVXvl+luKFxkftEyGrsJubvpzOQW/pE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2c:c6:44:72:b1:5a:25:ea:ae:7e:12:1b:8a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=0bd46c97a115095c62f00d9f041fc1351d8b03ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:8e:86:e2:e0:21:a5:14:59:df:6e:96:71: 4b:01:85:6f:ee:88:92:64:5b:f3:84:08:2c:6d:e2: a7:a3:f3:85:f4:cd:a6:9a:1a:93:8d:c3:62:b1:05: 76:e2:be:70:8d:d5:f2:56:5d:ea:29:d4:a4:ad:d3: b2:a1:d9:78:80:1d:b5:5a:97:55:ec:55:82:39:84: 53:e8:1c:91:b7:15:46:0b:c8:50:d2:e3:58:77:68: 76:f4:74:56:17:63:85:a7:fc:2a:fc:09:6d:50:e5: bb:ff:85:66:37:8d:17:c2:0e:1b:ee:c8:10:71:12: ed:83:aa:56:bf:00:1b:07:2a:0f:cb:85:f1:0d:20: c5:a4:28:bf:7a:5b:e5:d9:a5:32:90:6b:84:3c:70: c6:9e:b7:4c:fe:d8:29:53:0b:51:e5:5e:3a:10:d2: f9:7f:a8:21:0f:0e:9c:98:e2:6f:62:02:1e:79:3d: 2c:21:23:50:9a:3a:79:13:98:f2:c7:a7:b6:e7:1d: bd:e6:38:e0:c6:97:57:5d:1c:bf:4c:29:3b:f1:07: f3:78:9d:7f:b5:bf:5f:09:ed:86:84:1c:ec:61:df: 46:63:a2:8d:00:1c:18:7f:0f:46:7d:c5:ac:a9:4c: 49:8d:c6:8e:19:12:19:e1:bf:69:e4:ea:49:53:25: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D4:6C:97:A1:15:09:5C:62:F0:0D:9F:04:1F:C1:35:1D:8B:03:AB X509v3 Authority Key Identifier: keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:cf:9e:be:cb:1b:42:22:2a:5a:8d:7c:1a:d3:4f:ae:46:e0: 58:ed:6d:bc:8a:81:75:d6:b7:2e:e8:cd:a4:1b:b1:98:34:54: 3f:8e:ef:ac:90:a0:64:4b:b7:49:3b:4f:fc:b2:41:b3:20:9a: 25:4a:b0:e5:a4:de:c8:ae:d6:58:f2:f4:94:af:c5:a5:8a:18: cf:ed:c7:e3:b7:2b:36:28:6f:db:50:1a:a5:76:2f:06:23:a7: 05:e0:13:f4:61:b8:d2:3d:01:71:c7:5b:21:39:20:56:91:d3: 5b:e6:5c:6c:1c:ae:7f:97:df:ea:ed:be:e0:89:d8:9a:65:7a: 26:09:de:90:f9:3e:56:26:2d:1e:1c:86:fc:10:7e:23:9c:43: 23:73:12:4c:ad:37:d5:03:79:01:1d:64:b3:9d:88:b0:97:7c: b3:98:f6:b2:03:6a:02:da:a6:f8:c1:7a:56:97:9f:d7:05:78: bb:ac:d5:ee:50:ed:cc:d8:90:91:ac:2d:15:a8:9b:e4:d6:fb: db:84:33:3d:f5:16:1d:56:f6:1c:12:44:8b:1a:b8:7e:2c:b6: 0e:1f:66:ae:e4:b0:2b:6d:5e:53:7f:fe:77:96:25:ef:b8:93: 06:97:e9:c2:fe:a8:cb:4f:9c:78:e9:fe:94:fe:1b:b8:19:f6: 25:fa:4b:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCzGRHKxWiXqrn4SG4ojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGU2ODcwMmVmNWQ0OGM0ZjJiMDcyZDljYjQ3M2U2MmI4 N2IzZTQwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EygwYmQ0NmM5N2ExMTUwOTVjNjJmMDBkOWYwNDFmYzEzNTFkOGIwM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBWOhuLgIaUUWd9ulnFLAYVv7oiS ZFvzhAgsbeKno/OF9M2mmhqTjcNisQV24r5wjdXyVl3qKdSkrdOyodl4gB21WpdV 7FWCOYRT6ByRtxVGC8hQ0uNYd2h29HRWF2OFp/wq/AltUOW7/4VmN40Xwg4b7sgQ cRLtg6pWvwAbByoPy4XxDSDFpCi/elvl2aUykGuEPHDGnrdM/tgpUwtR5V46ENL5 f6ghDw6cmOJvYgIeeT0sISNQmjp5E5jyx6e25x295jjgxpdXXRy/TCk78QfzeJ1/ tb9fCe2GhBzsYd9GY6KNABwYfw9GfcWsqUxJjcaOGRIZ4b9p5OpJUyWUZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvUbJehFQlcYvANnwQfwTUdiwOrMB8GA1UdIwQY MBaAFEqOaHAu9dSMTysHLZy0c+Yrh7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWIt MWM0YmI1OGFiNzIwLzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWItMWM0YmI1OGFiNzIw LzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8+evssb QiIqWo18GtNPrkbgWO1tvIqBdda3LujNpBuxmDRUP47vrJCgZEu3STtP/LJBsyCa JUqw5aTeyK7WWPL0lK/FpYoYz+3H47crNihv21AapXYvBiOnBeAT9GG40j0Bccdb ITkgVpHTW+ZcbByuf5ff6u2+4InYmmV6JgnekPk+ViYtHhyG/BB+I5xDI3MSTK03 1QN5AR1ks52IsJd8s5j2sgNqAtqm+MF6Vpef1wV4u6zV7lDtzNiQkawtFaib5Nb7 24QzPfUWHVb2HBJEixq4fiy2Dh9mruSwK21eU3/+d5Yl77iTBpfpwv6oy0+ceOn+ lP4buBn2JfpLPw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:37 2025 by rpki-client