This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json) Hash identifier: anLjMq9RBI4tne8cfLf3MOh9xzKsqHxnxuc+T/pH6mM= Subject key identifier: AD:0F:56:BD:12:62:23:65:E2:E0:44:B6:E0:EB:53:E5:ED:2A:B1:99 Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25 Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025 Certificate serial: 019AF2E43E6B781FF0B947E57AB593CE718A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft Manifest number: 0133 Signing time: Sat 06 Dec 2025 09:00:35 +0000 Manifest this update: Sat 06 Dec 2025 09:00:35 +0000 Manifest next update: Sun 07 Dec 2025 09:00:35 +0000 Files and hashes: 1: p4n6DMVXRfxSNvujgZMUtP18wqQ.roa (hash: E3oRG9G+UtQqAk8G6rS3MWGj3sQbFqJ/BYIdf5UtbNU=) 2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: lc8rJdxh3K0xWvah0KRmDjXIyy0fK7vmJnZoZZa5alc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3e:6b:78:1f:f0:b9:47:e5:7a:b5:93:ce:71:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025 Validity Not Before: Dec 6 09:00:35 2025 GMT Not After : Dec 7 09:00:35 2025 GMT Subject: CN=ad0f56bd12622365e2e044b6e0eb53e5ed2ab199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:17:ee:f7:b8:4f:1d:2f:b4:67:c0:54:c5: f6:2f:06:11:8b:97:9d:30:74:75:ad:08:b3:0f:3f: 15:38:c2:88:f1:03:df:4f:92:c2:cc:e8:a0:45:63: 94:4d:be:3b:51:b5:ec:65:62:e2:13:e7:64:33:fc: 4b:cc:dc:00:52:68:69:6e:94:3f:2b:e4:23:51:89: f7:65:9b:07:a5:b4:d1:85:df:72:fc:14:c8:6f:dc: 19:99:39:fa:53:68:cc:a4:90:11:b5:4a:8d:24:1c: 9a:de:c8:93:a8:e9:09:5c:79:80:82:28:5c:fa:c7: 0d:8d:17:3e:19:0a:73:fb:2d:92:03:6f:77:4f:ed: ff:5e:66:03:6f:93:67:8a:38:bf:d0:c9:5d:5b:f6: 4f:43:39:42:29:b9:04:6e:12:ea:e4:76:f8:c2:3a: 75:45:60:dd:4e:5c:41:d0:b1:18:04:d7:76:2f:57: 5b:61:67:52:be:2c:77:03:dc:38:cc:0c:bf:b7:79: 9f:5e:a9:2a:9c:0f:8e:8d:62:3e:f1:29:c1:1a:a6: ed:19:85:66:10:9e:85:56:5e:8f:1f:21:0f:e7:0a: b4:13:87:f6:57:f1:12:c7:00:d4:34:09:3c:a8:d6: d2:98:21:8f:19:b2:75:11:ed:2a:91:92:17:9b:93: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0F:56:BD:12:62:23:65:E2:E0:44:B6:E0:EB:53:E5:ED:2A:B1:99 X509v3 Authority Key Identifier: keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7a:b6:64:90:48:04:f4:24:8a:1c:b4:94:0d:15:b4:e5:44: 82:e1:d7:f7:0d:4a:af:be:f8:d1:bf:8e:0b:1d:bb:03:4d:2e: a5:2b:25:ac:69:cc:f5:b9:7e:29:8e:0e:52:6f:99:26:66:fd: 71:5e:93:19:c2:09:18:ce:34:49:30:67:67:7a:0d:05:ad:21: 2f:30:23:0e:f6:2f:fc:b1:da:d4:aa:12:24:36:b9:55:cd:f7: 5f:85:3a:f5:72:49:40:da:1a:56:84:24:38:54:f1:d4:ef:d5: 4e:c1:d7:6c:c6:d5:21:76:6d:ce:40:6d:04:ae:04:e7:24:89: 72:b0:c1:c3:4c:87:e7:93:e7:e0:e9:07:01:57:b8:7c:95:74: 5e:f6:cc:ef:33:96:7e:36:61:af:cc:23:d5:94:e7:2a:34:fb: 88:29:7a:dc:a9:cd:b5:1d:a0:b5:98:05:a4:4c:4a:70:8e:25: 9d:db:3f:13:16:26:9e:b0:c4:31:53:c2:67:19:bd:eb:24:f5: fc:9f:57:9d:bb:76:4d:d6:ad:dc:5e:05:26:1a:76:f2:2b:2e: 15:36:95:a7:40:87:c1:74:84:13:eb:96:36:6e:a2:3b:c1:8e: 16:83:33:38:3b:36:a0:0c:6b:8d:ca:ce:54:d6:0e:17:3e:d7: e5:61:ee:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5D5reB/wuUflerWTznGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZmYyNzNhOGZlMjEyMDkwYmExY2I3OGM2MzMxZjgwZTc4 YzMwMjUwHhcNMjUxMjA2MDkwMDM1WhcNMjUxMjA3MDkwMDM1WjAzMTEwLwYDVQQD EyhhZDBmNTZiZDEyNjIyMzY1ZTJlMDQ0YjZlMGViNTNlNWVkMmFiMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygMX7ve4Tx0vtGfAVMX2LwYRi5ed MHR1rQizDz8VOMKI8QPfT5LCzOigRWOUTb47UbXsZWLiE+dkM/xLzNwAUmhpbpQ/ K+QjUYn3ZZsHpbTRhd9y/BTIb9wZmTn6U2jMpJARtUqNJBya3siTqOkJXHmAgihc +scNjRc+GQpz+y2SA293T+3/XmYDb5Nniji/0MldW/ZPQzlCKbkEbhLq5Hb4wjp1 RWDdTlxB0LEYBNd2L1dbYWdSvix3A9w4zAy/t3mfXqkqnA+OjWI+8SnBGqbtGYVm EJ6FVl6PHyEP5wq0E4f2V/ESxwDUNAk8qNbSmCGPGbJ1Ee0qkZIXm5M3WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0PVr0SYiNl4uBEtuDrU+XtKrGZMB8GA1UdIwQY MBaAFLD/JzqP4hIJC6HLeMYzH4DnjDAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQt ODhkM2NhOTAwNmQ1LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQtODhkM2NhOTAwNmQ1 LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnq2ZJBI BPQkihy0lA0VtOVEguHX9w1Kr7740b+OCx27A00upSslrGnM9bl+KY4OUm+ZJmb9 cV6TGcIJGM40STBnZ3oNBa0hLzAjDvYv/LHa1KoSJDa5Vc33X4U69XJJQNoaVoQk OFTx1O/VTsHXbMbVIXZtzkBtBK4E5ySJcrDBw0yH55Pn4OkHAVe4fJV0XvbM7zOW fjZhr8wj1ZTnKjT7iCl63KnNtR2gtZgFpExKcI4lnds/ExYmnrDEMVPCZxm96yT1 /J9Xnbt2Tdat3F4FJhp28isuFTaVp0CHwXSEE+uWNm6iO8GOFoMzODs2oAxrjcrO VNYOFz7X5WHu2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:29 2025 by rpki-client