This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json) Hash identifier: c26hAZPoQ5a3p766OCnu/hLcJfzUtj+c7u/zwFMJyJY= Subject key identifier: CD:57:D6:17:C8:B7:89:79:AA:B7:63:C0:A9:38:AF:7F:FA:D2:4A:4B Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Certificate serial: 019AF49BBFBF7705B43DC251C2E3EE3B2144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft Manifest number: 11C1 Signing time: Sat 06 Dec 2025 17:00:39 +0000 Manifest this update: Sat 06 Dec 2025 17:00:39 +0000 Manifest next update: Sun 07 Dec 2025 17:00:39 +0000 Files and hashes: 1: 89qbXuP3JJGKzWaNZO3dqnt1pdw.roa (hash: obr33L2CB/OVnTXprqPZCOQ9LeK6vQA821ilRu8qFT0=) 2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: qHVQlVurfwMjt3FXAJ/GQRP5mivobm6Uaj2hCZzLuJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:bf:bf:77:05:b4:3d:c2:51:c2:e3:ee:3b:21:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Validity Not Before: Dec 6 17:00:39 2025 GMT Not After : Dec 7 17:00:39 2025 GMT Subject: CN=cd57d617c8b78979aab763c0a938af7ffad24a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e8:41:2a:87:7c:46:ae:b8:04:b1:e7:ca:a9: 29:bc:f9:1a:fe:22:80:65:73:fd:55:79:27:29:48: 28:58:c4:db:a3:6c:30:69:e1:21:c9:1a:85:4e:45: 5f:bd:fd:03:1f:bd:2e:be:2d:90:03:5e:f4:12:b8: 2c:94:16:d3:37:e9:88:b0:5b:ff:dc:5e:0e:99:bb: 3a:6f:e3:89:bb:24:15:fe:97:4f:17:1b:02:7a:92: 0e:12:fe:e4:2c:c1:b5:91:4d:ae:de:d2:88:b8:0c: 81:d2:48:fd:89:59:2b:6a:8e:57:13:94:ba:99:59: 29:e7:eb:e2:11:04:97:c1:d6:de:20:b1:78:49:b8: 8a:a1:f1:db:33:0d:b3:72:81:ab:1c:9a:e5:46:d6: bd:b8:e7:0a:ec:75:60:f2:d9:c7:79:74:33:8b:db: c5:cb:09:aa:a4:12:4a:aa:77:06:ff:f9:d4:61:3b: f0:13:86:f1:d3:2b:2e:d6:7a:d5:33:ad:e7:bc:9f: 9a:24:15:ca:cd:3f:39:62:95:1a:3d:89:88:89:d9: a8:60:be:dd:3a:23:2b:af:d6:4f:9b:96:1c:9b:0b: 67:c8:3b:ae:d0:a3:ed:1d:57:25:5d:fb:c4:ab:14: e6:1e:8b:ca:7f:5b:65:51:6c:1c:a7:11:33:12:b6: c9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:57:D6:17:C8:B7:89:79:AA:B7:63:C0:A9:38:AF:7F:FA:D2:4A:4B X509v3 Authority Key Identifier: keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b2:39:38:81:91:c7:e5:e4:2b:7e:8f:5d:bc:9f:a1:2f:11: 27:b3:85:18:d4:a2:19:b0:a1:b4:5b:de:cf:bc:5e:10:30:5e: 03:ac:83:f5:24:85:6f:e5:a1:8e:31:08:5e:0b:09:da:dd:e7: a3:90:a2:31:34:aa:e6:2a:91:c6:f1:09:50:33:c3:01:77:89: 15:0c:dc:c9:56:d4:fe:07:73:28:b0:85:47:9f:cf:35:59:78: 9e:a3:9c:50:3d:40:28:9d:5c:1b:67:28:d4:0b:92:5f:80:fd: 8b:6f:6d:09:9f:73:50:01:e0:5b:86:e9:25:38:26:83:61:47: c6:f6:59:41:50:bc:30:d8:a5:0c:49:b3:cd:8e:d0:30:e6:5d: da:84:3f:84:c9:57:c4:e1:d8:fe:7d:52:c5:d1:1e:d4:08:c5: d0:e7:3c:1a:c8:ad:8f:89:bf:53:2a:8b:97:fa:84:4a:e5:8e: 5a:c6:ce:3e:bb:1f:05:67:3a:48:ab:ac:0f:c3:d4:e1:1f:49: 6e:f5:72:c9:7e:ba:00:7b:bd:75:cb:a3:63:33:9c:9d:2c:af: 30:9b:c8:6c:7a:fc:7d:3c:58:08:fc:5e:60:38:53:9b:a0:6c: 33:a7:ac:9b:23:a8:52:6b:bc:50:75:0d:41:c0:00:51:e6:44: b4:e4:0c:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7+/dwW0PcJRwuPuOyFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWQyMjY0M2MyZDk3YmQ3MWY4YjYzNGZiOGQxZDRmOWYw MWY0YTcwHhcNMjUxMjA2MTcwMDM5WhcNMjUxMjA3MTcwMDM5WjAzMTEwLwYDVQQD EyhjZDU3ZDYxN2M4Yjc4OTc5YWFiNzYzYzBhOTM4YWY3ZmZhZDI0YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OhBKod8Rq64BLHnyqkpvPka/iKA ZXP9VXknKUgoWMTbo2wwaeEhyRqFTkVfvf0DH70uvi2QA170ErgslBbTN+mIsFv/ 3F4Ombs6b+OJuyQV/pdPFxsCepIOEv7kLMG1kU2u3tKIuAyB0kj9iVkrao5XE5S6 mVkp5+viEQSXwdbeILF4SbiKofHbMw2zcoGrHJrlRta9uOcK7HVg8tnHeXQzi9vF ywmqpBJKqncG//nUYTvwE4bx0ysu1nrVM63nvJ+aJBXKzT85YpUaPYmIidmoYL7d OiMrr9ZPm5YcmwtnyDuu0KPtHVclXfvEqxTmHovKf1tlUWwcpxEzErbJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1X1hfIt4l5qrdjwKk4r3/60kpLMB8GA1UdIwQY MBaAFLCtImQ8LZe9cfi2NPuNHU+fAfSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUt MDc0ZmZiNDIzYzEzLzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUtMDc0ZmZiNDIzYzEz LzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7I5OIGR x+XkK36PXbyfoS8RJ7OFGNSiGbChtFvez7xeEDBeA6yD9SSFb+WhjjEIXgsJ2t3n o5CiMTSq5iqRxvEJUDPDAXeJFQzcyVbU/gdzKLCFR5/PNVl4nqOcUD1AKJ1cG2co 1AuSX4D9i29tCZ9zUAHgW4bpJTgmg2FHxvZZQVC8MNilDEmzzY7QMOZd2oQ/hMlX xOHY/n1SxdEe1AjF0Oc8Gsitj4m/UyqLl/qESuWOWsbOPrsfBWc6SKusD8PU4R9J bvVyyX66AHu9dcujYzOcnSyvMJvIbHr8fTxYCPxeYDhTm6BsM6esmyOoUmu8UHUN QcAAUeZEtOQMzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:34:25 2025 by rpki-client