This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json) Hash identifier: K1LPlBC4qoCcR7qqoWGQ2IvW0ULEjHqNBRrN9nFl8wE= Subject key identifier: 5E:E4:91:DE:E8:C0:33:6F:AE:3D:18:31:F0:F0:73:DB:F6:BF:D2:62 Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9 Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9 Certificate serial: 019AF23FC723888B0BBBBB53BF7988F4E6F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft Manifest number: 09C5 Signing time: Sat 06 Dec 2025 06:00:57 +0000 Manifest this update: Sat 06 Dec 2025 06:00:57 +0000 Manifest next update: Sun 07 Dec 2025 06:00:57 +0000 Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=) 2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: hbqdSavnZy0jdhhlERyI8+XBULnW4DitZUV+P4kb6DA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c7:23:88:8b:0b:bb:bb:53:bf:79:88:f4:e6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9 Validity Not Before: Dec 6 06:00:57 2025 GMT Not After : Dec 7 06:00:57 2025 GMT Subject: CN=5ee491dee8c0336fae3d1831f0f073dbf6bfd262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:9e:ed:ad:e3:9c:43:56:53:d9:ac:63:bf: f4:ec:87:79:80:b5:c4:c5:07:a0:43:01:78:72:a6: 1c:1e:45:a3:e7:a6:34:d3:f9:90:c1:71:55:ee:7a: 54:3f:1b:d1:dc:9d:2d:18:15:9c:0d:de:e0:c1:cc: a4:e3:ee:89:7e:41:9e:24:0a:4b:06:07:87:df:13: 24:d2:f2:32:76:35:d2:7c:68:14:ae:75:65:12:07: 05:9c:43:c1:5d:90:50:de:c2:f5:12:d4:cb:ac:8a: bb:ed:3c:ba:3b:c2:15:e5:5a:a1:df:4c:1a:eb:b8: 6f:7e:f2:bc:89:e3:cf:4c:81:7f:28:d6:15:97:67: 65:41:68:95:ef:13:ea:0f:b3:0b:47:9d:b4:8e:00: 9c:14:61:68:64:c2:a9:1d:1b:f3:5d:b7:3a:0d:65: 1f:72:42:76:fb:b3:bd:3d:b2:e4:4e:07:70:99:8a: c8:ec:f8:72:3e:45:b2:22:a0:e8:ae:80:ae:fd:c4: 4d:42:ee:23:26:23:94:12:bf:75:ba:99:5b:96:2b: 26:36:de:a0:a5:30:13:37:28:14:02:ad:f8:e0:db: e2:60:e7:78:84:82:fe:a1:03:a9:3b:73:54:54:dd: 41:55:9b:c9:c8:a1:33:3c:a4:16:a6:be:b8:e9:96: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E4:91:DE:E8:C0:33:6F:AE:3D:18:31:F0:F0:73:DB:F6:BF:D2:62 X509v3 Authority Key Identifier: keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0f:22:59:1a:f9:aa:f8:e5:50:60:fb:65:45:e6:d8:d1:6d: 50:02:9a:84:45:da:3f:d5:f8:4a:e0:04:21:38:f4:bb:58:94: 23:e9:60:0e:e2:b0:1d:71:5f:de:91:af:80:a8:e7:c7:ff:9f: cc:4e:6f:32:50:af:c1:de:b2:5e:30:40:c5:f2:95:8c:27:bb: 7d:5a:16:96:7d:d2:91:3b:d4:e0:a5:27:d0:f4:fc:20:34:da: ca:41:47:40:69:9b:ff:82:c3:12:0b:86:38:90:c9:10:00:b1: 85:72:cd:8b:c4:3f:b9:a8:e3:17:e8:62:2a:7d:df:02:50:8a: 92:6d:f9:d7:9b:19:53:b2:98:33:62:33:71:cc:66:61:41:28: 4d:6d:d8:fc:e0:3a:5c:b3:27:b8:c2:e7:bf:75:89:07:37:1a: 68:2f:df:c7:01:bc:eb:a9:30:9f:ec:55:a8:8e:1d:7b:f1:9e: b9:0a:0a:4e:81:2c:2c:39:c3:25:be:07:7a:fb:05:be:03:14: 1a:1f:cb:58:ad:2f:c6:e7:9e:5e:cc:7e:4d:cb:58:1a:df:41: 66:3c:b2:75:a8:bc:27:86:c2:f2:51:42:03:4e:05:69:7c:a1: 1b:44:dc:35:da:89:06:38:5d:2d:dd:4f:53:38:34:3e:fc:5e: fb:25:7c:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8cjiIsLu7tTv3mI9Ob3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODQ3MjUwYjNhNzcxMjdkZjdjM2M3YjhkZWY4YzlkOTE5 ZGM0YjkwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD Eyg1ZWU0OTFkZWU4YzAzMzZmYWUzZDE4MzFmMGYwNzNkYmY2YmZkMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ie7a3jnENWU9msY7/07Id5gLXE xQegQwF4cqYcHkWj56Y00/mQwXFV7npUPxvR3J0tGBWcDd7gwcyk4+6JfkGeJApL BgeH3xMk0vIydjXSfGgUrnVlEgcFnEPBXZBQ3sL1EtTLrIq77Ty6O8IV5Vqh30wa 67hvfvK8iePPTIF/KNYVl2dlQWiV7xPqD7MLR520jgCcFGFoZMKpHRvzXbc6DWUf ckJ2+7O9PbLkTgdwmYrI7PhyPkWyIqDoroCu/cRNQu4jJiOUEr91uplblismNt6g pTATNygUAq344NviYOd4hIL+oQOpO3NUVN1BVZvJyKEzPKQWpr646ZblzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7kkd7owDNvrj0YMfDwc9v2v9JiMB8GA1UdIwQY MBaAFLCEclCzp3En33w8e43vjJ2RncS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWIt Y2EzNTQ2OTU1M2NmLzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWItY2EzNTQ2OTU1M2Nm LzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ8iWRr5 qvjlUGD7ZUXm2NFtUAKahEXaP9X4SuAEITj0u1iUI+lgDuKwHXFf3pGvgKjnx/+f zE5vMlCvwd6yXjBAxfKVjCe7fVoWln3SkTvU4KUn0PT8IDTaykFHQGmb/4LDEguG OJDJEACxhXLNi8Q/uajjF+hiKn3fAlCKkm3515sZU7KYM2IzccxmYUEoTW3Y/OA6 XLMnuMLnv3WJBzcaaC/fxwG866kwn+xVqI4de/GeuQoKToEsLDnDJb4HevsFvgMU Gh/LWK0vxueeXsx+TctYGt9BZjyydai8J4bC8lFCA04FaXyhG0TcNdqJBjhdLd1P Uzg0Pvxe+yV84w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:31 2025 by rpki-client