This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json) Hash identifier: RL4COMMRkpILIzQovdz+ZRBx8zih2udiMSh58WLSprs= Subject key identifier: BA:DA:FC:F4:CC:BA:60:B0:B2:E5:4C:0F:56:30:62:3A:89:2C:85:D0 Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c Certificate serial: 019B27AE14408F47739006F9A29F648717A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft Manifest number: 177A Signing time: Tue 16 Dec 2025 15:01:18 +0000 Manifest this update: Tue 16 Dec 2025 15:01:18 +0000 Manifest next update: Wed 17 Dec 2025 15:01:18 +0000 Files and hashes: 1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=) 2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=) 3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: x9XDO0RoeSd/kpPpMv9ieerJKGqpwpUmeSapBai58uc=) 4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:14:40:8f:47:73:90:06:f9:a2:9f:64:87:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c Validity Not Before: Dec 16 15:01:18 2025 GMT Not After : Dec 17 15:01:18 2025 GMT Subject: CN=badafcf4ccba60b0b2e54c0f5630623a892c85d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1f:11:7d:3b:82:8d:c3:46:10:01:fb:bc:55: 67:a4:a2:c8:0e:6e:d6:29:53:73:81:84:22:bd:b3: 47:5b:a2:ba:a6:57:ff:0d:ff:aa:f9:6c:2d:f1:dd: 53:bb:21:b1:1c:70:c3:e1:ce:0a:85:81:c1:54:ac: 2d:6a:1a:b6:11:78:d2:0a:41:c6:55:3a:e3:27:87: d6:4a:51:c8:ff:95:3c:30:15:ce:90:ee:15:7d:70: b0:7f:f6:e8:7a:a0:01:e4:79:64:09:4e:1a:30:a9: 47:0a:c0:85:2b:56:da:e2:77:2c:01:8e:60:10:4c: 8d:da:92:5d:48:d2:8e:ae:15:ee:79:8d:82:d3:c8: dc:2e:0e:fd:12:40:d3:87:a6:e0:c7:30:28:0a:26: 80:c1:54:32:ef:47:ed:45:0c:7c:c9:dd:06:09:45: b8:b8:bc:9b:e4:28:e0:08:ae:26:f0:91:2e:e3:9d: 47:e4:bc:31:ce:94:3a:e9:84:35:8e:88:68:2d:bf: ee:85:93:9e:42:1d:93:d6:e7:28:a0:a6:cd:fb:db: f9:3b:2a:dc:13:b0:53:a0:d7:65:50:16:8d:0b:ce: 3a:0a:f0:35:65:5a:f8:10:a8:79:84:c1:81:5a:82: ec:e4:2d:bc:44:2d:80:c1:37:c8:85:c6:0a:e8:3a: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:FC:F4:CC:BA:60:B0:B2:E5:4C:0F:56:30:62:3A:89:2C:85:D0 X509v3 Authority Key Identifier: keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:77:d8:48:3e:b5:74:5f:38:2c:a2:d6:45:8d:eb:12:b7:f8: 59:a5:e2:87:12:ac:73:c7:45:6b:76:7a:52:44:61:84:d5:a4: a8:26:a9:2e:a3:49:09:19:ee:2f:76:99:1f:9b:83:d2:4b:37: a7:70:50:1a:a2:68:d0:e2:09:b3:80:09:6f:43:fa:18:1a:c5: d1:12:b4:4d:02:63:73:f7:b3:be:f5:76:28:e0:c3:88:ce:c4: 54:cb:80:97:ed:fd:d3:67:61:b9:6c:5d:30:d5:ee:f7:ee:1e: 15:96:20:5b:41:31:78:88:ce:d0:08:46:2b:2b:2a:1f:4f:6a: 4a:70:ed:7d:b6:8e:36:df:37:9c:be:ea:78:4d:d4:4d:04:1b: 66:50:3a:9c:5c:d0:7a:c6:aa:3c:09:61:01:6a:03:9e:b9:ec: b3:33:49:cd:c7:82:a6:09:bc:5e:37:06:b4:c6:2c:46:95:23: 21:c7:6a:07:74:b8:83:25:d3:21:7e:db:2e:55:de:6f:6c:8b: e0:06:a3:72:4d:52:1c:5f:b1:d9:9c:2a:2f:dd:83:c0:fd:a6: 87:bc:82:e4:0d:67:65:01:d2:c0:75:7e:5c:d1:b7:ea:d2:dc: 22:56:6e:7c:3d:25:6c:67:57:91:26:af:d0:de:a6:8f:52:2a: bf:fc:46:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrhRAj0dzkAb5op9khxegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODA5NTkyN2VlNTdjY2VlMjU2YWE0MzlmMTYzNjg2YjU4 YzU3MGMwHhcNMjUxMjE2MTUwMTE4WhcNMjUxMjE3MTUwMTE4WjAzMTEwLwYDVQQD EyhiYWRhZmNmNGNjYmE2MGIwYjJlNTRjMGY1NjMwNjIzYTg5MmM4NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R8RfTuCjcNGEAH7vFVnpKLIDm7W KVNzgYQivbNHW6K6plf/Df+q+Wwt8d1TuyGxHHDD4c4KhYHBVKwtahq2EXjSCkHG VTrjJ4fWSlHI/5U8MBXOkO4VfXCwf/boeqAB5HlkCU4aMKlHCsCFK1ba4ncsAY5g EEyN2pJdSNKOrhXueY2C08jcLg79EkDTh6bgxzAoCiaAwVQy70ftRQx8yd0GCUW4 uLyb5CjgCK4m8JEu451H5LwxzpQ66YQ1johoLb/uhZOeQh2T1ucooKbN+9v5Oyrc E7BToNdlUBaNC846CvA1ZVr4EKh5hMGBWoLs5C28RC2AwTfIhcYK6DozXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLra/PTMumCwsuVMD1YwYjqJLIXQMB8GA1UdIwQY MBaAFEqAlZJ+5XzO4laqQ58WNoa1jFcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEt MGY5ZDQzZDg2NGJiLzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEtMGY5ZDQzZDg2NGJi LzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3fYSD61 dF84LKLWRY3rErf4WaXihxKsc8dFa3Z6UkRhhNWkqCapLqNJCRnuL3aZH5uD0ks3 p3BQGqJo0OIJs4AJb0P6GBrF0RK0TQJjc/ezvvV2KODDiM7EVMuAl+3902dhuWxd MNXu9+4eFZYgW0ExeIjO0AhGKysqH09qSnDtfbaONt83nL7qeE3UTQQbZlA6nFzQ esaqPAlhAWoDnrnsszNJzceCpgm8XjcGtMYsRpUjIcdqB3S4gyXTIX7bLlXeb2yL 4Aajck1SHF+x2ZwqL92DwP2mh7yC5A1nZQHSwHV+XNG36tLcIlZufD0lbGdXkSav 0N6mj1Iqv/xGIA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:16:33 2025 by rpki-client