This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json) Hash identifier: 1u/jyuNfC8oH9mBHf1XUFf5V31AblpBWz6BwbOH0zAY= Subject key identifier: 1C:ED:2C:07:77:ED:C8:A7:EF:7E:DB:8F:A8:B9:48:4B:20:66:8A:19 Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Certificate serial: 019B3C0FE6BFD31CF77C0796797B7ECA176C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft Manifest number: 10F6 Signing time: Sat 20 Dec 2025 14:00:33 +0000 Manifest this update: Sat 20 Dec 2025 14:00:33 +0000 Manifest next update: Sun 21 Dec 2025 14:00:33 +0000 Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=) 2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=) 3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=) 4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: KQh66rv4tDy/kzGAjP+hkBWUiFdZ6AwudG/CVgGD3/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:e6:bf:d3:1c:f7:7c:07:96:79:7b:7e:ca:17:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Validity Not Before: Dec 20 14:00:33 2025 GMT Not After : Dec 21 14:00:33 2025 GMT Subject: CN=1ced2c0777edc8a7ef7edb8fa8b9484b20668a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:6f:81:a4:b1:14:f7:4f:a5:11:87:4c:16: 0d:91:74:03:48:2d:b2:8d:47:1e:18:1f:1a:33:10: f2:18:0c:ba:7f:8f:fd:1e:dd:ce:05:19:d5:08:8a: f1:c3:bb:e4:4d:07:85:f8:56:27:5f:dc:ac:2d:84: e4:c7:60:36:75:13:08:67:d8:c7:60:82:cf:d3:bf: 88:e2:78:38:c3:62:9d:dc:d5:e3:b3:d7:b9:6e:fd: db:66:8f:86:8e:31:2b:82:9d:67:5e:3c:b2:ea:64: fe:30:7b:95:72:69:a7:7a:85:52:f9:db:92:a3:f8: fb:bf:a6:34:11:bd:0b:8a:6c:30:55:3d:70:7e:6b: ae:fb:55:31:c8:17:87:c6:3c:f3:1f:cd:1d:1a:17: 3e:5c:41:08:ec:1b:02:dd:a2:5e:58:37:23:d8:1f: a1:d1:35:b3:e0:27:6c:ff:64:6e:b2:1b:9b:d5:07: 9a:b1:6f:a1:55:ec:ff:ed:d4:c2:ef:02:bb:33:9e: bf:95:8c:80:8c:cb:3d:de:ea:6a:31:f6:0c:fe:f8: 59:6e:7c:24:6b:55:05:d9:b9:26:9b:10:24:1e:65: f1:09:0f:5a:04:d4:76:a6:ae:33:d6:e0:e8:85:0b: 7c:71:19:52:fc:85:c6:5c:97:de:55:fd:85:ca:1a: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:ED:2C:07:77:ED:C8:A7:EF:7E:DB:8F:A8:B9:48:4B:20:66:8A:19 X509v3 Authority Key Identifier: keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ee:5b:5b:eb:34:fa:6d:5a:df:a3:76:b7:82:98:86:04:e8: 95:04:e8:4a:9e:05:c3:e6:25:0d:71:43:6f:8d:c9:c8:4c:63: 77:94:ab:00:3e:52:47:32:4a:ea:67:21:63:ba:84:a8:e2:15: 42:a4:46:34:e1:c3:b9:38:97:cf:39:61:64:8f:9a:a6:7e:e4: ca:cd:51:f8:8e:a4:61:f8:b2:e2:d6:ad:8e:e2:6f:bd:30:78: 9b:09:e4:4b:d4:af:93:09:36:a2:33:21:02:f2:78:95:48:6a: 80:d1:49:15:e8:0e:bf:c9:82:b4:ae:db:53:fc:40:db:7c:9d: fd:6a:72:6b:66:7a:b4:b4:06:48:18:e2:5c:99:19:9a:84:99: 62:f2:94:25:32:a7:38:d5:fd:53:9e:cc:75:84:18:de:41:ca: 26:9a:97:9f:c1:2c:1b:5e:fe:8a:44:68:c6:01:cf:8b:f6:9e: 77:9d:21:83:fe:71:19:32:85:74:8b:24:a7:cb:2d:bb:a1:3e: 0d:9a:dd:12:fe:d7:1e:8f:30:89:9a:c6:11:20:48:ad:ea:56: 17:91:7c:e8:57:71:80:12:6a:11:df:f2:f1:9f:f6:21:62:cb: 78:aa:c0:0a:d8:04:1a:2d:fe:2e:95:f4:46:2f:85:42:c9:6f: f4:ce:a2:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+a/0xz3fAeWeXt+yhdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj NGY2NDUwHhcNMjUxMjIwMTQwMDMzWhcNMjUxMjIxMTQwMDMzWjAzMTEwLwYDVQQD EygxY2VkMmMwNzc3ZWRjOGE3ZWY3ZWRiOGZhOGI5NDg0YjIwNjY4YTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHBvgaSxFPdPpRGHTBYNkXQDSC2y jUceGB8aMxDyGAy6f4/9Ht3OBRnVCIrxw7vkTQeF+FYnX9ysLYTkx2A2dRMIZ9jH YILP07+I4ng4w2Kd3NXjs9e5bv3bZo+GjjErgp1nXjyy6mT+MHuVcmmneoVS+duS o/j7v6Y0Eb0LimwwVT1wfmuu+1UxyBeHxjzzH80dGhc+XEEI7BsC3aJeWDcj2B+h 0TWz4Cds/2Rushub1QeasW+hVez/7dTC7wK7M56/lYyAjMs93upqMfYM/vhZbnwk a1UF2bkmmxAkHmXxCQ9aBNR2pq4z1uDohQt8cRlS/IXGXJfeVf2FyhpoKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBztLAd37cin737bj6i5SEsgZooZMB8GA1UdIwQY MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3 LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWu5bW+s0 +m1a36N2t4KYhgTolQToSp4Fw+YlDXFDb43JyExjd5SrAD5SRzJK6mchY7qEqOIV QqRGNOHDuTiXzzlhZI+apn7kys1R+I6kYfiy4tatjuJvvTB4mwnkS9Svkwk2ojMh AvJ4lUhqgNFJFegOv8mCtK7bU/xA23yd/Wpya2Z6tLQGSBjiXJkZmoSZYvKUJTKn ONX9U57MdYQY3kHKJpqXn8EsG17+ikRoxgHPi/aed50hg/5xGTKFdIskp8stu6E+ DZrdEv7XHo8wiZrGESBIrepWF5F86FdxgBJqEd/y8Z/2IWLLeKrACtgEGi3+LpX0 Ri+FQslv9M6idw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:08:49 2025 by rpki-client