This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json) Hash identifier: efqQUyUbNCGx50TtaWzz62vBtU+zFxVRmG/0vbsikNo= Subject key identifier: D5:78:9B:23:E3:B4:D3:59:61:35:51:74:AA:4E:CE:9B:C2:D7:B8:99 Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Certificate serial: 019B62AFD077C0DA15300AD6EF3C179530D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft Manifest number: 110A Signing time: Sun 28 Dec 2025 02:00:47 +0000 Manifest this update: Sun 28 Dec 2025 02:00:47 +0000 Manifest next update: Mon 29 Dec 2025 02:00:47 +0000 Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=) 2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=) 3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=) 4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: Vk6PT1NUC4ambFZL5eyLOwgatlqrfRE+tNiQ3MCBFAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:d0:77:c0:da:15:30:0a:d6:ef:3c:17:95:30:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Validity Not Before: Dec 28 02:00:47 2025 GMT Not After : Dec 29 02:00:47 2025 GMT Subject: CN=d5789b23e3b4d35961355174aa4ece9bc2d7b899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:74:37:2d:9e:f1:0f:3f:44:fc:e6:2c:50:56: 08:33:f3:5f:ee:b4:61:1f:64:24:ff:71:8b:da:1d: 86:79:db:3d:4a:5a:01:a5:b8:03:76:80:ee:ec:ee: 60:41:63:c4:2e:44:e1:83:53:3a:d7:2c:82:5a:4e: 54:92:67:84:0f:e0:60:c1:56:19:45:27:a5:26:08: 58:94:60:45:64:4a:f8:90:5a:29:29:f9:5c:76:45: 9f:1e:d3:09:0d:6b:86:c6:6d:be:08:25:17:b6:ed: 3a:00:c1:6d:5c:14:1f:4b:90:11:e6:7e:e4:a6:5a: 49:ca:03:99:32:02:4c:c5:bc:5c:31:84:cb:2e:29: a6:2c:02:b7:94:53:a9:51:5b:a6:dd:e6:16:40:50: 4f:67:10:63:e6:dc:63:92:17:84:d8:af:39:64:fb: 61:58:a6:ff:32:8e:91:cf:12:92:0b:a7:2b:56:40: 01:7b:74:0f:18:02:2d:c3:8e:2e:b7:6a:23:c4:9a: bd:7f:cd:1a:23:e5:80:59:aa:3a:be:91:fa:ed:64: 4d:28:08:82:cb:c6:68:0b:49:6f:6e:dd:f6:fe:e0: d3:43:7a:0f:24:32:43:64:6a:49:9e:10:86:6e:2d: f8:85:f6:81:99:f9:d7:01:60:01:fd:42:d5:01:61: c9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:78:9B:23:E3:B4:D3:59:61:35:51:74:AA:4E:CE:9B:C2:D7:B8:99 X509v3 Authority Key Identifier: keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:3d:8b:c0:e4:1b:e2:a4:f5:0f:83:bd:7f:bc:5a:2c:ad:8d: 91:55:16:a1:80:9b:a6:0e:77:9b:36:b4:fd:fa:a7:ef:8c:13: 57:10:48:df:9d:bd:ed:f8:c5:c0:8e:8a:44:c6:4c:f3:bd:52: d2:0b:89:6d:95:e0:cb:d2:1e:3a:38:95:4d:f2:f1:7c:ea:4f: 01:1b:92:d1:4f:87:8b:85:e5:9b:6b:d0:fa:b2:1c:0c:1b:3c: f9:d2:84:a3:9d:51:98:8c:d8:99:4e:b1:fa:63:82:8d:a5:10: 6b:2c:9f:13:8e:86:3a:9c:7a:ba:c6:8c:7b:08:07:9c:3f:9e: f9:f2:73:ac:68:42:0c:33:35:68:e0:d6:e1:f9:d0:02:93:99: 95:04:e5:12:d7:c1:8f:ca:7f:c6:8f:ec:b4:d9:dd:58:49:68: 09:e9:e8:d2:c7:33:a6:85:7e:01:18:c6:94:80:0d:76:e4:e5: 3f:4d:eb:98:9c:bf:3f:1b:4c:4d:4e:08:52:74:82:71:57:2f: 2e:2f:15:a0:a5:0f:76:e1:72:ec:c5:78:5c:a7:c8:59:4f:2f: 19:7f:31:42:8f:24:55:c4:13:68:af:05:36:9e:63:b1:b3:97: 1c:3c:e9:25:4f:14:6e:b2:20:b1:c4:b7:b3:36:c3:be:62:67: bd:91:e3:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir9B3wNoVMArW7zwXlTDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj NGY2NDUwHhcNMjUxMjI4MDIwMDQ3WhcNMjUxMjI5MDIwMDQ3WjAzMTEwLwYDVQQD EyhkNTc4OWIyM2UzYjRkMzU5NjEzNTUxNzRhYTRlY2U5YmMyZDdiODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinQ3LZ7xDz9E/OYsUFYIM/Nf7rRh H2Qk/3GL2h2Geds9SloBpbgDdoDu7O5gQWPELkThg1M61yyCWk5UkmeED+BgwVYZ RSelJghYlGBFZEr4kFopKflcdkWfHtMJDWuGxm2+CCUXtu06AMFtXBQfS5AR5n7k plpJygOZMgJMxbxcMYTLLimmLAK3lFOpUVum3eYWQFBPZxBj5txjkheE2K85ZPth WKb/Mo6RzxKSC6crVkABe3QPGAItw44ut2ojxJq9f80aI+WAWao6vpH67WRNKAiC y8ZoC0lvbt32/uDTQ3oPJDJDZGpJnhCGbi34hfaBmfnXAWAB/ULVAWHJswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV4myPjtNNZYTVRdKpOzpvC17iZMB8GA1UdIwQY MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3 LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzD2LwOQb 4qT1D4O9f7xaLK2NkVUWoYCbpg53mza0/fqn74wTVxBI35297fjFwI6KRMZM871S 0guJbZXgy9IeOjiVTfLxfOpPARuS0U+Hi4Xlm2vQ+rIcDBs8+dKEo51RmIzYmU6x +mOCjaUQayyfE46GOpx6usaMewgHnD+e+fJzrGhCDDM1aODW4fnQApOZlQTlEtfB j8p/xo/stNndWEloCeno0sczpoV+ARjGlIANduTlP03rmJy/PxtMTU4IUnSCcVcv Li8VoKUPduFy7MV4XKfIWU8vGX8xQo8kVcQTaK8FNp5jsbOXHDzpJU8UbrIgscS3 szbDvmJnvZHj+g== -----END CERTIFICATE-----Generated at Sun Dec 28 09:44:58 2025 by rpki-client