This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json) Hash identifier: 1stiuQQt24ReR67oyi5sSltmUKZ5gTxlPFlzKudOvmM= Subject key identifier: CD:ED:F9:47:88:B6:F2:41:F5:D4:BB:45:B1:8B:A0:DA:A2:E4:44:7E Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97 Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397 Certificate serial: 019B3C7EF03E1040C0816E0F22419C735B8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft Manifest number: 0AA7 Signing time: Sat 20 Dec 2025 16:01:50 +0000 Manifest this update: Sat 20 Dec 2025 16:01:50 +0000 Manifest next update: Sun 21 Dec 2025 16:01:50 +0000 Files and hashes: 1: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (hash: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=) 2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: ii9cm6uSgsaX9PdICetY/WzmfwgLx/5Yro9gIXG/Cak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f0:3e:10:40:c0:81:6e:0f:22:41:9c:73:5b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31938bc720282444babd3b26b3492b456adb397 Validity Not Before: Dec 20 16:01:50 2025 GMT Not After : Dec 21 16:01:50 2025 GMT Subject: CN=cdedf94788b6f241f5d4bb45b18ba0daa2e4447e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:4d:bc:d2:10:66:00:53:5d:6a:06:57:43: e2:03:3a:62:b9:89:a0:56:5f:bb:d3:46:af:05:97: af:4a:91:b3:20:2b:47:df:88:fc:85:70:d0:6f:71: f3:c3:3a:16:c1:c9:e7:5d:43:b7:c3:b4:5e:0a:2c: 20:06:c8:aa:dc:25:39:d0:ba:48:e0:65:1a:52:4f: 3c:72:55:d9:eb:f2:2e:58:30:2b:97:b5:56:bb:f3: bd:85:53:bf:1a:a9:07:06:94:a1:66:27:89:12:03: 2a:ec:25:a8:f0:1c:cf:7c:e7:14:d4:62:f7:00:e6: 04:ac:7e:f7:c2:f6:23:50:8c:6e:89:2f:6b:a1:a7: 48:e7:c3:65:f7:41:8d:99:10:9b:22:44:4c:79:bb: 7f:65:66:73:c8:cb:a2:a5:fe:6b:48:94:c1:79:f2: 6e:54:e2:c1:06:5e:76:fc:3c:bd:af:be:9a:ba:03: 6f:dd:a2:39:09:f1:6b:04:72:d1:77:89:40:ba:1c: 0d:2e:05:f8:1a:40:27:01:df:cf:08:e6:7f:90:c7: f7:70:78:8b:74:c7:87:9f:c8:6c:86:f9:5f:61:7e: 34:a3:74:15:05:3f:e4:5c:9d:07:70:65:b3:ca:bf: 9d:fe:40:9f:86:59:18:fb:4a:1c:bd:99:99:5d:57: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:ED:F9:47:88:B6:F2:41:F5:D4:BB:45:B1:8B:A0:DA:A2:E4:44:7E X509v3 Authority Key Identifier: keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:59:b0:9c:0f:50:8d:43:96:ef:01:33:53:4b:d9:30:de:bd: dd:ed:9b:13:aa:0b:ed:16:45:d9:0c:f6:22:a4:57:6f:c7:86: 0a:0a:b8:d0:8c:ec:57:8e:1a:58:99:cd:6c:4d:3d:32:1a:77: 19:6e:45:16:37:a7:7a:11:bd:2e:42:36:33:01:0e:ff:af:8f: aa:d4:ae:4a:47:b7:23:e9:ce:2a:91:b8:dc:e1:52:b0:19:93: ab:fc:67:4e:21:e2:c9:e1:c9:a5:1e:dc:a5:22:6e:fc:16:2e: 6b:1c:94:ef:7d:d7:79:96:1b:ae:ba:7a:5c:a8:cd:36:7a:f4: 44:e0:1e:a1:be:fb:54:69:b1:5c:08:1d:c7:6d:4a:80:89:e0: f6:81:87:69:07:6b:05:f8:fc:0c:2e:28:fa:d6:c6:1d:3d:b9: b1:2d:17:cc:ce:d8:2a:0d:b7:c6:44:85:c6:24:e9:4b:09:53: 07:a1:0a:dd:11:be:6f:84:ed:18:aa:8b:39:65:1b:ca:1d:cb: fc:e0:50:d3:15:35:12:4e:6a:ae:d7:5c:a8:43:0f:be:a4:c5: 37:f3:91:4e:bf:00:fc:2b:41:5e:b9:30:08:05:88:d4:24:d4: 7a:85:29:a6:3a:f5:e7:61:35:74:0d:c8:05:52:2a:e8:44:07: 01:cd:06:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvA+EEDAgW4PIkGcc1uNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTkzOGJjNzIwMjgyNDQ0YmFiZDNiMjZiMzQ5MmI0NTZh ZGIzOTcwHhcNMjUxMjIwMTYwMTUwWhcNMjUxMjIxMTYwMTUwWjAzMTEwLwYDVQQD EyhjZGVkZjk0Nzg4YjZmMjQxZjVkNGJiNDViMThiYTBkYWEyZTQ0NDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PRNvNIQZgBTXWoGV0PiAzpiuYmg Vl+700avBZevSpGzICtH34j8hXDQb3HzwzoWwcnnXUO3w7ReCiwgBsiq3CU50LpI 4GUaUk88clXZ6/IuWDArl7VWu/O9hVO/GqkHBpShZieJEgMq7CWo8BzPfOcU1GL3 AOYErH73wvYjUIxuiS9roadI58Nl90GNmRCbIkRMebt/ZWZzyMuipf5rSJTBefJu VOLBBl52/Dy9r76augNv3aI5CfFrBHLRd4lAuhwNLgX4GkAnAd/PCOZ/kMf3cHiL dMeHn8hshvlfYX40o3QVBT/kXJ0HcGWzyr+d/kCfhlkY+0ocvZmZXVc1fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3t+UeItvJB9dS7RbGLoNqi5ER+MB8GA1UdIwQY MBaAFLMZOLxyAoJES6vTsms0krRWrbOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEt OWI1ZGY4NWMxMTQwLzEvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEtOWI1ZGY4NWMxMTQw LzEvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlmwnA9Q jUOW7wEzU0vZMN693e2bE6oL7RZF2Qz2IqRXb8eGCgq40IzsV44aWJnNbE09Mhp3 GW5FFjenehG9LkI2MwEO/6+PqtSuSke3I+nOKpG43OFSsBmTq/xnTiHiyeHJpR7c pSJu/BYuaxyU733XeZYbrrp6XKjNNnr0ROAeob77VGmxXAgdx21KgIng9oGHaQdr Bfj8DC4o+tbGHT25sS0XzM7YKg23xkSFxiTpSwlTB6EK3RG+b4TtGKqLOWUbyh3L /OBQ0xU1Ek5qrtdcqEMPvqTFN/ORTr8A/CtBXrkwCAWI1CTUeoUppjr152E1dA3I BVIq6EQHAc0GdQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:08 2025 by rpki-client