This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft File: SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json) Hash identifier: uP9kmbAKRa83QNb8qHqRQk/rM1YLKBDc7QJ60Fp3nxk= Subject key identifier: 3A:7D:4F:5F:54:25:9C:C2:2C:CE:22:B6:6D:FC:A5:81:D5:41:73:16 Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F Certificate issuer: /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f Certificate serial: 019B6B45173E705BF46B082A3BD0207F75E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft Manifest number: 0D7C Signing time: Mon 29 Dec 2025 18:00:48 +0000 Manifest this update: Mon 29 Dec 2025 18:00:48 +0000 Manifest next update: Tue 30 Dec 2025 18:00:48 +0000 Files and hashes: 1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: MWZfRQMNwn2TyO9XYa0iXz7wCo1vUjBWgTb/DAXuC+Y=) 2: t2TSolMpe1MqepO7ZiAhihdiw7E.roa (hash: 6XLtwGEoBLRfiwM7FwJJWhjDjtkkFPk9hmuRlaKNmqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:17:3e:70:5b:f4:6b:08:2a:3b:d0:20:7f:75:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f Validity Not Before: Dec 29 18:00:48 2025 GMT Not After : Dec 30 18:00:48 2025 GMT Subject: CN=3a7d4f5f54259cc22cce22b66dfca581d5417316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:e6:a2:85:f7:3f:91:9e:5f:61:d4:60:d1: 2a:50:16:21:88:8b:ca:74:ee:2f:62:1e:e4:d2:2c: e1:43:38:5e:be:73:07:23:99:7c:18:11:26:e5:40: c2:02:17:dd:6c:77:b3:60:22:c6:83:d1:f8:b9:62: 48:32:9a:58:b3:cc:fc:04:1f:3c:71:1d:bf:9a:fd: d1:d5:a3:b3:88:71:be:2e:63:b8:9e:82:b6:85:97: 30:6f:d8:92:12:3b:51:d9:e0:32:eb:98:39:d3:52: 9d:e5:d5:82:6a:bf:6c:ba:2a:3a:25:56:cb:a0:8f: ad:c5:ec:05:ec:6d:58:b7:62:a2:b0:3d:34:fe:54: 18:2d:3d:dc:5f:57:79:bf:a3:b4:00:d1:70:26:a7: ef:1e:e0:52:b9:8d:dd:f2:8d:61:5a:36:54:06:b2: 0f:5d:7f:db:92:31:9d:ab:d5:fe:ac:51:45:eb:82: 13:9e:1f:67:ab:48:0a:14:5c:9a:42:1b:55:72:cc: 98:c9:7f:7c:24:53:a1:67:8c:17:4f:88:6e:ba:a4: ce:f2:45:ec:2f:c6:58:e9:e8:b2:b5:3a:19:cb:4e: e5:32:a8:a7:f2:53:71:83:a7:09:32:b4:73:00:a8: cc:79:1b:85:98:cd:49:63:3a:a0:4e:e6:af:11:82: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7D:4F:5F:54:25:9C:C2:2C:CE:22:B6:6D:FC:A5:81:D5:41:73:16 X509v3 Authority Key Identifier: keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9e:c3:fd:7d:85:03:f2:bb:0f:58:68:62:12:a5:ce:56:aa: b5:52:38:23:81:65:2d:bd:21:c7:ac:c5:00:2c:c7:26:26:aa: 95:05:93:50:fa:a6:7e:d0:f7:b6:c9:36:41:39:4a:93:64:4b: 1b:f1:1b:00:dd:fc:a3:82:99:28:3d:e4:21:9c:96:4f:83:9f: 61:33:2f:4e:0b:45:59:12:03:32:ee:12:68:d9:39:da:3f:09: ca:c7:c9:2d:be:be:d9:16:0e:6f:71:a0:43:88:ce:9b:ee:63: b0:bf:e9:43:96:b6:aa:07:70:7a:c2:b6:3f:9f:30:c4:cb:8c: 54:96:65:38:e6:47:89:21:29:c0:a7:72:ad:6c:22:44:eb:3f: 6f:52:e4:77:3a:3b:7d:6e:92:80:7b:e3:31:dd:be:d0:5b:a1: 1b:d8:bc:5c:77:95:dd:d0:d0:86:d5:8e:61:fb:99:b2:fd:f9: 43:2f:90:86:57:76:9e:7c:d6:8c:23:c3:39:25:85:0a:85:67: a1:a4:be:04:c7:a4:f2:1b:57:d5:92:21:61:c9:72:d5:e3:8b: b9:00:6b:58:dd:c7:6e:71:2e:39:f4:d8:5f:4d:08:bd:9e:a1: 1a:50:23:5e:ec:2d:a7:1b:e3:31:67:7a:a6:1a:06:d7:5d:04: 39:fb:a5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRRc+cFv0awgqO9Agf3XoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDE1YTEwZTc0NzEwOTM2Y2I4YzM3YjdjNmY1ZjFmYjM4 YzEyMWYwHhcNMjUxMjI5MTgwMDQ4WhcNMjUxMjMwMTgwMDQ4WjAzMTEwLwYDVQQD EygzYTdkNGY1ZjU0MjU5Y2MyMmNjZTIyYjY2ZGZjYTU4MWQ1NDE3MzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfmooX3P5GeX2HUYNEqUBYhiIvK dO4vYh7k0izhQzhevnMHI5l8GBEm5UDCAhfdbHezYCLGg9H4uWJIMppYs8z8BB88 cR2/mv3R1aOziHG+LmO4noK2hZcwb9iSEjtR2eAy65g501Kd5dWCar9suio6JVbL oI+txewF7G1Yt2KisD00/lQYLT3cX1d5v6O0ANFwJqfvHuBSuY3d8o1hWjZUBrIP XX/bkjGdq9X+rFFF64ITnh9nq0gKFFyaQhtVcsyYyX98JFOhZ4wXT4huuqTO8kXs L8ZY6eiytToZy07lMqin8lNxg6cJMrRzAKjMeRuFmM1JYzqgTuavEYIFYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp9T19UJZzCLM4itm38pYHVQXMWMB8GA1UdIwQY MBaAFEnRWhDnRxCTbLjDe3xvXx+zjBIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTQzMjUtMjE5MS00MWM2LWIyZWQt ZTIyOWE0MmM0MDg1LzEvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MTQzMjUtMjE5MS00MWM2LWIyZWQtZTIyOWE0MmM0MDg1 LzEvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ7D/X2F A/K7D1hoYhKlzlaqtVI4I4FlLb0hx6zFACzHJiaqlQWTUPqmftD3tsk2QTlKk2RL G/EbAN38o4KZKD3kIZyWT4OfYTMvTgtFWRIDMu4SaNk52j8JysfJLb6+2RYOb3Gg Q4jOm+5jsL/pQ5a2qgdwesK2P58wxMuMVJZlOOZHiSEpwKdyrWwiROs/b1Lkdzo7 fW6SgHvjMd2+0FuhG9i8XHeV3dDQhtWOYfuZsv35Qy+Qhld2nnzWjCPDOSWFCoVn oaS+BMek8htX1ZIhYcly1eOLuQBrWN3HbnEuOfTYX00IvZ6hGlAjXuwtpxvjMWd6 phoG110EOfulhw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:29:51 2025 by rpki-client