This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft File: aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft (raw, json) Hash identifier: DDI8vr/KvhlwiH1yJqWAGHt2CmrdskPYAfyKpdAh+nM= Subject key identifier: 61:D3:08:A0:6E:18:A6:49:38:DC:A7:3D:CD:17:0D:F6:4F:B3:EB:ED Authority key identifier: 68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28 Certificate issuer: /CN=683b33dc7218b3fe883c49505134cb39a664fd28 Certificate serial: 019B4DE0D24660B4451C6F29EA90563935EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft Manifest number: 0BFA Signing time: Wed 24 Dec 2025 01:02:18 +0000 Manifest this update: Wed 24 Dec 2025 01:02:18 +0000 Manifest next update: Thu 25 Dec 2025 01:02:18 +0000 Files and hashes: 1: PecnHh8YFMYIBEgD1PQBC-sYFMY.roa (hash: G67Iyj0Q7isunYlJO9b465cfL0xQGyEo+TS/2SlDQcA=) 2: aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl (hash: L/PSyKYs8qBa7ATe0bekPFUHMSqOz+e8o6lSkfpKcIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:d2:46:60:b4:45:1c:6f:29:ea:90:56:39:35:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=683b33dc7218b3fe883c49505134cb39a664fd28 Validity Not Before: Dec 24 01:02:18 2025 GMT Not After : Dec 25 01:02:18 2025 GMT Subject: CN=61d308a06e18a64938dca73dcd170df64fb3ebed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:52:4b:85:e0:6d:f1:48:57:ed:b2:60:26: 1a:80:85:89:58:62:d2:a0:0f:9e:76:c9:15:1d:49: 6f:fa:90:22:fd:fe:5a:3d:d8:b4:e2:3a:58:e4:36: 1b:f5:1e:a4:31:b2:eb:83:5e:9d:00:dd:df:90:a2: 72:7d:d4:fa:ee:9e:d1:74:6c:fa:af:c7:23:ee:bf: cd:b6:6d:76:a0:ac:9b:1a:68:65:da:e5:39:e0:b4: ba:7a:46:0c:57:68:6b:d4:b7:87:69:18:ae:26:79: e8:ba:4c:e7:60:c2:4e:b2:47:4d:11:3b:12:b9:dd: 31:81:3c:d3:43:53:be:76:b5:04:42:c7:14:b2:6e: 2b:80:f0:f7:6a:79:40:be:f1:04:bc:99:94:c0:cc: 49:c1:3f:40:d7:99:c5:3a:b4:c1:c0:c7:e7:c6:c0: 72:83:17:a5:08:27:20:5e:36:03:5c:2c:36:5f:3c: 0b:37:bc:1b:03:7a:26:09:1c:ac:7e:31:ea:9a:26: 34:68:b4:17:ce:33:49:93:1d:b1:4f:c5:c4:d5:cf: 2f:48:32:ae:1f:1e:75:c5:8d:c1:73:b1:f0:08:2c: d1:70:3f:30:0c:d7:36:3d:7e:7a:72:43:95:2d:eb: 5a:ef:38:97:ce:16:4f:4c:94:fa:9c:a8:b5:35:4c: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:08:A0:6E:18:A6:49:38:DC:A7:3D:CD:17:0D:F6:4F:B3:EB:ED X509v3 Authority Key Identifier: keyid:68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9f:5a:37:00:9f:01:44:c9:9c:77:d0:d7:08:12:b9:3e:b9: 5f:b8:12:bc:ab:7e:0d:9a:2c:7f:55:6f:b4:17:e0:1e:13:bc: 1a:ea:ee:75:11:69:d9:3c:99:67:50:ba:f0:ed:11:f6:39:cd: 8e:68:2c:d1:35:da:f7:4b:b9:b4:ab:a8:ab:f1:ae:98:0a:91: c0:8c:dc:39:e7:31:20:63:05:cb:e8:18:34:8b:4a:ed:74:e5: 56:12:7c:86:7f:a9:ec:f4:f6:c8:09:a2:ed:98:3e:e3:a5:09: 43:f4:1b:4f:80:8f:81:a2:4a:23:7a:62:f9:0f:58:df:2f:6f: 53:29:26:a7:e0:b6:9d:09:f0:65:2b:55:31:52:87:db:8a:ab: c8:cd:f3:60:31:32:91:77:77:e3:7d:22:3d:ff:91:2b:e3:72: 3b:a9:a7:70:f7:88:c1:23:0d:f8:e0:2b:56:04:8f:ed:60:1f: 63:f9:41:ba:86:f2:ad:38:cf:5f:3e:cd:40:9c:56:a5:26:d6: b4:ac:9d:ef:cd:1e:67:e4:31:13:64:4e:89:8a:85:89:7b:55: b2:e7:28:65:3a:a9:2f:ed:30:4f:f5:b6:89:99:a7:75:f9:b0: 1c:3e:39:99:7a:24:05:eb:61:70:01:e8:25:5a:fe:53:82:1d: 51:3b:36:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4NJGYLRFHG8p6pBWOTXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4M2IzM2RjNzIxOGIzZmU4ODNjNDk1MDUxMzRjYjM5YTY2 NGZkMjgwHhcNMjUxMjI0MDEwMjE4WhcNMjUxMjI1MDEwMjE4WjAzMTEwLwYDVQQD Eyg2MWQzMDhhMDZlMThhNjQ5MzhkY2E3M2RjZDE3MGRmNjRmYjNlYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOdSS4XgbfFIV+2yYCYagIWJWGLS oA+edskVHUlv+pAi/f5aPdi04jpY5DYb9R6kMbLrg16dAN3fkKJyfdT67p7RdGz6 r8cj7r/Ntm12oKybGmhl2uU54LS6ekYMV2hr1LeHaRiuJnnoukznYMJOskdNETsS ud0xgTzTQ1O+drUEQscUsm4rgPD3anlAvvEEvJmUwMxJwT9A15nFOrTBwMfnxsBy gxelCCcgXjYDXCw2XzwLN7wbA3omCRysfjHqmiY0aLQXzjNJkx2xT8XE1c8vSDKu Hx51xY3Bc7HwCCzRcD8wDNc2PX56ckOVLeta7ziXzhZPTJT6nKi1NUxWBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHTCKBuGKZJONynPc0XDfZPs+vtMB8GA1UdIwQY MBaAFGg7M9xyGLP+iDxJUFE0yzmmZP0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURzejNISVlzXzZJUEVsUVVUVExPYVprX1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iZTNlMDAtM2M5Ni00Y2RlLWI4MWEt MTRjNmI5NTRkOTc2LzEvYURzejNISVlzXzZJUEVsUVVUVExPYVprX1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iZTNlMDAtM2M5Ni00Y2RlLWI4MWEtMTRjNmI5NTRkOTc2 LzEvYURzejNISVlzXzZJUEVsUVVUVExPYVprX1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZ9aNwCf AUTJnHfQ1wgSuT65X7gSvKt+DZosf1VvtBfgHhO8GurudRFp2TyZZ1C68O0R9jnN jmgs0TXa90u5tKuoq/GumAqRwIzcOecxIGMFy+gYNItK7XTlVhJ8hn+p7PT2yAmi 7Zg+46UJQ/QbT4CPgaJKI3pi+Q9Y3y9vUykmp+C2nQnwZStVMVKH24qryM3zYDEy kXd3430iPf+RK+NyO6mncPeIwSMN+OArVgSP7WAfY/lBuobyrTjPXz7NQJxWpSbW tKyd780eZ+QxE2ROiYqFiXtVsucoZTqpL+0wT/W2iZmndfmwHD45mXokBethcAHo JVr+U4IdUTs29A== -----END CERTIFICATE-----Generated at Wed Dec 24 03:31:05 2025 by rpki-client