This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json) Hash identifier: AMWCfm5Ay6bC1S6LGudOzw2zsGyUb46Fd0DUQ8Qn1C0= Subject key identifier: 9C:36:D2:24:CD:83:1F:BF:9C:45:96:00:94:BF:82:E7:99:B2:49:EA Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b Certificate serial: 019B541933C95021520DA3E2C021AADC5823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft Manifest number: 0FFC Signing time: Thu 25 Dec 2025 06:01:36 +0000 Manifest this update: Thu 25 Dec 2025 06:01:36 +0000 Manifest next update: Fri 26 Dec 2025 06:01:36 +0000 Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: jlfHqwGtZLUSinfcfUZYZEqSryBdqcgBqo/XyaGKX78=) 2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:33:c9:50:21:52:0d:a3:e2:c0:21:aa:dc:58:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b Validity Not Before: Dec 25 06:01:36 2025 GMT Not After : Dec 26 06:01:36 2025 GMT Subject: CN=9c36d224cd831fbf9c45960094bf82e799b249ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:5c:2b:51:2c:2d:e6:61:26:25:b8:a8:3e: a7:a5:45:4b:d1:81:06:a8:07:f5:08:06:c1:da:14: cf:45:23:5c:94:d9:63:36:75:3e:ce:c1:40:79:30: a0:c5:e9:12:2b:0f:87:0c:ac:d3:c7:41:5d:c3:96: 4f:6e:bd:3e:78:60:b3:6e:53:aa:b6:f5:47:74:5d: 3d:75:9f:a2:91:54:21:1a:d3:33:75:e8:32:87:7d: 1a:ef:aa:97:2a:57:33:01:1c:a5:fe:ae:b3:0e:93: 4d:95:64:29:85:96:d2:b3:97:87:be:9d:3a:2f:80: 29:55:f7:5c:02:56:84:9c:93:61:d0:56:f5:8d:bd: 5e:65:9b:e2:f0:f6:30:d4:e0:87:7f:f3:b0:96:39: 78:51:9e:a2:c6:8c:8a:5d:1b:64:7b:ec:c4:4f:31: 68:90:37:a1:2a:79:bc:a5:09:da:2e:c1:bc:d1:fa: c0:6a:22:14:af:87:d5:5b:3b:9d:ec:6e:c7:53:20: 89:75:56:2d:db:bb:77:21:58:53:9e:44:95:89:49: 90:b4:a0:13:a2:88:67:7f:58:5b:c2:e6:d0:8d:62: e2:2f:c0:94:7e:39:9d:eb:a0:c1:5f:11:6d:81:e6: fc:bb:f3:6f:57:bf:08:68:9e:26:ee:87:5f:17:f9: 59:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:36:D2:24:CD:83:1F:BF:9C:45:96:00:94:BF:82:E7:99:B2:49:EA X509v3 Authority Key Identifier: keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:51:cb:f2:a2:7c:c7:0b:85:c7:ab:77:9c:be:bc:fe:36:50: 61:ce:04:db:44:aa:27:22:20:49:81:c6:0b:76:c0:e4:68:2c: bb:87:12:59:ff:bd:a0:b6:f9:eb:14:4a:8d:26:fc:3c:be:b6: e9:04:5b:11:5b:2f:6f:33:a9:1f:88:9c:85:3d:9a:d1:02:b6: c3:45:7e:7f:f4:b3:4e:98:62:83:65:11:3a:5e:f6:70:2c:53: ed:8b:7e:66:d1:40:f7:7b:0e:57:8d:86:3b:60:4c:07:26:36: aa:51:ab:75:ac:a1:73:4d:3c:3e:74:09:93:b7:38:4a:b5:1e: 69:80:c5:df:c8:4a:8a:8c:4d:db:12:d4:6f:c5:5e:40:e0:98: 2d:ff:57:1f:b0:24:26:74:9c:1c:db:e6:d5:17:0d:fc:e4:b5: da:2c:8e:3e:44:b1:79:39:ac:fe:94:f8:a2:9e:85:a4:8e:04: 5a:9d:71:a0:e4:ed:28:01:da:47:61:d6:76:a6:88:f9:4c:7a: cc:b4:f6:3c:df:07:f2:75:50:f7:4b:1d:d8:ba:99:ac:71:a2: 8e:47:14:89:a0:a3:04:3d:5a:c8:09:15:c4:0d:cb:f0:58:2a: af:f8:57:f2:bd:d1:21:ce:93:8a:0f:8e:e5:0d:7b:8b:1e:ef: 81:b9:88:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGTPJUCFSDaPiwCGq3FgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5 YThkNGIwHhcNMjUxMjI1MDYwMTM2WhcNMjUxMjI2MDYwMTM2WjAzMTEwLwYDVQQD Eyg5YzM2ZDIyNGNkODMxZmJmOWM0NTk2MDA5NGJmODJlNzk5YjI0OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqadcK1EsLeZhJiW4qD6npUVL0YEG qAf1CAbB2hTPRSNclNljNnU+zsFAeTCgxekSKw+HDKzTx0Fdw5ZPbr0+eGCzblOq tvVHdF09dZ+ikVQhGtMzdegyh30a76qXKlczARyl/q6zDpNNlWQphZbSs5eHvp06 L4ApVfdcAlaEnJNh0Fb1jb1eZZvi8PYw1OCHf/Owljl4UZ6ixoyKXRtke+zETzFo kDehKnm8pQnaLsG80frAaiIUr4fVWzud7G7HUyCJdVYt27t3IVhTnkSViUmQtKAT oohnf1hbwubQjWLiL8CUfjmd66DBXxFtgeb8u/NvV78IaJ4m7odfF/lZYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw20iTNgx+/nEWWAJS/gueZsknqMB8GA1UdIwQY MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt YjZiNzZlMjJmZmFjLzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1HL8qJ8 xwuFx6t3nL68/jZQYc4E20SqJyIgSYHGC3bA5Ggsu4cSWf+9oLb56xRKjSb8PL62 6QRbEVsvbzOpH4ichT2a0QK2w0V+f/SzTphig2UROl72cCxT7Yt+ZtFA93sOV42G O2BMByY2qlGrdayhc008PnQJk7c4SrUeaYDF38hKioxN2xLUb8VeQOCYLf9XH7Ak JnScHNvm1RcN/OS12iyOPkSxeTms/pT4op6FpI4EWp1xoOTtKAHaR2HWdqaI+Ux6 zLT2PN8H8nVQ90sd2LqZrHGijkcUiaCjBD1ayAkVxA3L8Fgqr/hX8r3RIc6Tig+O 5Q17ix7vgbmIvg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:07:02 2025 by rpki-client