This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json) Hash identifier: +oA/+LElTonpvRmGcVlM9smf8Q/zOX7WRWciUUk9duI= Subject key identifier: 68:28:CC:3F:5A:AC:B7:22:FC:31:4B:D4:DB:EB:69:63:AD:D7:1F:AB Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b Certificate serial: 019B522ABA534984BC051337B19D7EB5E3E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft Manifest number: 0FFB Signing time: Wed 24 Dec 2025 21:01:30 +0000 Manifest this update: Wed 24 Dec 2025 21:01:30 +0000 Manifest next update: Thu 25 Dec 2025 21:01:30 +0000 Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: WUqByizd+4qfCJlx+1bSMUsmkupciDtB9pj1LcRI7dQ=) 2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:ba:53:49:84:bc:05:13:37:b1:9d:7e:b5:e3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b Validity Not Before: Dec 24 21:01:30 2025 GMT Not After : Dec 25 21:01:30 2025 GMT Subject: CN=6828cc3f5aacb722fc314bd4dbeb6963add71fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4c:f6:ab:56:fb:3f:28:06:07:a2:cb:87:31: 77:10:7b:70:73:99:74:37:60:65:5b:8e:02:d8:0c: fe:a6:00:60:4d:2a:90:d9:b9:d3:b2:e5:27:5f:ef: 0e:fa:5f:fc:a1:b3:89:28:aa:e2:c1:66:61:5f:ec: 15:ce:9b:a9:05:32:bd:93:fa:49:e1:10:ab:e1:52: 9e:b3:98:e6:5a:9f:e0:51:31:85:03:5c:10:3a:8f: 36:df:9c:8e:d6:8c:f1:0d:d5:72:87:1a:f4:fa:f9: 8f:5d:79:d2:5c:af:16:f2:60:e1:7a:6b:74:e1:53: db:6f:2c:52:b9:2e:0e:e0:ef:da:5a:f7:e4:d1:e0: e7:d5:10:f1:07:c7:81:b6:8b:b9:36:eb:bf:da:c9: b2:fa:21:dc:54:10:2a:ba:5e:25:64:6e:b0:82:e9: e8:6f:c9:82:f9:29:95:0f:3d:58:5a:af:64:15:ea: e2:69:b7:c3:43:b3:19:73:3f:8b:0b:f4:2d:3c:8a: a4:c0:1e:da:2a:e4:fe:ef:73:c7:3b:5c:94:75:c8: a5:b4:3d:55:56:ac:5d:0f:e1:b5:a4:05:31:76:84: bf:ea:06:d0:2f:8c:09:4a:9f:a5:e2:94:8c:79:93: 33:51:20:54:db:27:97:3b:b7:80:1f:77:37:ef:34: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:CC:3F:5A:AC:B7:22:FC:31:4B:D4:DB:EB:69:63:AD:D7:1F:AB X509v3 Authority Key Identifier: keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4e:d4:c1:50:8b:3b:c7:8a:33:6f:ad:f2:36:95:44:f3:fe: 41:dc:4b:64:4a:78:08:67:10:22:89:6d:e7:ea:76:f6:37:cb: b0:64:34:af:c3:8d:e4:cd:63:95:ba:3c:48:81:4b:c6:71:8d: eb:49:f9:11:e4:3d:45:c8:4f:36:09:4f:8f:e0:05:44:49:e2: 8a:8e:c6:01:4f:a5:cc:f2:5c:ea:e6:10:5c:3f:01:82:b3:78: 22:7a:a1:23:74:6e:92:05:fd:65:e2:31:ec:16:c9:61:5c:49: fb:4b:92:1d:5e:5c:e3:1c:8d:60:16:96:31:bb:c2:fe:eb:87: 47:e7:da:b1:6d:65:52:0f:44:5b:ab:e2:6f:7a:81:6f:16:7c: d3:92:8b:bc:c9:92:bf:f0:28:cf:76:d6:f0:18:4f:cb:b4:28: c8:01:f9:2a:32:b2:4f:58:bc:8a:0c:95:a6:59:bf:83:7b:89: 32:ef:83:13:23:81:e8:16:dd:15:33:ae:77:24:7f:13:e8:d3: 63:59:8d:70:ff:98:26:cb:81:2c:4f:ca:32:64:31:39:77:f1: 8d:c2:c7:9e:4d:82:c0:bf:d7:81:c7:47:a6:c6:a7:8c:99:f7: 97:e2:9a:63:20:9d:60:ba:d3:c8:41:11:5b:79:47:b0:3d:11: 79:8c:c8:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKrpTSYS8BRM3sZ1+tePhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5 YThkNGIwHhcNMjUxMjI0MjEwMTMwWhcNMjUxMjI1MjEwMTMwWjAzMTEwLwYDVQQD Eyg2ODI4Y2MzZjVhYWNiNzIyZmMzMTRiZDRkYmViNjk2M2FkZDcxZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0z2q1b7PygGB6LLhzF3EHtwc5l0 N2BlW44C2Az+pgBgTSqQ2bnTsuUnX+8O+l/8obOJKKriwWZhX+wVzpupBTK9k/pJ 4RCr4VKes5jmWp/gUTGFA1wQOo8235yO1ozxDdVyhxr0+vmPXXnSXK8W8mDhemt0 4VPbbyxSuS4O4O/aWvfk0eDn1RDxB8eBtou5Nuu/2smy+iHcVBAqul4lZG6wguno b8mC+SmVDz1YWq9kFeriabfDQ7MZcz+LC/QtPIqkwB7aKuT+73PHO1yUdciltD1V VqxdD+G1pAUxdoS/6gbQL4wJSp+l4pSMeZMzUSBU2yeXO7eAH3c37zRBOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgozD9arLci/DFL1NvraWOt1x+rMB8GA1UdIwQY MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt YjZiNzZlMjJmZmFjLzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoE7UwVCL O8eKM2+t8jaVRPP+QdxLZEp4CGcQIolt5+p29jfLsGQ0r8ON5M1jlbo8SIFLxnGN 60n5EeQ9RchPNglPj+AFREniio7GAU+lzPJc6uYQXD8BgrN4InqhI3RukgX9ZeIx 7BbJYVxJ+0uSHV5c4xyNYBaWMbvC/uuHR+fasW1lUg9EW6vib3qBbxZ805KLvMmS v/Aoz3bW8BhPy7QoyAH5KjKyT1i8igyVplm/g3uJMu+DEyOB6BbdFTOudyR/E+jT Y1mNcP+YJsuBLE/KMmQxOXfxjcLHnk2CwL/XgcdHpsanjJn3l+KaYyCdYLrTyEER W3lHsD0ReYzIIw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:23:48 2025 by rpki-client