This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json) Hash identifier: F0IcZTN6cHJsy1/Ukl0+lY0ItxQbFwCyh70j2ecSNcg= Subject key identifier: 60:F8:23:09:3F:36:E1:EC:23:10:78:87:22:F9:FB:76:9B:CA:2D:DD Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735 Certificate serial: 019B71100E6D4AA61E443EB7E5ADE50886DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft Manifest number: 0E85 Signing time: Tue 30 Dec 2025 21:00:36 +0000 Manifest this update: Tue 30 Dec 2025 21:00:36 +0000 Manifest next update: Wed 31 Dec 2025 21:00:36 +0000 Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=) 2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=) 3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: WtcG8IkyTA5c2IC3AACWCtTylfveyyVDT2eeXLixwLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:0e:6d:4a:a6:1e:44:3e:b7:e5:ad:e5:08:86:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735 Validity Not Before: Dec 30 21:00:36 2025 GMT Not After : Dec 31 21:00:36 2025 GMT Subject: CN=60f823093f36e1ec2310788722f9fb769bca2ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:c3:c0:7b:6e:c7:14:ee:6e:e4:70:c2:77: d6:0c:41:a7:2e:82:ac:5e:8b:e3:94:20:e4:9e:2a: d0:58:59:78:f0:b4:f3:f3:82:a5:59:90:09:36:87: 88:e0:06:de:5b:d9:a4:8d:38:ec:ac:1f:2f:c4:cc: 64:17:b9:f7:41:f5:51:67:fd:d1:c9:66:66:3e:6f: 22:a2:5b:df:bb:a1:99:0e:65:92:ce:e3:5d:14:9b: 8a:f9:fd:c4:13:a7:e1:b3:8c:40:96:60:1a:ca:78: 31:73:c9:a0:34:a4:48:5a:04:7f:f4:60:fa:87:2b: a2:a3:55:a1:50:49:6b:5a:76:bd:72:b9:78:dc:0a: 3f:71:d3:e2:a1:c6:1c:0a:e5:a6:b0:9a:e6:01:be: 79:a6:3f:4b:30:4c:22:34:23:e3:04:bc:23:67:76: 91:3e:40:ae:34:ab:85:87:bc:45:28:cb:8d:ec:16: 2a:fb:14:68:16:86:f6:e3:5a:d4:d2:8d:78:eb:dd: 92:57:42:4f:98:21:62:2b:71:b1:0c:94:8c:aa:ba: 8d:96:d0:96:17:6a:61:87:f2:7f:28:b1:59:68:24: 3c:da:e4:13:d3:e7:98:c0:06:34:c5:c2:90:9b:64: 46:be:24:01:0d:3b:44:b9:5d:d1:50:0d:5f:11:bf: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:23:09:3F:36:E1:EC:23:10:78:87:22:F9:FB:76:9B:CA:2D:DD X509v3 Authority Key Identifier: keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:43:c1:3c:ed:c9:71:c1:75:80:a4:72:28:f7:3c:5e:b9:2f: f6:ca:94:b7:d6:4f:68:a9:ed:1b:c7:53:3d:15:bd:2e:0a:cf: 8f:54:f5:cb:6e:9a:df:40:03:d5:05:1c:f2:24:72:c6:e2:d6: 69:1e:04:ca:10:95:e3:90:97:0a:30:69:f1:ee:8c:6f:59:ef: 47:7e:fa:02:b2:2a:a3:ff:79:41:a9:0e:8d:9e:96:80:23:be: 65:83:7b:1e:de:23:73:46:c7:9d:ff:e8:75:3b:28:98:88:4a: 63:65:57:c3:ec:9f:de:f3:e6:4f:a9:19:00:7c:bb:8e:32:af: e1:e9:48:ff:f3:ff:10:e6:46:1d:4d:d9:74:09:0c:e7:c9:33: 2e:0d:b7:19:45:6c:ce:07:fd:c8:b9:3b:dd:52:8d:c9:16:0a: bc:38:8f:84:0e:1c:46:87:1c:07:f6:3a:fe:10:cd:94:1d:43: ed:6d:ed:3a:6e:ff:10:4a:7d:a0:45:ef:e3:d4:f3:6d:ce:ab: 0d:75:12:f4:2f:5a:19:05:f1:66:2a:50:fc:1d:f8:f1:c0:5f: 27:87:e2:9a:9a:c5:d3:92:ee:33:5d:2b:cd:d6:cb:bd:a3:8f: c4:7f:71:fc:c4:47:b7:a9:6b:53:2a:3e:48:ba:5e:bb:94:b2: 4d:db:16:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEA5tSqYeRD635a3lCIbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm MDc3MzUwHhcNMjUxMjMwMjEwMDM2WhcNMjUxMjMxMjEwMDM2WjAzMTEwLwYDVQQD Eyg2MGY4MjMwOTNmMzZlMWVjMjMxMDc4ODcyMmY5ZmI3NjliY2EyZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g7DwHtuxxTubuRwwnfWDEGnLoKs XovjlCDknirQWFl48LTz84KlWZAJNoeI4AbeW9mkjTjsrB8vxMxkF7n3QfVRZ/3R yWZmPm8iolvfu6GZDmWSzuNdFJuK+f3EE6fhs4xAlmAayngxc8mgNKRIWgR/9GD6 hyuio1WhUElrWna9crl43Ao/cdPiocYcCuWmsJrmAb55pj9LMEwiNCPjBLwjZ3aR PkCuNKuFh7xFKMuN7BYq+xRoFob241rU0o14692SV0JPmCFiK3GxDJSMqrqNltCW F2phh/J/KLFZaCQ82uQT0+eYwAY0xcKQm2RGviQBDTtEuV3RUA1fEb9TFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGD4Iwk/NuHsIxB4hyL5+3abyi3dMB8GA1UdIwQY MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt Nzc3ZWU5NTU2MjEwLzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkPBPO3J ccF1gKRyKPc8Xrkv9sqUt9ZPaKntG8dTPRW9LgrPj1T1y26a30AD1QUc8iRyxuLW aR4EyhCV45CXCjBp8e6Mb1nvR376ArIqo/95QakOjZ6WgCO+ZYN7Ht4jc0bHnf/o dTsomIhKY2VXw+yf3vPmT6kZAHy7jjKv4elI//P/EOZGHU3ZdAkM58kzLg23GUVs zgf9yLk73VKNyRYKvDiPhA4cRoccB/Y6/hDNlB1D7W3tOm7/EEp9oEXv49Tzbc6r DXUS9C9aGQXxZipQ/B348cBfJ4fimprF05LuM10rzdbLvaOPxH9x/MRHt6lrUyo+ SLpeu5SyTdsWMw== -----END CERTIFICATE-----Generated at Wed Dec 31 01:49:16 2025 by rpki-client