This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json) Hash identifier: 4QUPwRAeiZGeJVogT86TLaELAxYKQiIz7iaqZQFbc88= Subject key identifier: A5:30:57:7E:0A:24:DD:84:EF:05:04:2B:49:9F:4D:9E:57:56:2F:B8 Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735 Certificate serial: 019B5BD211333D2C2D111EF29CC823288B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft Manifest number: 0E7A Signing time: Fri 26 Dec 2025 18:00:52 +0000 Manifest this update: Fri 26 Dec 2025 18:00:52 +0000 Manifest next update: Sat 27 Dec 2025 18:00:52 +0000 Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=) 2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=) 3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: i4LlFbZ6nUVPuZafjPZLSqo6QEGq576eO1pYnqJ8ks4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:11:33:3d:2c:2d:11:1e:f2:9c:c8:23:28:8b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735 Validity Not Before: Dec 26 18:00:52 2025 GMT Not After : Dec 27 18:00:52 2025 GMT Subject: CN=a530577e0a24dd84ef05042b499f4d9e57562fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:41:eb:d1:08:fa:68:a6:d0:de:f0:95:fe: 32:ab:42:03:49:0c:6a:b8:ba:4b:6e:79:c2:12:c0: 3d:a0:79:72:78:7c:c7:5e:15:3d:82:61:98:bb:14: fa:53:85:b1:49:56:aa:0a:a1:a2:47:12:43:f0:38: ab:15:c1:f7:1d:c3:06:41:3e:44:78:5f:c6:9d:ec: 69:0d:b6:8f:4a:67:47:d0:7c:c4:ce:80:80:be:1d: b6:c8:8f:85:42:18:22:e7:ce:3b:14:44:95:4d:4e: de:22:25:e1:0d:22:df:de:23:21:85:c8:bd:e1:2d: 9a:08:12:f3:60:85:9c:fb:f0:fb:78:48:95:57:a0: b6:36:b7:16:41:ca:e2:b3:85:65:8e:02:d5:5a:ef: dd:a9:5e:23:aa:eb:ea:1a:08:c9:49:dc:48:93:d6: 24:1c:98:71:1a:cf:6d:30:a0:01:96:28:5c:36:b1: 27:69:78:f6:2e:8d:0f:ae:ac:66:7d:33:ea:0d:69: b1:30:fa:65:a8:a0:be:44:9f:77:a7:b3:bc:b9:ab: dc:20:82:bd:c2:cc:49:52:81:cc:07:5e:91:00:f8: 9b:07:cc:9d:d2:48:af:8d:6e:1f:c4:42:1a:b7:b0: c9:e0:4c:12:d7:77:4f:84:77:6c:1e:45:74:ca:19: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:30:57:7E:0A:24:DD:84:EF:05:04:2B:49:9F:4D:9E:57:56:2F:B8 X509v3 Authority Key Identifier: keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:43:5a:1b:49:8c:36:7e:f7:25:0b:7f:a3:82:11:dc:02: d8:65:c1:b5:48:70:e1:ce:22:8b:38:3e:c3:16:31:25:ef:18: 12:58:c3:19:6f:ad:f6:60:df:31:80:19:66:bb:76:cf:7e:62: 04:be:71:d8:df:70:08:85:14:28:38:ee:f6:f7:2f:34:a1:d1: 9d:0c:df:da:85:90:02:24:c7:dc:0a:4e:f1:18:d5:35:72:3d: f1:30:ec:c8:8a:52:ff:29:f8:a2:d9:00:2f:85:3b:79:2f:52: a8:1f:63:bf:b4:e8:0d:fb:07:da:15:86:00:91:4d:18:fa:56: ce:5d:93:23:2d:37:cc:15:56:ff:e5:fa:41:e0:42:7f:23:04: 45:24:fc:e4:15:c3:90:3f:ee:fe:b0:93:5f:65:4b:32:81:99: 42:a6:8b:39:cf:f9:54:18:0e:0b:88:03:4d:6b:25:62:66:93: ce:74:32:0e:e1:26:7a:9a:cb:f8:f1:e8:2f:26:1c:b5:85:08: c3:4d:fd:2d:0f:e6:0c:c9:ae:06:90:a7:4f:da:9c:aa:8a:a8: 25:c1:7d:54:dd:bc:d4:61:03:1d:53:78:19:92:35:d7:d2:e6: d7:54:53:40:4c:8c:05:c8:4d:96:b9:25:d1:30:a8:85:24:ad: 76:54:bb:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0hEzPSwtER7ynMgjKIuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm MDc3MzUwHhcNMjUxMjI2MTgwMDUyWhcNMjUxMjI3MTgwMDUyWjAzMTEwLwYDVQQD EyhhNTMwNTc3ZTBhMjRkZDg0ZWYwNTA0MmI0OTlmNGQ5ZTU3NTYyZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrlB69EI+mim0N7wlf4yq0IDSQxq uLpLbnnCEsA9oHlyeHzHXhU9gmGYuxT6U4WxSVaqCqGiRxJD8DirFcH3HcMGQT5E eF/GnexpDbaPSmdH0HzEzoCAvh22yI+FQhgi5847FESVTU7eIiXhDSLf3iMhhci9 4S2aCBLzYIWc+/D7eEiVV6C2NrcWQcris4VljgLVWu/dqV4jquvqGgjJSdxIk9Yk HJhxGs9tMKABlihcNrEnaXj2Lo0PrqxmfTPqDWmxMPplqKC+RJ93p7O8uavcIIK9 wsxJUoHMB16RAPibB8yd0kivjW4fxEIat7DJ4EwS13dPhHdsHkV0yhmARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUwV34KJN2E7wUEK0mfTZ5XVi+4MB8GA1UdIwQY MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt Nzc3ZWU5NTU2MjEwLzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZNDWhtJ jDZ+9yULf6OCEdwC2GXBtUhw4c4iizg+wxYxJe8YEljDGW+t9mDfMYAZZrt2z35i BL5x2N9wCIUUKDju9vcvNKHRnQzf2oWQAiTH3ApO8RjVNXI98TDsyIpS/yn4otkA L4U7eS9SqB9jv7ToDfsH2hWGAJFNGPpWzl2TIy03zBVW/+X6QeBCfyMERST85BXD kD/u/rCTX2VLMoGZQqaLOc/5VBgOC4gDTWslYmaTznQyDuEmeprL+PHoLyYctYUI w039LQ/mDMmuBpCnT9qcqoqoJcF9VN281GEDHVN4GZI119Lm11RTQEyMBchNlrkl 0TCohSStdlS7rg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:19:24 2025 by rpki-client