This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json) Hash identifier: KyuyfF6dsVylCJC3rF0IfCZA1jZGRG+6c/MeH1sg8Xo= Subject key identifier: D1:FF:58:9D:A0:FD:D9:00:64:07:1B:7D:EF:F7:5D:01:E1:48:A2:82 Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51 Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51 Certificate serial: 019B70A3FACA8A7ACA0883BA9E017FAF679A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft Manifest number: 0DAA Signing time: Tue 30 Dec 2025 19:02:33 +0000 Manifest this update: Tue 30 Dec 2025 19:02:33 +0000 Manifest next update: Wed 31 Dec 2025 19:02:33 +0000 Files and hashes: 1: 3_xmC1ho9_8ZqNCvSg_4Ci-eALc.roa (hash: F7LfywH9mxXY2KxRJjRgggVLiwyV5wwnZqXcnTIZ+/Y=) 2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: ltPjqRt7dquEheuXnmjDNXrbCYbAsY3Vu6FrNsI/raQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:fa:ca:8a:7a:ca:08:83:ba:9e:01:7f:af:67:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51 Validity Not Before: Dec 30 19:02:33 2025 GMT Not After : Dec 31 19:02:33 2025 GMT Subject: CN=d1ff589da0fdd90064071b7deff75d01e148a282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:09:57:c4:5d:d8:c1:67:d8:e9:bf:7c:62: 00:ad:03:86:66:a3:fd:1a:b8:ed:35:04:46:33:79: 45:27:49:0f:31:20:62:c5:7d:ce:5b:34:ad:1a:b5: 23:c4:c7:81:de:75:48:31:f8:42:c8:b5:e3:a6:07: ca:64:4a:a7:25:2a:d4:5f:89:85:c2:4d:49:6f:f0: 43:9a:f9:7d:bf:35:65:ce:77:8c:41:87:c1:45:6f: c5:26:98:e8:ec:d8:27:02:22:30:6c:cc:c6:59:f6: 0a:2f:f9:30:1a:db:cc:3e:cd:b5:75:df:6b:25:22: 7a:ba:11:ef:31:b4:4d:88:18:d3:5f:6f:4e:48:e5: b6:8d:11:a4:0d:5f:86:95:23:41:95:ed:50:3d:2e: 99:0c:81:05:c4:79:dd:bd:f2:a6:e2:53:c5:8d:14: b6:44:fc:95:64:e5:51:9f:94:c5:6d:c0:6f:c7:8e: b7:15:33:b4:9b:48:87:07:3d:22:05:23:e7:72:73: 89:8b:6e:6b:95:81:f1:c3:f9:1a:98:3a:28:73:1a: a7:4c:9b:50:c6:45:11:5a:9c:5f:d9:b8:35:c0:6b: a0:f7:1b:d8:5c:bc:82:b9:ea:5a:a6:3e:74:fd:4d: c0:52:60:e6:b1:3e:c8:17:49:3c:9e:c3:8a:13:52: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:58:9D:A0:FD:D9:00:64:07:1B:7D:EF:F7:5D:01:E1:48:A2:82 X509v3 Authority Key Identifier: keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a5:e4:85:0d:c1:74:6d:7f:8f:4d:1c:b3:8b:d1:64:2d:95: 8e:16:50:34:fa:df:44:72:0d:91:95:22:d4:a9:6e:37:94:b6: 1d:99:f9:21:1b:9e:1c:ec:d6:5d:44:16:6e:08:1a:ae:7f:cb: 3c:f1:8a:94:32:7d:fa:7a:11:a2:de:a9:2c:fb:2d:07:f4:2f: 92:ab:0d:8e:54:e5:f5:9e:eb:23:a4:39:dc:07:5c:1e:1a:c0: 62:fa:53:8b:a7:d1:da:48:26:51:15:0a:18:94:6c:8f:d6:ce: 63:f5:29:f6:ea:df:3d:1b:1a:92:8f:4a:62:30:ea:b3:1c:33: 8a:e6:1f:1b:13:ea:e1:9c:40:94:4f:20:43:f5:bc:67:b0:f7: b9:a6:e7:ea:c6:73:da:1f:39:ca:28:f3:7c:03:a0:e2:ab:a4: 3b:72:ad:42:2f:56:1a:2b:36:f6:d6:5b:c7:22:47:a8:03:9c: 52:93:90:40:dc:0b:75:8d:fa:d7:99:38:31:9d:b0:29:e7:6d: ae:76:55:3d:db:28:dd:e5:fc:ab:45:68:93:34:de:9f:9b:6f: e6:9a:31:c8:16:3e:88:49:b8:fc:65:8f:b7:2a:9a:d9:cb:31: 36:ca:63:47:64:ba:7c:0f:24:6c:7b:42:07:d2:88:27:4d:49: 3a:aa:85:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo/rKinrKCIO6ngF/r2eaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyY2NkYTFjNTQ4N2NiOTM4ZDU3ZWE2MWNjMmQ2MmQzMTA3 MGRiNTEwHhcNMjUxMjMwMTkwMjMzWhcNMjUxMjMxMTkwMjMzWjAzMTEwLwYDVQQD EyhkMWZmNTg5ZGEwZmRkOTAwNjQwNzFiN2RlZmY3NWQwMWUxNDhhMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEQJV8Rd2MFn2Om/fGIArQOGZqP9 GrjtNQRGM3lFJ0kPMSBixX3OWzStGrUjxMeB3nVIMfhCyLXjpgfKZEqnJSrUX4mF wk1Jb/BDmvl9vzVlzneMQYfBRW/FJpjo7NgnAiIwbMzGWfYKL/kwGtvMPs21dd9r JSJ6uhHvMbRNiBjTX29OSOW2jRGkDV+GlSNBle1QPS6ZDIEFxHndvfKm4lPFjRS2 RPyVZOVRn5TFbcBvx463FTO0m0iHBz0iBSPncnOJi25rlYHxw/kamDoocxqnTJtQ xkURWpxf2bg1wGug9xvYXLyCuepapj50/U3AUmDmsT7IF0k8nsOKE1LGywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH/WJ2g/dkAZAcbfe/3XQHhSKKCMB8GA1UdIwQY MBaAFLLM2hxUh8uTjVfqYcwtYtMQcNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzIt M2RiOTYxNzAzZWE5LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzItM2RiOTYxNzAzZWE5 LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqXkhQ3B dG1/j00cs4vRZC2VjhZQNPrfRHINkZUi1KluN5S2HZn5IRueHOzWXUQWbggarn/L PPGKlDJ9+noRot6pLPstB/QvkqsNjlTl9Z7rI6Q53AdcHhrAYvpTi6fR2kgmURUK GJRsj9bOY/Up9urfPRsako9KYjDqsxwziuYfGxPq4ZxAlE8gQ/W8Z7D3uabn6sZz 2h85yijzfAOg4qukO3KtQi9WGis29tZbxyJHqAOcUpOQQNwLdY3615k4MZ2wKedt rnZVPdso3eX8q0VokzTen5tv5poxyBY+iEm4/GWPtyqa2csxNspjR2S6fA8kbHtC B9KIJ01JOqqFIg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:10:13 2025 by rpki-client