This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json) Hash identifier: lk0C8XEPpy8C+XUAkzPg5Jh0UniMlyODK4M3oJMTE9o= Subject key identifier: 69:22:21:8B:46:B8:D8:17:7C:05:F3:E5:08:77:1B:0A:55:CB:B6:1C Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb Certificate serial: 019B3EDB19DA180A6C3284D8CABF56798086 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft Manifest number: 0EBD Signing time: Sun 21 Dec 2025 03:01:44 +0000 Manifest this update: Sun 21 Dec 2025 03:01:44 +0000 Manifest next update: Mon 22 Dec 2025 03:01:44 +0000 Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=) 2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: p7PrXBv0in9N6JxppupbZN6sXCs3OiHTb4tFXWtmjn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:19:da:18:0a:6c:32:84:d8:ca:bf:56:79:80:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb Validity Not Before: Dec 21 03:01:44 2025 GMT Not After : Dec 22 03:01:44 2025 GMT Subject: CN=6922218b46b8d8177c05f3e508771b0a55cbb61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:86:33:84:7c:d1:a7:0f:26:32:66:7d:2b:31: bc:f9:49:e6:96:6e:0e:79:8c:ee:0d:a8:3c:c7:a8: 6e:aa:9e:27:06:ce:6f:a6:85:40:38:ad:df:8a:ba: 2c:94:b7:83:60:13:4b:27:a8:15:84:37:26:68:4d: 3d:c2:33:21:6f:54:65:0a:d3:2c:53:cb:73:dc:4c: ff:57:ab:df:45:93:05:eb:76:30:9f:71:5a:8c:3d: 69:48:9b:ff:8f:6c:19:7d:30:5c:10:cd:a6:6c:b0: 81:39:74:a6:85:b6:27:ef:f0:65:d4:a6:09:a0:dc: eb:62:3f:9a:53:d8:f8:20:45:c2:1d:f9:84:75:73: 8e:1b:3b:2b:f1:9b:6a:24:ac:a1:9c:dc:2e:94:6d: 64:48:99:54:1d:df:e6:69:f4:b1:89:46:6b:9a:53: 51:b4:d1:cd:0f:95:55:53:6a:49:c1:ff:23:b8:c0: 7d:8e:fb:ac:14:c9:76:7a:7d:74:22:87:4f:b0:b5: dd:48:64:07:75:b1:a3:df:10:7f:ab:c6:b1:e6:83: f6:06:e2:19:64:29:8c:00:e4:b1:c4:8e:bb:90:bd: 59:57:8e:18:fd:38:79:4b:b9:e1:30:b5:20:fa:5a: 33:c9:de:62:2e:4b:9b:7f:bb:74:24:b6:2f:59:fe: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:22:21:8B:46:B8:D8:17:7C:05:F3:E5:08:77:1B:0A:55:CB:B6:1C X509v3 Authority Key Identifier: keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:6e:ef:c4:77:20:3f:34:bf:58:72:e8:76:06:34:0b:1a:05: 77:ef:88:7c:73:e3:a3:5f:c9:98:5d:25:d5:f8:63:86:e1:fd: 61:79:7e:82:10:a2:ea:22:85:90:c0:37:ea:cb:a5:c5:86:28: c9:c4:e4:4a:b3:2a:96:03:05:ac:57:08:e5:a9:56:c2:cf:a4: 00:67:ee:68:c2:8a:93:4d:ad:ba:1d:a4:61:38:4e:38:4d:af: e8:b9:af:bc:ed:df:93:7b:2e:c5:88:e8:35:94:66:b2:b9:4f: 40:6f:4a:96:30:a5:3f:22:9f:c4:83:b5:19:61:1c:48:79:74: 33:83:47:fd:79:84:24:b4:57:8a:1e:39:9f:2d:87:4a:33:39: cb:2e:24:9c:fb:cf:45:09:79:6d:26:fd:87:2a:5e:1d:d9:59: 48:c6:8b:a6:4d:51:8f:da:9d:f5:95:f9:84:c5:97:9b:93:b2: bb:4e:b3:d4:34:a2:68:f3:61:7d:7b:b2:90:bf:83:97:7b:48: 06:62:66:31:05:b5:a5:e9:d2:c2:17:19:b4:73:e3:cf:c2:fb: 19:73:8b:31:f3:d8:92:9b:d0:9f:6f:5d:1d:e4:22:ad:7c:7b: 5f:c5:86:7c:8b:b5:e3:49:cb:c5:2d:42:f1:19:36:41:5d:27: 8e:cf:aa:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2xnaGApsMoTYyr9WeYCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj NjYxZWIwHhcNMjUxMjIxMDMwMTQ0WhcNMjUxMjIyMDMwMTQ0WjAzMTEwLwYDVQQD Eyg2OTIyMjE4YjQ2YjhkODE3N2MwNWYzZTUwODc3MWIwYTU1Y2JiNjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YYzhHzRpw8mMmZ9KzG8+Unmlm4O eYzuDag8x6huqp4nBs5vpoVAOK3firoslLeDYBNLJ6gVhDcmaE09wjMhb1RlCtMs U8tz3Ez/V6vfRZMF63Ywn3FajD1pSJv/j2wZfTBcEM2mbLCBOXSmhbYn7/Bl1KYJ oNzrYj+aU9j4IEXCHfmEdXOOGzsr8ZtqJKyhnNwulG1kSJlUHd/mafSxiUZrmlNR tNHND5VVU2pJwf8juMB9jvusFMl2en10IodPsLXdSGQHdbGj3xB/q8ax5oP2BuIZ ZCmMAOSxxI67kL1ZV44Y/Th5S7nhMLUg+lozyd5iLkubf7t0JLYvWf4RYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkiIYtGuNgXfAXz5Qh3GwpVy7YcMB8GA1UdIwQY MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3 LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom7vxHcg PzS/WHLodgY0CxoFd++IfHPjo1/JmF0l1fhjhuH9YXl+ghCi6iKFkMA36sulxYYo ycTkSrMqlgMFrFcI5alWws+kAGfuaMKKk02tuh2kYThOOE2v6LmvvO3fk3suxYjo NZRmsrlPQG9KljClPyKfxIO1GWEcSHl0M4NH/XmEJLRXih45ny2HSjM5yy4knPvP RQl5bSb9hypeHdlZSMaLpk1Rj9qd9ZX5hMWXm5Oyu06z1DSiaPNhfXuykL+Dl3tI BmJmMQW1penSwhcZtHPjz8L7GXOLMfPYkpvQn29dHeQirXx7X8WGfIu140nLxS1C 8Rk2QV0njs+qxA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:07 2025 by rpki-client