This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json) Hash identifier: iG8iUVWo8/GhNxw2R5KTrgd7wwa4zYBevcHBS/3nbLk= Subject key identifier: E4:31:3F:E7:99:DD:59:9E:FD:92:86:0E:CB:2D:E2:FA:7E:66:EA:13 Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a Certificate serial: 019B2F9EE22442710DA18D4D16887CC0524B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft Manifest number: 06A3 Signing time: Thu 18 Dec 2025 04:01:40 +0000 Manifest this update: Thu 18 Dec 2025 04:01:40 +0000 Manifest next update: Fri 19 Dec 2025 04:01:40 +0000 Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: wnm++dFSoz9NsG46dGR41304ceLj1oRSHGRqlp6QeTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:e2:24:42:71:0d:a1:8d:4d:16:88:7c:c0:52:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a Validity Not Before: Dec 18 04:01:40 2025 GMT Not After : Dec 19 04:01:40 2025 GMT Subject: CN=e4313fe799dd599efd92860ecb2de2fa7e66ea13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:8f:fb:5d:24:d6:90:a2:c0:51:a2:75:18: 36:7c:d2:fc:8f:55:5e:ae:4b:d6:31:60:80:fa:6d: ac:79:6a:23:fb:0d:95:bf:9b:55:e7:a6:0a:a7:37: 92:5f:36:36:6e:36:39:f0:74:da:80:53:a5:fc:ec: 84:25:c2:06:c5:61:82:3d:9e:55:99:04:78:5c:ee: c0:e6:e2:ba:6f:c6:46:75:d4:fd:85:ad:f8:5e:a3: c2:16:b9:be:ff:89:21:86:ed:9b:76:28:e2:78:c3: 6c:14:40:81:5d:85:50:78:a5:cd:48:aa:a3:82:33: a6:7f:fa:f5:b3:76:ca:61:5b:6c:cd:a4:17:22:32: 17:54:ae:d2:70:7f:b4:90:75:28:2e:85:78:55:f2: f2:3e:32:71:23:e0:55:d1:6b:2c:a5:04:f8:71:71: b8:5b:0d:e6:c1:7e:19:25:c2:c8:06:9e:92:cd:e5: d7:f5:f2:39:88:8e:3b:7f:15:5e:fd:72:a2:6a:39: c9:94:65:92:87:06:22:b1:3a:3b:92:a8:37:aa:1b: 7f:77:a5:02:77:ab:c3:ee:bd:60:cb:60:93:74:48: 96:bd:fe:d4:8e:9f:28:37:82:9f:17:00:68:9c:8a: a7:81:16:af:79:16:d8:71:c1:95:fc:39:7b:9d:c5: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:31:3F:E7:99:DD:59:9E:FD:92:86:0E:CB:2D:E2:FA:7E:66:EA:13 X509v3 Authority Key Identifier: keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d2:ad:ab:27:ed:0a:e9:2f:f3:22:3f:46:9a:1a:10:da:30: 77:29:f5:e3:01:e3:5a:a6:75:db:04:cf:c4:ad:da:61:98:c8: 38:54:f5:84:64:e9:58:09:5f:ed:16:f3:78:ff:27:af:bb:a9: df:12:ad:a1:92:0a:5c:f3:4f:47:07:e6:75:12:69:43:a3:25: de:0c:0d:e9:07:3e:65:c9:e6:d9:41:b6:7d:0a:1e:f4:b4:96: 0f:b3:1a:69:4f:99:72:11:7e:cd:69:ec:32:50:dc:c0:9c:c6: a9:08:5e:4b:bd:58:7d:d9:40:55:65:af:b9:ab:b5:66:20:12: 99:a8:17:b3:65:c5:f5:fe:e5:5c:e4:2b:fd:6b:52:e8:98:e4: 67:ca:47:35:0d:dd:2f:c8:a4:98:16:43:90:db:f6:c3:5e:97: 3d:a1:08:f5:90:83:be:17:ba:8f:00:63:77:aa:73:eb:f1:d6: d2:9c:02:e8:68:e8:52:8d:ba:91:0c:9f:6f:9a:e0:64:af:5e: 1c:ed:a7:1b:f5:e3:f4:87:03:d1:b9:ab:f9:cd:b9:5a:b5:c1: 77:1c:7f:0b:05:3c:58:04:d2:e4:e7:94:00:cc:bc:69:3b:1a: 46:18:f7:4e:58:a1:1d:65:b0:21:b7:d3:f3:e6:ac:08:b1:5d: 61:e8:11:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnuIkQnENoY1NFoh8wFJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MmIzYWZkNzlhNTFkOWEzMGU3M2E1ODlkYThlMzc2NDFm NDc1MWEwHhcNMjUxMjE4MDQwMTQwWhcNMjUxMjE5MDQwMTQwWjAzMTEwLwYDVQQD EyhlNDMxM2ZlNzk5ZGQ1OTllZmQ5Mjg2MGVjYjJkZTJmYTdlNjZlYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyneP+10k1pCiwFGidRg2fNL8j1Ve rkvWMWCA+m2seWoj+w2Vv5tV56YKpzeSXzY2bjY58HTagFOl/OyEJcIGxWGCPZ5V mQR4XO7A5uK6b8ZGddT9ha34XqPCFrm+/4khhu2bdijieMNsFECBXYVQeKXNSKqj gjOmf/r1s3bKYVtszaQXIjIXVK7ScH+0kHUoLoV4VfLyPjJxI+BV0WsspQT4cXG4 Ww3mwX4ZJcLIBp6SzeXX9fI5iI47fxVe/XKiajnJlGWShwYisTo7kqg3qht/d6UC d6vD7r1gy2CTdEiWvf7Ujp8oN4KfFwBonIqngRaveRbYccGV/Dl7ncUr5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQxP+eZ3Vme/ZKGDsst4vp+ZuoTMB8GA1UdIwQY MBaAFEkrOv15pR2aMOc6WJ2o43ZB9HUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZTdmOWEtZGYwYi00ODIyLWIwZjEt YTMxMDViZDk0MWQ4LzEvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZTdmOWEtZGYwYi00ODIyLWIwZjEtYTMxMDViZDk0MWQ4 LzEvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNKtqyft Cukv8yI/RpoaENowdyn14wHjWqZ12wTPxK3aYZjIOFT1hGTpWAlf7RbzeP8nr7up 3xKtoZIKXPNPRwfmdRJpQ6Ml3gwN6Qc+Zcnm2UG2fQoe9LSWD7MaaU+ZchF+zWns MlDcwJzGqQheS71YfdlAVWWvuau1ZiASmagXs2XF9f7lXOQr/WtS6JjkZ8pHNQ3d L8ikmBZDkNv2w16XPaEI9ZCDvhe6jwBjd6pz6/HW0pwC6GjoUo26kQyfb5rgZK9e HO2nG/Xj9IcD0bmr+c25WrXBdxx/CwU8WATS5OeUAMy8aTsaRhj3TlihHWWwIbfT 8+asCLFdYegRSg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:48:52 2025 by rpki-client