This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json) Hash identifier: 2rR2Dr/u0mbabxYMWDACClcLYdVyEzbFBJQiL0TTvSQ= Subject key identifier: BA:A6:EB:83:AB:2F:6B:79:B3:A7:DE:70:16:66:97:B2:BB:55:EC:73 Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0 Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0 Certificate serial: 019B3AFD5BA11AAC19291685C7F7FD7D5E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft Manifest number: 07B9 Signing time: Sat 20 Dec 2025 09:00:41 +0000 Manifest this update: Sat 20 Dec 2025 09:00:41 +0000 Manifest next update: Sun 21 Dec 2025 09:00:41 +0000 Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=) 2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: fjOrQwr9ru6i2/kDlrkABlwhKZNLdcKNzomCQCU7dyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:5b:a1:1a:ac:19:29:16:85:c7:f7:fd:7d:5e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0 Validity Not Before: Dec 20 09:00:41 2025 GMT Not After : Dec 21 09:00:41 2025 GMT Subject: CN=baa6eb83ab2f6b79b3a7de70166697b2bb55ec73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1a:4a:07:79:19:8c:be:a7:58:e0:a1:9c:95: b0:03:ea:ae:ed:d6:0c:10:94:d6:ba:4d:39:8a:d7: 1f:52:d9:80:de:bc:2c:33:f5:c5:c1:a9:8f:3d:0d: 56:ad:71:31:ba:69:a9:8c:58:da:14:59:f1:a4:05: cc:2e:43:87:af:66:96:4f:2a:27:a4:e2:a7:9c:f5: ac:d7:19:01:ce:d5:36:cc:82:4b:fd:27:51:b0:3d: fc:46:6c:a3:25:45:2c:02:f5:12:02:a5:86:4a:ba: 13:6e:a7:30:56:45:f2:de:25:e1:a5:2c:d1:d3:3c: c0:08:10:b1:d4:7d:c2:7c:83:83:cc:bc:eb:f3:fb: 55:b0:5d:8e:96:cf:d9:8a:d9:d4:d3:54:3d:c0:22: 16:8b:fe:0c:bd:0b:a7:22:99:f1:87:7b:d0:87:88: b2:d5:7a:5c:41:d8:4c:e2:29:23:ff:7e:20:45:d4: ce:f9:40:7f:9c:90:83:c5:82:24:05:a7:40:14:62: b2:ff:e3:bb:e5:1c:55:54:67:0c:ed:3b:f0:47:d6: 38:9f:aa:1e:42:0a:d8:39:92:28:51:30:96:ac:b8: e0:5c:82:b2:e4:cd:d5:cc:eb:17:9a:4a:10:e2:67: a9:ec:69:d7:2a:65:e0:74:7e:38:61:5c:e1:2c:e5: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:EB:83:AB:2F:6B:79:B3:A7:DE:70:16:66:97:B2:BB:55:EC:73 X509v3 Authority Key Identifier: keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cf:32:be:8a:a1:81:63:c7:3a:76:80:3b:ce:26:05:81:57: 59:6c:aa:c6:7e:85:79:db:a3:fa:0f:fe:77:08:ae:1b:c4:84: db:02:50:a8:d5:30:19:bf:17:50:44:42:99:ce:a2:91:02:dd: 37:88:39:7d:55:b8:4c:9d:ba:5f:06:fa:a1:61:c7:49:91:fa: 3f:fc:5b:8e:a8:ba:1d:17:e1:c4:73:12:67:7e:b9:2e:8b:2f: c0:18:ac:93:61:85:31:dc:26:e7:aa:8b:11:1e:49:bb:ec:3d: bf:0c:1b:4b:17:01:23:b7:d5:33:ca:18:cb:f1:13:d4:01:49: ed:2b:68:87:2f:64:56:b7:0f:33:ba:51:2f:9e:95:96:dc:1d: f7:99:19:e0:82:30:40:dd:08:60:d1:1d:ec:b2:23:0c:95:34: 86:c2:38:2d:35:7b:f6:93:02:e1:96:2f:06:e7:db:cd:37:ab: cf:56:55:3d:f9:05:82:61:51:5c:1b:47:0d:af:b1:4d:bb:84: 56:9e:0f:8d:db:ab:33:ab:6c:63:e5:f8:67:88:f9:a6:eb:57: 69:b8:92:f5:3f:05:a8:8e:6f:24:84:ff:15:4f:b3:ed:ff:47: 8c:fe:3c:5a:a4:05:cd:11:b8:25:ac:cd:d2:47:fa:99:0d:f0: a0:64:f1:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/VuhGqwZKRaFx/f9fV4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGU1NzhkYWM3OTJkOTVlMjE3ZDk4NzFlMDRmNjY5NzNi YjdlYjAwHhcNMjUxMjIwMDkwMDQxWhcNMjUxMjIxMDkwMDQxWjAzMTEwLwYDVQQD EyhiYWE2ZWI4M2FiMmY2Yjc5YjNhN2RlNzAxNjY2OTdiMmJiNTVlYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhpKB3kZjL6nWOChnJWwA+qu7dYM EJTWuk05itcfUtmA3rwsM/XFwamPPQ1WrXExummpjFjaFFnxpAXMLkOHr2aWTyon pOKnnPWs1xkBztU2zIJL/SdRsD38RmyjJUUsAvUSAqWGSroTbqcwVkXy3iXhpSzR 0zzACBCx1H3CfIODzLzr8/tVsF2Ols/ZitnU01Q9wCIWi/4MvQunIpnxh3vQh4iy 1XpcQdhM4ikj/34gRdTO+UB/nJCDxYIkBadAFGKy/+O75RxVVGcM7TvwR9Y4n6oe QgrYOZIoUTCWrLjgXIKy5M3VzOsXmkoQ4mep7GnXKmXgdH44YVzhLOUS6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqm64OrL2t5s6fecBZml7K7VexzMB8GA1UdIwQY MBaAFEneV42seS2V4hfZhx4E9mlzu36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYt NjNlMDIwZmVlY2Y5LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYtNjNlMDIwZmVlY2Y5 LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgM8yvoqh gWPHOnaAO84mBYFXWWyqxn6Feduj+g/+dwiuG8SE2wJQqNUwGb8XUERCmc6ikQLd N4g5fVW4TJ26Xwb6oWHHSZH6P/xbjqi6HRfhxHMSZ365LosvwBisk2GFMdwm56qL ER5Ju+w9vwwbSxcBI7fVM8oYy/ET1AFJ7Stohy9kVrcPM7pRL56Vltwd95kZ4IIw QN0IYNEd7LIjDJU0hsI4LTV79pMC4ZYvBufbzTerz1ZVPfkFgmFRXBtHDa+xTbuE Vp4PjdurM6tsY+X4Z4j5putXabiS9T8FqI5vJIT/FU+z7f9HjP48WqQFzRG4JazN 0kf6mQ3woGTxDg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:49:51 2025 by rpki-client