This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json) Hash identifier: vPgib+Qjxz8U9cykLDR12IZnsMfZjU9CTipje0mtlPI= Subject key identifier: 13:19:E3:A8:75:26:2E:22:52:3F:3E:84:64:75:87:EA:E8:CD:D9:26 Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Certificate serial: 019B3BA20F8624379CF3B91F01CB14FBB385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft Manifest number: 0BA2 Signing time: Sat 20 Dec 2025 12:00:35 +0000 Manifest this update: Sat 20 Dec 2025 12:00:35 +0000 Manifest next update: Sun 21 Dec 2025 12:00:35 +0000 Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: i9omreJvW00CWP+SDqP0PogG9bK6KBU6NZEChdGjLoo=) 2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=) 3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=) 4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:0f:86:24:37:9c:f3:b9:1f:01:cb:14:fb:b3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Validity Not Before: Dec 20 12:00:35 2025 GMT Not After : Dec 21 12:00:35 2025 GMT Subject: CN=1319e3a875262e22523f3e84647587eae8cdd926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:66:00:18:26:16:6f:e6:ef:45:da:b4:9a: d1:ac:37:b5:d6:e9:d5:fe:c5:94:c7:5b:ca:a3:93: 26:b9:d8:7d:b3:49:9b:5e:d6:6a:b4:06:36:c3:39: 6f:f4:39:d6:ce:02:6f:68:2c:30:8c:44:81:0e:9d: 90:02:9f:0a:83:f0:5b:64:ab:91:86:af:83:e9:d6: f1:93:11:bd:3c:27:cb:bd:0d:e6:33:67:c6:98:5a: bd:54:e7:97:ba:7a:d5:19:4d:9f:d1:83:55:74:0e: 1c:26:e5:e3:12:06:88:41:11:a4:38:48:cf:29:d5: 6c:90:a0:f5:66:c4:35:e9:51:77:71:dc:90:dd:78: b0:66:41:81:21:dc:22:5f:20:99:bf:1f:be:9d:9e: 57:50:6d:fd:d8:28:0a:c2:b5:f3:de:a9:1d:04:e8: 69:5d:ad:ca:7f:14:3c:9c:48:58:10:af:0b:f9:c5: 68:09:3a:b8:45:1a:d7:fb:82:2e:18:15:4d:2d:66: e3:fa:b7:0f:dc:d5:7e:31:94:24:bd:83:7f:c3:3c: 12:47:76:89:9b:0c:d0:f5:58:bd:0f:ba:69:f4:2f: 7f:bd:cf:0a:61:23:46:c7:e3:19:0f:3b:49:72:cc: 87:bd:56:bb:50:e4:d2:2d:36:77:30:1f:13:cd:ab: 0d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:19:E3:A8:75:26:2E:22:52:3F:3E:84:64:75:87:EA:E8:CD:D9:26 X509v3 Authority Key Identifier: keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:59:fc:20:4a:cf:87:41:13:42:88:f6:8c:59:fe:f3:0d:a0: 27:52:02:22:90:61:91:1c:42:e3:05:3e:2e:8c:90:ba:16:ad: 2c:84:79:7f:88:96:de:cb:c6:e1:62:21:7b:fd:fc:d1:cb:f0: a5:50:a4:20:16:97:8e:fb:bf:d3:70:aa:bd:b9:a8:0f:64:6d: 90:e9:ad:9d:ff:fe:c2:0b:db:4e:e5:5e:37:08:72:73:69:3d: 86:2f:91:6a:b2:94:3c:13:c1:54:01:d9:c4:6d:6d:51:49:8d: fa:ad:76:38:54:d2:74:4f:f0:4f:55:a2:cb:bb:65:71:5d:9f: cb:00:75:7d:cf:a9:78:66:00:66:5f:17:2b:aa:64:6d:06:83: c5:ca:8f:0a:7a:05:9e:5e:0b:f3:f3:1a:4e:97:4b:13:cf:b9: 4c:d1:6a:e0:9f:d6:d1:29:cc:ab:25:41:de:9f:20:05:3e:8f: 1c:ad:bc:aa:66:f2:c9:54:00:f4:68:14:8b:70:cd:7e:80:e2: 6c:8a:ff:8c:c0:0e:a2:e6:bf:c6:04:6a:e2:01:ca:09:35:ab: d1:45:7d:54:4b:44:50:e9:a8:a8:b3:ae:ac:ad:cf:4e:18:47: f8:56:86:d1:8d:b7:c0:56:d0:d6:f5:24:77:92:5d:7b:a5:c5: c5:6f:57:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7og+GJDec87kfAcsU+7OFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmZmMTFkZDBjNjZjZTY3ZmUwZjFkNzQ5YzA5MDllZjM0 MThkMjkwHhcNMjUxMjIwMTIwMDM1WhcNMjUxMjIxMTIwMDM1WjAzMTEwLwYDVQQD EygxMzE5ZTNhODc1MjYyZTIyNTIzZjNlODQ2NDc1ODdlYWU4Y2RkOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23BmABgmFm/m70XatJrRrDe11unV /sWUx1vKo5Mmudh9s0mbXtZqtAY2wzlv9DnWzgJvaCwwjESBDp2QAp8Kg/BbZKuR hq+D6dbxkxG9PCfLvQ3mM2fGmFq9VOeXunrVGU2f0YNVdA4cJuXjEgaIQRGkOEjP KdVskKD1ZsQ16VF3cdyQ3XiwZkGBIdwiXyCZvx++nZ5XUG392CgKwrXz3qkdBOhp Xa3KfxQ8nEhYEK8L+cVoCTq4RRrX+4IuGBVNLWbj+rcP3NV+MZQkvYN/wzwSR3aJ mwzQ9Vi9D7pp9C9/vc8KYSNGx+MZDztJcsyHvVa7UOTSLTZ3MB8TzasNnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMZ46h1Ji4iUj8+hGR1h+rozdkmMB8GA1UdIwQY MBaAFHEv8R3Qxmzmf+Dx10nAkJ7zQY0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTct OWQ2M2IwNDc2ZTI0LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTctOWQ2M2IwNDc2ZTI0 LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFn8IErP h0ETQoj2jFn+8w2gJ1ICIpBhkRxC4wU+LoyQuhatLIR5f4iW3svG4WIhe/380cvw pVCkIBaXjvu/03CqvbmoD2RtkOmtnf/+wgvbTuVeNwhyc2k9hi+RarKUPBPBVAHZ xG1tUUmN+q12OFTSdE/wT1Wiy7tlcV2fywB1fc+peGYAZl8XK6pkbQaDxcqPCnoF nl4L8/MaTpdLE8+5TNFq4J/W0SnMqyVB3p8gBT6PHK28qmbyyVQA9GgUi3DNfoDi bIr/jMAOoua/xgRq4gHKCTWr0UV9VEtEUOmoqLOurK3PThhH+FaG0Y23wFbQ1vUk d5Jde6XFxW9X9A== -----END CERTIFICATE-----Generated at Sat Dec 20 20:25:40 2025 by rpki-client