This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json) Hash identifier: U+BnsmZCAtTqGuMnAhM50VU3BDtCpBL+nnQPr325NJk= Subject key identifier: 99:81:54:2A:FA:97:5C:3A:AF:CD:51:7E:74:37:8B:61:CB:E3:A0:F6 Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd Certificate serial: 019B2B1DCA4D0601917E1146372686047572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft Manifest number: 0C50 Signing time: Wed 17 Dec 2025 07:02:11 +0000 Manifest this update: Wed 17 Dec 2025 07:02:11 +0000 Manifest next update: Thu 18 Dec 2025 07:02:11 +0000 Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=) 2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: Bz6cUv6NLTh6st7fwe/VSXRc0W5+iW6blnbGikGYtjQ=) 3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:ca:4d:06:01:91:7e:11:46:37:26:86:04:75:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd Validity Not Before: Dec 17 07:02:11 2025 GMT Not After : Dec 18 07:02:11 2025 GMT Subject: CN=9981542afa975c3aafcd517e74378b61cbe3a0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:22:73:bb:fd:19:4d:3d:d9:4f:e5:24:63: a7:c4:b2:54:8b:b7:fd:cd:35:8d:3e:08:56:9b:b4: bf:9d:6d:91:df:30:cc:9a:28:f1:b0:3a:e6:96:2a: 48:0f:37:9c:51:00:93:ee:41:97:34:57:dd:5a:f1: 78:15:c0:2e:52:46:57:dd:ea:b8:43:cf:bc:18:95: 63:92:fe:a3:40:a2:a4:26:0f:1b:16:f0:c3:f7:e5: 6f:ea:ae:31:db:c3:8d:cb:08:f9:8c:cf:a9:37:06: 16:14:d3:f5:0e:d6:69:f6:b7:83:38:b7:7f:97:d6: e1:1d:72:11:28:f0:42:31:58:eb:5d:70:6d:1a:a6: ea:7d:95:f2:42:20:77:2a:98:3b:82:fb:45:0d:48: a8:e0:50:6a:78:0e:13:33:7d:33:0d:52:1b:e1:cd: f6:3b:be:c2:28:8c:b5:fd:90:9d:e9:f2:68:94:35: 85:e3:7d:d2:a8:92:0c:b6:b9:fe:a0:2a:1c:22:9d: 8c:d9:2c:d0:ae:c8:d3:e3:22:99:76:4a:28:60:b5: 99:c0:ae:34:ba:40:a6:0e:6d:4a:1d:12:61:92:ad: ab:26:05:a4:a1:13:6a:a0:66:9e:ec:50:01:9f:85: 36:cf:c8:ba:4c:06:96:1c:13:97:e6:20:a8:ed:fb: 75:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:81:54:2A:FA:97:5C:3A:AF:CD:51:7E:74:37:8B:61:CB:E3:A0:F6 X509v3 Authority Key Identifier: keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ea:ef:c9:dc:12:3b:d5:2d:49:49:68:e7:1a:83:91:a4:5e: 86:73:95:b1:05:cc:4d:48:d6:06:74:00:3a:e1:91:95:b5:9a: 0d:2d:8b:14:d6:be:68:d0:40:e4:e9:ac:b6:68:f0:ab:d1:b1: 53:c0:f6:ec:10:b7:73:6b:f2:ce:db:93:91:20:00:b7:97:41: 4d:a1:47:7f:c0:af:10:37:e6:9c:3d:f5:c9:03:3d:4c:63:4a: 22:db:5a:1d:9d:8c:80:42:14:12:26:9a:c1:6c:18:00:5f:cf: 8e:bf:3f:90:2d:69:6d:5d:6f:41:a2:fe:0c:6e:bf:a6:dd:62: c9:fa:84:e7:c1:f3:2b:73:67:cf:15:96:5c:5e:09:4c:cc:46: 94:80:ef:39:3d:4f:ac:d9:24:b6:94:01:cb:1b:49:27:35:91: d9:0b:47:e9:c0:5e:7f:bc:22:23:2c:25:de:89:85:74:05:3d: 5a:43:8a:7c:45:74:79:f8:bb:57:60:87:d0:ac:73:8f:b3:9b: d9:3d:24:92:ca:fb:76:50:65:62:da:80:2d:3f:2a:87:07:19: 56:74:75:cd:6c:48:87:4e:44:30:20:4e:6f:ff:47:c9:58:e1: ef:d3:5d:49:a5:8a:43:43:7a:74:5b:ef:c3:75:6f:24:a5:cd: 74:f7:a2:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHcpNBgGRfhFGNyaGBHVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OWVmMTljMjczZGVkZWQxOWNlZjZiMzY4MzliM2NlYjAx ZWRlZmQwHhcNMjUxMjE3MDcwMjExWhcNMjUxMjE4MDcwMjExWjAzMTEwLwYDVQQD Eyg5OTgxNTQyYWZhOTc1YzNhYWZjZDUxN2U3NDM3OGI2MWNiZTNhMGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssYic7v9GU092U/lJGOnxLJUi7f9 zTWNPghWm7S/nW2R3zDMmijxsDrmlipIDzecUQCT7kGXNFfdWvF4FcAuUkZX3eq4 Q8+8GJVjkv6jQKKkJg8bFvDD9+Vv6q4x28ONywj5jM+pNwYWFNP1DtZp9reDOLd/ l9bhHXIRKPBCMVjrXXBtGqbqfZXyQiB3Kpg7gvtFDUio4FBqeA4TM30zDVIb4c32 O77CKIy1/ZCd6fJolDWF433SqJIMtrn+oCocIp2M2SzQrsjT4yKZdkooYLWZwK40 ukCmDm1KHRJhkq2rJgWkoRNqoGae7FABn4U2z8i6TAaWHBOX5iCo7ft1QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmBVCr6l1w6r81RfnQ3i2HL46D2MB8GA1UdIwQY MBaAFOee8ZwnPe3tGc72s2g5s86wHt79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUt ZDliNzJlZDdjYjRkLzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUtZDliNzJlZDdjYjRk LzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+rvydwS O9UtSUlo5xqDkaRehnOVsQXMTUjWBnQAOuGRlbWaDS2LFNa+aNBA5Omstmjwq9Gx U8D27BC3c2vyztuTkSAAt5dBTaFHf8CvEDfmnD31yQM9TGNKIttaHZ2MgEIUEiaa wWwYAF/Pjr8/kC1pbV1vQaL+DG6/pt1iyfqE58HzK3NnzxWWXF4JTMxGlIDvOT1P rNkktpQByxtJJzWR2QtH6cBef7wiIywl3omFdAU9WkOKfEV0efi7V2CH0Kxzj7Ob 2T0kksr7dlBlYtqALT8qhwcZVnR1zWxIh05EMCBOb/9HyVjh79NdSaWKQ0N6dFvv w3VvJKXNdPeiAA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:27:21 2025 by rpki-client