This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json) Hash identifier: T7gvOq8mD4+susBMIECeUyWPoNCaHuvjJNokG5rWLhA= Subject key identifier: 45:D2:16:AE:DD:43:96:EE:EC:70:1C:B2:E3:C7:1B:B6:79:26:D3:60 Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36 Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536 Certificate serial: 019B3CB4A8097C7EA419AA728BEFB46AA619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft Manifest number: 077D Signing time: Sat 20 Dec 2025 17:00:30 +0000 Manifest this update: Sat 20 Dec 2025 17:00:30 +0000 Manifest next update: Sun 21 Dec 2025 17:00:30 +0000 Files and hashes: 1: Ypuf3qV0JE2AXfUrk2eNRiGtQN0.roa (hash: AxG4SgT0VS5arc9FHux7pFhrFyFYGK0/0AgX9zPeSBE=) 2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: G7lIW/PFYFiwPW+1RixCz/65Rm6H4RXmKEl56jMsQ3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:a8:09:7c:7e:a4:19:aa:72:8b:ef:b4:6a:a6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536 Validity Not Before: Dec 20 17:00:30 2025 GMT Not After : Dec 21 17:00:30 2025 GMT Subject: CN=45d216aedd4396eeec701cb2e3c71bb67926d360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:df:d0:7f:e7:b0:1f:87:dd:b5:1b:9d:61: 4b:d2:14:83:51:10:76:9b:99:25:36:e7:77:da:1a: dc:25:e4:14:13:43:ff:6d:8f:1a:cd:e7:2d:af:c9: f5:5c:07:2d:26:15:f8:b2:32:26:f9:5e:74:4b:9c: ef:cc:90:68:c7:08:34:94:4f:4b:b1:20:16:d4:40: 3b:e4:28:38:60:e5:86:7d:3f:c2:f3:7f:d3:b2:2f: b0:eb:5b:d4:05:bf:13:7d:cb:70:51:e5:57:8c:fa: f1:37:04:1d:94:87:eb:31:98:a6:d1:0e:a6:af:de: dc:d3:11:d3:f2:4e:18:21:a7:19:e2:48:08:e2:da: 90:10:d6:a6:c9:ab:7c:27:55:54:6d:c3:9f:64:3b: 4e:d8:10:b8:e1:4f:4a:8a:09:10:eb:d5:a9:07:04: c3:b9:3d:1d:c0:e2:a4:2e:ee:5e:62:7d:0a:80:c4: f3:df:31:16:c8:ab:6d:e3:0c:d4:1a:4d:37:ab:67: ef:96:05:ad:01:dc:ec:8c:ea:db:09:09:13:36:f5: b7:da:ef:14:ca:9a:90:06:9e:0d:ac:d5:cc:24:16: ae:e7:dc:88:48:d0:b4:dc:a6:64:b8:65:68:16:08: c2:bd:ad:f1:1f:a5:30:28:c4:bc:8c:ac:7c:0e:4a: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D2:16:AE:DD:43:96:EE:EC:70:1C:B2:E3:C7:1B:B6:79:26:D3:60 X509v3 Authority Key Identifier: keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e8:d5:e5:ef:39:56:ae:7d:68:d8:63:9e:f4:06:9d:88:d8: 6e:be:ac:52:a0:64:ad:68:fa:61:5c:6e:fb:e0:5d:f7:91:44: 5e:79:42:f9:8f:ff:e2:46:ff:28:02:80:09:88:74:62:00:4a: 1a:bb:34:af:b1:67:a5:e8:3d:5e:2f:b2:8c:c3:ce:6d:37:48: f5:a3:20:c1:90:bc:c7:19:d2:c1:46:c7:fc:cf:0b:f4:2e:e1: 41:7d:54:98:7c:5f:86:82:56:c8:14:e3:69:1b:91:8b:10:8f: ad:e6:f1:b3:44:6c:bb:86:b6:a1:ec:44:52:c9:42:2e:dc:14: 8c:ff:53:30:15:34:f5:7a:cb:10:d9:e0:68:e9:9b:31:71:95: c3:d6:4e:bd:8e:8a:7e:07:94:92:f4:de:27:7c:59:0d:ec:48: 5b:3b:50:7b:38:b7:6a:43:b5:8b:21:2e:23:fa:02:2e:ee:cc: 81:60:2f:92:df:94:c1:78:83:ce:4e:b6:b0:48:60:82:a0:0d: f4:19:01:15:9a:92:06:e5:b6:ba:f4:ee:ef:b9:61:d9:2e:66: ae:0c:00:73:98:4e:d8:28:75:0b:72:8f:47:31:e6:5d:22:41: 69:ec:68:ab:f9:9c:cf:6a:8f:83:f8:49:90:2e:47:36:8d:73: 54:b7:d4:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKgJfH6kGapyi++0aqYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYjQxZDJmN2Q3ZDM4NTdlMDc1ZjJhNGYyZjlkM2UwNDRm MmU1MzYwHhcNMjUxMjIwMTcwMDMwWhcNMjUxMjIxMTcwMDMwWjAzMTEwLwYDVQQD Eyg0NWQyMTZhZWRkNDM5NmVlZWM3MDFjYjJlM2M3MWJiNjc5MjZkMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVbf0H/nsB+H3bUbnWFL0hSDURB2 m5klNud32hrcJeQUE0P/bY8azectr8n1XActJhX4sjIm+V50S5zvzJBoxwg0lE9L sSAW1EA75Cg4YOWGfT/C83/Tsi+w61vUBb8TfctwUeVXjPrxNwQdlIfrMZim0Q6m r97c0xHT8k4YIacZ4kgI4tqQENamyat8J1VUbcOfZDtO2BC44U9KigkQ69WpBwTD uT0dwOKkLu5eYn0KgMTz3zEWyKtt4wzUGk03q2fvlgWtAdzsjOrbCQkTNvW32u8U ypqQBp4NrNXMJBau59yISNC03KZkuGVoFgjCva3xH6UwKMS8jKx8DkqG2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXSFq7dQ5bu7HAcsuPHG7Z5JtNgMB8GA1UdIwQY MBaAFLK0HS99fThX4HXypPL50+BE8uU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMt YzllMjBjY2Q0NzZmLzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMtYzllMjBjY2Q0NzZm LzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+jV5e85 Vq59aNhjnvQGnYjYbr6sUqBkrWj6YVxu++Bd95FEXnlC+Y//4kb/KAKACYh0YgBK Grs0r7Fnpeg9Xi+yjMPObTdI9aMgwZC8xxnSwUbH/M8L9C7hQX1UmHxfhoJWyBTj aRuRixCPrebxs0Rsu4a2oexEUslCLtwUjP9TMBU09XrLENngaOmbMXGVw9ZOvY6K fgeUkvTeJ3xZDexIWztQezi3akO1iyEuI/oCLu7MgWAvkt+UwXiDzk62sEhggqAN 9BkBFZqSBuW2uvTu77lh2S5mrgwAc5hO2Ch1C3KPRzHmXSJBaexoq/mcz2qPg/hJ kC5HNo1zVLfUpg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:58 2025 by rpki-client