This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json) Hash identifier: 2b6u+wLCbtr/FqeRBdl02bY8MwmvSjmg2zyP4pX7It0= Subject key identifier: BA:2C:41:1A:5E:67:05:55:50:0C:55:1F:1B:68:C1:5C:C5:B3:2F:99 Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6 Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6 Certificate serial: 019B3BA2096E32321A42B574F7C62CF36363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:00:33 +0000 Manifest this update: Sat 20 Dec 2025 12:00:33 +0000 Manifest next update: Sun 21 Dec 2025 12:00:33 +0000 Files and hashes: 1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=) 2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: /bCy5JlXLk2pM6fr8OaF/ZSFvztptEV9r59iQP/mHnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:09:6e:32:32:1a:42:b5:74:f7:c6:2c:f3:63:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6 Validity Not Before: Dec 20 12:00:33 2025 GMT Not After : Dec 21 12:00:33 2025 GMT Subject: CN=ba2c411a5e670555500c551f1b68c15cc5b32f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:3a:7c:8c:28:ee:5b:50:9b:f9:89:f0:7c: b3:be:5f:85:eb:20:77:f5:95:5b:1d:1f:88:f1:da: 50:05:16:9f:c4:b8:a7:ad:c8:13:cb:89:34:51:f4: 47:8a:48:eb:2a:61:26:f4:d4:ae:c1:97:eb:31:1d: ab:a2:74:a2:75:35:f1:8c:72:c3:3f:1b:06:80:12: 6a:54:a8:cc:cf:34:fa:14:2b:2d:2d:c6:df:e1:8b: 11:35:cb:9b:59:c5:f2:f7:b6:66:ec:99:86:4a:8d: 22:d5:14:ca:08:99:bd:a3:33:4f:9b:75:ad:c3:53: c1:06:cc:31:71:42:9b:af:ce:c6:73:42:81:5a:73: f6:a4:53:d5:a8:0a:3f:6a:e9:61:94:95:c2:d9:90: 7b:ed:66:64:0c:45:03:aa:73:28:58:28:b9:8a:25: 0b:ca:fe:99:5c:76:48:97:d2:e0:b0:e0:fc:55:bf: d3:c5:47:1f:89:06:e0:f0:08:1e:bb:7c:97:4c:2b: c7:ff:9c:c6:34:ee:1e:a1:f7:82:a5:0a:37:36:49: e2:58:98:1f:3e:81:ef:b2:42:f6:ec:4a:3e:23:b9: 95:b8:95:72:69:6f:12:a4:53:56:e6:db:49:b3:79: 37:64:fa:72:3f:5e:46:b0:6b:89:12:4e:eb:a0:1a: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2C:41:1A:5E:67:05:55:50:0C:55:1F:1B:68:C1:5C:C5:B3:2F:99 X509v3 Authority Key Identifier: keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6c:17:d0:72:3a:17:f7:d3:b7:04:d3:9f:03:bf:0d:41:6a: 68:5f:b5:94:d0:77:30:8c:62:79:4b:ef:2d:53:0a:0d:f7:2a: 07:32:86:4f:b6:de:a9:88:f7:43:95:8f:ef:d0:9a:17:c0:5a: b5:a6:24:90:bc:2b:d9:f0:8a:65:9f:e6:c6:84:cc:35:af:fd: f9:bd:94:cc:cc:2c:a9:6a:24:59:6d:1e:12:56:22:56:a9:0e: ed:62:d4:9a:be:21:31:fe:e3:4f:87:e6:f8:24:96:14:43:23: bb:9b:4f:07:de:c9:96:98:d8:77:b7:40:ef:ff:ee:9c:05:a6: ae:27:8d:87:a8:3c:62:2c:7a:1e:8b:bd:2f:da:8c:b7:55:82: ed:b3:a0:c9:01:82:8e:fe:39:e0:63:e5:7e:90:9f:68:0e:90: 8b:34:0d:ff:79:ca:24:e2:d8:2d:98:6e:74:ba:1c:5b:14:53: b1:d1:80:07:08:91:ad:c1:fe:7b:0b:a7:15:65:fa:36:df:62: f2:52:30:6a:c3:0e:d3:b3:cd:f4:71:bf:f7:67:3c:34:44:23: 8a:0c:14:67:8b:e1:94:fb:89:a1:a4:de:f8:55:d3:2e:b3:e4: 00:9a:7f:95:e8:0f:89:1c:7f:2d:01:3a:99:8c:f7:2f:6c:41: 45:f6:4d:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogluMjIaQrV098Ys82NjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWRmMDVhZmVmNmY2NWZhMTlhNjFjMzBhZTRmYjExYzdj ZjI1YjYwHhcNMjUxMjIwMTIwMDMzWhcNMjUxMjIxMTIwMDMzWjAzMTEwLwYDVQQD EyhiYTJjNDExYTVlNjcwNTU1NTAwYzU1MWYxYjY4YzE1Y2M1YjMyZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsk6fIwo7ltQm/mJ8Hyzvl+F6yB3 9ZVbHR+I8dpQBRafxLinrcgTy4k0UfRHikjrKmEm9NSuwZfrMR2ronSidTXxjHLD PxsGgBJqVKjMzzT6FCstLcbf4YsRNcubWcXy97Zm7JmGSo0i1RTKCJm9ozNPm3Wt w1PBBswxcUKbr87Gc0KBWnP2pFPVqAo/aulhlJXC2ZB77WZkDEUDqnMoWCi5iiUL yv6ZXHZIl9LgsOD8Vb/TxUcfiQbg8Ageu3yXTCvH/5zGNO4eofeCpQo3NkniWJgf PoHvskL27Eo+I7mVuJVyaW8SpFNW5ttJs3k3ZPpyP15GsGuJEk7roBoHBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLosQRpeZwVVUAxVHxtowVzFsy+ZMB8GA1UdIwQY MBaAFLCt8Fr+9vZfoZphwwrk+xHHzyW2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMt NWYyZDBlMmFlNzE0LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMtNWYyZDBlMmFlNzE0 LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2wX0HI6 F/fTtwTTnwO/DUFqaF+1lNB3MIxieUvvLVMKDfcqBzKGT7beqYj3Q5WP79CaF8Ba taYkkLwr2fCKZZ/mxoTMNa/9+b2UzMwsqWokWW0eElYiVqkO7WLUmr4hMf7jT4fm +CSWFEMju5tPB97JlpjYd7dA7//unAWmrieNh6g8Yix6Hou9L9qMt1WC7bOgyQGC jv454GPlfpCfaA6QizQN/3nKJOLYLZhudLocWxRTsdGABwiRrcH+ewunFWX6Nt9i 8lIwasMO07PN9HG/92c8NEQjigwUZ4vhlPuJoaTe+FXTLrPkAJp/legPiRx/LQE6 mYz3L2xBRfZNkA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:28 2025 by rpki-client