This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: IVAeNtcJvWf65MpfRwg04bna5A5ol+vuD1OPVyz8EYY= Subject key identifier: E0:02:AA:C0:C7:EE:63:AC:8C:C0:50:AC:4E:BC:48:C7:20:84:39:3E Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B42801E17B24303F119216C4233ECFA49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 08AF Signing time: Sun 21 Dec 2025 20:00:51 +0000 Manifest this update: Sun 21 Dec 2025 20:00:51 +0000 Manifest next update: Mon 22 Dec 2025 20:00:51 +0000 Files and hashes: 1: 1-EZfm36xDgODSAJSHjoDKqosl0A.roa (hash: YJXvTARkaZsNuPWx3R0tfgZi43JI9omATgYJzudFfVw=) 2: 3U2HMxedCVt6_kMIDQH--335xZ4.roa (hash: 88sss7mFD2sWeeU8HLQ5OArgZS/AoA8AY0GLqd56WLQ=) 3: 8wPWU2vG9yor96syg0xci6OMavk.roa (hash: 58okY/hMSnPqb+2am85BaYPbNkOmLTFbAoYMmjPkzSM=) 4: A8u38dlgw8e8wVBstLEUX0BIwKA.roa (hash: wMifdjJKZOKPZclZ2LTT2h1hBhv48+8C1YSb4m0Dn8w=) 5: AcDYJhONPbrOnDXucR_bbR1A5kg.roa (hash: 88oN9iWkRyRsEw49ibrN6cr6y4laodB6sXFL6B6zm+E=) 6: Cj1iRWtZaWr3CQT35mnwIkfqqYs.roa (hash: 9ZVHBVyd/Pk4UvvVMqUwxdLUlrLbgZ/V2ltofM5wDow=) 7: MjYi-LSjoIJQHulT2C8hiHI7HD8.roa (hash: dC5UZCibXUg9xVnIxopZdKZtoheRYoCMgnJyaeHGfKM=) 8: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=) 9: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: r6XKFrDpbBR7BRLEQ6mQ9v6Bu0fZuah5R5Qhjzs6z9Y=) 10: XhNIRKox72ceLxS-HicNdteAlnc.roa (hash: QNRbEve8iPmaf5PJ3d4wKSJFvAQJTgfZsNNYbZDbIlc=) 11: gcyVEfl2Y641X6JyrJ5gHsnWGHM.roa (hash: 4fScV3KfjcgkIMTXmX6XzXUXdZUkt2FHTuue2HpZKoE=) 12: i0xOZ9Jhra30YZPBjOHXbYaWfqk.roa (hash: 037VXUJZVI+mWu72PU8YPxD3JLA/Q6+4Wqo2f8ZWqyE=) 13: kTJsplmwURGCaPzG4ayo6wcNo7A.roa (hash: l/8qlEM8+mm6CRnvB68H+M19y+bDF0JqtLE1zP1nToE=) 14: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=) 15: pSBQwLUPyYWO99fSCGOORj9giws.roa (hash: JkOzR+BpOFLVw+DBFx5vd7D/7xkaT2h6VtCqnTT04N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:1e:17:b2:43:03:f1:19:21:6c:42:33:ec:fa:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Dec 21 20:00:51 2025 GMT Not After : Dec 22 20:00:51 2025 GMT Subject: CN=e002aac0c7ee63ac8cc050ac4ebc48c72084393e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c2:7c:41:91:5a:3e:4a:c6:a3:2b:eb:29:0a: 10:d9:b6:dc:dc:98:74:6d:7b:d5:f3:2b:c4:b2:11: 1d:f6:8b:5b:92:c7:6c:47:97:1a:f5:4c:a9:68:51: c6:83:bb:cc:61:13:af:77:ef:9c:a1:ad:29:64:57: ce:df:97:56:0f:14:76:28:c7:dd:1b:9d:df:a6:f1: 9d:68:5c:9b:e3:ad:f4:02:54:83:e0:82:30:4c:15: e7:0f:38:fb:af:e6:c3:8a:ac:89:f0:37:d4:3f:62: 03:e9:e2:08:e6:5a:8c:78:d9:b9:f4:be:56:13:f7: 28:73:53:dc:af:5d:e5:33:31:c8:cc:7b:6e:bf:38: 2b:15:35:27:cd:15:f2:cf:fb:6d:ba:da:af:0e:18: 88:c8:06:cc:75:f4:87:e3:16:76:75:21:9b:ad:9d: c2:34:7c:c9:f9:f3:8f:22:b0:8d:78:d4:21:54:45: 61:9b:dc:cf:97:c3:ea:94:d9:74:7c:d7:71:25:5c: d5:47:a2:30:b6:17:b8:c3:36:ff:c9:7e:a9:92:d2: 06:8e:93:06:d8:b7:5f:a8:a8:de:0b:64:dd:6a:97: d1:5d:37:12:df:15:78:19:90:db:25:91:70:b1:f4: 0b:cc:b5:97:6e:c3:6d:f7:0d:11:00:4e:ea:45:04: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:02:AA:C0:C7:EE:63:AC:8C:C0:50:AC:4E:BC:48:C7:20:84:39:3E X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:10:c6:c6:69:ce:84:28:ed:ee:54:04:c5:b0:b2:3a:cb:8d: 99:27:27:55:f9:7a:df:32:32:7d:51:3c:87:9d:9d:4e:34:7a: fe:8d:3c:89:44:fc:c1:55:5b:0d:35:cf:89:96:d4:de:32:b0: 04:62:0a:e1:98:07:9a:01:fb:70:d6:05:ab:94:25:4f:dc:3e: f2:cc:8b:60:72:33:55:11:8e:44:89:f1:9e:44:3a:85:57:80: e3:c8:82:3b:03:04:d5:19:f7:dd:4f:6e:df:5a:29:8f:7a:27: df:a5:8a:4b:a8:31:bd:0c:8b:a1:6f:8c:13:4f:a5:17:56:3d: 46:88:5e:1d:e9:e6:26:74:d6:ab:56:67:9b:b4:bc:5f:ae:d0: 86:2d:c3:cd:59:8b:1c:f5:aa:b5:e0:1c:b2:fa:68:c3:4c:41: 02:bb:d6:f1:14:c1:a6:d7:b6:7f:09:c4:e7:c0:88:ae:43:b6: 37:1e:a0:c0:22:b7:94:7b:f2:86:3a:7b:ab:2c:89:ae:9d:ba: f3:51:63:22:fe:d0:5e:d1:fc:a2:5d:02:2e:dd:65:e8:b1:14: 36:d2:d6:21:62:0b:73:a9:72:00:14:8d:be:8d:9c:f6:31:b3: 9e:9c:dd:db:20:0a:d0:97:17:c9:3f:25:d8:04:8d:0b:58:af: 40:52:67:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgB4XskMD8RkhbEIz7PpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjUxMjIxMjAwMDUxWhcNMjUxMjIyMjAwMDUxWjAzMTEwLwYDVQQD EyhlMDAyYWFjMGM3ZWU2M2FjOGNjMDUwYWM0ZWJjNDhjNzIwODQzOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MJ8QZFaPkrGoyvrKQoQ2bbc3Jh0 bXvV8yvEshEd9otbksdsR5ca9UypaFHGg7vMYROvd++coa0pZFfO35dWDxR2KMfd G53fpvGdaFyb4630AlSD4IIwTBXnDzj7r+bDiqyJ8DfUP2ID6eII5lqMeNm59L5W E/coc1Pcr13lMzHIzHtuvzgrFTUnzRXyz/ttutqvDhiIyAbMdfSH4xZ2dSGbrZ3C NHzJ+fOPIrCNeNQhVEVhm9zPl8PqlNl0fNdxJVzVR6Iwthe4wzb/yX6pktIGjpMG 2LdfqKjeC2TdapfRXTcS3xV4GZDbJZFwsfQLzLWXbsNt9w0RAE7qRQR0CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOACqsDH7mOsjMBQrE68SMcghDk+MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBDGxmnO hCjt7lQExbCyOsuNmScnVfl63zIyfVE8h52dTjR6/o08iUT8wVVbDTXPiZbU3jKw BGIK4ZgHmgH7cNYFq5QlT9w+8syLYHIzVRGORInxnkQ6hVeA48iCOwME1Rn33U9u 31opj3on36WKS6gxvQyLoW+ME0+lF1Y9RoheHenmJnTWq1Znm7S8X67Qhi3DzVmL HPWqteAcsvpow0xBArvW8RTBpte2fwnE58CIrkO2Nx6gwCK3lHvyhjp7qyyJrp26 81FjIv7QXtH8ol0CLt1l6LEUNtLWIWILc6lyABSNvo2c9jGznpzd2yAK0JcXyT8l 2ASNC1ivQFJnuw== -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:54 2025 by rpki-client