This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json) Hash identifier: /CcMtu5vXk1q+sa+oYGvEhCebAabT72TvWWsnGHgEHg= Subject key identifier: F0:EB:9B:09:A4:46:4C:EE:90:61:EB:E7:3D:0D:51:64:8D:9C:D7:16 Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019AF12EDC9066B12311F2FCA29741D914D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft Manifest number: 0E19 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: 1-ghy1_BSABsGI7akBKLZbOuS5vM.roa (hash: 5f9usyUF6Ob7YmYVFXsGfm7dIcSCmT5Qe4VX7r7TJaU=) 2: E6OOQJWtbwPShTOPUyvmcydvlvo.roa (hash: v0Y/AFu8fz1isgKhX2mzBaqCN/V0k8wMymcRgrcaRnE=) 3: Ik19RRjyfHjJ96aag1tg9GHfyYs.roa (hash: OMp+kmye4OfcUJMJC7fA4xejXa2bwcRzzIV7LNwQJIA=) 4: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: j6cx8hFvJf08OS2CjRVM99UbbsvdjyQ4FKIovKDguzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:dc:90:66:b1:23:11:f2:fc:a2:97:41:d9:14:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=f0eb9b09a4464cee9061ebe73d0d51648d9cd716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:13:b9:43:9c:2b:12:a7:08:6d:b2:10:d7: 68:fd:42:cd:d2:7b:fb:b1:fa:5a:bb:0b:1b:73:7b: 5f:27:b3:76:e1:fb:9c:70:4b:e9:42:8c:0e:38:6f: c9:6a:d3:f8:c4:1c:63:74:03:21:46:45:c2:b2:89: 5d:45:38:e6:63:1e:95:54:03:33:0f:70:fc:cc:ab: a3:e3:25:7c:89:40:44:74:51:78:73:09:6b:1f:7f: af:cd:8a:43:37:1e:6d:88:81:08:9d:37:de:1d:eb: 9e:4e:bd:c2:5e:7f:3b:04:5a:1e:18:c6:61:3b:ab: 17:e6:6e:b3:93:af:7b:f8:20:3f:de:50:7c:48:f7: 26:e7:6c:7d:97:55:3f:cd:8f:51:9c:09:e8:1a:58: 93:9f:c7:1c:71:e1:76:8f:8a:8a:6b:99:cc:1d:41: fe:9d:be:67:7d:5c:4c:ff:ff:6a:74:29:e3:6a:36: e5:b7:6c:16:8f:c3:13:b1:eb:46:38:26:07:94:1c: a0:a7:40:79:c8:b7:ae:3e:bf:0a:ef:ae:bc:6c:da: a2:e7:e1:df:64:e9:6d:e9:99:9e:cf:7a:cc:38:d4: a0:3c:49:31:16:14:c2:55:8a:f5:a1:f6:f4:4b:6a: 99:a6:e8:8c:8e:50:e8:71:85:49:14:2d:94:82:00: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EB:9B:09:A4:46:4C:EE:90:61:EB:E7:3D:0D:51:64:8D:9C:D7:16 X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:bd:d3:c6:34:12:c1:02:75:c6:5b:d0:c9:1e:e6:8e:cf:22: d0:d4:fc:9f:29:fa:0c:96:0c:b2:43:2b:3b:f3:0c:0d:04:29: be:60:3f:5c:8c:fb:22:80:c5:87:33:4e:8d:bc:33:d6:69:62: f0:5b:00:fa:8a:95:d1:eb:ab:70:3e:62:3c:a4:e7:de:9e:e7: b7:3b:a9:8e:19:85:db:98:c6:fb:73:0a:d0:89:a3:fd:76:b3: 3f:91:07:5d:37:89:c2:63:8f:35:6f:b1:f5:dd:fc:da:b1:4d: 8b:83:68:4c:c7:00:68:37:78:47:50:29:a2:d3:ed:12:3b:22: ca:ab:59:c4:3a:f1:ca:8b:58:77:a9:4a:3b:c7:3b:5f:92:37: 10:05:37:c4:b5:3a:36:45:4b:ac:5d:cb:97:95:c1:00:4d:01: ce:ca:c0:4f:91:d2:b2:2d:70:e2:f4:36:44:65:5d:ff:8d:2c: e0:97:b2:17:a7:da:77:45:f9:cd:d7:88:54:99:b7:df:51:65: f3:21:19:9e:cf:d4:7b:b8:09:9a:4a:9a:c0:83:3e:ed:38:1a: 5b:33:c4:56:fd:a8:43:08:38:f3:97:56:a9:9a:1b:81:a8:84: 55:62:12:59:68:2b:2d:bb:ba:dc:eb:b2:e9:0b:d6:66:47:68: 4c:12:9a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtyQZrEjEfL8opdB2RTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD EyhmMGViOWIwOWE0NDY0Y2VlOTA2MWViZTczZDBkNTE2NDhkOWNkNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSMTuUOcKxKnCG2yENdo/ULN0nv7 sfpauwsbc3tfJ7N24fuccEvpQowOOG/JatP4xBxjdAMhRkXCsoldRTjmYx6VVAMz D3D8zKuj4yV8iUBEdFF4cwlrH3+vzYpDNx5tiIEInTfeHeueTr3CXn87BFoeGMZh O6sX5m6zk697+CA/3lB8SPcm52x9l1U/zY9RnAnoGliTn8ccceF2j4qKa5nMHUH+ nb5nfVxM//9qdCnjajblt2wWj8MTsetGOCYHlBygp0B5yLeuPr8K7668bNqi5+Hf ZOlt6Zmez3rMONSgPEkxFhTCVYr1ofb0S2qZpuiMjlDocYVJFC2UggBCLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDrmwmkRkzukGHr5z0NUWSNnNcWMB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEL3TxjQS wQJ1xlvQyR7mjs8i0NT8nyn6DJYMskMrO/MMDQQpvmA/XIz7IoDFhzNOjbwz1mli 8FsA+oqV0eurcD5iPKTn3p7ntzupjhmF25jG+3MK0Imj/XazP5EHXTeJwmOPNW+x 9d382rFNi4NoTMcAaDd4R1ApotPtEjsiyqtZxDrxyotYd6lKO8c7X5I3EAU3xLU6 NkVLrF3Ll5XBAE0BzsrAT5HSsi1w4vQ2RGVd/40s4JeyF6fad0X5zdeIVJm331Fl 8yEZns/Ue7gJmkqawIM+7TgaWzPEVv2oQwg485dWqZobgaiEVWISWWgrLbu63Ouy 6QvWZkdoTBKa5A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:58 2025 by rpki-client