This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json) Hash identifier: 0rKHzDDkhqT8YAjkVdPvjlntBElzOqvud3ubMuiBQuY= Subject key identifier: 9A:B4:D1:69:A1:29:47:C9:D5:F2:62:5E:2A:39:16:66:9E:AD:B4:5F Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Certificate serial: 019AF49C0623A2E53254847AFFF5877357BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft Manifest number: 10D1 Signing time: Sat 06 Dec 2025 17:00:57 +0000 Manifest this update: Sat 06 Dec 2025 17:00:57 +0000 Manifest next update: Sun 07 Dec 2025 17:00:57 +0000 Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=) 2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=) 3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=) 4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: PH4kgC39YEbSnplg+C23yij7AMleEX6s1oA76rk0FHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:06:23:a2:e5:32:54:84:7a:ff:f5:87:73:57:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Validity Not Before: Dec 6 17:00:57 2025 GMT Not After : Dec 7 17:00:57 2025 GMT Subject: CN=9ab4d169a12947c9d5f2625e2a3916669eadb45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:79:7a:3b:8c:96:ba:b4:72:ed:f2:8d:09:17: d1:0b:89:b2:77:ae:58:3f:b9:2e:ef:75:4e:82:f0: c5:86:0b:58:5f:bb:22:5e:85:c7:60:d5:76:21:85: d0:6a:e3:af:b2:5c:e5:7f:26:db:d2:b0:45:ed:95: 0e:3c:43:9c:aa:9f:d2:9c:38:0b:a4:50:f0:30:a9: 66:aa:8e:c6:c0:7d:ff:fd:f7:4a:2e:0f:7c:3c:00: b7:7b:fb:f4:30:a2:e2:5d:4d:bf:da:93:e3:74:7b: 55:7d:2b:8c:65:39:85:1a:08:39:93:3a:fa:d9:8f: 34:79:54:1c:b2:96:a5:43:65:7f:0c:23:03:bd:ee: 80:8a:36:ea:01:85:cd:14:b5:e5:3a:28:69:cb:3d: 4c:e5:31:dd:49:de:96:39:65:8a:5b:71:ca:4e:4e: 28:ba:cf:14:62:86:10:37:e2:11:45:13:19:83:64: ff:30:4c:db:94:6c:21:88:c0:f6:ee:bf:c8:6a:88: fc:0f:b5:ac:a4:a2:28:54:be:ae:64:f0:74:45:79: e1:f2:ec:b7:f3:2e:7c:10:e5:cf:29:d3:eb:92:a1: 43:dd:33:43:e3:35:0a:d0:05:f6:32:47:6e:83:95: 9e:dd:9c:f3:fd:77:cc:59:78:0e:ed:e9:b0:a1:16: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:D1:69:A1:29:47:C9:D5:F2:62:5E:2A:39:16:66:9E:AD:B4:5F X509v3 Authority Key Identifier: keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:19:ff:2d:46:d3:c9:3e:20:e6:74:1e:d8:43:0c:c3:83:9f: c6:85:c0:be:84:68:ba:fd:00:36:81:0a:91:56:6b:cf:6b:1f: 5c:72:74:be:d6:f3:08:c0:22:f2:0e:ff:5e:5a:aa:6d:d9:a8: b1:97:2d:84:ee:e2:aa:54:e4:e1:7f:62:5b:b3:ed:3f:35:fc: 5e:39:62:9d:f8:39:0f:c9:fb:ac:c9:9d:d7:1f:8c:e0:f2:4a: 95:a4:49:c7:42:c6:15:d8:e8:d8:21:c0:b0:ec:5b:72:29:54: 82:23:4a:88:ed:b2:e7:b9:81:88:ba:c8:65:c9:ca:76:ee:6e: d6:31:7b:f2:f3:92:0c:6f:98:b0:2b:59:2c:38:d8:63:c4:93: 74:42:46:7b:78:08:b0:34:9c:da:1e:7a:d2:dd:16:14:9c:26: e0:5c:29:96:81:f6:6f:4c:e4:67:de:3c:d7:9d:ae:f8:34:a9: ef:7b:71:13:21:64:6e:25:d7:ab:b9:2a:e9:53:7b:b9:62:5e: 98:2c:49:45:9a:93:d5:cf:f3:c6:05:bb:17:16:9b:48:3e:96: 16:f7:aa:71:78:67:5a:41:3d:5c:18:35:e0:53:79:e2:3a:36: 82:01:5a:fe:86:33:5e:ce:ba:46:a4:2b:f8:80:64:c2:39:c3: 92:6a:01:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAYjouUyVIR6//WHc1e6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj NGY2NDUwHhcNMjUxMjA2MTcwMDU3WhcNMjUxMjA3MTcwMDU3WjAzMTEwLwYDVQQD Eyg5YWI0ZDE2OWExMjk0N2M5ZDVmMjYyNWUyYTM5MTY2NjllYWRiNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3l6O4yWurRy7fKNCRfRC4myd65Y P7ku73VOgvDFhgtYX7siXoXHYNV2IYXQauOvslzlfybb0rBF7ZUOPEOcqp/SnDgL pFDwMKlmqo7GwH3//fdKLg98PAC3e/v0MKLiXU2/2pPjdHtVfSuMZTmFGgg5kzr6 2Y80eVQcspalQ2V/DCMDve6AijbqAYXNFLXlOihpyz1M5THdSd6WOWWKW3HKTk4o us8UYoYQN+IRRRMZg2T/MEzblGwhiMD27r/Iaoj8D7WspKIoVL6uZPB0RXnh8uy3 8y58EOXPKdPrkqFD3TND4zUK0AX2Mkdug5We3Zzz/XfMWXgO7emwoRZh2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq00WmhKUfJ1fJiXio5FmaerbRfMB8GA1UdIwQY MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3 LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohn/LUbT yT4g5nQe2EMMw4OfxoXAvoRouv0ANoEKkVZrz2sfXHJ0vtbzCMAi8g7/Xlqqbdmo sZcthO7iqlTk4X9iW7PtPzX8Xjlinfg5D8n7rMmd1x+M4PJKlaRJx0LGFdjo2CHA sOxbcilUgiNKiO2y57mBiLrIZcnKdu5u1jF78vOSDG+YsCtZLDjYY8STdEJGe3gI sDSc2h560t0WFJwm4FwploH2b0zkZ948152u+DSp73txEyFkbiXXq7kq6VN7uWJe mCxJRZqT1c/zxgW7FxabSD6WFveqcXhnWkE9XBg14FN54jo2ggFa/oYzXs66RqQr +IBkwjnDkmoBJw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:50 2025 by rpki-client