This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json) Hash identifier: TP/NnDaaBd8As8DkoTPim91DkBp/koaGc2DKP6p6/wU= Subject key identifier: 0E:8D:C1:A9:35:E5:FD:BC:4D:88:20:42:B1:51:6F:A0:F6:CC:00:AA Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Certificate serial: 019AF68A6366D0AB60F8E98D916BAC79AD88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft Manifest number: 10D2 Signing time: Sun 07 Dec 2025 02:00:55 +0000 Manifest this update: Sun 07 Dec 2025 02:00:55 +0000 Manifest next update: Mon 08 Dec 2025 02:00:55 +0000 Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=) 2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=) 3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=) 4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: ZGY1Q9mS4nOQYxTl0vdMGjVq05G2pfbxj/FfbQOxaGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:63:66:d0:ab:60:f8:e9:8d:91:6b:ac:79:ad:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Validity Not Before: Dec 7 02:00:55 2025 GMT Not After : Dec 8 02:00:55 2025 GMT Subject: CN=0e8dc1a935e5fdbc4d882042b1516fa0f6cc00aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:83:e1:55:39:66:b3:42:b2:b7:1e:89:7b: 69:c9:2c:e5:29:ae:8d:4e:74:2e:3d:7b:21:eb:ff: 0e:f5:c1:96:48:9b:f9:6d:16:ed:f7:6b:f2:fb:a4: 13:05:8b:95:44:4d:9f:1b:84:95:4f:aa:5a:71:ae: 9b:65:0a:6c:50:8c:f3:52:86:24:03:27:d7:c9:37: 89:1c:08:b8:b5:63:fb:a5:c0:8d:6d:73:10:60:be: 85:23:e4:3b:43:17:a2:61:9a:7b:e0:5a:ea:de:70: ea:64:13:df:ef:79:ea:7a:dd:e7:95:69:54:79:d3: 9a:45:b2:39:7e:c2:50:14:b1:26:13:bd:14:14:85: 43:7d:b7:fe:d7:c1:e7:19:c1:a8:f2:81:46:ea:d3: fe:72:68:c9:da:83:d3:5b:6f:ce:e9:c9:7c:12:1e: 3b:92:aa:52:51:cb:8b:5f:15:3b:59:cf:10:02:c2: 76:40:aa:27:70:ff:10:ad:59:60:69:ba:4d:c0:2c: c1:5c:3a:05:eb:68:ec:e4:c1:39:c1:06:28:7a:d6: b1:c9:6d:83:ea:b7:e7:7a:24:46:15:09:e6:0c:18: 1a:6a:79:7a:ff:70:1e:ec:cb:74:b6:60:d8:c1:f9: da:b2:70:e2:ad:ad:ae:83:63:c0:1f:d5:d5:cb:2f: b6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8D:C1:A9:35:E5:FD:BC:4D:88:20:42:B1:51:6F:A0:F6:CC:00:AA X509v3 Authority Key Identifier: keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:be:99:32:2d:b5:a3:80:10:ff:cd:c4:80:3b:c3:a4:78:01: ff:f6:6f:31:28:fb:82:cb:ba:bb:2b:99:e6:55:b0:5c:26:43: ea:77:9a:7a:91:5c:2b:fa:34:55:ee:49:8f:35:ab:88:a9:f2: 31:bb:31:66:8a:30:de:1d:01:b4:96:fb:d1:33:1a:7e:a2:92: 29:3b:e6:9f:07:15:79:2a:34:f9:c3:bc:fe:0c:1a:c8:ab:93: 55:06:fe:1b:56:cd:f3:71:54:8f:f2:15:31:b9:5f:ad:82:82: d9:60:31:c9:fc:63:0d:f5:ac:a1:c5:25:e4:47:84:a5:da:8f: 80:a5:a4:2a:62:c8:44:46:ef:14:0c:d9:96:04:72:12:61:0c: 39:b2:77:61:ad:eb:d4:e5:4d:f1:58:1b:88:75:60:5f:1a:fa: 6d:7b:20:3a:60:e9:ec:84:80:ae:99:42:54:f5:75:20:14:f0: 2e:6e:78:ed:86:f2:3a:ea:2d:21:a9:fc:5d:1e:a0:25:27:5d: aa:ee:d3:66:92:61:3b:b2:ff:7e:a1:41:59:c5:47:8b:66:d6: 23:6c:cb:72:a4:fb:1c:09:ea:04:5e:a4:08:67:b3:44:94:23: 12:36:7f:69:d8:02:58:70:bd:aa:da:25:44:ae:05:a1:77:a2: 1a:a1:f3:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2imNm0Ktg+OmNkWusea2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj NGY2NDUwHhcNMjUxMjA3MDIwMDU1WhcNMjUxMjA4MDIwMDU1WjAzMTEwLwYDVQQD EygwZThkYzFhOTM1ZTVmZGJjNGQ4ODIwNDJiMTUxNmZhMGY2Y2MwMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzuD4VU5ZrNCsrceiXtpySzlKa6N TnQuPXsh6/8O9cGWSJv5bRbt92vy+6QTBYuVRE2fG4SVT6paca6bZQpsUIzzUoYk AyfXyTeJHAi4tWP7pcCNbXMQYL6FI+Q7QxeiYZp74Frq3nDqZBPf73nqet3nlWlU edOaRbI5fsJQFLEmE70UFIVDfbf+18HnGcGo8oFG6tP+cmjJ2oPTW2/O6cl8Eh47 kqpSUcuLXxU7Wc8QAsJ2QKoncP8QrVlgabpNwCzBXDoF62js5ME5wQYoetaxyW2D 6rfneiRGFQnmDBgaanl6/3Ae7Mt0tmDYwfnasnDira2ug2PAH9XVyy+2GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6Nwak15f28TYggQrFRb6D2zACqMB8GA1UdIwQY MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3 LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr76ZMi21 o4AQ/83EgDvDpHgB//ZvMSj7gsu6uyuZ5lWwXCZD6neaepFcK/o0Ve5JjzWriKny MbsxZoow3h0BtJb70TMafqKSKTvmnwcVeSo0+cO8/gwayKuTVQb+G1bN83FUj/IV MblfrYKC2WAxyfxjDfWsocUl5EeEpdqPgKWkKmLIREbvFAzZlgRyEmEMObJ3Ya3r 1OVN8VgbiHVgXxr6bXsgOmDp7ISArplCVPV1IBTwLm547YbyOuotIan8XR6gJSdd qu7TZpJhO7L/fqFBWcVHi2bWI2zLcqT7HAnqBF6kCGezRJQjEjZ/adgCWHC9qtol RK4FoXeiGqHzdg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:28:11 2025 by rpki-client