This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft File: SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json) Hash identifier: J8pN5BHPaz6MvJJCZ1drEi1A7j+FvBt0/hrWcNaQwgE= Subject key identifier: 6B:51:42:92:5D:99:05:9A:05:29:E2:5C:CD:D9:E9:6F:2C:13:A4:3F Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F Certificate issuer: /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f Certificate serial: 019AF19B92A653B6AF96CA83DE979C973738 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft Manifest number: 0D3D Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: NAIv3GftAJAIU2ltEtopLZQ77Aq9qzGzaWhj8bKzJJA=) 2: t2TSolMpe1MqepO7ZiAhihdiw7E.roa (hash: 6XLtwGEoBLRfiwM7FwJJWhjDjtkkFPk9hmuRlaKNmqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:92:a6:53:b6:af:96:ca:83:de:97:9c:97:37:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=6b5142925d99059a0529e25ccdd9e96f2c13a43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:49:5c:ab:85:a7:7b:28:5e:f5:87:07:5a:ec: 98:7a:87:ce:e6:4d:c4:7c:0c:b1:90:8b:e3:70:eb: 30:be:56:9d:0d:e1:9c:68:52:44:1e:7e:95:0e:bd: 29:14:df:75:1e:41:0c:4b:c6:57:3a:c1:2e:53:a7: 85:ad:5f:52:f9:f7:17:9a:4c:a7:42:c7:dc:3e:14: 5e:aa:4e:e7:4e:5b:9c:ef:af:bc:bf:03:9d:37:67: 81:7c:77:ee:7e:bd:1d:45:27:18:5a:a5:9c:ab:31: 1e:95:4d:b9:7b:f4:74:0d:11:78:c0:eb:1a:0d:cd: 5c:30:1b:07:27:d7:5e:7d:1b:0f:d0:f5:78:88:8f: be:22:d3:f0:54:f6:48:4d:f8:22:1f:62:74:09:8d: 3c:62:58:0f:40:cc:ad:22:9d:fb:3f:3b:4d:1f:5e: ea:e8:0d:1b:7c:22:1d:e8:65:ae:05:ac:ce:b8:df: 2d:b0:b9:b8:32:1c:0f:ed:b6:3c:78:09:de:05:86: 1e:0f:30:29:1c:72:e2:38:0d:fe:6b:00:97:0d:d6: d6:db:16:2c:b1:c4:42:e2:19:72:2f:0d:46:22:05: 1c:7c:26:ed:66:d2:4b:98:30:8a:74:54:df:72:54: 0f:2f:f0:61:9d:3f:f8:98:88:9d:2e:f0:54:c0:5c: 84:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:51:42:92:5D:99:05:9A:05:29:E2:5C:CD:D9:E9:6F:2C:13:A4:3F X509v3 Authority Key Identifier: keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a2:bd:41:b5:e7:09:67:15:b3:ff:18:29:bc:c1:bf:44:86: f0:6f:17:12:b7:4c:19:9e:0d:a6:e9:8c:d0:14:21:bb:df:5b: 4a:61:8a:fa:a7:33:ba:37:86:e5:af:04:b0:10:fa:09:ff:1a: b7:89:11:03:9a:fb:5a:fa:63:c6:09:8e:dd:5c:8d:81:b1:c4: f7:a2:e2:67:41:32:79:9b:df:d1:64:de:c6:ea:03:5d:a7:4f: f5:17:3b:f2:03:8a:d9:f8:62:12:e3:16:46:cb:5e:ea:12:4b: 49:8d:fa:1f:68:53:b3:74:93:46:72:ba:c5:78:cb:9d:07:81: 11:32:00:47:24:56:e9:49:34:6e:17:76:a2:78:90:31:b6:b2: fc:b5:fe:a2:c2:02:f0:94:0b:48:97:bb:af:2f:cd:34:bc:a7: bb:b1:0a:8e:c5:68:e9:59:16:5b:5d:38:47:47:ae:b5:e5:6f: 27:62:bc:a1:0d:3b:d1:ca:a5:dc:ce:6c:0e:d9:05:83:2e:58: ca:25:02:1c:7b:b1:05:98:46:15:64:1b:9a:40:ef:9c:0b:37: 4a:52:61:83:fc:8d:e7:9e:3b:66:89:9a:52:a7:75:e2:be:10: 39:8e:10:cf:30:ed:6c:8e:87:62:1b:29:43:1e:76:f7:a4:38: b7:d1:83:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5KmU7avlsqD3peclzc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDE1YTEwZTc0NzEwOTM2Y2I4YzM3YjdjNmY1ZjFmYjM4 YzEyMWYwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD Eyg2YjUxNDI5MjVkOTkwNTlhMDUyOWUyNWNjZGQ5ZTk2ZjJjMTNhNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0lcq4Wneyhe9YcHWuyYeofO5k3E fAyxkIvjcOswvladDeGcaFJEHn6VDr0pFN91HkEMS8ZXOsEuU6eFrV9S+fcXmkyn QsfcPhReqk7nTluc76+8vwOdN2eBfHfufr0dRScYWqWcqzEelU25e/R0DRF4wOsa Dc1cMBsHJ9defRsP0PV4iI++ItPwVPZITfgiH2J0CY08YlgPQMytIp37PztNH17q 6A0bfCId6GWuBazOuN8tsLm4MhwP7bY8eAneBYYeDzApHHLiOA3+awCXDdbW2xYs scRC4hlyLw1GIgUcfCbtZtJLmDCKdFTfclQPL/BhnT/4mIidLvBUwFyECQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtRQpJdmQWaBSniXM3Z6W8sE6Q/MB8GA1UdIwQY MBaAFEnRWhDnRxCTbLjDe3xvXx+zjBIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTQzMjUtMjE5MS00MWM2LWIyZWQt ZTIyOWE0MmM0MDg1LzEvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MTQzMjUtMjE5MS00MWM2LWIyZWQtZTIyOWE0MmM0MDg1 LzEvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKK9QbXn CWcVs/8YKbzBv0SG8G8XErdMGZ4NpumM0BQhu99bSmGK+qczujeG5a8EsBD6Cf8a t4kRA5r7WvpjxgmO3VyNgbHE96LiZ0EyeZvf0WTexuoDXadP9Rc78gOK2fhiEuMW Rste6hJLSY36H2hTs3STRnK6xXjLnQeBETIARyRW6Uk0bhd2oniQMbay/LX+osIC 8JQLSJe7ry/NNLynu7EKjsVo6VkWW104R0euteVvJ2K8oQ070cql3M5sDtkFgy5Y yiUCHHuxBZhGFWQbmkDvnAs3SlJhg/yN5547ZomaUqd14r4QOY4QzzDtbI6HYhsp Qx5296Q4t9GD4w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:16 2025 by rpki-client