This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft File: sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json) Hash identifier: 2qGCiG6VgtPDjN5KaliWtACStv10/YDspxRX9mPXRNs= Subject key identifier: 52:A8:2F:A4:8C:CD:26:0D:EC:A1:35:31:E2:CA:A9:25:C8:03:8C:C3 Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774 Certificate serial: 019AF208D7C36143C75D9424C28131BE2758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft Manifest number: 11EE Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=) 2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=) 3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=) 4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: JcDKo/fYgKRrXwtAg6unoEmqkYISKjoWmlQBkLTtNo4=) 5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d7:c3:61:43:c7:5d:94:24:c2:81:31:be:27:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=52a82fa48ccd260deca13531e2caa925c8038cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:5f:44:42:63:d9:f4:3c:c6:06:f6:04:ff: 7e:33:e6:f9:be:ec:5e:05:92:7f:2a:62:90:4f:03: c1:46:d9:03:d0:da:9d:66:7f:4a:2f:1e:2b:f5:97: d2:06:3d:89:02:6c:84:4a:c8:c8:3a:f0:3b:67:65: be:83:4c:79:b3:07:b9:e3:75:1f:ac:26:7d:92:16: 15:a0:b7:74:24:08:83:94:b6:79:3c:7a:e6:33:3f: 63:f4:4c:44:07:08:76:84:52:b3:f8:28:5c:ac:a2: d2:85:29:c8:12:b4:1f:0d:70:2b:44:02:eb:df:95: 7a:36:d9:1b:a0:a4:23:fc:d6:21:f4:ab:f7:8f:21: 76:94:95:62:d8:e7:b2:92:a3:b2:a7:82:a0:3f:a1: ff:86:b6:05:a7:bf:76:db:24:4e:4e:86:8c:78:6c: 2e:86:c5:1e:c6:29:14:b5:42:b7:e4:72:35:bc:51: bc:fd:82:a1:1c:93:da:93:9f:a7:55:80:98:d5:5b: 9c:93:65:e6:2a:4b:3f:59:49:2c:c6:4d:b1:27:8a: 54:72:b8:e8:ef:29:07:a7:e7:cc:b4:a3:86:04:e3: 57:cf:ee:e6:b1:bd:64:95:3c:15:0f:4d:62:5a:c6: 11:83:e0:97:03:a9:98:2e:8e:e6:e0:58:c7:25:81: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:2F:A4:8C:CD:26:0D:EC:A1:35:31:E2:CA:A9:25:C8:03:8C:C3 X509v3 Authority Key Identifier: keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:be:e7:dc:32:37:dc:f4:90:84:e0:ce:a1:e6:69:5f:cf:02: 58:5e:69:07:fa:f6:c1:48:83:24:66:47:09:19:43:4f:72:1c: 90:51:e9:4b:a3:42:5b:9c:0b:e3:5f:0c:dc:14:7b:37:5f:8d: 05:c6:d6:a7:61:cd:ba:7e:9d:1c:1f:c8:56:b7:8a:36:97:d4: 0e:7f:b2:e2:c4:06:76:e9:81:2f:03:4e:52:f3:57:0f:5d:ec: e3:db:1d:d5:b0:8c:da:93:dd:f5:3a:88:bc:be:25:15:6f:60: 60:a7:88:34:c0:35:95:d6:20:03:9a:b1:5a:39:3a:7d:b7:01: ad:cc:3d:e4:fd:63:8e:b5:f9:b8:f7:d8:95:fa:ad:2e:1e:c1: c8:00:51:eb:50:24:00:7e:c4:60:e4:10:fe:1b:39:89:6a:79: 83:8e:35:da:cf:90:ef:d2:68:c6:55:01:a1:9e:28:18:a2:c4: 74:c8:b0:0b:3b:7d:0a:24:1a:33:a5:4a:48:57:62:38:85:db: 17:11:ab:c7:43:59:d2:ef:35:b4:fe:bc:c3:b8:9a:9b:fe:98: 13:ca:8f:1e:f4:ef:36:bc:56:73:1f:04:e6:23:ff:b3:88:f7: 81:30:9a:69:a3:3a:af:9b:7c:f3:11:a0:c5:d4:20:35:d2:41: d3:f0:09:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNfDYUPHXZQkwoExvidYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3 Zjc3NzQwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD Eyg1MmE4MmZhNDhjY2QyNjBkZWNhMTM1MzFlMmNhYTkyNWM4MDM4Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11JfREJj2fQ8xgb2BP9+M+b5vuxe BZJ/KmKQTwPBRtkD0NqdZn9KLx4r9ZfSBj2JAmyESsjIOvA7Z2W+g0x5swe543Uf rCZ9khYVoLd0JAiDlLZ5PHrmMz9j9ExEBwh2hFKz+ChcrKLShSnIErQfDXArRALr 35V6NtkboKQj/NYh9Kv3jyF2lJVi2OeykqOyp4KgP6H/hrYFp7922yROToaMeGwu hsUexikUtUK35HI1vFG8/YKhHJPak5+nVYCY1Vuck2XmKks/WUksxk2xJ4pUcrjo 7ykHp+fMtKOGBONXz+7msb1klTwVD01iWsYRg+CXA6mYLo7m4FjHJYFjjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKoL6SMzSYN7KE1MeLKqSXIA4zDMB8GA1UdIwQY MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt NTQ2OGIyY2YwYTc3LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3 LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC77n3DI3 3PSQhODOoeZpX88CWF5pB/r2wUiDJGZHCRlDT3IckFHpS6NCW5wL418M3BR7N1+N BcbWp2HNun6dHB/IVreKNpfUDn+y4sQGdumBLwNOUvNXD13s49sd1bCM2pPd9TqI vL4lFW9gYKeINMA1ldYgA5qxWjk6fbcBrcw95P1jjrX5uPfYlfqtLh7ByABR61Ak AH7EYOQQ/hs5iWp5g4412s+Q79JoxlUBoZ4oGKLEdMiwCzt9CiQaM6VKSFdiOIXb FxGrx0NZ0u81tP68w7iam/6YE8qPHvTvNrxWcx8E5iP/s4j3gTCaaaM6r5t88xGg xdQgNdJB0/AJ+g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:12 2025 by rpki-client