This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json) Hash identifier: +sVb5Im70d+T2wcRbotei5xz3KpimyDFAKvjiJAcWK0= Subject key identifier: 9D:DD:75:13:95:AA:C9:8D:6D:54:12:D6:46:47:68:F5:FD:0B:83:33 Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02 Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02 Certificate serial: 019AF50A54B4FF513ADF0712F7E305413BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 19:01:26 +0000 Manifest this update: Sat 06 Dec 2025 19:01:26 +0000 Manifest next update: Sun 07 Dec 2025 19:01:26 +0000 Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=) 2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: omWhmV8yLIduLi3Lhww10NgdFW/DsEgueWy+HTAwXmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:54:b4:ff:51:3a:df:07:12:f7:e3:05:41:3b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02 Validity Not Before: Dec 6 19:01:26 2025 GMT Not After : Dec 7 19:01:26 2025 GMT Subject: CN=9ddd751395aac98d6d5412d6464768f5fd0b8333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0f:64:10:2d:ff:7a:0e:60:fe:c6:aa:e6:6f: 73:db:f3:12:2a:88:68:0e:35:83:5f:2c:c2:02:14: be:8a:b0:b5:3d:3f:55:08:65:d4:77:50:89:20:e3: 31:02:b4:7b:80:d2:7d:4b:a9:32:f2:b5:d7:ce:da: 5e:73:db:ac:bd:58:90:c5:ef:b3:fc:83:b0:79:eb: db:20:f7:00:e9:c6:59:07:aa:e5:88:50:38:a4:a6: df:b5:5b:2a:2f:97:10:48:56:fe:9d:2f:93:eb:6a: 5f:1f:6f:b8:3d:69:31:32:76:73:a4:1d:50:04:8c: 4e:49:94:ad:67:a0:24:8e:7a:dc:02:da:b3:3c:06: a6:2f:91:48:b8:36:2c:06:e8:c2:7c:90:d1:05:88: ba:4b:c7:7c:8d:fa:84:9b:95:2d:04:8b:f7:9d:85: 1b:32:7d:55:8c:42:97:39:c3:67:23:35:46:27:6d: 53:fb:45:e1:06:80:72:99:c9:b8:15:34:4c:fa:b7: 18:aa:4f:d8:39:0a:e9:a7:66:6a:7a:7e:23:45:59: a9:9d:06:44:f3:c9:fd:c4:06:57:8a:f5:2e:8f:24: dd:01:c9:01:c3:f8:4e:7b:27:a3:88:02:92:22:da: 0a:4a:72:1f:49:bb:d9:3d:70:dc:9f:8b:c6:0f:c7: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DD:75:13:95:AA:C9:8D:6D:54:12:D6:46:47:68:F5:FD:0B:83:33 X509v3 Authority Key Identifier: keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:34:03:30:af:b5:70:9d:14:b9:7e:b9:37:fc:8f:08:29:41: 8a:28:3d:a9:7f:98:b6:ed:98:f7:7c:89:2f:3f:f2:7a:1e:43: ae:8f:be:1a:93:7c:b5:e6:8b:8d:18:fb:b0:04:53:c9:6c:f4: fc:58:f3:96:9c:11:99:f9:11:ae:09:93:83:68:c6:a9:26:d6: 95:59:94:8b:88:6d:62:6d:16:4e:29:de:2f:08:22:80:a4:07: 6f:5c:da:ae:5b:c8:49:f9:02:af:76:be:c2:bd:69:19:00:6d: b5:f4:74:bf:2b:03:8b:57:d1:ca:9f:3d:35:78:d1:be:25:fd: bb:3f:ba:75:4d:05:de:9a:be:35:ee:d8:a7:ef:1e:b9:06:a9: 0b:77:90:86:f2:58:4a:ca:5d:82:68:a7:0b:a7:c9:65:65:4d: 0b:10:91:0a:33:3b:7e:b9:b3:95:20:02:47:84:f6:d5:05:d3: f4:bf:a4:be:a6:57:40:3d:8d:4d:44:03:1f:bf:c3:1e:fa:cb: 55:bd:ef:29:bb:c7:ef:ad:63:26:19:2d:e1:d6:02:e3:9e:2a: b1:e9:c0:a8:1b:94:b0:d1:f2:cf:b8:07:23:ba:db:41:d9:71: 6d:d1:a8:07:01:55:6c:40:b1:43:dd:93:8b:bb:57:ef:91:35: d5:b7:cf:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClS0/1E63wcS9+MFQTuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NzhkMzI4YmNkZTUyOTRmMzcyNzY1YzExYWVlZjI4MTU1 YjBmMDIwHhcNMjUxMjA2MTkwMTI2WhcNMjUxMjA3MTkwMTI2WjAzMTEwLwYDVQQD Eyg5ZGRkNzUxMzk1YWFjOThkNmQ1NDEyZDY0NjQ3NjhmNWZkMGI4MzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Q9kEC3/eg5g/saq5m9z2/MSKoho DjWDXyzCAhS+irC1PT9VCGXUd1CJIOMxArR7gNJ9S6ky8rXXztpec9usvViQxe+z /IOweevbIPcA6cZZB6rliFA4pKbftVsqL5cQSFb+nS+T62pfH2+4PWkxMnZzpB1Q BIxOSZStZ6AkjnrcAtqzPAamL5FIuDYsBujCfJDRBYi6S8d8jfqEm5UtBIv3nYUb Mn1VjEKXOcNnIzVGJ21T+0XhBoBymcm4FTRM+rcYqk/YOQrpp2Zqen4jRVmpnQZE 88n9xAZXivUujyTdAckBw/hOeyejiAKSItoKSnIfSbvZPXDcn4vGD8fumQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3ddROVqsmNbVQS1kZHaPX9C4MzMB8GA1UdIwQY MBaAFEl40yi83lKU83J2XBGu7ygVWw8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjkt OGM3ZDIwOTIzYjA4LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjktOGM3ZDIwOTIzYjA4 LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzQDMK+1 cJ0UuX65N/yPCClBiig9qX+Ytu2Y93yJLz/yeh5Dro++GpN8teaLjRj7sARTyWz0 /FjzlpwRmfkRrgmTg2jGqSbWlVmUi4htYm0WTineLwgigKQHb1zarlvISfkCr3a+ wr1pGQBttfR0vysDi1fRyp89NXjRviX9uz+6dU0F3pq+Ne7Yp+8euQapC3eQhvJY SspdgminC6fJZWVNCxCRCjM7frmzlSACR4T21QXT9L+kvqZXQD2NTUQDH7/DHvrL Vb3vKbvH761jJhkt4dYC454qsenAqBuUsNHyz7gHI7rbQdlxbdGoBwFVbECxQ92T i7tX75E11bfPUw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:35:00 2025 by rpki-client