This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json) Hash identifier: 3D5rlBPGhFCX/ITPHzYB/zF55uhNZrOYVikoqrj4ZVU= Subject key identifier: EB:B7:56:0E:53:6B:0E:58:51:05:99:E0:E3:32:E0:6A:29:0F:CC:D9 Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248 Certificate serial: 019AF19B5EBD8904468E243F84994D0CA7CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft Manifest number: 04 Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: 2Rd6Xj6wiV3raIwL5cSqXIH30zs.roa (hash: mcr43yG8w/sxouuaXQhH08XNyvdGHXOCp9ED1nTWn+k=) 2: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: ko/J1CUA83MBtG0wxkDQcjvlBiR1O0sCweS8Si05S7Y=) 3: rMUucMZwyHqVe68VNeoN6D-FuLA.asa (hash: nVyVPJj6zrsI6p0L4gt0DztUXIz3kVI0kWZGXavJ6p4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5e:bd:89:04:46:8e:24:3f:84:99:4d:0c:a7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248 Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=ebb7560e536b0e58510599e0e332e06a290fccd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:1a:86:6f:c0:0e:fe:d7:ac:05:d2:d1:5e: 26:88:c9:d6:66:fb:db:ef:08:a4:90:0a:c3:cb:a6: 8b:1f:f0:0a:04:d5:4c:62:f7:13:5e:6e:1c:78:f8: 04:5e:bf:0d:8d:c3:33:db:3c:b6:10:d7:40:f2:cf: 05:f5:8f:48:25:25:c7:2e:51:c6:fc:31:63:d8:e2: 92:34:47:14:09:e5:13:80:96:ea:c1:13:b1:28:64: a8:55:b7:8f:7e:46:22:d6:d3:08:95:44:de:63:c7: 1c:e0:59:45:25:2f:62:9f:ba:f7:ca:6c:01:b4:b7: 4f:86:83:7f:ba:f8:47:a7:f4:f3:65:17:e4:04:c1: d4:cf:bc:c8:3d:a9:52:50:8c:a3:a0:6c:40:c5:b4: 38:d8:3c:e6:bb:88:e8:69:07:9d:cf:16:f8:07:85: f5:d7:36:48:4b:3f:2f:11:b6:c1:01:ae:27:a7:30: f7:3d:18:d8:ee:ae:53:fe:a7:7f:58:4b:35:a9:a5: 25:95:70:67:b0:c5:68:b7:cf:5a:8d:f1:06:52:1b: 1a:d1:49:83:70:8d:5b:b3:78:a8:a8:e3:d3:4b:67: a3:a4:13:1d:5b:93:ae:4c:da:5e:ab:73:ba:ea:bd: 59:d1:9b:2c:5e:86:a3:83:54:84:fb:96:5d:9e:02: 70:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B7:56:0E:53:6B:0E:58:51:05:99:E0:E3:32:E0:6A:29:0F:CC:D9 X509v3 Authority Key Identifier: keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:db:7f:4c:ef:67:1a:93:ec:5f:f1:16:ed:1c:b5:f7:45:ea: bc:65:de:34:3b:2d:fc:51:bc:73:03:c9:ad:68:f1:d1:79:a7: 8c:5b:11:2d:59:36:d9:9c:97:a7:e8:a4:c2:bc:32:5c:b7:c3: d4:16:2d:f0:9f:6c:a8:cb:62:77:2e:cf:88:d8:6c:ae:0c:50: 88:62:31:82:40:d8:97:a3:f0:07:68:09:39:6e:bd:5b:c7:47: 3e:56:a8:75:dc:8c:a7:dd:4a:20:bd:db:80:ea:57:42:2e:ce: 01:4b:f3:d5:9b:ea:ab:9b:35:4e:b1:f3:b7:63:50:9a:0a:96: 40:ac:71:fe:7a:68:84:3b:1e:06:62:2d:40:4b:52:61:c9:32: da:da:dc:f4:88:c5:b9:9e:77:9d:b8:7a:21:eb:00:3e:8e:56: 55:ee:d7:ef:6a:96:2d:1a:9e:e3:e2:f0:f1:b1:f1:7d:81:1e: dc:61:c2:28:4c:75:a6:3d:7a:78:b0:a5:19:04:e4:50:8c:7e: af:f7:bb:e0:70:fa:df:d1:94:79:12:ad:9f:b1:ef:73:68:38: 86:33:f6:2f:13:e2:33:98:af:aa:0a:ea:fe:18:26:a8:58:13: b1:f0:ca:5e:fd:6f:e6:07:e1:09:d7:09:57:56:f4:9f:8c:b0: ef:bb:d4:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm169iQRGjiQ/hJlNDKfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTc1ODc3M2E5OWU3NzFiOTBjYTliYjIyZjdmY2FkYmZi NjMyNDgwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EyhlYmI3NTYwZTUzNmIwZTU4NTEwNTk5ZTBlMzMyZTA2YTI5MGZjY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrUahm/ADv7XrAXS0V4miMnWZvvb 7wikkArDy6aLH/AKBNVMYvcTXm4cePgEXr8NjcMz2zy2ENdA8s8F9Y9IJSXHLlHG /DFj2OKSNEcUCeUTgJbqwROxKGSoVbePfkYi1tMIlUTeY8cc4FlFJS9in7r3ymwB tLdPhoN/uvhHp/TzZRfkBMHUz7zIPalSUIyjoGxAxbQ42Dzmu4joaQedzxb4B4X1 1zZISz8vEbbBAa4npzD3PRjY7q5T/qd/WEs1qaUllXBnsMVot89ajfEGUhsa0UmD cI1bs3ioqOPTS2ejpBMdW5OuTNpeq3O66r1Z0ZssXoajg1SE+5ZdngJwfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu3Vg5Taw5YUQWZ4OMy4GopD8zZMB8GA1UdIwQY MBaAFEkXWHc6medxuQypuyL3/K2/tjJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUt ZTdkYjk1ZTNiY2M0LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUtZTdkYjk1ZTNiY2M0 LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNt/TO9n GpPsX/EW7Ry190XqvGXeNDst/FG8cwPJrWjx0XmnjFsRLVk22ZyXp+ikwrwyXLfD 1BYt8J9sqMtidy7PiNhsrgxQiGIxgkDYl6PwB2gJOW69W8dHPlaoddyMp91KIL3b gOpXQi7OAUvz1Zvqq5s1TrHzt2NQmgqWQKxx/npohDseBmItQEtSYcky2trc9IjF uZ53nbh6IesAPo5WVe7X72qWLRqe4+Lw8bHxfYEe3GHCKEx1pj16eLClGQTkUIx+ r/e74HD639GUeRKtn7Hvc2g4hjP2LxPiM5ivqgrq/hgmqFgTsfDKXv1v5gfhCdcJ V1b0n4yw77vUEg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:23 2025 by rpki-client