This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json) Hash identifier: phWxvT7fGxw+o7AzJTC1UTBsYsenYdJSCaCl4NfAjL0= Subject key identifier: 8B:84:6A:2A:A2:52:E8:56:16:0B:27:A5:24:E1:5B:27:F4:84:26:E5 Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8 Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8 Certificate serial: 019AF5098A5B65D1C717FE6C1196C2279BBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft Manifest number: 149F Signing time: Sat 06 Dec 2025 19:00:34 +0000 Manifest this update: Sat 06 Dec 2025 19:00:34 +0000 Manifest next update: Sun 07 Dec 2025 19:00:34 +0000 Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: ATk1NLANoxObc8QYEPoGeo/qOiuW71Zv9JeM6eHmOZo=) 2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8a:5b:65:d1:c7:17:fe:6c:11:96:c2:27:9b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8 Validity Not Before: Dec 6 19:00:34 2025 GMT Not After : Dec 7 19:00:34 2025 GMT Subject: CN=8b846a2aa252e856160b27a524e15b27f48426e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:01:17:2a:b8:09:f0:40:b8:c0:2c:6c:16: 6d:d3:95:21:2c:39:44:fc:83:7e:e7:93:d6:5e:ba: 38:de:c1:f3:03:0e:ac:a5:b4:10:60:42:38:3c:51: ac:97:31:e1:b4:4f:dd:d4:56:4f:95:c9:9b:94:b6: e8:4b:e5:eb:0c:fc:61:ce:a8:1e:9c:34:8a:a2:6e: 03:96:03:ea:22:8d:8d:ab:9e:cf:fe:8f:7e:aa:49: ce:2b:6b:3e:e0:b6:66:4b:81:b6:c7:08:05:5d:48: be:74:6e:97:22:1e:cb:d5:62:29:4e:41:2b:98:f6: 56:4d:3f:a4:21:c3:6d:0f:45:4a:46:f0:8b:ae:a8: ff:cf:13:58:fe:6d:09:40:bc:e8:ca:aa:85:16:28: bc:1c:fd:95:89:45:43:81:c8:74:06:95:a6:fa:bf: 79:a1:22:4a:d9:65:0d:10:0d:68:0c:c4:ea:63:d8: 84:8b:b6:78:7a:20:e4:f9:56:b3:fa:7e:25:8a:94: 00:ca:cd:45:8f:af:5b:eb:8c:62:82:8d:76:e6:5b: b8:5e:13:20:ff:55:94:19:1c:6f:0f:5d:10:50:28: b2:09:76:5f:34:65:d0:42:ac:18:1d:e6:36:a9:77: c8:4f:d9:25:aa:41:49:59:c2:58:3e:a8:47:3b:bf: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:84:6A:2A:A2:52:E8:56:16:0B:27:A5:24:E1:5B:27:F4:84:26:E5 X509v3 Authority Key Identifier: keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:82:b3:70:c4:fd:1d:aa:25:de:c7:26:46:de:5b:da:2b:f0: 70:f1:5e:e3:5b:84:f1:79:fc:f7:f8:6c:54:68:08:6d:cc:56: db:2f:25:e1:6a:1e:5f:be:b0:07:d3:c8:5c:b0:7c:64:59:0c: ee:9f:26:48:5d:a7:0c:1a:4f:91:0a:2e:82:82:0a:12:0a:43: 3d:5c:2d:1e:5e:e0:dc:70:c6:ff:b0:aa:59:92:2a:3b:f3:f7: 4f:10:ec:4f:b1:e8:14:b0:e5:ca:a6:e2:b4:62:97:d4:48:7e: 65:7d:cf:92:20:ea:f4:e5:62:ca:4e:38:af:f2:12:b4:29:69: 81:98:be:71:29:e2:9d:c2:eb:de:c8:c6:f0:75:7b:b8:a3:4c: 9c:a0:d6:8d:f2:d4:d2:71:bd:79:d7:92:42:c0:03:65:66:99: 6d:01:7f:17:f0:b4:fc:27:06:04:b8:28:c3:56:d9:e0:ef:97: b1:24:aa:fb:93:ee:a0:1a:84:7f:b4:fa:d8:d8:16:09:93:57: ac:8d:c4:58:d1:e4:bf:3a:53:59:ff:76:0c:12:3a:2a:f7:07: 80:c1:5a:55:54:1b:3d:be:a9:db:47:c2:db:53:dc:51:f6:f0: 8b:ef:57:90:c5:b3:77:22:08:ad:cf:a4:85:ee:87:88:83:8f: 20:46:7e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYpbZdHHF/5sEZbCJ5u6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWNkY2I5MGI5ODMyMDE2NzQ4YTdlMjY4Y2MxZWZmMjM5 MjYyZjgwHhcNMjUxMjA2MTkwMDM0WhcNMjUxMjA3MTkwMDM0WjAzMTEwLwYDVQQD Eyg4Yjg0NmEyYWEyNTJlODU2MTYwYjI3YTUyNGUxNWIyN2Y0ODQyNmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaEBFyq4CfBAuMAsbBZt05UhLDlE /IN+55PWXro43sHzAw6spbQQYEI4PFGslzHhtE/d1FZPlcmblLboS+XrDPxhzqge nDSKom4DlgPqIo2Nq57P/o9+qknOK2s+4LZmS4G2xwgFXUi+dG6XIh7L1WIpTkEr mPZWTT+kIcNtD0VKRvCLrqj/zxNY/m0JQLzoyqqFFii8HP2ViUVDgch0BpWm+r95 oSJK2WUNEA1oDMTqY9iEi7Z4eiDk+Vaz+n4lipQAys1Fj69b64xigo125lu4XhMg /1WUGRxvD10QUCiyCXZfNGXQQqwYHeY2qXfIT9klqkFJWcJYPqhHO7/1aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuEaiqiUuhWFgsnpSThWyf0hCblMB8GA1UdIwQY MBaAFEsc3LkLmDIBZ0in4mjMHv8jkmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgt YWVmYzE4OWZkODUxLzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgtYWVmYzE4OWZkODUx LzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4KzcMT9 Haol3scmRt5b2ivwcPFe41uE8Xn89/hsVGgIbcxW2y8l4WoeX76wB9PIXLB8ZFkM 7p8mSF2nDBpPkQougoIKEgpDPVwtHl7g3HDG/7CqWZIqO/P3TxDsT7HoFLDlyqbi tGKX1Eh+ZX3PkiDq9OViyk44r/IStClpgZi+cSnincLr3sjG8HV7uKNMnKDWjfLU 0nG9edeSQsADZWaZbQF/F/C0/CcGBLgow1bZ4O+XsSSq+5PuoBqEf7T62NgWCZNX rI3EWNHkvzpTWf92DBI6KvcHgMFaVVQbPb6p20fC21PcUfbwi+9XkMWzdyIIrc+k he6HiIOPIEZ+Lg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:36 2025 by rpki-client