This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft File: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft (raw, json) Hash identifier: o8sNKDKhAFA7bBMLKBVi/vzBW1zohNrrZ7tOurKaY3A= Subject key identifier: 0F:E6:2D:A3:02:04:7C:2D:7B:8E:F5:CA:EA:A9:5A:76:A5:E7:78:16 Authority key identifier: B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22 Certificate issuer: /CN=b2b5df65052ce94a37a8507947c527f0ccffa522 Certificate serial: 019AF12EC4CF6A36D8F36F8AA7AA64AFAFED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft Manifest number: 53 Signing time: Sat 06 Dec 2025 01:02:45 +0000 Manifest this update: Sat 06 Dec 2025 01:02:45 +0000 Manifest next update: Sun 07 Dec 2025 01:02:45 +0000 Files and hashes: 1: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl (hash: xzJ5Obsz5u56JBZjz3pdsyDM8OTU7tzcV8I7jMBwcbY=) 2: zXAq3vkN_gcHOS3Bhh3xlgW3vM4.roa (hash: Udoboc8aZE7E7SL94DHmtXVyLEipg3wZ7Pa2hKpsaLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c4:cf:6a:36:d8:f3:6f:8a:a7:aa:64:af:af:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2b5df65052ce94a37a8507947c527f0ccffa522 Validity Not Before: Dec 6 01:02:45 2025 GMT Not After : Dec 7 01:02:45 2025 GMT Subject: CN=0fe62da302047c2d7b8ef5caeaa95a76a5e77816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:b6:39:21:8c:de:49:ee:d9:56:cd:77:ec: 2c:1e:ca:83:48:04:42:41:36:76:85:47:3b:fb:53: 89:04:93:cc:40:38:25:58:73:25:eb:d2:d2:1a:85: a6:3c:48:91:62:fd:c3:45:5c:e0:8c:f4:12:ba:36: 11:82:b4:7e:0d:9f:b6:20:90:dc:65:c0:fa:ab:17: d6:43:5e:82:df:55:5a:58:88:75:bf:bb:95:98:49: d1:0b:fc:37:78:a4:1f:c1:80:74:64:42:33:d1:22: 11:ef:ae:79:a3:31:e8:aa:b8:62:81:a9:7d:f6:3a: 0e:99:8c:45:ef:36:97:8b:78:fb:bf:bf:8f:b5:68: 30:f1:e1:5b:25:16:ec:34:f6:94:6e:5d:73:27:31: 73:5d:b0:dc:d8:f4:2f:72:bf:1d:81:cb:04:d8:19: 86:c6:4e:fa:4f:f1:2a:7c:aa:21:e3:9f:f7:84:87: 5c:d8:a2:b8:2e:de:6e:db:0d:5c:81:b8:b1:c6:13: 77:51:7a:f4:e1:4f:9f:b0:d7:7c:f8:5d:b3:8b:a7: 8d:31:b1:03:1e:b9:42:cd:80:86:03:55:6e:3e:f0: 41:51:33:47:95:08:be:b5:da:5d:26:d6:8c:4c:a8: fe:e3:2d:48:b1:9e:83:63:12:ab:00:3c:52:7c:8e: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E6:2D:A3:02:04:7C:2D:7B:8E:F5:CA:EA:A9:5A:76:A5:E7:78:16 X509v3 Authority Key Identifier: keyid:B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a3:e5:29:db:41:82:3c:de:17:da:fa:36:91:8d:c6:52:bb: 1d:6e:c6:eb:74:64:56:7c:ac:ad:af:5f:20:9b:53:07:7f:85: 6c:13:5a:c7:24:33:dc:b5:f9:24:17:8a:0d:5b:4c:86:8b:4b: 64:0b:df:58:6d:d0:12:0e:96:f5:d0:51:7f:37:e8:4d:97:13: 09:f0:3d:e2:9d:34:74:35:6c:d7:77:af:73:70:1c:92:2f:5b: 10:b5:c1:f4:4d:c3:1f:9c:9c:2a:4b:b6:f1:7c:4a:a7:46:33: 51:1e:84:5f:a1:a1:fb:3d:4a:85:ae:a6:a1:2f:0e:6a:40:41: 9c:2a:0f:44:28:f7:c7:8d:39:17:33:34:0f:83:f2:2f:c7:47: 27:9c:cd:ff:0a:a9:44:6c:61:b8:9a:9a:e2:a7:1e:35:45:42: 21:7e:9f:ac:83:32:e7:5f:fe:24:2e:33:dd:a3:0d:ba:65:48: fb:fe:17:d3:b3:1a:58:c6:92:5d:75:d9:c2:07:b2:73:91:8d: 9b:34:a3:2c:4f:e4:ac:9c:fa:da:87:5a:62:c2:35:13:8f:4a: bb:60:7d:88:b9:c2:da:59:00:c1:62:f1:71:2b:83:ae:87:1e: c0:e2:5d:32:1c:08:34:32:63:53:79:84:1b:05:77:0e:f5:9d: 47:e4:45:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsTPajbY82+Kp6pkr6/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYjVkZjY1MDUyY2U5NGEzN2E4NTA3OTQ3YzUyN2YwY2Nm ZmE1MjIwHhcNMjUxMjA2MDEwMjQ1WhcNMjUxMjA3MDEwMjQ1WjAzMTEwLwYDVQQD EygwZmU2MmRhMzAyMDQ3YzJkN2I4ZWY1Y2FlYWE5NWE3NmE1ZTc3ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dq2OSGM3knu2VbNd+wsHsqDSARC QTZ2hUc7+1OJBJPMQDglWHMl69LSGoWmPEiRYv3DRVzgjPQSujYRgrR+DZ+2IJDc ZcD6qxfWQ16C31VaWIh1v7uVmEnRC/w3eKQfwYB0ZEIz0SIR7655ozHoqrhigal9 9joOmYxF7zaXi3j7v7+PtWgw8eFbJRbsNPaUbl1zJzFzXbDc2PQvcr8dgcsE2BmG xk76T/EqfKoh45/3hIdc2KK4Lt5u2w1cgbixxhN3UXr04U+fsNd8+F2zi6eNMbED HrlCzYCGA1VuPvBBUTNHlQi+tdpdJtaMTKj+4y1IsZ6DYxKrADxSfI6PdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/mLaMCBHwte471yuqpWnal53gWMB8GA1UdIwQY MBaAFLK132UFLOlKN6hQeUfFJ/DM/6UiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NmNiYzItYmM3Yi00NzU5LTg3MjYt ZWQ3NWM2ZmIxNjk0LzEvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82NmNiYzItYmM3Yi00NzU5LTg3MjYtZWQ3NWM2ZmIxNjk0 LzEvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6PlKdtB gjzeF9r6NpGNxlK7HW7G63RkVnysra9fIJtTB3+FbBNaxyQz3LX5JBeKDVtMhotL ZAvfWG3QEg6W9dBRfzfoTZcTCfA94p00dDVs13evc3Acki9bELXB9E3DH5ycKku2 8XxKp0YzUR6EX6Gh+z1Kha6moS8OakBBnCoPRCj3x405FzM0D4PyL8dHJ5zN/wqp RGxhuJqa4qceNUVCIX6frIMy51/+JC4z3aMNumVI+/4X07MaWMaSXXXZwgeyc5GN mzSjLE/krJz62odaYsI1E49Ku2B9iLnC2lkAwWLxcSuDrocewOJdMhwINDJjU3mE GwV3DvWdR+RFsA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:21 2025 by rpki-client