This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json) Hash identifier: 0rLKzDoPWpLQcGYiFAaa5XfdiVzX/1mx36wf//V+KgY= Subject key identifier: 0C:0B:9D:8B:1A:82:71:37:3F:76:22:21:BD:CA:58:7A:69:60:7B:F9 Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b Certificate serial: 019AF19B1FF39B2FAFBDBA4272CA9FB7B8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft Manifest number: 0FC9 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: F9NxBAgrR/hy0Hvwd/NS79DTvmRS5PxO7K/aB2bbDW4=) 2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1f:f3:9b:2f:af:bd:ba:42:72:ca:9f:b7:b8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=0c0b9d8b1a8271373f762221bdca587a69607bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:09:f7:e2:f7:2b:49:4a:fd:dc:ec:bf:63: bc:17:24:5f:4c:c4:ac:72:6a:a9:8e:e8:38:81:09: 7b:2b:2e:6e:d7:64:af:a2:ea:6c:c9:79:c9:e2:5a: 62:11:d1:0f:57:b8:2f:f6:41:e8:79:0f:6e:07:07: 66:f5:51:2c:61:e8:6e:eb:73:fb:54:96:8f:fc:d4: 97:75:a7:09:4a:8d:84:fc:26:cb:b9:c2:05:e8:9c: 2c:7e:7d:d4:0f:0b:4c:42:12:52:4a:ce:28:31:2b: 32:d1:5d:f5:bf:c8:ee:82:10:7c:3a:0f:fe:87:15: e5:50:16:00:47:70:cc:84:4f:20:97:27:15:68:ed: 00:ad:f1:d9:59:d3:bf:5e:54:22:3c:70:3d:97:56: f9:8f:6f:91:50:e9:e9:dd:ee:3d:8d:96:0d:56:6b: 72:5c:d2:6e:22:a7:dc:53:1a:2f:8b:e2:f0:1e:6b: 60:ee:45:23:79:bf:c0:94:bb:db:fd:e2:ba:ec:5b: 0e:ea:8e:de:cb:88:9d:f4:18:f7:a3:40:12:e0:4a: c2:62:2c:5e:98:2a:21:67:f7:69:56:65:5b:21:1d: 11:28:54:95:34:6d:cd:98:64:02:a5:c4:d6:43:ee: 60:a2:48:8d:73:ca:69:b9:5a:33:23:8f:cc:ac:e7: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:9D:8B:1A:82:71:37:3F:76:22:21:BD:CA:58:7A:69:60:7B:F9 X509v3 Authority Key Identifier: keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9b:35:3c:9c:07:a4:53:03:b9:09:ad:af:cc:d3:29:3e:ee: 40:92:91:e2:7c:ba:19:5e:eb:2a:9a:5c:df:4d:48:1b:97:d8: 55:ec:5a:0a:09:fa:e8:ea:b6:c3:c1:d1:8c:14:6f:ad:6b:35: 7d:45:cf:c2:53:cb:f2:6a:c8:02:39:ba:e1:4d:4a:5d:7c:c4: b4:b2:e5:36:59:43:da:d9:ff:f5:4a:29:78:07:bc:14:73:c3: 5e:9f:61:a8:85:ae:18:5e:c8:5c:c3:9c:83:01:1f:e9:62:2e: 51:b9:25:9a:d0:30:bc:8f:f2:11:71:3e:41:36:11:3d:67:00: 6b:35:4b:88:cc:27:d1:ed:bb:8a:37:1c:b4:e9:e7:bb:06:a6: 15:17:fb:53:80:c7:02:5b:3b:bb:07:d3:63:a1:0e:d7:61:85: 31:d8:95:6c:7f:dd:ea:2c:d0:d8:b0:91:c6:cd:1a:c9:a8:19: 59:dc:3a:b1:89:57:55:74:1a:9b:83:5a:20:c3:62:75:5f:67: 5e:f6:1a:ef:81:0d:cb:9b:06:9b:47:d8:89:f7:f2:28:e7:f4: 4e:73:b6:39:7d:16:35:14:ee:6a:a8:2b:91:96:47:c8:14:b7: fb:c1:df:04:89:f0:c2:a4:3a:20:08:28:d3:38:af:66:90:10: b6:36:13:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx/zmy+vvbpCcsqft7ipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5 YThkNGIwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EygwYzBiOWQ4YjFhODI3MTM3M2Y3NjIyMjFiZGNhNTg3YTY5NjA3YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHsJ9+L3K0lK/dzsv2O8FyRfTMSs cmqpjug4gQl7Ky5u12SvoupsyXnJ4lpiEdEPV7gv9kHoeQ9uBwdm9VEsYehu63P7 VJaP/NSXdacJSo2E/CbLucIF6Jwsfn3UDwtMQhJSSs4oMSsy0V31v8jughB8Og/+ hxXlUBYAR3DMhE8glycVaO0ArfHZWdO/XlQiPHA9l1b5j2+RUOnp3e49jZYNVmty XNJuIqfcUxovi+LwHmtg7kUjeb/AlLvb/eK67FsO6o7ey4id9Bj3o0AS4ErCYixe mCohZ/dpVmVbIR0RKFSVNG3NmGQCpcTWQ+5gokiNc8ppuVozI4/MrOfPTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwLnYsagnE3P3YiIb3KWHppYHv5MB8GA1UdIwQY MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt YjZiNzZlMjJmZmFjLzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5s1PJwH pFMDuQmtr8zTKT7uQJKR4ny6GV7rKppc301IG5fYVexaCgn66Oq2w8HRjBRvrWs1 fUXPwlPL8mrIAjm64U1KXXzEtLLlNllD2tn/9UopeAe8FHPDXp9hqIWuGF7IXMOc gwEf6WIuUbklmtAwvI/yEXE+QTYRPWcAazVLiMwn0e27ijcctOnnuwamFRf7U4DH Als7uwfTY6EO12GFMdiVbH/d6izQ2LCRxs0ayagZWdw6sYlXVXQam4NaIMNidV9n XvYa74ENy5sGm0fYiffyKOf0TnO2OX0WNRTuaqgrkZZHyBS3+8HfBInwwqQ6IAgo 0zivZpAQtjYTzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:37 2025 by rpki-client