This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json) Hash identifier: unVRF2pdgRk2ZO4TF/YWUW5x14V/YsBQPNz/lIxfKng= Subject key identifier: DD:94:CE:81:AF:17:20:95:CA:0B:A5:D7:10:DE:C5:65:71:D7:F9:40 Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8 Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8 Certificate serial: 019AF31BCB304BE8650DE372ECBDF614C69F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft Manifest number: 110B Signing time: Sat 06 Dec 2025 10:01:16 +0000 Manifest this update: Sat 06 Dec 2025 10:01:16 +0000 Manifest next update: Sun 07 Dec 2025 10:01:16 +0000 Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=) 2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=) 3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: 1MkihfFzzIB+XLEuYD7zYExskDpg8yzEojmeZWDo21c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:cb:30:4b:e8:65:0d:e3:72:ec:bd:f6:14:c6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8 Validity Not Before: Dec 6 10:01:16 2025 GMT Not After : Dec 7 10:01:16 2025 GMT Subject: CN=dd94ce81af172095ca0ba5d710dec56571d7f940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b5:da:f4:3d:41:37:88:a6:f5:81:bc:9b:f0: d2:b0:76:9e:9d:89:fd:e6:01:0a:e6:55:c5:3c:a2: de:e1:c2:c4:87:07:fe:71:cc:e7:9c:a6:17:8d:66: b8:ff:9b:92:a3:1a:bf:e7:12:e0:9e:71:e3:00:01: e6:e7:39:dc:db:8a:a4:76:4c:56:b7:8b:a8:09:16: 41:14:0a:28:7c:f9:19:04:84:2b:6f:49:c8:7f:2f: 3b:c2:c8:09:f6:16:29:14:46:8d:9d:62:64:a7:6a: 08:aa:ef:e1:d4:b6:bb:5f:5d:a0:ea:23:72:1b:24: d6:d7:14:29:6d:a1:2b:0f:f8:fd:12:16:9f:6f:ba: ad:9e:dd:3a:39:db:40:8d:44:5e:9b:55:40:8c:3e: 93:4d:ec:c2:93:91:75:11:f5:01:f5:5e:6e:00:e9: c0:99:14:8c:6e:ce:bc:f4:f1:61:bd:06:10:cd:30: dd:a0:01:d0:a0:f4:ab:f3:25:67:47:9f:09:3b:6c: c3:73:c6:fd:5f:2e:a4:ce:a2:0f:a1:e0:38:35:fb: fc:35:66:da:c6:0f:3d:44:e0:63:ce:50:9f:bd:09: 81:50:15:15:51:2e:50:b4:93:57:33:67:8d:87:d5: 7d:09:16:95:8d:b2:a1:de:b0:a3:d6:54:b1:7a:ac: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:94:CE:81:AF:17:20:95:CA:0B:A5:D7:10:DE:C5:65:71:D7:F9:40 X509v3 Authority Key Identifier: keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:65:92:fc:9f:ab:aa:8a:ff:f8:f0:3b:bf:ea:6b:71:e3:f4: 3c:bc:67:db:0d:00:f2:c3:d7:c5:b4:5c:48:fa:ef:f4:9f:be: 59:fe:db:cb:7a:94:58:20:8c:c0:e2:02:05:b4:8c:0f:68:33: 22:27:3c:d8:16:bf:73:5b:5b:cc:36:f1:ca:bf:29:3c:1b:98: e1:26:9d:11:6a:54:cb:8d:49:ff:a8:a9:01:f9:41:ff:ac:27: b4:ec:2e:79:15:84:70:27:94:ea:0e:f9:43:82:64:0f:1b:1d: 85:2c:9e:82:57:e1:c3:ad:7d:72:a9:87:f7:b6:51:49:d0:98: 76:fa:af:1a:0a:00:57:f0:89:4e:2d:2c:9a:56:83:54:05:c5: 17:17:cd:a3:fe:34:6e:50:64:13:da:d9:cb:c5:24:d7:42:49: 09:22:ad:07:24:e4:ee:b6:1a:ea:2c:d3:21:8f:37:28:83:a5: 0b:f8:73:34:e7:77:b1:e7:91:3d:4b:b7:b6:c3:dc:71:37:23: c8:ba:b2:20:6b:be:c7:4d:4f:0b:ce:1f:28:3e:2e:9d:c7:75: 81:75:b8:51:63:08:7e:19:b6:51:55:89:29:38:42:84:28:34: 83:30:06:d8:ff:fd:91:78:e4:a7:c1:d9:01:25:4b:9f:f2:37: 20:ef:65:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8swS+hlDeNy7L32FMafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMmEwMTIyNGIxZGE4NjQ4MGNmZWNiY2I2YzUyZGY5ODEy OTY4ZTgwHhcNMjUxMjA2MTAwMTE2WhcNMjUxMjA3MTAwMTE2WjAzMTEwLwYDVQQD EyhkZDk0Y2U4MWFmMTcyMDk1Y2EwYmE1ZDcxMGRlYzU2NTcxZDdmOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbXa9D1BN4im9YG8m/DSsHaenYn9 5gEK5lXFPKLe4cLEhwf+ccznnKYXjWa4/5uSoxq/5xLgnnHjAAHm5znc24qkdkxW t4uoCRZBFAoofPkZBIQrb0nIfy87wsgJ9hYpFEaNnWJkp2oIqu/h1La7X12g6iNy GyTW1xQpbaErD/j9Ehafb7qtnt06OdtAjURem1VAjD6TTezCk5F1EfUB9V5uAOnA mRSMbs689PFhvQYQzTDdoAHQoPSr8yVnR58JO2zDc8b9Xy6kzqIPoeA4Nfv8NWba xg89ROBjzlCfvQmBUBUVUS5QtJNXM2eNh9V9CRaVjbKh3rCj1lSxeqxdywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2UzoGvFyCVygul1xDexWVx1/lAMB8GA1UdIwQY MBaAFH0qASJLHahkgM/svLbFLfmBKWjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNDFmNzctYjZhMi00NDk0LWEwNzQt NGZhZTg0ZmExNThlLzEvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jNDFmNzctYjZhMi00NDk0LWEwNzQtNGZhZTg0ZmExNThl LzEvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWWS/J+r qor/+PA7v+prceP0PLxn2w0A8sPXxbRcSPrv9J++Wf7by3qUWCCMwOICBbSMD2gz Iic82Ba/c1tbzDbxyr8pPBuY4SadEWpUy41J/6ipAflB/6wntOwueRWEcCeU6g75 Q4JkDxsdhSyeglfhw619cqmH97ZRSdCYdvqvGgoAV/CJTi0smlaDVAXFFxfNo/40 blBkE9rZy8Uk10JJCSKtByTk7rYa6izTIY83KIOlC/hzNOd3seeRPUu3tsPccTcj yLqyIGu+x01PC84fKD4uncd1gXW4UWMIfhm2UVWJKThChCg0gzAG2P/9kXjkp8HZ ASVLn/I3IO9lig== -----END CERTIFICATE-----Generated at Sat Dec 6 17:41:01 2025 by rpki-client