This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json) Hash identifier: ioIwW2P6Z/lgt+CvOu5MgXuBFr3DVomDC3klMZa1Zsg= Subject key identifier: B9:A4:BF:10:2E:7D:CF:25:A3:DB:05:7B:22:01:5A:28:0A:71:71:C4 Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Certificate serial: 019AF3528AB4A4BF692EECC8EF38A9A5AF51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 11:01:04 +0000 Manifest this update: Sat 06 Dec 2025 11:01:04 +0000 Manifest next update: Sun 07 Dec 2025 11:01:04 +0000 Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=) 2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: jqYS+utI1vtQalFdk6JlIoMDAo5JYu91GRBKK8RXEJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:8a:b4:a4:bf:69:2e:ec:c8:ef:38:a9:a5:af:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Validity Not Before: Dec 6 11:01:04 2025 GMT Not After : Dec 7 11:01:04 2025 GMT Subject: CN=b9a4bf102e7dcf25a3db057b22015a280a7171c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:98:57:3b:cd:6f:b0:a2:ca:30:1f:f7:79: 88:2f:eb:86:7c:99:ed:9b:59:77:c9:4c:db:86:5d: 7f:95:05:19:28:62:52:f5:33:c2:e2:6e:fa:63:65: e6:3f:22:b1:10:46:1d:cf:cc:1e:4e:1f:77:f7:b2: f2:5a:4e:5f:7c:bc:9a:7d:db:d7:33:af:bc:92:eb: 57:6f:f6:b3:88:73:2c:ac:63:39:7b:b2:3d:23:01: 0d:89:7a:67:a6:91:65:53:3f:3a:2b:1a:32:ad:59: 46:5f:b0:46:c9:57:a9:7e:cb:87:16:cc:4f:2f:31: 42:67:86:98:6c:cb:64:18:47:60:83:3b:b8:2c:91: ea:ad:c5:33:da:b3:e7:67:17:4b:f9:b6:01:66:17: 92:4d:a7:b9:7a:bd:fc:94:eb:19:03:f1:ab:02:39: 24:95:70:50:e0:ad:71:c4:d4:2b:02:07:eb:6e:30: 9b:ea:86:4a:f5:08:33:94:c9:04:39:a3:62:c2:01: 23:ff:dd:23:e4:07:95:bf:8c:17:0d:b6:ce:37:21: 1a:cc:aa:cd:1c:d8:f4:e1:56:c8:02:6c:3f:58:36: d5:25:70:26:a7:8b:53:68:e1:e5:a8:00:cd:0e:87: a4:ef:83:9b:54:99:11:6d:6f:71:03:4c:0c:1c:0d: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A4:BF:10:2E:7D:CF:25:A3:DB:05:7B:22:01:5A:28:0A:71:71:C4 X509v3 Authority Key Identifier: keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:2c:65:ca:db:20:06:89:ce:cb:00:7a:df:4d:87:71:97:12: be:d4:94:67:80:98:b0:bb:ca:cb:de:8f:7e:21:d9:26:66:dc: 7f:1d:80:68:61:4b:98:00:07:8a:81:1b:23:d4:4d:a8:be:12: 78:d8:f3:de:b9:76:3d:f2:a9:cc:27:52:1a:68:6f:f0:81:83: 80:f4:c1:95:5d:13:d2:1c:af:31:a3:ec:1b:98:2e:8c:66:8a: af:bc:2a:04:b2:f0:13:58:4c:55:8a:b1:30:c2:8b:8f:32:db: fe:87:02:45:85:79:ae:8c:b1:6e:17:b2:83:fe:6b:27:1e:a1: 66:29:25:33:7f:42:3d:ea:53:e7:89:56:a3:63:76:23:63:3c: d4:f5:8c:df:a8:6b:63:31:f2:b5:36:75:cd:50:b6:1e:4f:0d: 22:9b:c9:5e:f2:a6:c1:d1:e0:5b:ae:d7:7d:c8:d9:66:72:3d: 4b:f7:f2:b6:54:1a:54:50:3f:ad:39:0f:57:59:4a:18:a2:00: c0:1a:8c:44:d5:8b:2a:06:e5:39:3e:dc:32:f5:44:78:1d:b5: 89:16:07:5e:56:d2:73:c1:f0:c1:5f:90:f2:0f:98:24:6c:48: ce:56:01:92:be:d7:5b:67:2f:79:b0:9e:f7:79:f5:8d:79:88: 85:83:40:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoq0pL9pLuzI7zippa9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWZkMGNiOTc3NWZmNDc4ZjE4NWY4Zjk4MGQ1YjFkOTJk NGJlNGYwHhcNMjUxMjA2MTEwMTA0WhcNMjUxMjA3MTEwMTA0WjAzMTEwLwYDVQQD EyhiOWE0YmYxMDJlN2RjZjI1YTNkYjA1N2IyMjAxNWEyODBhNzE3MWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJSYVzvNb7CiyjAf93mIL+uGfJnt m1l3yUzbhl1/lQUZKGJS9TPC4m76Y2XmPyKxEEYdz8weTh9397LyWk5ffLyafdvX M6+8kutXb/aziHMsrGM5e7I9IwENiXpnppFlUz86KxoyrVlGX7BGyVepfsuHFsxP LzFCZ4aYbMtkGEdggzu4LJHqrcUz2rPnZxdL+bYBZheSTae5er38lOsZA/GrAjkk lXBQ4K1xxNQrAgfrbjCb6oZK9QgzlMkEOaNiwgEj/90j5AeVv4wXDbbONyEazKrN HNj04VbIAmw/WDbVJXAmp4tTaOHlqADNDoek74ObVJkRbW9xA0wMHA3BEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmkvxAufc8lo9sFeyIBWigKcXHEMB8GA1UdIwQY MBaAFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUt NmVmNWM0NzM1ZThhLzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUtNmVmNWM0NzM1ZThh LzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkixlytsg BonOywB6302HcZcSvtSUZ4CYsLvKy96PfiHZJmbcfx2AaGFLmAAHioEbI9RNqL4S eNjz3rl2PfKpzCdSGmhv8IGDgPTBlV0T0hyvMaPsG5gujGaKr7wqBLLwE1hMVYqx MMKLjzLb/ocCRYV5royxbheyg/5rJx6hZiklM39CPepT54lWo2N2I2M81PWM36hr YzHytTZ1zVC2Hk8NIpvJXvKmwdHgW67XfcjZZnI9S/fytlQaVFA/rTkPV1lKGKIA wBqMRNWLKgblOT7cMvVEeB21iRYHXlbSc8HwwV+Q8g+YJGxIzlYBkr7XW2cvebCe 93n1jXmIhYNAkA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:27 2025 by rpki-client