This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json) Hash identifier: mYU8XJPYrsmX0Zg9ilYKEVKIJT+4tbUeWJqoNrNvz8o= Subject key identifier: 06:F3:D9:97:9F:22:10:67:A6:C7:AD:7F:0C:B7:0E:00:E9:1D:0E:63 Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0 Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0 Certificate serial: 019AF23FF0D6835BAA24DD078FF37EBBBC02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft Manifest number: 0E5D Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: BB5_8BhJDTnxTKWGMNqj5oXCwds.roa (hash: LuNPA32mjFH0EXTfiP4dDNt0mH4g6yoGsaPQD7tGC9s=) 2: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: YdXi3rCw7c1SSiGT97+Gbmeve9embUBRqyRj9XjRfjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f0:d6:83:5b:aa:24:dd:07:8f:f3:7e:bb:bc:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0 Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=06f3d9979f221067a6c7ad7f0cb70e00e91d0e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e7:26:62:17:92:f2:4e:c4:fa:44:83:7f:8c: 8e:cf:66:91:d5:54:b1:33:a1:a4:ee:50:4a:5d:f5: d3:0e:78:36:a0:1f:7f:a0:c0:ba:3c:5b:b8:70:25: 9b:4e:4d:62:ac:16:84:de:ba:49:32:8e:b1:47:a9: 7d:df:76:ef:79:33:1c:50:a2:4c:cf:0e:28:76:ad: 5c:34:ca:de:ed:3c:3e:f7:51:5c:96:1e:87:5d:b3: 69:8a:9f:20:73:53:d5:32:3a:db:15:a3:6f:24:c2: 4f:97:5c:72:09:7f:81:e3:5d:5c:ec:4e:df:af:da: d1:4c:aa:e1:94:73:5c:cd:33:83:cd:8a:1c:89:76: ca:9c:74:ae:f2:08:e4:eb:21:81:3e:b2:46:a3:f0: f4:bb:82:d8:d5:fd:e2:91:0c:07:74:3a:9f:35:96: 8d:06:e6:f2:fe:94:7d:78:ee:4e:c8:88:13:70:9d: 2d:92:ed:14:b3:55:b5:20:06:f9:77:b0:e6:23:06: 27:90:30:1e:7f:f3:bf:f2:d7:97:9f:6b:ff:94:f6: f2:38:87:41:cc:9d:67:ce:9c:de:dc:f0:76:a0:95: b6:cf:7b:dd:9b:e4:5d:de:df:7c:89:e8:ea:dd:69: 38:19:1b:d8:4c:c7:64:56:f9:20:72:c0:af:43:1c: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F3:D9:97:9F:22:10:67:A6:C7:AD:7F:0C:B7:0E:00:E9:1D:0E:63 X509v3 Authority Key Identifier: keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:2d:08:c9:fc:e7:c9:df:d5:c7:c1:c0:45:e2:cb:5e:89:83: 6e:d6:c2:46:c6:d6:e4:50:02:f1:48:fb:b4:7d:60:04:3f:60: 19:65:29:81:c3:2f:50:d9:44:ef:c9:c0:07:6c:1d:cb:60:55: d0:12:64:10:99:b3:27:e6:70:96:86:4d:9b:39:d6:9b:02:24: eb:bf:db:ca:17:95:75:5c:da:44:3a:da:de:3d:1a:fb:b8:8b: ec:e1:35:d8:9f:5a:f4:8d:d8:af:a5:c1:95:24:23:65:12:81: a0:c8:76:e7:8f:a3:bb:15:40:07:45:49:47:51:ce:c1:f9:5d: 30:b5:a9:e3:82:c6:b8:a4:72:f7:d9:eb:22:db:67:e8:d4:c6: 16:8a:fe:f9:52:18:0a:03:5a:e4:ad:6e:90:d3:f9:e8:fd:30: 40:62:61:b1:2f:28:0c:b7:45:b9:d9:6f:70:05:f7:b8:aa:61: 2d:34:b8:d9:2d:8b:c1:6b:b8:ca:06:0e:e5:be:30:35:ad:12: 18:a8:26:43:51:68:c8:8f:62:53:d7:0b:16:37:e3:1d:2d:a9: 0d:72:16:73:23:22:ca:1f:2c:42:37:96:86:05:ef:36:c1:56: ad:76:93:ba:8b:99:54:4c:2c:7a:b9:9f:2f:13:43:cc:fa:62: 21:dc:39:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/DWg1uqJN0Hj/N+u7wCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MmQyNGFkZTM3YTIyMzM5MzI4NDA5ZDc1N2Q0N2Y5Nzk0 M2I3YTAwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD EygwNmYzZDk5NzlmMjIxMDY3YTZjN2FkN2YwY2I3MGUwMGU5MWQwZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+cmYheS8k7E+kSDf4yOz2aR1VSx M6Gk7lBKXfXTDng2oB9/oMC6PFu4cCWbTk1irBaE3rpJMo6xR6l933bveTMcUKJM zw4odq1cNMre7Tw+91Fclh6HXbNpip8gc1PVMjrbFaNvJMJPl1xyCX+B411c7E7f r9rRTKrhlHNczTODzYociXbKnHSu8gjk6yGBPrJGo/D0u4LY1f3ikQwHdDqfNZaN Buby/pR9eO5OyIgTcJ0tku0Us1W1IAb5d7DmIwYnkDAef/O/8teXn2v/lPbyOIdB zJ1nzpze3PB2oJW2z3vdm+Rd3t98iejq3Wk4GRvYTMdkVvkgcsCvQxxdZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbz2ZefIhBnpsetfwy3DgDpHQ5jMB8GA1UdIwQY MBaAFEktJK3jeiIzkyhAnXV9R/l5Q7egMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kOGY4NDUtNjI1MC00ZGY4LTkwYzAt ZTI0YjU3OWM5OTE0LzEvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kOGY4NDUtNjI1MC00ZGY4LTkwYzAtZTI0YjU3OWM5OTE0 LzEvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1i0Iyfzn yd/Vx8HAReLLXomDbtbCRsbW5FAC8Uj7tH1gBD9gGWUpgcMvUNlE78nAB2wdy2BV 0BJkEJmzJ+ZwloZNmznWmwIk67/byheVdVzaRDra3j0a+7iL7OE12J9a9I3Yr6XB lSQjZRKBoMh254+juxVAB0VJR1HOwfldMLWp44LGuKRy99nrIttn6NTGFor++VIY CgNa5K1ukNP56P0wQGJhsS8oDLdFudlvcAX3uKphLTS42S2LwWu4ygYO5b4wNa0S GKgmQ1FoyI9iU9cLFjfjHS2pDXIWcyMiyh8sQjeWhgXvNsFWrXaTuouZVEwsermf LxNDzPpiIdw5QA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:58 2025 by rpki-client