This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json) Hash identifier: 9dh/wO87OpN0pScUb8nrI6mXzBBMOl6+EP4fgvUcBg4= Subject key identifier: 18:24:57:D5:5F:18:FB:7D:D6:0B:90:5B:BF:25:AE:1F:76:07:9D:29 Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735 Certificate serial: 019AF19AE3626D48ED36E444C0A8FD86E0D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=) 2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=) 3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: Lgii+7t7G3XrbW+gYHaIut/gGqukvwGYn/CtYSvO+40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e3:62:6d:48:ed:36:e4:44:c0:a8:fd:86:e0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735 Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=182457d55f18fb7dd60b905bbf25ae1f76079d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:7c:cc:2b:0a:6d:80:aa:15:2a:79:3e:29: b8:f8:30:f9:54:d5:94:75:79:ff:26:06:e5:75:e5: 7e:27:0e:45:3b:c7:23:1c:d0:91:d9:58:76:d0:fa: 5b:50:42:f0:78:f9:1e:7a:10:8e:33:c3:00:68:5e: f3:a5:af:37:37:39:df:d9:fc:9e:49:fe:f6:12:51: 48:b4:5c:35:69:25:27:3e:13:03:d6:e1:96:ca:a9: 24:bb:6f:e8:3b:70:dd:d8:e6:d3:2a:4a:a5:c3:4f: bc:b6:d1:1f:5f:95:e0:40:48:a7:d1:16:b8:d6:08: cf:5b:18:3e:3c:a9:28:a3:11:fb:95:f4:84:89:16: 37:d5:7b:96:71:2a:bd:a2:4b:a9:ef:21:10:8f:9b: 79:91:72:92:6c:8b:fd:5d:96:6e:9d:bd:c5:48:a1: 40:5b:81:d9:58:8a:19:e5:e7:05:92:9b:d7:4e:eb: 30:bf:54:9a:2d:d3:cc:41:b9:01:83:f9:52:25:79: 4d:d0:a6:d3:c3:30:36:ac:63:c4:26:f6:96:bc:d9: f4:b3:55:df:40:e0:56:f2:4b:ae:42:45:b9:49:0c: f4:45:9c:1f:8c:e9:06:0d:58:fc:41:9f:ae:1d:ad: 46:15:09:da:7f:7d:2d:bc:10:3c:0c:aa:44:64:e0: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:24:57:D5:5F:18:FB:7D:D6:0B:90:5B:BF:25:AE:1F:76:07:9D:29 X509v3 Authority Key Identifier: keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fd:8a:1f:53:27:87:4a:ec:c4:3c:61:3e:fc:46:42:6a:45: 38:c7:91:31:e7:86:24:25:93:dc:cf:7e:1b:f7:d1:f0:db:ff: 5e:ce:2e:e7:9f:81:4a:42:1b:ec:b4:85:4f:36:15:b4:dc:d2: 32:35:f6:82:ca:0c:cf:44:2c:3a:39:cb:35:76:ab:9c:22:31: 69:18:7b:c9:be:56:de:39:3a:11:19:7d:54:f0:28:07:e4:1c: c3:1d:da:2e:f2:46:de:f4:d3:9c:ee:4c:8e:33:54:ff:f1:b7: 2d:67:ae:89:ec:48:4a:a0:57:31:3a:42:ef:9f:40:b2:9f:5a: 60:97:76:3c:46:9d:cf:09:6f:10:ad:af:51:6a:24:29:8c:5d: 45:e3:9f:e6:a6:1e:a4:2f:ad:e6:7a:9e:4b:ab:37:d0:df:59: 60:74:4a:f7:84:34:cb:1b:9b:9c:3b:cf:13:cd:4c:b7:fa:58: 2e:cf:3c:b2:b3:f6:f8:55:bd:e5:99:f1:d1:d7:99:88:49:6d: 4a:0d:94:09:47:eb:70:a3:5c:29:f4:f2:4e:c6:2e:1d:d4:76: 26:fc:9a:0c:6b:32:33:54:1b:cb:23:e5:39:0e:52:52:12:3c: 25:6c:dc:b9:73:f7:85:8d:b8:88:58:45:e1:7b:ea:71:99:75: a8:39:c4:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuNibUjtNuREwKj9huDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm MDc3MzUwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD EygxODI0NTdkNTVmMThmYjdkZDYwYjkwNWJiZjI1YWUxZjc2MDc5ZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoN8zCsKbYCqFSp5Pim4+DD5VNWU dXn/JgbldeV+Jw5FO8cjHNCR2Vh20PpbUELwePkeehCOM8MAaF7zpa83Nznf2fye Sf72ElFItFw1aSUnPhMD1uGWyqkku2/oO3Dd2ObTKkqlw0+8ttEfX5XgQEin0Ra4 1gjPWxg+PKkooxH7lfSEiRY31XuWcSq9okup7yEQj5t5kXKSbIv9XZZunb3FSKFA W4HZWIoZ5ecFkpvXTuswv1SaLdPMQbkBg/lSJXlN0KbTwzA2rGPEJvaWvNn0s1Xf QOBW8kuuQkW5SQz0RZwfjOkGDVj8QZ+uHa1GFQnaf30tvBA8DKpEZOC8vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgkV9VfGPt91guQW78lrh92B50pMB8GA1UdIwQY MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt Nzc3ZWU5NTU2MjEwLzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav2KH1Mn h0rsxDxhPvxGQmpFOMeRMeeGJCWT3M9+G/fR8Nv/Xs4u55+BSkIb7LSFTzYVtNzS MjX2gsoMz0QsOjnLNXarnCIxaRh7yb5W3jk6ERl9VPAoB+Qcwx3aLvJG3vTTnO5M jjNU//G3LWeuiexISqBXMTpC759Asp9aYJd2PEadzwlvEK2vUWokKYxdReOf5qYe pC+t5nqeS6s30N9ZYHRK94Q0yxubnDvPE81Mt/pYLs88srP2+FW95Znx0deZiElt Sg2UCUfrcKNcKfTyTsYuHdR2JvyaDGsyM1QbyyPlOQ5SUhI8JWzcuXP3hY24iFhF 4XvqcZl1qDnEnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:30 2025 by rpki-client