This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json) Hash identifier: di94V1LtY5TV31UVFC9utop0KBcwAodTq0RBUTV6R0k= Subject key identifier: 34:87:7A:FF:2D:69:C4:BC:21:B0:10:77:22:FC:CE:74:01:66:C5:7F Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51 Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51 Certificate serial: 019AF12DDF99208279DBD0170CCE256A0D6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft Manifest number: 0D68 Signing time: Sat 06 Dec 2025 01:01:46 +0000 Manifest this update: Sat 06 Dec 2025 01:01:46 +0000 Manifest next update: Sun 07 Dec 2025 01:01:46 +0000 Files and hashes: 1: 3_xmC1ho9_8ZqNCvSg_4Ci-eALc.roa (hash: F7LfywH9mxXY2KxRJjRgggVLiwyV5wwnZqXcnTIZ+/Y=) 2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: ZhplMoEhtDj9PPE0Ebj4Ki+d/FLdli7HqLKaAs7A4hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:df:99:20:82:79:db:d0:17:0c:ce:25:6a:0d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51 Validity Not Before: Dec 6 01:01:46 2025 GMT Not After : Dec 7 01:01:46 2025 GMT Subject: CN=34877aff2d69c4bc21b0107722fcce740166c57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:12:aa:36:26:2f:59:53:bb:84:49:28:c0: 6b:9e:5a:96:74:7a:55:a1:cf:70:d7:52:e9:3f:a2: 75:fa:a2:27:13:70:19:b3:16:b5:6b:48:64:3f:52: 90:e0:2d:25:b6:5a:d4:b9:02:fd:d3:a8:db:7a:12: 2e:12:1e:48:1b:f0:7e:7a:4b:53:0c:58:ad:03:0d: eb:ba:d5:aa:88:92:f9:19:a3:22:95:0b:90:17:0c: fa:e8:d3:61:fe:69:e4:2c:29:c6:d0:67:e0:01:71: 16:6c:bd:09:a4:1a:33:56:9a:58:bc:7a:63:73:8b: d4:7a:b4:e2:88:0c:62:54:83:80:3c:40:a0:2f:a8: ce:7c:57:c2:eb:ba:d5:ca:2f:c1:70:8f:45:36:46: 91:36:18:7b:d8:dc:6b:8b:26:c3:14:24:8c:74:66: 0b:e4:06:e7:b7:31:02:70:c5:a3:67:d0:89:6f:9c: 7c:23:02:f6:d4:b5:a6:c2:bc:0b:2e:be:c1:15:51: 1b:5a:31:8e:b2:4d:da:18:2c:ee:bc:43:a2:1f:3f: ed:26:0e:70:22:92:cf:5e:41:28:39:8d:40:6d:6b: 43:92:45:9e:de:36:dd:d0:25:b7:8d:83:ae:2a:1f: a4:0c:1f:17:0a:c0:0d:da:b8:9e:03:39:41:6a:77: 39:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:87:7A:FF:2D:69:C4:BC:21:B0:10:77:22:FC:CE:74:01:66:C5:7F X509v3 Authority Key Identifier: keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:28:8a:41:75:b9:ee:95:c6:48:53:1d:8e:4d:ac:62:ba:c3: 1c:ff:ae:06:e1:2a:c5:22:9e:fb:c8:8f:94:f3:44:ef:a3:d5: f9:40:c0:44:4b:4e:63:68:97:e2:6a:9d:15:b1:65:ed:a3:41: 36:6d:bf:89:21:fa:ef:90:0f:b5:9b:d1:03:76:62:74:90:b8: a1:d7:76:3d:c2:45:41:76:ea:4f:68:1e:3a:b0:da:6d:9b:03: fc:8a:67:92:61:21:a9:ce:06:93:b7:ef:e4:f6:b5:ef:6a:cd: 77:86:e8:9a:bd:63:15:8c:3c:c7:3b:07:27:86:e8:00:83:30: a7:f2:ed:9d:fc:1f:e1:72:38:c0:64:0d:58:44:04:88:e5:c0: 2c:7f:4a:9a:95:5d:86:e9:ac:1d:2f:a6:d9:9e:2a:95:42:8b: 8a:45:91:91:89:dc:83:ab:0c:a1:f4:29:28:f4:41:d3:3d:25: 11:74:5f:83:76:56:c6:d3:67:33:46:99:ad:d6:92:25:a4:b6: 36:13:0e:73:63:56:e4:96:c5:32:1b:81:9f:a5:64:0b:2b:8e: 7f:62:1a:10:b9:1d:09:90:c1:e9:9a:5f:c0:b3:77:d1:92:0c: 7b:ba:42:ff:24:6c:c4:9d:71:d4:28:78:5b:74:0f:8d:4d:a9: 49:f8:19:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLd+ZIIJ529AXDM4lag1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyY2NkYTFjNTQ4N2NiOTM4ZDU3ZWE2MWNjMmQ2MmQzMTA3 MGRiNTEwHhcNMjUxMjA2MDEwMTQ2WhcNMjUxMjA3MDEwMTQ2WjAzMTEwLwYDVQQD EygzNDg3N2FmZjJkNjljNGJjMjFiMDEwNzcyMmZjY2U3NDAxNjZjNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrMSqjYmL1lTu4RJKMBrnlqWdHpV oc9w11LpP6J1+qInE3AZsxa1a0hkP1KQ4C0ltlrUuQL906jbehIuEh5IG/B+ektT DFitAw3rutWqiJL5GaMilQuQFwz66NNh/mnkLCnG0GfgAXEWbL0JpBozVppYvHpj c4vUerTiiAxiVIOAPECgL6jOfFfC67rVyi/BcI9FNkaRNhh72NxriybDFCSMdGYL 5AbntzECcMWjZ9CJb5x8IwL21LWmwrwLLr7BFVEbWjGOsk3aGCzuvEOiHz/tJg5w IpLPXkEoOY1AbWtDkkWe3jbd0CW3jYOuKh+kDB8XCsAN2rieAzlBanc5fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSHev8tacS8IbAQdyL8znQBZsV/MB8GA1UdIwQY MBaAFLLM2hxUh8uTjVfqYcwtYtMQcNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzIt M2RiOTYxNzAzZWE5LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzItM2RiOTYxNzAzZWE5 LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSiKQXW5 7pXGSFMdjk2sYrrDHP+uBuEqxSKe+8iPlPNE76PV+UDAREtOY2iX4mqdFbFl7aNB Nm2/iSH675APtZvRA3ZidJC4odd2PcJFQXbqT2geOrDabZsD/IpnkmEhqc4Gk7fv 5Pa172rNd4bomr1jFYw8xzsHJ4boAIMwp/Ltnfwf4XI4wGQNWEQEiOXALH9KmpVd humsHS+m2Z4qlUKLikWRkYncg6sMofQpKPRB0z0lEXRfg3ZWxtNnM0aZrdaSJaS2 NhMOc2NW5JbFMhuBn6VkCyuOf2IaELkdCZDB6ZpfwLN30ZIMe7pC/yRsxJ1x1Ch4 W3QPjU2pSfgZUA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:39 2025 by rpki-client