This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json) Hash identifier: 7ykWVJ6VhiA207E7ryfvzao2aA6fn0L/PYIMd289Tww= Subject key identifier: E5:88:DE:79:0D:D7:01:F0:56:1E:E9:B2:19:38:01:A5:1B:50:DB:6B Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb Certificate serial: 019AF19ADBE0A6F9B705DE2F1C060B6F92C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft Manifest number: 0E95 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=) 2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: f13b5lnqlt0UAOi22bNHISkz6yZ/cJND5QV0dCeyyBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:db:e0:a6:f9:b7:05:de:2f:1c:06:0b:6f:92:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=e588de790dd701f0561ee9b2193801a51b50db6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:5e:9c:91:10:b6:ca:7a:6e:41:47:a8:e0: a1:1c:eb:2d:e5:f4:70:4a:cb:a9:04:00:d1:8a:55: f3:77:d2:49:fb:68:c3:0a:7c:9b:98:3c:81:ce:04: 9a:55:8b:6e:45:02:ce:7b:4f:b2:30:7a:cc:41:80: 3d:f8:e9:b3:72:a8:5e:55:99:0b:b2:53:46:7f:e7: 09:fa:ad:2f:ca:bc:60:e9:3f:bf:56:72:28:8a:6d: 6c:bc:b7:39:a8:c1:1d:a8:85:7c:1c:7d:69:27:2f: 26:bb:d8:49:1d:f3:de:07:a3:63:b6:43:37:6c:3e: bd:1e:66:b7:d5:9a:1d:bb:e1:6d:77:03:ae:67:80: 70:71:61:33:e1:b3:f8:89:c7:13:6a:90:ed:d0:14: e7:7e:65:a2:8f:81:9c:53:54:8e:ec:90:6d:91:34: df:e7:67:33:ec:fd:cb:cd:33:9b:81:ac:1d:65:3c: 0c:f0:a2:de:eb:34:63:45:97:ec:45:a2:90:9c:77: 22:5c:0b:3c:e4:c1:f8:6c:e3:10:9e:20:d3:e1:6f: e8:94:b5:8b:c7:cd:29:3d:49:70:cc:fd:ab:5a:e9: f0:0e:f3:84:36:f9:c5:9b:c1:82:39:10:30:0b:65: e1:75:e4:b5:6f:81:c8:0b:c2:8d:89:97:41:dd:71: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:88:DE:79:0D:D7:01:F0:56:1E:E9:B2:19:38:01:A5:1B:50:DB:6B X509v3 Authority Key Identifier: keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:fa:58:04:58:45:ec:8f:ba:ed:f4:68:9f:ec:f7:c2:b3:f8: 75:2b:3c:87:d6:4c:a5:eb:7b:89:0e:61:bb:ca:ce:54:ec:31: fc:3f:da:b5:3d:3f:f0:3d:f6:a2:e8:cb:f7:a6:62:3b:46:85: 0d:14:f8:88:42:57:ea:b8:e8:af:d1:21:11:cf:c0:1d:aa:96: fc:13:83:54:92:b2:64:12:ca:90:4d:0e:04:79:66:4c:ce:fc: 23:e0:74:87:fb:93:bf:95:28:74:17:53:06:04:a8:bd:df:7a: 1f:6f:bd:5f:60:16:4c:97:cc:eb:60:d9:9a:0a:b4:dd:f2:b1: 28:2b:4d:a4:49:bc:29:3d:6b:06:d4:19:81:2d:ca:f0:78:23: 59:ca:23:7b:98:40:b8:e9:23:03:bb:bf:0d:9c:b8:74:a9:b7: 08:83:2a:8b:55:f3:e4:32:4a:a3:04:9f:a9:cf:67:e0:ed:76: 63:b2:f3:37:1a:d4:e9:6e:f8:88:21:de:09:13:28:d9:f2:7f: f4:9f:ed:1e:f0:38:6a:87:48:00:1a:c7:d6:d3:a4:ef:e4:70: d3:da:64:b0:0b:c1:b5:22:b1:09:47:bf:a6:a8:30:cc:b2:c1: 48:01:d5:84:b0:9a:dc:b1:16:42:93:fb:cc:dd:58:4d:45:24: cc:d8:8a:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtvgpvm3Bd4vHAYLb5LEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj NjYxZWIwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD EyhlNTg4ZGU3OTBkZDcwMWYwNTYxZWU5YjIxOTM4MDFhNTFiNTBkYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w1enJEQtsp6bkFHqOChHOst5fRw SsupBADRilXzd9JJ+2jDCnybmDyBzgSaVYtuRQLOe0+yMHrMQYA9+OmzcqheVZkL slNGf+cJ+q0vyrxg6T+/VnIoim1svLc5qMEdqIV8HH1pJy8mu9hJHfPeB6NjtkM3 bD69Hma31Zodu+FtdwOuZ4BwcWEz4bP4iccTapDt0BTnfmWij4GcU1SO7JBtkTTf 52cz7P3LzTObgawdZTwM8KLe6zRjRZfsRaKQnHciXAs85MH4bOMQniDT4W/olLWL x80pPUlwzP2rWunwDvOENvnFm8GCORAwC2XhdeS1b4HIC8KNiZdB3XGBmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWI3nkN1wHwVh7pshk4AaUbUNtrMB8GA1UdIwQY MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3 LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPpYBFhF 7I+67fRon+z3wrP4dSs8h9ZMpet7iQ5hu8rOVOwx/D/atT0/8D32oujL96ZiO0aF DRT4iEJX6rjor9EhEc/AHaqW/BODVJKyZBLKkE0OBHlmTM78I+B0h/uTv5UodBdT BgSovd96H2+9X2AWTJfM62DZmgq03fKxKCtNpEm8KT1rBtQZgS3K8HgjWcoje5hA uOkjA7u/DZy4dKm3CIMqi1Xz5DJKowSfqc9n4O12Y7LzNxrU6W74iCHeCRMo2fJ/ 9J/tHvA4aodIABrH1tOk7+Rw09pksAvBtSKxCUe/pqgwzLLBSAHVhLCa3LEWQpP7 zN1YTUUkzNiKYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:24 2025 by rpki-client