This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json) Hash identifier: /JCWObWi+xHSCn/hlCJqA+EJqyP5x0MnOeG/Zd/Dceg= Subject key identifier: 91:8C:10:6F:A1:D3:19:A7:CF:D9:70:CD:15:FF:B3:53:5C:1C:12:AC Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2 Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2 Certificate serial: 019AF19B73B9E88CBA9505B36242ABD706B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft Manifest number: 0C06 Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (hash: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=) 2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: IkUoBoJNCsE8+vATUMdTFUmHWFmwqztJXyd8E/wO8ZQ=) 3: lCpE9-_9vA0HzQAwKrWQ7gX2Gi8.roa (hash: YkwTTveNH0IQGCLC0ZIMEDB0zjPdx3yFhcYm5gkoPpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:73:b9:e8:8c:ba:95:05:b3:62:42:ab:d7:06:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2 Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=918c106fa1d319a7cfd970cd15ffb3535c1c12ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:1f:d8:77:10:ac:0c:fd:1b:1e:d7:08:f0: c6:79:5d:a8:32:42:0e:ab:80:50:62:d4:51:62:16: 3d:86:a3:af:89:6e:02:fe:d1:c2:ec:77:5d:ee:ed: 0b:ee:43:a1:9d:bb:74:36:fc:1a:fc:03:21:1d:dd: 17:a3:63:f9:d6:db:f8:28:c9:3f:76:6b:2f:e2:4a: df:91:d4:f3:09:1a:7b:e0:af:01:5a:ee:2f:60:42: dc:e9:07:ba:17:f8:d0:3d:86:c5:82:32:c9:a1:cf: 7d:c4:45:2f:7e:40:eb:4a:bc:31:3e:14:c8:f4:4b: e8:bc:73:55:27:ac:89:cf:2d:bd:c0:d0:08:89:77: 55:d2:d2:d2:0d:18:01:5b:db:08:fa:4b:a1:b1:72: 60:35:79:40:1a:92:f7:fd:a5:d8:42:aa:a7:25:14: bf:21:3f:99:d5:f2:30:0c:fd:c0:4f:17:0d:49:45: a3:e3:53:d6:f5:c1:53:b7:68:68:75:38:7b:33:b0: 22:57:c7:04:6e:d6:7a:f8:cb:0d:af:96:ce:0c:a1: 68:06:7f:02:89:99:45:17:8c:82:d2:c8:c1:6c:62: b1:e6:df:05:8e:03:e0:7f:50:06:b3:5b:29:a0:ee: dd:21:85:5a:d6:55:b5:a5:d6:e0:75:1e:a5:f0:85: 7e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8C:10:6F:A1:D3:19:A7:CF:D9:70:CD:15:FF:B3:53:5C:1C:12:AC X509v3 Authority Key Identifier: keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1d:de:7e:4f:cd:dc:d8:db:dd:22:c7:a2:b4:02:e3:45:c9: 19:49:15:63:2a:06:c0:66:3a:15:fd:4f:21:f1:13:e6:79:5e: 62:dc:c4:4b:48:49:e4:14:e3:f2:88:28:2f:70:17:ed:24:d1: 18:69:1e:bc:0f:26:6f:07:07:9a:d4:01:0f:a6:57:c9:86:d0: 5b:6e:02:32:8e:ff:16:cc:70:ec:36:03:5f:cc:b0:b0:84:29: 0d:24:c7:40:a9:bc:e5:bf:8b:3e:3f:08:1a:9c:fb:dd:f7:2c: ac:b7:05:06:0e:a6:36:db:81:f8:12:37:0a:0d:f9:bc:52:5e: c7:1b:eb:69:bc:4c:37:91:d3:86:21:ce:5b:63:44:3f:c2:9f: 4b:c0:69:ed:67:4b:a9:5d:da:33:f6:11:b1:0d:fe:ae:f4:f2: 2c:6e:40:01:4d:fe:b2:ee:bd:71:d3:3a:aa:b4:b4:e9:fb:d6: af:04:af:a9:2a:53:cf:57:43:46:2c:c3:7d:22:ca:fb:3a:9f: 0c:bc:78:a5:fc:1b:09:4b:8a:94:02:c0:57:e8:38:82:6c:94: 77:95:1e:08:21:74:8d:83:4c:bb:bf:e4:4f:55:f4:ed:c5:ba: f0:85:53:6d:5c:65:5c:2f:bc:b8:0d:6d:3a:cf:d1:b7:27:f6: 78:14:b5:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3O56Iy6lQWzYkKr1wa3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYjdkYzAzNzg5ZjU4NjIxYjI1ZThkZDBkOTI1ZGM5MWI0 YTVhYTIwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD Eyg5MThjMTA2ZmExZDMxOWE3Y2ZkOTcwY2QxNWZmYjM1MzVjMWMxMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA080f2HcQrAz9Gx7XCPDGeV2oMkIO q4BQYtRRYhY9hqOviW4C/tHC7Hdd7u0L7kOhnbt0Nvwa/AMhHd0Xo2P51tv4KMk/ dmsv4krfkdTzCRp74K8BWu4vYELc6Qe6F/jQPYbFgjLJoc99xEUvfkDrSrwxPhTI 9EvovHNVJ6yJzy29wNAIiXdV0tLSDRgBW9sI+kuhsXJgNXlAGpL3/aXYQqqnJRS/ IT+Z1fIwDP3ATxcNSUWj41PW9cFTt2hodTh7M7AiV8cEbtZ6+MsNr5bODKFoBn8C iZlFF4yC0sjBbGKx5t8FjgPgf1AGs1spoO7dIYVa1lW1pdbgdR6l8IV+2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGMEG+h0xmnz9lwzRX/s1NcHBKsMB8GA1UdIwQY MBaAFEq33AN4n1hiGyXo3Q2SXckbSlqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzIt ZjM4YmNiZDkzMzkwLzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzItZjM4YmNiZDkzMzkw LzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx3efk/N 3Njb3SLHorQC40XJGUkVYyoGwGY6Ff1PIfET5nleYtzES0hJ5BTj8ogoL3AX7STR GGkevA8mbwcHmtQBD6ZXyYbQW24CMo7/Fsxw7DYDX8ywsIQpDSTHQKm85b+LPj8I Gpz73fcsrLcFBg6mNtuB+BI3Cg35vFJexxvrabxMN5HThiHOW2NEP8KfS8Bp7WdL qV3aM/YRsQ3+rvTyLG5AAU3+su69cdM6qrS06fvWrwSvqSpTz1dDRizDfSLK+zqf DLx4pfwbCUuKlALAV+g4gmyUd5UeCCF0jYNMu7/kT1X07cW68IVTbVxlXC+8uA1t Os/Rtyf2eBS1pQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:24 2025 by rpki-client