This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft File: Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json) Hash identifier: F43XnOJvs13EmEkwAAaoBO2IMBu6yjhlCSVogE1lNFo= Subject key identifier: 4E:63:6F:8D:EC:8D:B9:E0:26:B0:A9:04:1E:F2:C2:0A:41:5A:66:6F Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e Certificate serial: 019AF31C9591F956275FA6A8640AD2A2AC8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft Manifest number: 09DD Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: 8dRpFL3Tx6_eHYDV0GF9jVjNRKU.roa (hash: CYL1YeCCG8xFxfjQulVKl6xa2WJtFP2ORTHbcUggMA4=) 2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: CNs/alaeegGDe+InCD8UqnV+XSklhkAAEtFQbtmmbfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:95:91:f9:56:27:5f:a6:a8:64:0a:d2:a2:ac:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=4e636f8dec8db9e026b0a9041ef2c20a415a666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:be:31:5e:79:c3:8e:2a:3b:40:00:6f:a8: 3a:8a:3a:8e:68:8b:0e:63:e5:67:c5:00:c1:3e:31: e5:98:6f:14:b1:5f:ed:21:39:76:c4:46:7a:d2:50: a9:75:96:29:0e:ad:90:e6:c5:65:46:27:5b:24:63: cd:b4:1c:c7:83:3f:fc:e1:c3:f4:cd:59:d1:e1:80: 7a:75:f1:68:eb:58:eb:06:14:66:73:5c:8e:b7:c1: 41:16:da:9f:32:5e:c5:91:7f:8a:68:66:3f:63:a7: de:10:c6:2e:29:c7:64:94:38:18:29:da:91:36:4c: d4:1b:b6:95:e6:d1:61:b1:c5:1f:8b:8a:80:2f:ca: e1:1e:3d:b0:47:62:b5:0d:bc:86:21:e8:33:fa:ae: 25:5b:e7:47:f5:8f:03:d3:7a:0d:da:a0:97:4b:02: 5e:86:12:fb:84:de:38:4d:a4:7f:93:56:18:06:67: 10:ac:b2:b5:bc:2c:f4:cf:94:09:af:ad:8b:69:b0: 2e:d9:76:0a:75:12:b8:b5:d4:ff:f3:ce:a6:88:30: af:50:59:38:01:0a:fa:b7:73:9b:b0:9c:39:c2:fa: cd:07:00:73:f7:dc:86:20:03:b0:81:6a:19:ba:27: 6c:2c:2b:a1:95:cd:a0:7b:88:58:02:13:f1:16:ac: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:63:6F:8D:EC:8D:B9:E0:26:B0:A9:04:1E:F2:C2:0A:41:5A:66:6F X509v3 Authority Key Identifier: keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0f:d8:8e:c7:57:13:47:13:2e:5f:c9:95:41:b3:cf:95:d6: f6:b0:49:78:08:7e:ae:d2:8d:83:08:70:6c:ff:78:c2:d1:7d: 4e:2c:c5:fe:6c:94:7d:9e:a5:4c:40:a8:cf:4f:44:dd:2c:6f: 1a:8b:ca:c0:df:c4:5f:5d:aa:72:a8:ec:02:14:70:1a:ee:a7: a9:c8:28:5b:18:e6:a4:0c:ef:4d:3e:93:ed:c0:87:c4:54:a6: 6d:cc:06:6a:2e:ae:6b:e6:0e:d5:b0:29:f1:c4:78:21:d9:21: c8:7f:65:d3:9e:6a:19:8e:71:63:68:bf:5c:7c:20:8f:a7:5a: ee:17:25:84:b1:06:08:79:68:1d:7d:fb:9f:11:96:d1:bc:3a: 6d:02:5a:08:d1:1c:a9:03:19:32:2b:22:3c:ef:8b:fe:ee:11: ad:a3:7c:43:2a:f5:88:d1:f9:73:c5:73:50:3e:b3:4b:03:69: 48:53:89:0c:b5:36:c6:fe:7e:b6:a3:5d:d5:cf:9e:e9:d9:33: 27:e7:b0:5b:00:c7:15:14:ce:d4:80:84:6f:48:8b:75:2c:fd: 08:79:dd:ab:bb:bb:2c:ab:3e:6d:45:9d:48:1a:48:f4:ee:5d: 71:2b:d2:6f:0b:5d:04:9a:aa:c8:17:f0:79:40:1c:59:c7:b5: 21:4f:d0:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJWR+VYnX6aoZArSoqyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2Y3ODc2ZDRjNTU1NGI3NzJhNTdlN2YxYzRjZWQzN2Zi NWUxOWUwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD Eyg0ZTYzNmY4ZGVjOGRiOWUwMjZiMGE5MDQxZWYyYzIwYTQxNWE2NjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/y+MV55w44qO0AAb6g6ijqOaIsO Y+VnxQDBPjHlmG8UsV/tITl2xEZ60lCpdZYpDq2Q5sVlRidbJGPNtBzHgz/84cP0 zVnR4YB6dfFo61jrBhRmc1yOt8FBFtqfMl7FkX+KaGY/Y6feEMYuKcdklDgYKdqR NkzUG7aV5tFhscUfi4qAL8rhHj2wR2K1DbyGIegz+q4lW+dH9Y8D03oN2qCXSwJe hhL7hN44TaR/k1YYBmcQrLK1vCz0z5QJr62LabAu2XYKdRK4tdT/886miDCvUFk4 AQr6t3ObsJw5wvrNBwBz99yGIAOwgWoZuidsLCuhlc2ge4hYAhPxFqz35QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5jb43sjbngJrCpBB7ywgpBWmZvMB8GA1UdIwQY MBaAFEp/eHbUxVVLdypX5/HEztN/teGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQt YWIxZWE0MzUzYjdmLzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQtYWIxZWE0MzUzYjdm LzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVw/YjsdX E0cTLl/JlUGzz5XW9rBJeAh+rtKNgwhwbP94wtF9TizF/myUfZ6lTECoz09E3Sxv GovKwN/EX12qcqjsAhRwGu6nqcgoWxjmpAzvTT6T7cCHxFSmbcwGai6ua+YO1bAp 8cR4IdkhyH9l055qGY5xY2i/XHwgj6da7hclhLEGCHloHX37nxGW0bw6bQJaCNEc qQMZMisiPO+L/u4RraN8Qyr1iNH5c8VzUD6zSwNpSFOJDLU2xv5+tqNd1c+e6dkz J+ewWwDHFRTO1ICEb0iLdSz9CHndq7u7LKs+bUWdSBpI9O5dcSvSbwtdBJqqyBfw eUAcWce1IU/Qpw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:08 2025 by rpki-client