This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json) Hash identifier: Xk0ib/k8OMvxJxIEOSPwWIZ07Wj1Tt+9488bOixXVZw= Subject key identifier: 30:FF:5B:9F:39:48:DC:C5:56:21:E1:27:05:8F:2B:C3:4E:8D:0A:13 Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0 Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0 Certificate serial: 019AF19AB38599933E95F46599C7738C8DF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft Manifest number: 0793 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=) 2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: 5AuTSPfG1vAFlVA/ytuTfCoLyGb50gj5hFW3k5LpoXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b3:85:99:93:3e:95:f4:65:99:c7:73:8c:8d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0 Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=30ff5b9f3948dcc55621e127058f2bc34e8d0a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:d7:5f:24:59:ae:01:90:8d:08:3e:4f:d7: f0:cd:ad:94:77:7e:6e:51:83:e9:1d:15:37:96:99: fe:78:7a:22:36:9e:57:91:13:b1:bf:9c:74:6d:bd: bc:ab:fb:6f:e3:75:54:12:b8:3c:92:9e:b4:9c:ab: 89:95:68:2c:da:f0:07:b7:1f:13:3e:da:d3:3e:e3: ca:f3:62:96:45:3a:b9:54:c6:bf:30:85:df:30:6e: fd:95:64:df:9b:8d:b5:c4:23:0b:cb:f9:57:16:83: 27:be:ec:a4:f5:98:84:fa:25:c7:d4:c4:76:e1:0f: fa:bc:04:45:d0:6e:43:93:03:20:57:66:2b:ca:e7: de:36:bf:b7:f2:4a:ad:0c:05:b7:3e:68:57:df:a5: ba:b0:af:1f:5b:3a:69:47:6b:d8:f4:1e:53:1c:1a: 67:76:cc:93:c5:73:df:1c:57:2d:78:e1:27:7b:90: a5:af:40:b8:d9:e3:d3:5d:5f:ed:78:65:a4:f0:29: 48:ad:7e:b8:b5:ad:d6:f4:b7:9f:ba:02:25:1f:28: cf:b8:da:05:48:69:3e:46:49:6a:d2:d0:e4:99:d2: 3d:b4:72:03:6c:8d:12:44:5f:66:a7:b1:9c:ac:56: 91:48:c4:27:bb:e9:9a:85:87:e0:22:1c:f0:54:6a: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FF:5B:9F:39:48:DC:C5:56:21:E1:27:05:8F:2B:C3:4E:8D:0A:13 X509v3 Authority Key Identifier: keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5e:fe:60:de:5c:0d:9b:97:bc:40:d4:70:ba:dc:c2:3c:c9: e2:89:7d:8b:66:3e:92:54:98:b0:c3:41:44:a5:33:f8:22:b2: 6d:f6:34:f4:fa:d0:f0:da:bb:ed:c8:33:47:86:0c:1b:63:ed: 9d:05:d5:b4:e3:57:d0:f3:df:1b:ad:23:b9:d0:5e:1d:96:f3: f7:f3:13:e3:f2:1f:e1:6f:07:d7:dc:09:10:93:51:6b:e7:83: c4:25:5e:96:97:be:2c:26:74:d6:88:85:db:af:18:eb:51:92: c9:f6:ba:d4:01:34:4c:bb:0b:7a:aa:b4:5d:25:c5:e2:23:35: 63:67:65:bc:25:5a:42:c9:d8:c4:68:6b:de:7c:9e:0a:38:df: 8b:93:d7:d2:3b:31:08:a0:51:4b:05:0f:f7:cd:b6:51:5e:cb: 47:78:8e:56:82:39:92:ff:6c:fe:c4:03:3c:cd:df:f1:99:2a: 09:7a:15:60:ae:de:4e:6d:75:e1:89:4f:45:88:c1:2c:ad:9e: 6c:ae:f9:74:1d:cb:d3:94:bc:f5:9c:74:9f:28:3a:e8:1f:4a: cc:bd:b9:f7:d9:8f:39:9b:cd:29:a8:3a:eb:51:20:bf:be:13: d0:4b:f7:1b:10:72:13:f6:93:95:07:a8:40:c4:fe:37:ba:c6: e7:e7:a1:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrOFmZM+lfRlmcdzjI3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGU1NzhkYWM3OTJkOTVlMjE3ZDk4NzFlMDRmNjY5NzNi YjdlYjAwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD EygzMGZmNWI5ZjM5NDhkY2M1NTYyMWUxMjcwNThmMmJjMzRlOGQwYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy23XXyRZrgGQjQg+T9fwza2Ud35u UYPpHRU3lpn+eHoiNp5XkROxv5x0bb28q/tv43VUErg8kp60nKuJlWgs2vAHtx8T PtrTPuPK82KWRTq5VMa/MIXfMG79lWTfm421xCMLy/lXFoMnvuyk9ZiE+iXH1MR2 4Q/6vARF0G5DkwMgV2YryufeNr+38kqtDAW3PmhX36W6sK8fWzppR2vY9B5THBpn dsyTxXPfHFcteOEne5Clr0C42ePTXV/teGWk8ClIrX64ta3W9LefugIlHyjPuNoF SGk+Rklq0tDkmdI9tHIDbI0SRF9mp7GcrFaRSMQnu+mahYfgIhzwVGq5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDD/W585SNzFViHhJwWPK8NOjQoTMB8GA1UdIwQY MBaAFEneV42seS2V4hfZhx4E9mlzu36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYt NjNlMDIwZmVlY2Y5LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYtNjNlMDIwZmVlY2Y5 LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl7+YN5c DZuXvEDUcLrcwjzJ4ol9i2Y+klSYsMNBRKUz+CKybfY09PrQ8Nq77cgzR4YMG2Pt nQXVtONX0PPfG60judBeHZbz9/MT4/If4W8H19wJEJNRa+eDxCVelpe+LCZ01oiF 268Y61GSyfa61AE0TLsLeqq0XSXF4iM1Y2dlvCVaQsnYxGhr3nyeCjjfi5PX0jsx CKBRSwUP9822UV7LR3iOVoI5kv9s/sQDPM3f8ZkqCXoVYK7eTm114YlPRYjBLK2e bK75dB3L05S89Zx0nyg66B9KzL2599mPOZvNKag661Egv74T0Ev3GxByE/aTlQeo QMT+N7rG5+ehGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:06 2025 by rpki-client