This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft File: sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json) Hash identifier: gVfi4QaFqfPkcv6x9+zcnzY9t0/OBaFCF2wi6oCk0eg= Subject key identifier: 47:98:96:B9:DF:02:6E:53:95:27:2F:6F:A1:7B:5C:95:DA:0B:AF:33 Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73 Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773 Certificate serial: 019AF12E120D17AC5FD9128D1AC7219A936B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft Manifest number: 054C Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=) 2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: gD6qwGBAbx4EsEF43rFfzlGDU+r+GMt7jPQe1inu+g4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:12:0d:17:ac:5f:d9:12:8d:1a:c7:21:9a:93:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31f64de5618f75c19df513953f6469879e08773 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=479896b9df026e5395272f6fa17b5c95da0baf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:0b:f5:f1:8d:bc:a6:b1:a4:89:4d:33:3c: 84:c0:bb:d2:65:c4:c3:f4:de:41:1c:04:b2:11:0c: b0:ff:b0:c0:a6:d6:ed:db:0f:a9:ff:0b:a3:12:1e: 8f:f8:40:6d:51:1d:48:66:c1:67:3d:26:12:72:01: 53:a5:84:b3:f6:4d:b1:d9:2c:17:93:8c:41:59:45: 83:19:27:b3:9d:a9:b5:74:28:57:b1:1c:86:48:d9: 43:56:46:99:c4:b7:c2:cf:89:c8:37:7f:2d:cf:64: df:45:dc:b0:28:d6:ee:8d:03:77:cb:81:10:be:8d: ff:36:2c:45:5b:f3:ea:70:1f:6c:4b:36:d6:48:46: 97:f9:0f:d7:51:67:b2:b9:bd:e5:c4:d1:e4:91:6e: 46:3e:9e:b6:84:47:18:38:49:e6:c9:e0:d1:09:e1: d1:96:bc:56:eb:87:e2:42:c1:62:0b:ee:48:cd:77: 24:c1:9e:42:ae:af:b4:4a:db:3f:eb:e4:2e:e9:98: 8d:d8:e5:c7:e8:59:3d:a4:bc:f6:a7:98:1a:ff:89: a7:98:77:f2:e1:a9:e4:0a:56:13:57:d3:a0:97:4a: de:05:b5:f0:1d:e6:9c:7a:7e:10:1e:ed:42:d4:75: 7f:85:6d:3f:83:d4:34:89:30:64:3b:48:75:f9:a2: 28:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:98:96:B9:DF:02:6E:53:95:27:2F:6F:A1:7B:5C:95:DA:0B:AF:33 X509v3 Authority Key Identifier: keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:e3:fa:93:a9:20:bc:b9:0f:92:76:54:ff:e4:9f:f9:3f: a4:03:3c:29:a0:56:78:05:e8:4c:bd:1d:8a:05:1c:ca:40:08: 52:3c:c0:ed:b9:be:9f:b0:45:94:fe:2d:41:e0:b9:4a:ec:8e: 95:61:41:a3:db:ae:b9:06:1f:aa:a9:88:13:60:cf:45:77:73: 23:e4:1a:37:48:d8:56:38:47:d5:47:d5:06:c0:05:09:2f:10: 0b:56:3f:c7:27:f4:81:cd:cc:2c:17:6c:e0:8b:b5:64:0e:03: 27:8d:3d:8e:cb:05:d1:d9:25:54:a5:4d:b0:c8:a6:9e:25:d5: 12:55:96:55:ad:4d:fd:d9:b5:6e:9b:f2:d3:cb:38:b5:9c:f2: 27:84:1a:53:78:ef:fb:4a:04:43:f8:9e:f6:87:3e:1b:38:ba: cb:77:fb:a4:1b:f2:a0:24:b7:49:51:98:d1:de:7f:8f:c7:03: 5e:34:7c:16:c8:38:cd:f2:65:e7:ad:85:5d:9b:2b:30:cc:73: ac:80:8c:6a:b0:0e:e3:a2:12:f9:43:52:57:82:76:7c:18:6e: 72:b6:d9:16:3d:78:7a:38:da:5f:21:a3:89:db:b6:b0:d6:71: 3d:2a:ed:b1:80:d8:54:83:59:75:cc:cb:ef:62:38:68:25:ea: e9:9d:26:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhINF6xf2RKNGschmpNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWY2NGRlNTYxOGY3NWMxOWRmNTEzOTUzZjY0Njk4Nzll MDg3NzMwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD Eyg0Nzk4OTZiOWRmMDI2ZTUzOTUyNzJmNmZhMTdiNWM5NWRhMGJhZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEYL9fGNvKaxpIlNMzyEwLvSZcTD 9N5BHASyEQyw/7DAptbt2w+p/wujEh6P+EBtUR1IZsFnPSYScgFTpYSz9k2x2SwX k4xBWUWDGSeznam1dChXsRyGSNlDVkaZxLfCz4nIN38tz2TfRdywKNbujQN3y4EQ vo3/NixFW/PqcB9sSzbWSEaX+Q/XUWeyub3lxNHkkW5GPp62hEcYOEnmyeDRCeHR lrxW64fiQsFiC+5IzXckwZ5Crq+0Sts/6+Qu6ZiN2OXH6Fk9pLz2p5ga/4mnmHfy 4ankClYTV9Ogl0reBbXwHeacen4QHu1C1HV/hW0/g9Q0iTBkO0h1+aIoWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeYlrnfAm5TlScvb6F7XJXaC68zMB8GA1UdIwQY MBaAFLMfZN5WGPdcGd9ROVP2Rph54IdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZmEwMDctZjM0NC00NjdlLWI3MTIt MWNjZTViNThmOGUzLzEvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zZmEwMDctZjM0NC00NjdlLWI3MTItMWNjZTViNThmOGUz LzEvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROLj+pOp ILy5D5J2VP/kn/k/pAM8KaBWeAXoTL0digUcykAIUjzA7bm+n7BFlP4tQeC5SuyO lWFBo9uuuQYfqqmIE2DPRXdzI+QaN0jYVjhH1UfVBsAFCS8QC1Y/xyf0gc3MLBds 4Iu1ZA4DJ409jssF0dklVKVNsMimniXVElWWVa1N/dm1bpvy08s4tZzyJ4QaU3jv +0oEQ/ie9oc+Gzi6y3f7pBvyoCS3SVGY0d5/j8cDXjR8Fsg4zfJl562FXZsrMMxz rICMarAO46IS+UNSV4J2fBhucrbZFj14ejjaXyGjidu2sNZxPSrtsYDYVINZdczL 72I4aCXq6Z0miw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:03 2025 by rpki-client