This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json) Hash identifier: 5yk5b/YIJddNkpqs7ed0TfIUyXO3RNy4JJ/90CMOzSs= Subject key identifier: 4B:2B:D2:98:F4:C6:DC:2D:2A:18:E8:74:4D:22:F6:66:FB:63:21:AB Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6 Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6 Certificate serial: 019AF1640FEAA59F0CEE90D0EC36F6154ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft Manifest number: 0531 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: Ol4H0Ofe0seTJhjp23zwbv14mcA.roa (hash: h0M7hTbR8JXwLU22tU4Fw/p8crplmJ6JisUg1rjxv0k=) 2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: UU0SrIkVIxgBOJ/2sN9zHbmM6eDb9uXtIXA61TsELL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0f:ea:a5:9f:0c:ee:90:d0:ec:36:f6:15:4e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=4b2bd298f4c6dc2d2a18e8744d22f666fb6321ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:7f:6b:86:a9:8f:d6:5b:13:64:e1:32:0d: 3a:5e:c4:8b:e0:82:b0:e5:19:04:b2:76:40:5b:cc: b9:87:3c:b2:95:0c:fb:97:fc:49:a7:3c:fc:56:d4: 97:c8:2e:8b:0a:40:0f:d5:b4:36:53:7a:33:f6:05: 0a:be:7b:69:c9:d4:4e:3d:01:5d:7b:0d:5d:1d:5e: e6:25:d4:db:75:2f:39:00:0d:5e:56:3f:7c:92:f9: 56:5f:ba:3b:41:a5:45:23:b8:c2:3f:f9:6e:87:00: 0d:a3:c5:4a:72:4c:c4:e5:e5:c4:34:79:04:bc:99: 88:33:6a:37:67:23:8e:ba:29:3a:2a:0d:1a:25:5e: 38:c6:a0:34:69:e7:66:d0:cb:25:6d:e3:db:b8:1d: 84:be:e1:60:98:ad:03:69:c7:39:ee:9c:da:a9:ed: 68:cf:33:ee:2d:86:e9:ff:b3:2d:c0:cb:33:e3:76: 10:ea:74:2b:ce:c7:31:62:41:a3:d2:f7:e9:5b:66: 06:cf:2c:f7:95:cc:24:84:c3:69:34:96:60:e2:37: 2f:c5:30:71:96:24:f9:55:04:d5:05:43:42:f4:b7: 13:eb:b3:f4:12:0b:bd:3c:f9:b6:ce:12:d3:46:b9: 1e:91:c2:51:c9:c0:b8:b1:d6:15:74:53:89:ff:38: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2B:D2:98:F4:C6:DC:2D:2A:18:E8:74:4D:22:F6:66:FB:63:21:AB X509v3 Authority Key Identifier: keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:20:2b:4a:fe:7b:36:26:3a:c4:b3:b3:28:a7:5a:18:1b:89: d1:01:0f:46:19:b1:ae:a8:83:8f:b3:df:19:60:69:dc:9c:61: 70:8e:13:4f:70:cf:37:7f:d0:94:fd:5e:68:a3:34:d5:91:45: aa:1d:b4:88:3d:a9:3f:6c:1a:ca:47:f3:77:02:0a:54:67:9b: 03:85:63:eb:43:42:bd:53:9a:db:42:03:75:1d:3a:14:64:09: ad:ea:c8:d1:31:6f:1a:15:fc:6c:58:65:c2:c5:a6:e2:f8:37: 12:d2:af:89:e6:1c:6d:10:03:03:b6:6b:47:bd:33:9e:95:28: 32:21:22:57:27:7f:a8:e7:a7:94:04:2b:32:d6:02:fc:17:30: 4e:14:df:ca:1c:5e:b3:d4:cb:99:a8:c3:3d:1f:7a:d8:4a:fd: 1e:20:a7:9e:51:55:62:88:09:17:74:18:02:b7:65:4b:1e:72: 46:6d:ea:a4:08:6f:be:f8:53:a6:e2:06:5a:ac:52:e2:f5:61: cb:d9:06:0e:df:fd:9f:3c:81:42:50:95:d1:44:cd:bc:b4:22: 9d:06:3c:f0:d7:73:64:67:d2:62:23:79:c5:f8:d8:f3:2a:78: ef:9d:16:27:60:a2:82:6f:df:67:b8:9c:5b:d4:b2:c9:18:5d: 2f:e4:df:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA/qpZ8M7pDQ7Db2FU7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMmRkMDY1MDFmOTlkNDcwMjJkM2E0MDM5ZWZjZjQzOWQw YmM3ZTYwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD Eyg0YjJiZDI5OGY0YzZkYzJkMmExOGU4NzQ0ZDIyZjY2NmZiNjMyMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuN/a4apj9ZbE2ThMg06XsSL4IKw 5RkEsnZAW8y5hzyylQz7l/xJpzz8VtSXyC6LCkAP1bQ2U3oz9gUKvntpydROPQFd ew1dHV7mJdTbdS85AA1eVj98kvlWX7o7QaVFI7jCP/luhwANo8VKckzE5eXENHkE vJmIM2o3ZyOOuik6Kg0aJV44xqA0aedm0MslbePbuB2EvuFgmK0Dacc57pzaqe1o zzPuLYbp/7MtwMsz43YQ6nQrzscxYkGj0vfpW2YGzyz3lcwkhMNpNJZg4jcvxTBx liT5VQTVBUNC9LcT67P0Egu9PPm2zhLTRrkekcJRycC4sdYVdFOJ/zgrdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsr0pj0xtwtKhjodE0i9mb7YyGrMB8GA1UdIwQY MBaAFLIt0GUB+Z1HAi06QDnvz0OdC8fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMt NzExZmZkZjkxNjk4LzEvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMtNzExZmZkZjkxNjk4 LzEvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyArSv57 NiY6xLOzKKdaGBuJ0QEPRhmxrqiDj7PfGWBp3JxhcI4TT3DPN3/QlP1eaKM01ZFF qh20iD2pP2waykfzdwIKVGebA4Vj60NCvVOa20IDdR06FGQJrerI0TFvGhX8bFhl wsWm4vg3EtKvieYcbRADA7ZrR70znpUoMiEiVyd/qOenlAQrMtYC/BcwThTfyhxe s9TLmajDPR962Er9HiCnnlFVYogJF3QYArdlSx5yRm3qpAhvvvhTpuIGWqxS4vVh y9kGDt/9nzyBQlCV0UTNvLQinQY88NdzZGfSYiN5xfjY8yp4750WJ2Cigm/fZ7ic W9SyyRhdL+Tf4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:43 2025 by rpki-client