This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json) Hash identifier: RWUvfJb074EAFkJ+xGtFds941CiAH7CSsloyVaqI4Vk= Subject key identifier: 50:A6:9B:24:CC:0F:10:1E:3B:DB:56:F6:BA:DB:69:DD:47:4A:41:12 Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b Certificate serial: 019AF208F08F597E172204C60E3DA84468E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft Manifest number: 0555 Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: joUfA7wmiDy4bESPg0qWDrSmTss.roa (hash: 1QUrxZN7VrpsU9R2lfkft3ATlxKCm7MpFqrD8hOkNNA=) 2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=) 3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: zyRZvz5+POtKlHZQzQjkz2cLbJwISFVSdL5VW086F5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f0:8f:59:7e:17:22:04:c6:0e:3d:a8:44:68:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=50a69b24cc0f101e3bdb56f6badb69dd474a4112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:7d:cb:7b:81:dd:fe:93:4e:74:d5:f1:fb: c3:5e:4b:b2:c1:34:88:ee:53:4e:8f:e3:76:a3:dc: 30:1b:7f:d4:22:78:08:2d:44:7f:93:00:7f:df:3b: ff:eb:a7:89:7b:9f:11:38:c6:4c:26:08:c5:ee:39: 72:18:2c:b9:a1:f6:7a:b6:6d:47:b3:3e:5c:72:3b: 24:6c:c3:7f:ab:24:ac:9d:c8:0b:c6:95:51:42:8f: d0:5e:3f:e5:18:6b:ce:14:17:34:99:99:26:c9:f0: 75:69:ec:c1:f8:5e:30:00:97:5a:a3:4b:a3:01:09: 31:96:e6:89:c5:d5:e7:a1:f2:54:82:32:46:2c:bd: ca:bc:74:33:3c:09:5c:f4:9a:82:a8:54:19:d5:83: 7b:7c:14:b7:de:e5:9b:ad:a0:c4:d9:e3:a6:7a:a4: 5d:ce:6a:fd:05:49:10:3a:f8:c7:99:1c:ae:f6:a7: 55:8e:c1:d8:5a:a7:1e:dd:a5:9a:b9:6a:b4:f3:1e: 7e:64:4c:76:26:e8:6c:8f:2c:f3:8b:26:43:aa:de: d0:6d:e2:c2:dd:32:29:c2:ed:ac:b6:be:cd:83:76: 89:bc:6f:48:26:d6:d3:36:de:0d:fa:4a:6d:7b:ef: 61:99:1a:29:1e:3b:94:08:77:79:f1:87:f2:80:0d: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A6:9B:24:CC:0F:10:1E:3B:DB:56:F6:BA:DB:69:DD:47:4A:41:12 X509v3 Authority Key Identifier: keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:fc:95:d1:08:81:dd:26:96:82:3b:7a:b7:00:56:af:ba:71: 0d:db:13:95:05:27:e9:97:83:af:62:f3:d5:7e:f5:a7:60:a6: 4e:d6:01:78:6a:f7:e0:c5:65:f9:9b:38:99:ee:3e:21:33:9d: 0d:3d:57:c6:21:18:07:8c:4c:e8:23:0b:7f:41:77:e0:a4:7c: 93:4d:4c:cb:38:a9:6d:1c:dd:1d:f4:0c:81:0e:91:8c:30:c9: 68:3c:49:ac:c2:3f:47:db:3e:6b:62:cb:b5:14:04:29:7f:10: b0:78:f9:09:ff:6e:4b:6e:d0:e8:df:41:55:a6:88:55:b2:39: 5e:9c:eb:2f:cc:47:59:8f:01:6a:b9:ec:85:03:e2:10:b5:cc: 59:e6:cd:4e:16:3a:ba:66:9e:04:90:33:55:0e:72:0a:4c:5d: 1b:81:d6:8d:ee:dc:7b:88:ce:4e:5e:d2:c6:f5:c2:43:2d:2c: 08:72:16:86:2d:1f:3d:24:cf:36:df:7e:f8:b8:0d:23:d0:0b: e6:36:db:5b:4d:2b:84:eb:ab:83:0f:98:f3:7a:5a:52:50:a6: 9d:c0:b7:54:6c:74:81:81:02:8a:08:62:35:ab:c7:12:b1:4e: 73:d5:20:76:0d:bb:b2:fd:82:0c:54:54:6c:b9:4c:32:75:4a: 82:75:37:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPCPWX4XIgTGDj2oRGjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4 MzRiM2IwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD Eyg1MGE2OWIyNGNjMGYxMDFlM2JkYjU2ZjZiYWRiNjlkZDQ3NGE0MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgJ9y3uB3f6TTnTV8fvDXkuywTSI 7lNOj+N2o9wwG3/UIngILUR/kwB/3zv/66eJe58ROMZMJgjF7jlyGCy5ofZ6tm1H sz5ccjskbMN/qySsncgLxpVRQo/QXj/lGGvOFBc0mZkmyfB1aezB+F4wAJdao0uj AQkxluaJxdXnofJUgjJGLL3KvHQzPAlc9JqCqFQZ1YN7fBS33uWbraDE2eOmeqRd zmr9BUkQOvjHmRyu9qdVjsHYWqce3aWauWq08x5+ZEx2JuhsjyzziyZDqt7QbeLC 3TIpwu2str7Ng3aJvG9IJtbTNt4N+kpte+9hmRopHjuUCHd58YfygA0yOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCmmyTMDxAeO9tW9rrbad1HSkESMB8GA1UdIwQY MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt NDY1YWRjMjk1OWYyLzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/yV0QiB 3SaWgjt6twBWr7pxDdsTlQUn6ZeDr2Lz1X71p2CmTtYBeGr34MVl+Zs4me4+ITOd DT1XxiEYB4xM6CMLf0F34KR8k01MyzipbRzdHfQMgQ6RjDDJaDxJrMI/R9s+a2LL tRQEKX8QsHj5Cf9uS27Q6N9BVaaIVbI5XpzrL8xHWY8BarnshQPiELXMWebNThY6 umaeBJAzVQ5yCkxdG4HWje7ce4jOTl7SxvXCQy0sCHIWhi0fPSTPNt9++LgNI9AL 5jbbW00rhOurgw+Y83paUlCmncC3VGx0gYECighiNavHErFOc9Ugdg27sv2CDFRU bLlMMnVKgnU3Wg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:15 2025 by rpki-client