This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json) Hash identifier: pvXDnl/bsl5O2+N2iDb3LkXpVmd7vBwOmiosIY2UQn4= Subject key identifier: 96:61:3C:1E:92:D3:64:BC:D6:7A:01:7E:01:BD:30:65:E9:BD:2C:FE Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8 Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8 Certificate serial: 019AF5AF18D6B72BFCCEB7DBC1FBC966785F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft Manifest number: 090E Signing time: Sat 06 Dec 2025 22:01:24 +0000 Manifest this update: Sat 06 Dec 2025 22:01:24 +0000 Manifest next update: Sun 07 Dec 2025 22:01:24 +0000 Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: kfUFCG9ArB+EF1XGpLLHlMlkwdFNOS7ZWcuJQM8UbdE=) 2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:18:d6:b7:2b:fc:ce:b7:db:c1:fb:c9:66:78:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8 Validity Not Before: Dec 6 22:01:24 2025 GMT Not After : Dec 7 22:01:24 2025 GMT Subject: CN=96613c1e92d364bcd67a017e01bd3065e9bd2cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:62:66:e8:cd:22:b1:70:79:35:08:70:10: 89:80:b7:5e:5f:18:4b:11:d0:55:20:cb:99:35:5b: 69:4f:75:e9:cd:ce:a2:19:9b:71:48:7c:1c:37:58: fb:a5:0f:be:79:b9:c1:29:e8:8d:ff:3f:11:7e:5b: 2b:be:e8:00:46:f0:33:11:ac:6a:e3:77:3a:b9:92: f6:fb:d1:e2:cc:80:50:5a:62:67:20:42:f8:7d:61: 47:18:59:69:92:20:85:f4:49:bd:61:79:72:2e:aa: 83:c4:3d:d3:82:cf:65:73:20:a2:20:75:2a:a1:18: a6:ac:0d:ca:60:9b:f5:1d:54:5b:82:93:97:8a:3e: 14:55:ca:04:3e:cc:6b:7e:5a:6f:e9:ab:66:63:f0: 2d:f3:ea:7d:f3:2f:64:20:52:45:58:76:c0:03:f5: c2:19:8e:14:1d:2b:2b:4d:d4:29:fd:b5:05:ea:9f: 2c:a7:b8:a6:d4:f7:26:a5:10:03:9b:28:0e:f8:a0: bb:44:50:81:21:ed:6e:fe:d0:e6:81:c6:4a:81:ac: 45:54:97:0c:52:56:4f:1e:e0:9d:52:c5:87:e7:1d: 52:d5:84:e1:76:1a:ff:db:a1:97:38:3b:5e:8b:ea: db:3b:2a:aa:8a:7e:fe:7e:12:f6:24:b5:20:1d:ee: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:61:3C:1E:92:D3:64:BC:D6:7A:01:7E:01:BD:30:65:E9:BD:2C:FE X509v3 Authority Key Identifier: keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ad:1c:5e:1d:59:ea:22:11:d1:e4:59:27:83:8b:cb:a1:29: 8a:5d:6d:de:92:3b:36:a6:b2:8a:6f:a9:7d:68:7b:d3:fc:17: b5:af:ed:24:a0:bf:aa:71:b8:9b:03:c0:ad:f1:b8:f4:28:b6: 47:fe:d3:66:4c:2b:0a:79:9f:32:1c:06:38:8e:b3:e9:95:21: 1d:da:f2:28:de:b5:7c:6c:32:0d:ea:19:39:25:42:83:7f:60: 67:4d:03:55:46:55:53:9a:99:ba:c5:7d:88:d4:97:38:0a:2e: ad:52:02:ee:76:de:65:08:6b:dc:04:f1:7c:e2:3a:6e:05:6b: db:c8:4f:b7:39:5d:93:f4:cc:72:f6:89:0f:7f:df:33:84:fa: dd:ba:2b:fe:40:a5:cc:06:b0:e2:f1:90:21:76:19:31:5a:c0: 2d:4d:87:c7:29:d5:63:6c:c6:39:ee:c6:35:19:f8:11:4a:6e: 9b:b9:04:da:c0:fb:64:6c:fa:42:c7:6f:33:23:ce:28:50:35: 0d:c2:8e:f2:1b:00:ae:51:28:8a:14:31:a5:e7:0e:bc:8b:2c: ac:49:e8:c3:4c:65:46:b9:8e:e1:7a:ff:70:97:90:8e:bb:29: c7:90:97:c6:40:8f:4c:80:fa:e5:04:32:f6:62:4f:fd:83:39: 2d:82:fa:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rxjWtyv8zrfbwfvJZnhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQ2NGVjYzk0NmYyOTJlNDA0ZjJjMzUxOTIyZWNmNGM1 OTBmZDgwHhcNMjUxMjA2MjIwMTI0WhcNMjUxMjA3MjIwMTI0WjAzMTEwLwYDVQQD Eyg5NjYxM2MxZTkyZDM2NGJjZDY3YTAxN2UwMWJkMzA2NWU5YmQyY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6NiZujNIrFweTUIcBCJgLdeXxhL EdBVIMuZNVtpT3Xpzc6iGZtxSHwcN1j7pQ++ebnBKeiN/z8RflsrvugARvAzEaxq 43c6uZL2+9HizIBQWmJnIEL4fWFHGFlpkiCF9Em9YXlyLqqDxD3Tgs9lcyCiIHUq oRimrA3KYJv1HVRbgpOXij4UVcoEPsxrflpv6atmY/At8+p98y9kIFJFWHbAA/XC GY4UHSsrTdQp/bUF6p8sp7im1PcmpRADmygO+KC7RFCBIe1u/tDmgcZKgaxFVJcM UlZPHuCdUsWH5x1S1YThdhr/26GXODtei+rbOyqqin7+fhL2JLUgHe5CpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZhPB6S02S81noBfgG9MGXpvSz+MB8GA1UdIwQY MBaAFK0kZOzJRvKS5ATyw1GSLs9MWQ/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUt NTkyZWQ3Mzc2MWNhLzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUtNTkyZWQ3Mzc2MWNh LzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq0cXh1Z 6iIR0eRZJ4OLy6Epil1t3pI7Nqayim+pfWh70/wXta/tJKC/qnG4mwPArfG49Ci2 R/7TZkwrCnmfMhwGOI6z6ZUhHdryKN61fGwyDeoZOSVCg39gZ00DVUZVU5qZusV9 iNSXOAourVIC7nbeZQhr3ATxfOI6bgVr28hPtzldk/TMcvaJD3/fM4T63bor/kCl zAaw4vGQIXYZMVrALU2HxynVY2zGOe7GNRn4EUpum7kE2sD7ZGz6QsdvMyPOKFA1 DcKO8hsArlEoihQxpecOvIssrEnow0xlRrmO4Xr/cJeQjrspx5CXxkCPTID65QQy 9mJP/YM5LYL6CA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:15 2025 by rpki-client