This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json) Hash identifier: q7L11xpMkQnZYoItQrns7BRIyQgFMN7bOLTKNtG8HJg= Subject key identifier: FA:9A:C3:00:29:CC:52:0D:8A:F0:80:3D:52:0D:DB:EB:FE:C3:CF:7F Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5 Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5 Certificate serial: 019AF577C5976372F1CF0C37543B6CF50F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft Manifest number: 0FAD Signing time: Sat 06 Dec 2025 21:00:58 +0000 Manifest this update: Sat 06 Dec 2025 21:00:58 +0000 Manifest next update: Sun 07 Dec 2025 21:00:58 +0000 Files and hashes: 1: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (hash: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=) 2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: Tmb3fl+Q5BfdpsS39I6WEeGfjQy1OtyZNqhji6qHv/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:c5:97:63:72:f1:cf:0c:37:54:3b:6c:f5:0f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5 Validity Not Before: Dec 6 21:00:58 2025 GMT Not After : Dec 7 21:00:58 2025 GMT Subject: CN=fa9ac30029cc520d8af0803d520ddbebfec3cf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:83:3a:65:ac:5e:59:76:a0:7b:35:b6:fd: 79:f2:4d:be:61:5e:e6:d3:20:30:7d:ff:ab:da:d4: 86:77:a9:2c:6a:03:45:62:1b:7c:af:2b:2c:c0:ac: 64:6c:1f:76:ee:60:d6:23:f9:59:fd:81:f1:ce:57: cb:e8:e9:c1:ad:52:e6:50:c6:1c:31:26:e6:49:2d: 39:ed:64:1c:ab:0d:b5:f8:14:18:04:b9:e5:b7:4a: ab:7b:27:e4:23:8a:48:ba:91:c5:92:6b:83:fd:c7: 8a:2a:40:fe:f5:5f:32:d1:ac:43:2b:59:2b:21:43: 21:91:b2:64:b2:b5:9a:45:ec:9f:88:92:18:0a:88: 5b:8d:77:30:dd:26:b8:4a:76:f7:6b:b2:bf:36:5e: 6e:27:c2:fb:99:3d:84:31:33:17:fb:d1:0a:a5:b3: 2d:a5:31:30:3c:45:32:42:d7:9c:ab:53:e4:90:e8: 07:b9:de:43:e2:6f:3c:ac:1a:0e:04:73:f7:83:ef: 40:17:8f:22:96:28:c7:db:16:ef:4b:95:54:00:cf: c1:85:c6:aa:ff:2f:8e:02:0b:68:2a:19:ce:59:0d: c2:65:27:ab:38:34:71:51:79:ac:ac:0b:c1:6c:44: fa:df:b7:4f:28:01:aa:44:9c:14:db:6f:44:4b:81: 0e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:C3:00:29:CC:52:0D:8A:F0:80:3D:52:0D:DB:EB:FE:C3:CF:7F X509v3 Authority Key Identifier: keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bd:31:f3:10:db:a1:d6:0e:e9:66:ba:d8:0e:bc:29:8c:3b: ec:81:90:66:94:16:26:b1:1c:1e:d1:1c:50:84:5c:97:67:11: 95:2f:3b:66:8c:c1:97:52:1d:d9:94:2a:bd:cf:f6:eb:90:96: ac:30:29:b3:4a:61:6b:eb:57:49:a0:d0:48:bf:c9:e0:23:82: 02:0a:6d:45:e5:43:7e:5a:f8:59:d8:56:28:3a:93:01:c4:9b: 0a:ac:17:b9:35:66:7a:86:9a:f0:79:08:ac:15:ed:3a:6d:e0: b4:96:50:b8:84:9c:ac:bf:6a:b7:76:b2:9c:b3:a1:54:a6:0b: ac:aa:cc:c2:c4:ca:64:81:09:d7:95:4e:9e:6a:76:8a:14:cf: e3:90:dc:f2:a1:aa:8c:de:05:d9:ba:8e:a3:f6:ae:88:83:62: 77:b7:17:b7:50:6e:81:6c:7a:e1:5c:57:da:31:bc:9d:81:e8: ae:c5:b3:b6:73:13:74:1f:f4:b5:91:37:0d:42:72:30:98:b9: 6b:5b:7e:b0:b2:91:1e:30:6d:37:9d:03:3e:ea:99:12:1a:ef: d6:f4:a9:d7:fe:7a:e1:98:97:86:b3:f1:91:b9:36:cd:a1:a3: 48:2f:7d:a3:ad:c8:63:2a:90:7e:96:96:dc:b5:3e:fd:83:a0: a7:51:d6:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d8WXY3Lxzww3VDts9Q8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxN2I0NDkwNGM3Njk0YTU0MDhhMGQyOTcyYzM5ZmYwYjFi MDNlYTUwHhcNMjUxMjA2MjEwMDU4WhcNMjUxMjA3MjEwMDU4WjAzMTEwLwYDVQQD EyhmYTlhYzMwMDI5Y2M1MjBkOGFmMDgwM2Q1MjBkZGJlYmZlYzNjZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0CDOmWsXll2oHs1tv158k2+YV7m 0yAwff+r2tSGd6ksagNFYht8rysswKxkbB927mDWI/lZ/YHxzlfL6OnBrVLmUMYc MSbmSS057WQcqw21+BQYBLnlt0qreyfkI4pIupHFkmuD/ceKKkD+9V8y0axDK1kr IUMhkbJksrWaReyfiJIYCohbjXcw3Sa4Snb3a7K/Nl5uJ8L7mT2EMTMX+9EKpbMt pTEwPEUyQtecq1PkkOgHud5D4m88rBoOBHP3g+9AF48ilijH2xbvS5VUAM/Bhcaq /y+OAgtoKhnOWQ3CZSerODRxUXmsrAvBbET637dPKAGqRJwU229ES4EOawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqawwApzFINivCAPVIN2+v+w89/MB8GA1UdIwQY MBaAFLF7RJBMdpSlQIoNKXLDn/CxsD6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85MTgyNDUtN2I1MC00OTUyLWEzYTct YTQ1OTE2OTU1ZTZmLzEvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85MTgyNDUtN2I1MC00OTUyLWEzYTctYTQ1OTE2OTU1ZTZm LzEvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX70x8xDb odYO6Wa62A68KYw77IGQZpQWJrEcHtEcUIRcl2cRlS87ZozBl1Id2ZQqvc/265CW rDAps0pha+tXSaDQSL/J4COCAgptReVDflr4WdhWKDqTAcSbCqwXuTVmeoaa8HkI rBXtOm3gtJZQuIScrL9qt3aynLOhVKYLrKrMwsTKZIEJ15VOnmp2ihTP45Dc8qGq jN4F2bqOo/auiINid7cXt1BugWx64VxX2jG8nYHorsWztnMTdB/0tZE3DUJyMJi5 a1t+sLKRHjBtN50DPuqZEhrv1vSp1/564ZiXhrPxkbk2zaGjSC99o63IYyqQfpaW 3LU+/YOgp1HWTw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:01 2025 by rpki-client