This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json) Hash identifier: YeGFn2RgeGcSLzwpU4llxmNZT2yVXBxfkrUmzXpuWF8= Subject key identifier: 9C:FA:43:29:0F:BA:F9:27:46:B0:16:81:95:D8:1A:FA:B6:58:4A:14 Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d Certificate serial: 019AF164729906DD10E5696597D6BB07A3C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: oJ/SVEQ8I6Pd3+/V0Z53tn7PiG8K2OXafo2ObV2rPgU=) 2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:72:99:06:dd:10:e5:69:65:97:d6:bb:07:a3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=9cfa43290fbaf92746b0168195d81afab6584a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:ae:fb:da:ce:e4:93:2f:19:21:5b:73:cd: 5c:ce:89:9d:58:6c:15:07:74:4c:de:00:8b:76:f8: 47:35:08:e3:7a:14:2d:7b:ee:65:06:57:96:85:50: 7a:3e:30:7f:6c:af:07:5a:da:34:02:48:a9:f9:27: 1d:2a:e5:15:ae:16:bc:ae:aa:de:28:8b:a0:8c:c8: 1c:4f:b8:37:6b:7e:9f:ab:c5:3d:58:52:aa:65:cf: b2:1c:b8:a2:28:57:27:3c:36:6d:0d:bc:e5:d9:3c: 65:e1:b4:4f:44:ea:b9:a3:11:39:20:59:5a:e7:d6: 72:38:62:06:5d:c1:ae:8b:95:bb:9b:b6:b7:25:21: 0f:2b:82:9f:0d:d5:3f:a6:a8:37:0e:31:35:5d:ef: 98:70:bd:d7:67:8a:85:85:bc:20:68:cd:a8:40:d2: 33:5c:53:f0:8f:10:e4:58:d8:83:03:17:27:3c:64: 09:50:eb:20:77:7b:99:75:1c:f9:81:a5:2b:77:45: 4d:6f:ad:3b:ff:5e:97:d6:95:b1:6f:13:87:ac:be: 5a:db:d3:75:ee:b7:75:09:7a:6c:d7:70:ca:1a:f3: e9:32:b9:c3:64:56:86:28:67:ac:cc:91:27:28:6e: 71:65:fa:20:24:47:58:6b:c5:b0:8f:1c:94:c0:57: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FA:43:29:0F:BA:F9:27:46:B0:16:81:95:D8:1A:FA:B6:58:4A:14 X509v3 Authority Key Identifier: keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7e:35:ca:c2:f6:47:37:fa:f1:90:0b:9a:55:28:ad:d0:97: d2:e0:e0:c7:0b:1c:da:42:1b:dd:93:22:cb:64:97:90:b6:e4: c4:62:52:c8:67:aa:3b:80:51:6d:3e:7b:29:bc:10:de:bb:81: e4:6a:46:26:7a:5a:02:5a:9e:c4:80:07:70:65:dd:63:c3:61: e6:1c:44:c5:f4:b8:66:fa:07:7e:67:96:eb:4a:3d:1a:75:28: 20:73:08:5c:53:8e:39:73:bc:9e:09:87:44:cf:5e:37:c0:7f: ac:ef:48:54:f8:0f:93:7a:7e:80:9e:36:97:3e:97:e6:a4:cd: 2a:3a:7c:eb:2f:25:e5:d4:5e:f8:b9:cb:dd:78:43:ef:4b:cb: c7:9c:16:58:df:be:60:5c:5f:d1:f0:0d:0d:12:45:f6:79:7d: 04:43:60:eb:ff:40:ab:5f:c1:9b:77:12:d6:f0:b7:dc:32:00: 69:79:04:6e:3b:5c:d0:1a:26:63:3b:6b:b5:7c:ef:4c:d3:92: b1:4c:f5:c7:a9:be:1b:d4:b3:24:86:f7:6d:a2:4f:13:45:59: 9b:27:2a:11:e3:86:18:9e:d5:77:c3:16:97:fe:d6:35:44:b1: 26:b5:a7:24:ae:28:54:e2:c6:5e:36:2a:b8:c5:73:12:0d:31: f2:4d:9c:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHKZBt0Q5Wlll9a7B6PBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNGQ1MmFiMDliMTZkNzJmNGMzZTQ4Y2M0YjQ5MDI1ZDA4 MzY3NmQwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg5Y2ZhNDMyOTBmYmFmOTI3NDZiMDE2ODE5NWQ4MWFmYWI2NTg0YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuGu+9rO5JMvGSFbc81czomdWGwV B3RM3gCLdvhHNQjjehQte+5lBleWhVB6PjB/bK8HWto0Akip+ScdKuUVrha8rqre KIugjMgcT7g3a36fq8U9WFKqZc+yHLiiKFcnPDZtDbzl2Txl4bRPROq5oxE5IFla 59ZyOGIGXcGui5W7m7a3JSEPK4KfDdU/pqg3DjE1Xe+YcL3XZ4qFhbwgaM2oQNIz XFPwjxDkWNiDAxcnPGQJUOsgd3uZdRz5gaUrd0VNb607/16X1pWxbxOHrL5a29N1 7rd1CXps13DKGvPpMrnDZFaGKGeszJEnKG5xZfogJEdYa8WwjxyUwFcUIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz6QykPuvknRrAWgZXYGvq2WEoUMB8GA1UdIwQY MBaAFNtNUqsJsW1y9MPkjMS0kCXQg2dtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUt MjJiZGVmOTliY2VhLzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUtMjJiZGVmOTliY2Vh LzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon41ysL2 Rzf68ZALmlUordCX0uDgxwsc2kIb3ZMiy2SXkLbkxGJSyGeqO4BRbT57KbwQ3ruB 5GpGJnpaAlqexIAHcGXdY8Nh5hxExfS4ZvoHfmeW60o9GnUoIHMIXFOOOXO8ngmH RM9eN8B/rO9IVPgPk3p+gJ42lz6X5qTNKjp86y8l5dRe+LnL3XhD70vLx5wWWN++ YFxf0fANDRJF9nl9BENg6/9Aq1/Bm3cS1vC33DIAaXkEbjtc0BomYztrtXzvTNOS sUz1x6m+G9SzJIb3baJPE0VZmycqEeOGGJ7Vd8MWl/7WNUSxJrWnJK4oVOLGXjYq uMVzEg0x8k2cPw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:36 2025 by rpki-client