This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json) Hash identifier: vaE7LwJMVdjpNuUVfi5bWGQZDKE23Mi+vRHMeDpkHFQ= Subject key identifier: AA:A6:7B:AC:B2:FC:A8:2F:EB:0D:93:88:CC:61:32:4A:1B:86:E5:37 Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Certificate serial: 019AF61C3837CE6158F9424DF3FA5DFA5E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft Manifest number: 0B7E Signing time: Sun 07 Dec 2025 00:00:35 +0000 Manifest this update: Sun 07 Dec 2025 00:00:35 +0000 Manifest next update: Mon 08 Dec 2025 00:00:35 +0000 Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: BIVb2TlgkJnmJ72UdIoHZSNOwiUQEt4bjN+yuc9J++8=) 2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=) 3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=) 4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:38:37:ce:61:58:f9:42:4d:f3:fa:5d:fa:5e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Validity Not Before: Dec 7 00:00:35 2025 GMT Not After : Dec 8 00:00:35 2025 GMT Subject: CN=aaa67bacb2fca82feb0d9388cc61324a1b86e537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fb:5b:34:df:55:c2:f5:71:bb:6f:a4:f7:46: e7:81:94:c5:a1:c5:58:e2:76:f7:26:48:8f:b9:7e: 88:26:38:b9:31:f7:2f:9a:22:66:45:15:b6:30:93: 8d:44:e2:23:be:5d:41:f6:ae:43:ed:92:c4:ff:e8: 27:da:42:16:74:71:a9:36:24:37:35:c5:f8:ca:14: 37:d3:d4:9a:37:92:a0:2f:b5:7a:c3:40:4e:a7:67: 5d:d8:8a:f7:2a:5e:1c:22:08:49:01:e3:0e:db:91: 77:45:23:a0:f3:2b:16:1c:d8:a5:00:c9:9f:c6:d3: cc:b5:df:7b:7c:f9:b0:a1:7a:0e:00:e1:d3:80:c1: 1f:6d:a3:80:f0:85:d9:43:38:e1:f9:1b:39:ce:39: 44:ca:5d:02:fb:5c:ec:8e:3d:6e:8d:5a:c2:47:29: 3d:53:9e:fb:15:6c:55:d5:cb:3d:3c:08:33:44:cd: 3f:92:3f:dd:5a:72:2e:32:15:9a:cb:84:08:b9:6c: c6:9f:8e:cb:9b:77:d7:cc:ab:57:d6:94:6c:cb:90: 93:e9:ca:36:27:2c:38:79:19:38:cd:5b:80:b9:61: 9e:88:7a:7e:0c:33:78:3a:e8:68:75:d2:64:d9:1d: e7:fc:1d:ad:c9:a5:08:09:e4:76:c8:f7:1d:27:1d: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:7B:AC:B2:FC:A8:2F:EB:0D:93:88:CC:61:32:4A:1B:86:E5:37 X509v3 Authority Key Identifier: keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:33:ae:70:72:a5:93:10:32:bf:cf:d7:31:db:f8:c6:39:e4: 69:79:2e:12:06:b4:b6:55:4b:9e:bc:da:86:53:e6:58:45:b1: 7a:e7:c0:0b:aa:18:8a:34:5c:27:33:cd:b6:69:6f:6f:b6:1b: 66:a1:7a:bf:e4:44:27:8f:37:45:27:3b:14:69:c6:1d:26:c9: 43:10:33:ab:16:a4:f9:84:d0:01:10:87:da:08:d5:0b:8d:a7: 47:36:9c:88:d0:aa:8b:a8:21:84:65:5e:19:b9:c4:8d:62:1a: e1:b6:e0:c5:de:a0:09:2c:8e:ca:b3:e8:dc:14:b3:55:60:65: 3c:1a:8a:e6:87:4e:b8:ee:7d:2d:2d:b3:a4:ab:58:a0:8a:68: 31:a4:d1:62:4a:ce:c4:18:bf:9a:95:45:85:9a:41:2e:45:5b: 38:78:7b:86:aa:af:07:cd:79:0c:5e:73:10:2c:49:ef:18:68: 76:11:b0:bd:b3:3f:39:f1:f8:60:3d:3c:e5:f3:d3:c5:14:39: 7d:56:7f:8d:ac:d0:98:d0:dc:ae:c8:e0:7f:7a:d3:a9:fc:77: ce:3a:cb:df:39:82:db:ec:33:1b:b0:8b:cd:a2:bc:2f:3c:68: 52:68:a1:50:14:79:33:a5:c5:ef:23:79:65:f2:23:73:53:15: 1d:dd:03:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDg3zmFY+UJN8/pd+l5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmZmMTFkZDBjNjZjZTY3ZmUwZjFkNzQ5YzA5MDllZjM0 MThkMjkwHhcNMjUxMjA3MDAwMDM1WhcNMjUxMjA4MDAwMDM1WjAzMTEwLwYDVQQD EyhhYWE2N2JhY2IyZmNhODJmZWIwZDkzODhjYzYxMzI0YTFiODZlNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ftbNN9VwvVxu2+k90bngZTFocVY 4nb3JkiPuX6IJji5MfcvmiJmRRW2MJONROIjvl1B9q5D7ZLE/+gn2kIWdHGpNiQ3 NcX4yhQ309SaN5KgL7V6w0BOp2dd2Ir3Kl4cIghJAeMO25F3RSOg8ysWHNilAMmf xtPMtd97fPmwoXoOAOHTgMEfbaOA8IXZQzjh+Rs5zjlEyl0C+1zsjj1ujVrCRyk9 U577FWxV1cs9PAgzRM0/kj/dWnIuMhWay4QIuWzGn47Lm3fXzKtX1pRsy5CT6co2 Jyw4eRk4zVuAuWGeiHp+DDN4OuhoddJk2R3n/B2tyaUICeR2yPcdJx2KmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqme6yy/Kgv6w2TiMxhMkobhuU3MB8GA1UdIwQY MBaAFHEv8R3Qxmzmf+Dx10nAkJ7zQY0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTct OWQ2M2IwNDc2ZTI0LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTctOWQ2M2IwNDc2ZTI0 LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwTOucHKl kxAyv8/XMdv4xjnkaXkuEga0tlVLnrzahlPmWEWxeufAC6oYijRcJzPNtmlvb7Yb ZqF6v+REJ483RSc7FGnGHSbJQxAzqxak+YTQARCH2gjVC42nRzaciNCqi6ghhGVe GbnEjWIa4bbgxd6gCSyOyrPo3BSzVWBlPBqK5odOuO59LS2zpKtYoIpoMaTRYkrO xBi/mpVFhZpBLkVbOHh7hqqvB815DF5zECxJ7xhodhGwvbM/OfH4YD085fPTxRQ5 fVZ/jazQmNDcrsjgf3rTqfx3zjrL3zmC2+wzG7CLzaK8LzxoUmihUBR5M6XF7yN5 ZfIjc1MVHd0DGg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:31 2025 by rpki-client