This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft File: sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json) Hash identifier: nEGno5YHK8LC0vyO7rn5/cwpbQkdsD+JhBqqwAEnd3A= Subject key identifier: CB:0C:29:A5:F1:B0:21:EC:5A:19:14:95:53:3F:E3:C6:99:BC:A2:85 Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45 Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45 Certificate serial: 019AF12E7600FA831CF9947BBC4ED5E3892C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft Manifest number: 05DF Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: pBOBaEWXkYoN8gJBhZMkD24bH8M.roa (hash: yYFHTbbCS/jQtr+ov28WxXyLXELdV4Do2QZ+inX5RdA=) 2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: Uq7BUf4HRwni6scSYN8Mc8odP1ReAS5+Z20b5/jbfOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:76:00:fa:83:1c:f9:94:7b:bc:4e:d5:e3:89:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=cb0c29a5f1b021ec5a191495533fe3c699bca285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f8:d9:16:58:00:e7:ea:47:98:4a:48:f7:d9: 8b:bd:51:f9:e1:74:6f:7c:63:bd:ea:fe:64:85:62: 8e:84:a5:25:b1:a9:1f:57:9a:0a:bc:c8:d2:e3:ff: f8:f0:10:66:44:0b:e9:07:84:07:a2:cb:89:e8:4a: 6a:5e:b9:03:8f:66:e8:19:ce:2b:7b:f3:37:73:9b: 94:d5:c1:6e:f4:d4:ac:28:a2:e6:d1:64:3a:fc:81: 61:a1:8a:10:bb:d1:3e:db:be:ec:ec:b7:bf:42:04: e9:b5:f1:cb:85:55:7a:16:1b:a7:de:20:76:58:f8: 55:12:ea:69:af:0f:a5:8f:65:ea:d0:d5:93:b9:3b: 44:4e:df:71:b0:e6:71:2d:7c:6c:5f:10:fc:53:e9: 09:29:8a:4f:cb:6e:5b:d8:3b:8e:f4:ca:bf:ab:65: b2:b9:47:cb:ec:ef:7a:13:8e:83:32:45:44:28:c2: 2d:82:57:51:97:97:1e:8e:13:38:60:80:0b:0c:a7: 8d:36:7d:3d:1e:ab:6b:74:75:87:e2:92:cd:59:32: 71:0b:fd:29:33:35:90:bf:b0:0c:27:82:ec:fe:9d: 51:8f:30:9f:1c:82:c0:52:68:02:1b:3f:9b:c4:ea: 0a:5a:8f:bd:4e:d4:92:50:74:15:31:4b:85:41:17: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0C:29:A5:F1:B0:21:EC:5A:19:14:95:53:3F:E3:C6:99:BC:A2:85 X509v3 Authority Key Identifier: keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:1e:c7:59:a0:77:bc:a2:9a:5e:d1:0f:86:af:65:b6:bf:50: d8:a7:55:c9:6a:f4:10:12:4c:12:0d:49:a1:70:63:68:93:73: 1d:8c:42:22:84:87:74:f1:96:0c:01:23:bd:06:ec:ad:e4:4b: a7:b8:a7:dc:e9:80:f6:74:75:d0:f8:4c:a6:15:65:e1:96:e6: 7b:57:16:f3:de:0d:6c:c4:38:09:ec:49:a0:dc:b7:78:0d:09: 1a:1b:bd:05:5b:5b:9b:8d:e7:2a:83:ea:7d:d8:ff:80:63:70: 11:38:7b:b8:25:cf:c3:af:c6:09:e8:42:0c:c1:38:61:2e:99: b0:f2:13:b1:68:b1:89:7d:16:1b:c7:9b:2b:c4:74:4d:99:e4: 0f:85:1c:a0:37:1a:db:20:62:52:1f:cf:db:a9:56:ad:3c:9b: 8c:01:48:4e:05:3c:c4:74:d6:fc:09:fd:22:60:ab:af:80:09: 83:fa:95:fe:88:39:e3:be:d8:56:e3:ec:11:7a:8e:f3:b8:05: 0e:e3:45:d5:72:93:6f:82:0b:25:40:b1:a4:17:e9:49:7a:56: 58:0b:7f:65:a2:52:44:28:b3:a6:72:ee:7d:e1:28:73:46:82: c6:85:c7:f9:db:01:b5:55:bb:a8:e3:1d:e1:3e:a6:a7:f3:47: df:1a:54:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnYA+oMc+ZR7vE7V44ksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTZhMDY4NGQxZDM4YmFjZjQzMzhjMmIwMWRiM2I0MTM3 MGViNDUwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EyhjYjBjMjlhNWYxYjAyMWVjNWExOTE0OTU1MzNmZTNjNjk5YmNhMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PjZFlgA5+pHmEpI99mLvVH54XRv fGO96v5khWKOhKUlsakfV5oKvMjS4//48BBmRAvpB4QHosuJ6EpqXrkDj2boGc4r e/M3c5uU1cFu9NSsKKLm0WQ6/IFhoYoQu9E+277s7Le/QgTptfHLhVV6Fhun3iB2 WPhVEupprw+lj2Xq0NWTuTtETt9xsOZxLXxsXxD8U+kJKYpPy25b2DuO9Mq/q2Wy uUfL7O96E46DMkVEKMItgldRl5cejhM4YIALDKeNNn09HqtrdHWH4pLNWTJxC/0p MzWQv7AMJ4Ls/p1RjzCfHILAUmgCGz+bxOoKWo+9TtSSUHQVMUuFQRcOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsMKaXxsCHsWhkUlVM/48aZvKKFMB8GA1UdIwQY MBaAFLMWoGhNHTi6z0M4wrAds7QTcOtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjct MTRiOTdjZmJhZDQ3LzEvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjctMTRiOTdjZmJhZDQ3 LzEvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyR7HWaB3 vKKaXtEPhq9ltr9Q2KdVyWr0EBJMEg1JoXBjaJNzHYxCIoSHdPGWDAEjvQbsreRL p7in3OmA9nR10PhMphVl4Zbme1cW894NbMQ4CexJoNy3eA0JGhu9BVtbm43nKoPq fdj/gGNwETh7uCXPw6/GCehCDME4YS6ZsPITsWixiX0WG8ebK8R0TZnkD4UcoDca 2yBiUh/P26lWrTybjAFITgU8xHTW/An9ImCrr4AJg/qV/og5477YVuPsEXqO87gF DuNF1XKTb4ILJUCxpBfpSXpWWAt/ZaJSRCizpnLufeEoc0aCxoXH+dsBtVW7qOMd 4T6mp/NH3xpUIg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:38 2025 by rpki-client