This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json) Hash identifier: 1Nndl7lqSb7wWRFxeR6m5ejXVBAurOjuDtJc0HHLDJY= Subject key identifier: D4:6D:89:B9:8C:55:03:9C:F3:E2:82:73:D5:99:DB:87:50:12:1B:9A Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b Certificate serial: 019AF12D92280E864882FCAB30B799DDD0A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:26 +0000 Manifest this update: Sat 06 Dec 2025 01:01:26 +0000 Manifest next update: Sun 07 Dec 2025 01:01:26 +0000 Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=) 2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: VvZQQ5cVmwkOxs9ltQKjm9lAwdbTaNlale1LizgFHp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:92:28:0e:86:48:82:fc:ab:30:b7:99:dd:d0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b Validity Not Before: Dec 6 01:01:26 2025 GMT Not After : Dec 7 01:01:26 2025 GMT Subject: CN=d46d89b98c55039cf3e28273d599db8750121b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:84:a7:78:df:3e:e4:77:32:25:93:83:47: 81:53:5a:97:fe:92:d3:d9:e8:69:2d:14:7b:c8:6a: 84:91:72:79:b1:9f:18:49:c2:a3:86:2f:ea:97:43: cd:3d:ba:e9:b0:04:b7:7d:1f:e3:8d:31:65:3f:41: 13:de:bc:c9:5a:27:5e:cc:c1:63:a2:e9:c6:a8:87: 5c:0c:83:6d:f7:11:9b:b8:1d:7d:5d:3f:20:42:be: 7c:3d:30:4e:03:12:f7:bb:56:04:29:96:38:53:59: b2:18:11:9e:85:81:6e:64:e6:85:11:af:60:f8:48: 2c:b2:e6:15:7a:e4:42:9b:07:95:f6:94:a9:42:0b: d1:87:2d:0e:a0:33:98:80:b6:96:37:04:c3:3a:e5: 62:d0:5d:9d:cd:74:ad:c0:42:5b:dd:5a:57:fd:4a: e8:2a:da:00:e2:e2:90:97:e8:aa:74:ec:50:44:37: 79:a7:af:fa:27:01:59:fa:61:84:99:b7:b7:a9:9a: a8:e7:08:b3:dd:92:be:e9:77:61:0b:25:97:f7:67: 92:0c:32:e7:e8:1c:20:d0:86:17:a4:a5:18:cb:f6: 40:ae:34:4c:a0:1a:33:42:8b:d4:22:5c:b2:95:36: a3:3b:11:fb:ab:83:ec:b4:e1:59:67:3d:48:fd:b9: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6D:89:B9:8C:55:03:9C:F3:E2:82:73:D5:99:DB:87:50:12:1B:9A X509v3 Authority Key Identifier: keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:21:76:44:15:35:bd:33:cd:6c:c6:0a:58:58:76:cb:db:4f: f6:4d:5b:41:c3:be:e4:d3:a8:ec:30:80:51:2e:b0:ce:99:7b: e7:98:a4:56:12:3a:a9:e3:5d:fa:c7:75:ba:e8:2e:20:38:74: 32:d9:e9:1d:f2:47:52:a3:ec:4d:7e:4c:d7:02:00:70:0d:ac: 6a:57:90:53:58:65:4f:ab:f4:84:ba:d5:e8:80:f8:1c:05:85: b6:c2:61:95:9f:02:0e:3c:62:a6:b1:b0:92:80:be:2f:58:e8: 65:79:17:05:3d:1e:27:2b:71:e9:91:b3:aa:b4:bd:71:1c:ed: 63:5d:6b:55:2a:17:50:ef:99:c9:2a:55:d1:a6:41:55:9b:61: 69:cb:36:c2:e2:fc:e3:e7:be:11:05:46:02:c1:30:d5:b7:a3: 25:8c:29:89:c9:9b:74:57:50:b4:9c:96:a3:ee:1a:7a:fc:32: 87:69:5e:a0:85:40:a6:d4:e9:08:50:78:97:2c:dc:2b:32:18: d7:45:c7:59:5d:62:ed:eb:06:05:0c:97:1a:3c:9e:3c:67:09: f9:e3:01:c2:42:a9:85:5f:e0:d5:23:71:e2:ef:a7:ef:ac:8e: 68:92:8d:dd:49:f1:d7:a5:79:55:18:62:c6:be:ee:2a:44:f1: 8b:b0:8d:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZIoDoZIgvyrMLeZ3dCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzVlNmFlNTk4NzEwMDY2NGIyMzAzNGNlZmM3MmQ0N2Y4 ZjRiOWIwHhcNMjUxMjA2MDEwMTI2WhcNMjUxMjA3MDEwMTI2WjAzMTEwLwYDVQQD EyhkNDZkODliOThjNTUwMzljZjNlMjgyNzNkNTk5ZGI4NzUwMTIxYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwryEp3jfPuR3MiWTg0eBU1qX/pLT 2ehpLRR7yGqEkXJ5sZ8YScKjhi/ql0PNPbrpsAS3fR/jjTFlP0ET3rzJWidezMFj ounGqIdcDINt9xGbuB19XT8gQr58PTBOAxL3u1YEKZY4U1myGBGehYFuZOaFEa9g +EgssuYVeuRCmweV9pSpQgvRhy0OoDOYgLaWNwTDOuVi0F2dzXStwEJb3VpX/Uro KtoA4uKQl+iqdOxQRDd5p6/6JwFZ+mGEmbe3qZqo5wiz3ZK+6XdhCyWX92eSDDLn 6Bwg0IYXpKUYy/ZArjRMoBozQovUIlyylTajOxH7q4PstOFZZz1I/bld0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRtibmMVQOc8+KCc9WZ24dQEhuaMB8GA1UdIwQY MBaAFLDF5q5ZhxAGZLIwNM78ctR/j0ubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUt ZDU5ZTI2NGVlODNiLzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUtZDU5ZTI2NGVlODNi LzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCF2RBU1 vTPNbMYKWFh2y9tP9k1bQcO+5NOo7DCAUS6wzpl755ikVhI6qeNd+sd1uuguIDh0 MtnpHfJHUqPsTX5M1wIAcA2saleQU1hlT6v0hLrV6ID4HAWFtsJhlZ8CDjxiprGw koC+L1joZXkXBT0eJytx6ZGzqrS9cRztY11rVSoXUO+ZySpV0aZBVZthacs2wuL8 4+e+EQVGAsEw1bejJYwpicmbdFdQtJyWo+4aevwyh2leoIVAptTpCFB4lyzcKzIY 10XHWV1i7esGBQyXGjyePGcJ+eMBwkKphV/g1SNx4u+n76yOaJKN3Unx16V5VRhi xr7uKkTxi7CN7w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:16 2025 by rpki-client