This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json) Hash identifier: X3c7led7AxU9n44PbsQKv26TsMMIN7Q2veJ7YP1c3AA= Subject key identifier: 21:D5:2B:BD:BC:69:B8:06:4A:73:5C:0F:68:3C:25:ED:6D:93:56:CD Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e Certificate serial: 019AF276D09A204F813C4C6F8C255662A1EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=) 2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: f3XN+wbdR7tnFY88ECB76TEI8jHdr1h3/u4kOBzKTs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d0:9a:20:4f:81:3c:4c:6f:8c:25:56:62:a1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=21d52bbdbc69b8064a735c0f683c25ed6d9356cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:6e:13:36:53:49:29:e5:55:0b:e3:20:55: 19:c9:9f:30:f9:24:91:9e:fe:88:ef:48:4a:9b:bb: 0c:de:11:6d:c6:8b:65:fe:f6:ef:38:d7:e9:0c:42: 70:9d:f9:a8:7c:f3:66:0b:56:6c:74:31:a6:cd:d0: a6:14:5a:fd:32:5d:a9:cb:29:3e:7e:60:a1:40:99: 76:7b:0f:fc:44:b6:88:3d:29:bb:14:ca:71:ab:ba: 1c:07:d3:d0:ea:e4:ba:f0:44:13:3f:0c:f6:57:aa: 0f:bf:a8:b1:65:3b:05:9a:b7:9f:10:65:ca:44:0b: e9:cb:22:11:15:d2:ac:a4:50:7e:1d:73:c0:b3:cd: 65:50:2d:bc:49:3d:22:6c:60:d5:2d:62:29:68:88: f5:f4:d1:42:8c:b0:15:a9:42:df:93:d4:e9:fd:a8: 1c:9d:64:6c:a4:cd:27:8f:d1:8f:5e:96:76:ea:f5: cf:e5:47:e8:39:74:30:8f:2a:95:7d:89:95:86:1a: 42:bb:f0:f4:ff:1d:a4:da:5d:ed:64:22:4d:f4:e1: 3b:3e:74:6d:14:bb:1c:17:21:cb:60:a0:81:e5:ed: f7:cd:1d:b7:0a:ae:bd:7d:78:0e:af:75:c2:0a:7c: 3a:64:c1:d5:75:44:3e:e7:48:b3:fe:8c:6d:b1:9b: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D5:2B:BD:BC:69:B8:06:4A:73:5C:0F:68:3C:25:ED:6D:93:56:CD X509v3 Authority Key Identifier: keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:0f:6e:d3:41:3c:36:72:59:b7:82:f4:45:b0:75:54:a8:40: b0:2c:5a:50:fa:90:98:8f:49:9f:0f:4f:99:00:45:c6:5e:c7: db:d2:8f:23:f7:ac:94:82:0b:cb:ea:15:23:2b:bc:5c:99:1c: 7f:62:b7:dc:c2:a8:ce:20:4b:2f:73:a9:bc:c6:1d:0d:cf:0f: 99:d7:98:e7:72:ec:76:ac:78:c2:ad:da:1e:ee:9f:9f:73:8a: a1:a0:0b:5f:b7:2a:ac:9b:34:45:f6:3b:92:8f:8f:c1:4d:71: 43:b1:7f:bc:06:de:ff:01:1e:04:06:cb:33:b1:be:74:3c:e1: ab:fa:a3:31:15:6f:8e:bf:97:5f:90:a2:cf:f1:ce:f5:70:5e: 9d:93:56:5a:7e:d2:62:77:e8:35:b8:f6:25:98:23:c0:0f:74: a3:51:57:13:e9:f9:48:2a:e5:0c:d3:fe:e9:c5:c6:50:29:31: 7d:0f:6a:58:5c:69:4e:70:ae:20:4b:4f:fb:25:91:84:e8:1f: 3f:13:88:12:19:03:60:35:e6:65:78:27:ed:0b:17:7f:d2:d7: d3:14:c2:cc:1e:33:70:33:d4:64:4e:6f:92:94:71:a1:bd:8d: fa:e3:33:06:21:42:e6:34:46:bd:43:c0:aa:e9:b4:82:4b:05: e5:a0:d7:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtCaIE+BPExvjCVWYqHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm NDgwMWUwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD EygyMWQ1MmJiZGJjNjliODA2NGE3MzVjMGY2ODNjMjVlZDZkOTM1NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqxuEzZTSSnlVQvjIFUZyZ8w+SSR nv6I70hKm7sM3hFtxotl/vbvONfpDEJwnfmofPNmC1ZsdDGmzdCmFFr9Ml2pyyk+ fmChQJl2ew/8RLaIPSm7FMpxq7ocB9PQ6uS68EQTPwz2V6oPv6ixZTsFmrefEGXK RAvpyyIRFdKspFB+HXPAs81lUC28ST0ibGDVLWIpaIj19NFCjLAVqULfk9Tp/agc nWRspM0nj9GPXpZ26vXP5UfoOXQwjyqVfYmVhhpCu/D0/x2k2l3tZCJN9OE7PnRt FLscFyHLYKCB5e33zR23Cq69fXgOr3XCCnw6ZMHVdUQ+50iz/oxtsZttkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHVK728abgGSnNcD2g8Je1tk1bNMB8GA1UdIwQY MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt ZTJiNThmNWU0YWJiLzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQ9u00E8 NnJZt4L0RbB1VKhAsCxaUPqQmI9Jnw9PmQBFxl7H29KPI/eslIILy+oVIyu8XJkc f2K33MKoziBLL3OpvMYdDc8PmdeY53Lsdqx4wq3aHu6fn3OKoaALX7cqrJs0RfY7 ko+PwU1xQ7F/vAbe/wEeBAbLM7G+dDzhq/qjMRVvjr+XX5Ciz/HO9XBenZNWWn7S YnfoNbj2JZgjwA90o1FXE+n5SCrlDNP+6cXGUCkxfQ9qWFxpTnCuIEtP+yWRhOgf PxOIEhkDYDXmZXgn7QsXf9LX0xTCzB4zcDPUZE5vkpRxob2N+uMzBiFC5jRGvUPA qum0gksF5aDXDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:26 2025 by rpki-client