This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json) Hash identifier: H3Q3OwiapGKKXRFXwaEUrY1zoL7LRzMFJVi2fSYgjl4= Subject key identifier: 03:B4:0B:7A:F1:09:FA:7D:8D:16:4A:26:0D:6D:4A:C3:0D:47:F9:E7 Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a Certificate serial: 019AF16442BCD49EFD8B45FA65B18235A070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft Manifest number: 079D Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=) 2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: ra1U9tTbkSV0f0iTESBVxY+NImMZFETX7fIm/Py297k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:42:bc:d4:9e:fd:8b:45:fa:65:b1:82:35:a0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4978a8641ce785be34685030527723e5fdce562a Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=03b40b7af109fa7d8d164a260d6d4ac30d47f9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9c:55:16:62:e7:43:c9:33:0d:e5:ca:9e:dc: 9c:28:60:a4:4f:aa:2d:6e:4c:ee:51:89:86:01:5e: ef:81:74:79:79:a0:de:e4:69:32:7e:e3:98:97:8a: e1:a6:e8:c0:f5:fc:c8:0f:01:e8:a4:78:fc:55:37: 71:6e:2e:10:c2:09:11:d9:3e:a6:28:4a:e1:ac:e1: 64:79:aa:0c:1e:a2:cf:73:f9:41:18:94:b1:e9:8e: 07:15:7f:3b:ce:ee:08:7d:52:7e:2c:35:6f:89:60: 28:7d:e0:8d:5f:6e:6f:06:b5:8c:b5:62:e6:10:3b: 7a:f6:1e:2c:ff:6a:ad:2f:24:7d:82:2a:29:d7:dc: a0:a9:f1:f0:1f:5f:6d:2b:39:02:3a:53:09:3b:1b: 74:96:f2:55:55:c7:2b:70:6a:90:d5:a5:86:ad:59: e1:f7:66:90:7c:17:0f:33:46:46:87:0f:4e:b2:e4: 27:fc:80:8c:ac:57:e9:e2:ff:4a:4a:de:64:6d:fe: 22:3e:07:5f:dc:38:e4:d6:4b:8c:10:eb:f6:ac:01: 45:d1:df:c7:6d:5f:09:f4:dd:24:89:67:57:a3:ac: 7e:b9:05:a9:ce:3a:4f:cc:42:e0:9d:eb:36:c2:98: 46:5b:e1:e4:f1:cc:4e:2c:a7:12:5c:8f:ee:97:31: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B4:0B:7A:F1:09:FA:7D:8D:16:4A:26:0D:6D:4A:C3:0D:47:F9:E7 X509v3 Authority Key Identifier: keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b0:bc:92:cc:92:cb:63:b3:5e:ba:f3:c4:3b:bb:b5:5b:07: 6b:23:58:95:64:59:f5:03:57:9d:76:ff:a2:77:d5:f8:1d:4d: 50:c2:d8:18:ab:98:0f:44:e6:e7:6b:7e:33:92:d5:75:5e:1e: e9:cc:b0:2e:35:06:9e:37:3f:ed:b1:7e:3e:94:46:68:0f:4f: c7:cc:84:d5:b9:8a:ee:a7:1a:42:30:cc:e9:3e:89:f8:ff:e6: 79:f9:a6:ee:40:81:39:6a:5b:93:e7:cf:8e:da:89:a1:b4:48: 6d:f3:da:be:02:83:df:01:53:6b:16:d8:f4:74:73:f9:8b:50: f8:9b:47:11:e0:83:b6:8e:df:80:19:5c:aa:7a:ad:36:d3:4d: 52:22:a0:37:c0:d8:4b:51:ec:81:f8:0b:10:a7:1b:f9:aa:ee: 20:a0:3d:b6:9b:ec:d7:e3:a7:c8:a5:29:dc:f5:53:41:32:08: 5a:8a:2c:16:80:09:2b:27:c1:5a:b9:89:6b:cc:74:39:e0:7a: cb:3a:df:22:32:56:75:c3:cd:fd:fe:59:4c:db:08:b3:73:ba: 16:41:52:99:6b:50:6b:cc:2f:90:1f:8f:0f:47:d3:99:e3:8f: 7b:f1:ca:cf:61:c4:9b:2f:08:85:ea:de:d3:19:5a:e8:31:c7: 5e:4a:83:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEK81J79i0X6ZbGCNaBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NzhhODY0MWNlNzg1YmUzNDY4NTAzMDUyNzcyM2U1ZmRj ZTU2MmEwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EygwM2I0MGI3YWYxMDlmYTdkOGQxNjRhMjYwZDZkNGFjMzBkNDdmOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZxVFmLnQ8kzDeXKntycKGCkT6ot bkzuUYmGAV7vgXR5eaDe5GkyfuOYl4rhpujA9fzIDwHopHj8VTdxbi4QwgkR2T6m KErhrOFkeaoMHqLPc/lBGJSx6Y4HFX87zu4IfVJ+LDVviWAofeCNX25vBrWMtWLm EDt69h4s/2qtLyR9giop19ygqfHwH19tKzkCOlMJOxt0lvJVVccrcGqQ1aWGrVnh 92aQfBcPM0ZGhw9OsuQn/ICMrFfp4v9KSt5kbf4iPgdf3Djk1kuMEOv2rAFF0d/H bV8J9N0kiWdXo6x+uQWpzjpPzELgnes2wphGW+Hk8cxOLKcSXI/ulzFkewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO0C3rxCfp9jRZKJg1tSsMNR/nnMB8GA1UdIwQY MBaAFEl4qGQc54W+NGhQMFJ3I+X9zlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wOTNmY2ItZmU3Ny00NDliLWExYWYt MjFiYzQ4ZWYxNjYwLzEvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wOTNmY2ItZmU3Ny00NDliLWExYWYtMjFiYzQ4ZWYxNjYw LzEvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7C8ksyS y2OzXrrzxDu7tVsHayNYlWRZ9QNXnXb/onfV+B1NUMLYGKuYD0Tm52t+M5LVdV4e 6cywLjUGnjc/7bF+PpRGaA9Px8yE1bmK7qcaQjDM6T6J+P/mefmm7kCBOWpbk+fP jtqJobRIbfPavgKD3wFTaxbY9HRz+YtQ+JtHEeCDto7fgBlcqnqtNtNNUiKgN8DY S1HsgfgLEKcb+aruIKA9tpvs1+OnyKUp3PVTQTIIWoosFoAJKyfBWrmJa8x0OeB6 yzrfIjJWdcPN/f5ZTNsIs3O6FkFSmWtQa8wvkB+PD0fTmeOPe/HKz2HEmy8Ihere 0xla6DHHXkqDmA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:41 2025 by rpki-client