This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json) Hash identifier: 7+BLLSBt//u2n1opEvQ0SlYLuHMWJCtkefJ8CfbNnN0= Subject key identifier: 30:1D:78:69:C5:7A:6D:7D:45:91:81:23:98:A6:9D:01:9A:A9:46:08 Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36 Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536 Certificate serial: 019AF3528B5C29A65D8DACA6F5AC5AA5AE70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft Manifest number: 0757 Signing time: Sat 06 Dec 2025 11:01:04 +0000 Manifest this update: Sat 06 Dec 2025 11:01:04 +0000 Manifest next update: Sun 07 Dec 2025 11:01:04 +0000 Files and hashes: 1: Ypuf3qV0JE2AXfUrk2eNRiGtQN0.roa (hash: AxG4SgT0VS5arc9FHux7pFhrFyFYGK0/0AgX9zPeSBE=) 2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: l9yLJ8SsiZDJL5naUQ+O/sXJ/e2mQQd4gjG5ubz98V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:8b:5c:29:a6:5d:8d:ac:a6:f5:ac:5a:a5:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536 Validity Not Before: Dec 6 11:01:04 2025 GMT Not After : Dec 7 11:01:04 2025 GMT Subject: CN=301d7869c57a6d7d4591812398a69d019aa94608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:5b:f0:37:f7:d0:37:82:9e:ae:18:02:c3: 8b:58:cf:d6:fa:4c:27:b6:81:54:6c:0f:a6:17:f4: 22:f4:d6:d3:7f:0d:e6:18:4d:da:0c:8f:ab:3a:ff: 76:1f:3b:94:0c:44:46:cd:92:0d:e9:c3:b0:66:8a: 56:3e:58:81:99:04:25:e6:10:df:66:0d:57:a9:6c: fd:9e:ad:f2:56:50:be:20:99:47:f2:99:ac:f8:ab: a6:a4:2f:13:6d:f7:4f:ed:90:86:c0:e5:36:ca:d5: c1:d4:96:05:9a:fc:c5:6f:29:e1:5a:2b:f6:59:26: 0e:36:ff:1d:ca:9a:50:1c:91:98:99:c1:cf:16:d2: cd:73:30:e8:fb:37:75:bf:d1:5a:fa:e5:e1:d8:12: 4b:d1:0c:62:f9:af:f2:3f:5c:0c:ce:0f:44:28:f5: a8:4c:27:98:fa:e2:7e:e8:fe:2e:86:58:11:20:c4: 0f:52:36:4b:d1:92:3c:10:1a:c8:fa:88:34:94:36: 25:a3:8d:23:96:37:92:0d:50:4a:bb:9a:1c:93:c0: 39:f6:7a:c8:b0:ac:9f:30:5c:8c:e6:6e:f6:03:e3: 2b:29:ab:5e:ed:9e:03:5a:67:32:18:0c:c4:78:82: 29:6a:ae:f2:65:58:22:9a:3c:66:d7:28:78:24:d6: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1D:78:69:C5:7A:6D:7D:45:91:81:23:98:A6:9D:01:9A:A9:46:08 X509v3 Authority Key Identifier: keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1c:8e:34:7e:f4:29:a3:26:f5:bb:0e:d9:d3:08:e1:50:8a: 13:2a:b1:39:45:e6:d8:29:56:25:96:32:da:95:55:98:4a:85: 8f:99:56:1b:a3:80:f0:42:87:63:e1:b2:b7:db:c7:da:e1:d0: 3d:81:89:c2:0c:e9:a3:1f:d1:72:08:da:72:71:70:a5:03:df: 57:46:c7:3d:4a:47:b2:35:50:d9:4b:c6:26:44:ac:78:84:ec: 4d:2e:d9:0c:b1:8c:31:06:52:0b:a8:7f:56:18:a8:87:ef:d4: a7:f6:4e:e0:02:d7:b4:91:a1:b2:32:8b:f7:24:0a:3f:2b:56: 8b:bb:b6:d6:d1:29:8b:47:21:4c:45:e8:f9:72:8c:30:e8:6d: f7:06:b5:33:63:78:b7:4c:5d:6b:cf:ed:e3:e1:e1:18:3e:7f: 8f:11:53:23:79:65:32:1c:e0:2a:22:54:97:0c:da:24:03:88: a6:b3:f2:39:49:6e:27:33:14:b9:9b:c2:48:87:09:c1:2a:d7: c9:b2:1d:b6:ca:b9:e5:23:b0:b3:54:b0:1d:cd:48:f0:dd:4b: 0f:9c:4b:f1:30:4d:27:da:96:66:5f:42:a1:ce:f7:e3:00:29: cd:5e:6b:62:4e:28:4e:a0:58:e5:2b:41:66:d0:ec:84:69:ad: c6:63:4a:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUotcKaZdjaym9axapa5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYjQxZDJmN2Q3ZDM4NTdlMDc1ZjJhNGYyZjlkM2UwNDRm MmU1MzYwHhcNMjUxMjA2MTEwMTA0WhcNMjUxMjA3MTEwMTA0WjAzMTEwLwYDVQQD EygzMDFkNzg2OWM1N2E2ZDdkNDU5MTgxMjM5OGE2OWQwMTlhYTk0NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWJb8Df30DeCnq4YAsOLWM/W+kwn toFUbA+mF/Qi9NbTfw3mGE3aDI+rOv92HzuUDERGzZIN6cOwZopWPliBmQQl5hDf Zg1XqWz9nq3yVlC+IJlH8pms+KumpC8TbfdP7ZCGwOU2ytXB1JYFmvzFbynhWiv2 WSYONv8dyppQHJGYmcHPFtLNczDo+zd1v9Fa+uXh2BJL0Qxi+a/yP1wMzg9EKPWo TCeY+uJ+6P4uhlgRIMQPUjZL0ZI8EBrI+og0lDYlo40jljeSDVBKu5ock8A59nrI sKyfMFyM5m72A+MrKate7Z4DWmcyGAzEeIIpaq7yZVgimjxm1yh4JNZVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAdeGnFem19RZGBI5imnQGaqUYIMB8GA1UdIwQY MBaAFLK0HS99fThX4HXypPL50+BE8uU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMt YzllMjBjY2Q0NzZmLzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMtYzllMjBjY2Q0NzZm LzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxyONH70 KaMm9bsO2dMI4VCKEyqxOUXm2ClWJZYy2pVVmEqFj5lWG6OA8EKHY+Gyt9vH2uHQ PYGJwgzpox/RcgjacnFwpQPfV0bHPUpHsjVQ2UvGJkSseITsTS7ZDLGMMQZSC6h/ Vhioh+/Up/ZO4ALXtJGhsjKL9yQKPytWi7u21tEpi0chTEXo+XKMMOht9wa1M2N4 t0xda8/t4+HhGD5/jxFTI3llMhzgKiJUlwzaJAOIprPyOUluJzMUuZvCSIcJwSrX ybIdtsq55SOws1SwHc1I8N1LD5xL8TBNJ9qWZl9Coc734wApzV5rYk4oTqBY5StB ZtDshGmtxmNKRA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:14 2025 by rpki-client