This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json) Hash identifier: YrAljP/BSMEes3R6XC85jIadXf6i+8YjcYqZwTSmKdc= Subject key identifier: 6E:AC:36:FD:85:11:D0:BA:76:36:A8:B7:FD:E9:38:7F:C3:16:25:5B Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2 Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2 Certificate serial: 019AF12D157522FED0A7E73EE04AF24DBFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft Manifest number: 0B0B Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: 0YQNQfPH4Cu72DoID5FMdAcNaLI.roa (hash: spBps2jYr/x0LCQGlcWxdN+sgAztOxCYMMvfbn6x0Mw=) 2: 6h5fVqp2myypb-eBCHxV-qnglhk.roa (hash: ZaO1YIuZK1aJ4bq0FVDrgZWOhjGCW0XbzAeErXreqcU=) 3: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: vpglRUlMFT2x8jw+I/6r/6uojHUe5zeJPT3g+N9rMmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:15:75:22:fe:d0:a7:e7:3e:e0:4a:f2:4d:bf:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=6eac36fd8511d0ba7636a8b7fde9387fc316255b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:fc:37:f7:c3:f4:f3:9c:57:c8:18:42:b5: 72:fd:cb:6c:cc:da:59:e4:28:42:1c:76:72:9b:79: 6a:68:67:45:21:1c:eb:45:a8:63:a1:ca:81:6b:24: 52:cc:df:8f:0d:1d:52:4a:07:2f:2c:7f:6d:76:41: 1e:fe:7c:80:a9:c4:5c:6a:49:12:54:ed:7f:aa:5b: 1f:85:37:38:29:63:50:5d:60:8c:79:76:55:ed:13: b4:85:66:95:c4:83:05:93:96:40:fb:ac:5b:26:82: 8a:7e:41:a8:cd:30:c5:49:ef:de:c5:d2:96:35:ce: 7b:c2:59:d2:58:c1:a3:fa:77:42:23:87:9d:f9:e6: 3a:d5:7c:fa:58:9b:c3:c0:92:74:60:ca:c0:1d:99: 35:f3:b5:ac:28:cf:8c:b6:4a:a1:fa:b6:9f:c1:00: 1f:5f:3e:7c:eb:f6:b9:05:2c:3b:0d:d8:70:c5:79: 10:a5:c6:09:61:69:61:f9:e9:98:ec:24:91:28:cd: a6:bb:c1:22:10:c4:df:3c:b8:82:30:b4:8b:e2:66: e6:64:f9:d0:cc:e4:ee:01:b3:b3:a7:b0:fc:c9:21: 87:6a:1e:e0:22:0b:7c:1a:ea:e7:6c:0e:41:3a:e8: ed:af:6e:c2:98:02:0c:72:31:41:3a:3e:8e:ff:3c: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AC:36:FD:85:11:D0:BA:76:36:A8:B7:FD:E9:38:7F:C3:16:25:5B X509v3 Authority Key Identifier: keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:05:1d:b4:c2:75:7b:c9:83:b5:5c:d3:38:07:13:d2:81:e7: 0d:32:01:8a:b9:6a:fc:88:52:b2:73:7b:af:d4:68:0d:e8:b0: c3:05:0c:f6:62:54:83:f0:ee:de:3a:55:ce:37:ae:40:d1:f4: 7b:ce:48:27:81:80:e2:0e:c8:be:1a:3f:f0:a7:d0:79:6e:5b: ca:95:d8:2e:b3:43:29:74:4c:f9:fc:26:6e:f7:13:62:2f:8e: 29:d0:93:c2:58:c3:b5:d1:c8:1c:34:46:9b:bb:0c:a5:ec:67: b7:e0:f2:f2:73:e9:12:83:9e:cd:90:9d:51:83:18:f8:13:be: bd:f7:3a:6b:53:a3:2d:0e:b2:4c:6d:9f:32:55:ab:46:24:8d: 3b:04:28:12:41:03:a1:ca:bd:7e:75:b9:8b:ce:f5:b4:c6:a3: e8:41:e6:93:55:70:11:e0:52:d2:17:36:de:e2:e3:8a:14:1e: 42:dc:a0:f3:ac:ec:2e:8d:8c:79:2f:d5:30:ba:bf:70:f7:1a: b5:a9:fd:7e:c6:a9:9c:9d:a6:64:00:4a:5e:87:57:d2:5b:6d: be:42:cf:3a:38:72:4e:b5:0b:8f:41:f7:91:83:1c:e3:22:2a: e8:f1:08:5b:c3:47:96:31:28:84:19:1b:56:40:53:2e:91:c0: 33:4a:ab:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRV1Iv7Qp+c+4EryTb+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjQxZjEyOWRiZmM0YTE2NTFmZWNkYmEwMzEwOGZjZDJj YzFkZjIwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg2ZWFjMzZmZDg1MTFkMGJhNzYzNmE4YjdmZGU5Mzg3ZmMzMTYyNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly78N/fD9POcV8gYQrVy/ctszNpZ 5ChCHHZym3lqaGdFIRzrRahjocqBayRSzN+PDR1SSgcvLH9tdkEe/nyAqcRcakkS VO1/qlsfhTc4KWNQXWCMeXZV7RO0hWaVxIMFk5ZA+6xbJoKKfkGozTDFSe/exdKW Nc57wlnSWMGj+ndCI4ed+eY61Xz6WJvDwJJ0YMrAHZk187WsKM+Mtkqh+rafwQAf Xz586/a5BSw7DdhwxXkQpcYJYWlh+emY7CSRKM2mu8EiEMTfPLiCMLSL4mbmZPnQ zOTuAbOzp7D8ySGHah7gIgt8GurnbA5BOujtr27CmAIMcjFBOj6O/zz6SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6sNv2FEdC6djaot/3pOH/DFiVbMB8GA1UdIwQY MBaAFLEkHxKdv8ShZR/s26AxCPzSzB3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iMWE3NWQtYjc5MS00MGI0LWJkYTct ZTlkZGJlM2VmYmUzLzEvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iMWE3NWQtYjc5MS00MGI0LWJkYTctZTlkZGJlM2VmYmUz LzEvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAUdtMJ1 e8mDtVzTOAcT0oHnDTIBirlq/IhSsnN7r9RoDeiwwwUM9mJUg/Du3jpVzjeuQNH0 e85IJ4GA4g7Ivho/8KfQeW5bypXYLrNDKXRM+fwmbvcTYi+OKdCTwljDtdHIHDRG m7sMpexnt+Dy8nPpEoOezZCdUYMY+BO+vfc6a1OjLQ6yTG2fMlWrRiSNOwQoEkED ocq9fnW5i871tMaj6EHmk1VwEeBS0hc23uLjihQeQtyg86zsLo2MeS/VMLq/cPca tan9fsapnJ2mZABKXodX0lttvkLPOjhyTrULj0H3kYMc4yIq6PEIW8NHljEohBkb VkBTLpHAM0qr6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:52 2025 by rpki-client