This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json) Hash identifier: Q7xBZ7lYcHbkLCNz7J1Y2GH3YJ/Z+kxiqzEVt5l0hps= Subject key identifier: 1D:FA:B0:26:40:10:0F:A6:A0:42:5A:78:81:08:F6:71:D6:D5:EA:50 Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3 Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3 Certificate serial: 019AF0F5D5E1122C22F28D3B43C2D1D684BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft Manifest number: 171C Signing time: Sat 06 Dec 2025 00:00:34 +0000 Manifest this update: Sat 06 Dec 2025 00:00:34 +0000 Manifest next update: Sun 07 Dec 2025 00:00:34 +0000 Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=) 2: H1ot2MdUTN3jveoJS7U1sYASkIY.roa (hash: ysbPlqFJhEFUNGGIg/X6JBUO2rkOODa5SQIBLfuQqpI=) 3: H4lyP83NjE4StXhzWVmNmQgWeD4.roa (hash: C6GXgty+pdVrNR5OI7BiS07ixVEg3xvCstT2O6bzlQY=) 4: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: wmBmEM1XtNcJAejqqFHEz5x4cX+eA/6XvOYeaC5E/RI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d5:e1:12:2c:22:f2:8d:3b:43:c2:d1:d6:84:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3 Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Dec 7 00:00:34 2025 GMT Subject: CN=1dfab02640100fa6a0425a788108f671d6d5ea50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:61:48:5e:07:18:2a:7e:cf:3c:1b:f8:5b:28: 0a:36:78:35:47:34:54:38:e7:40:dc:a7:3e:f8:e3: 24:87:e8:86:71:03:0a:f3:53:e4:aa:fb:8a:60:d2: 69:0f:10:58:19:08:da:0b:3d:52:ca:8b:cf:b0:3b: 35:63:2c:79:48:5f:44:a1:40:82:6f:f9:65:92:68: 38:66:cf:a0:2b:5c:81:2a:a3:3d:56:ff:85:d1:37: e5:d8:de:d9:b3:27:6a:d7:35:56:59:6f:51:e9:14: 55:27:e4:21:67:85:67:a4:bb:0a:a7:70:76:ed:e9: 32:b8:b5:9f:05:a4:30:5e:e1:fd:d5:4b:e4:6d:ce: d2:e4:91:af:e3:be:b9:4d:9f:3a:16:b0:c9:e8:67: b1:d7:02:19:4d:a5:64:82:9c:ff:fc:56:b5:2e:8f: a9:1a:c0:c1:7d:b0:78:b8:b6:d1:f4:85:89:f0:32: da:1d:4b:8e:37:f9:f8:32:57:e1:fa:44:72:0c:3c: 32:62:6b:86:86:64:d9:66:76:e4:f3:75:4b:f0:0a: e3:f2:14:a7:40:55:fa:e8:6f:45:44:8b:68:01:7c: bd:ae:76:0b:c5:38:f0:9f:e4:bb:1e:0c:d0:b9:51: 10:85:45:6f:43:f6:5a:77:1c:f5:6a:8b:10:d1:ef: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:B0:26:40:10:0F:A6:A0:42:5A:78:81:08:F6:71:D6:D5:EA:50 X509v3 Authority Key Identifier: keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e4:cb:96:64:e8:10:36:2c:7b:46:06:ca:9d:0f:b5:2a:6a: 6e:d2:ef:e8:08:23:fb:a3:0b:f4:41:22:01:f0:97:8d:e1:73: 3e:b7:39:1d:5f:d1:c3:91:fa:c3:b9:8f:d0:18:3b:86:77:1c: 00:be:9c:93:ad:21:a5:ee:53:98:6e:e7:fd:4d:73:e2:58:64: 6e:2a:21:56:a4:a3:4d:c8:c1:04:03:ec:7a:1a:aa:b3:03:85: 6a:de:4c:45:e2:7e:48:63:0b:55:86:04:27:1f:4e:7e:a0:8a: bc:c3:d4:ae:c0:0d:50:37:54:f1:21:f0:17:86:31:61:af:54: 53:bb:e7:40:54:b6:29:47:96:93:99:42:cb:85:01:dc:89:78: 28:01:45:d4:ac:ad:87:84:52:55:50:7f:93:4c:29:fd:70:b2: cc:11:fa:93:61:d6:f5:8e:e2:c2:ad:97:d4:27:b9:cc:92:70: 6a:e9:de:ee:4a:8d:3f:0a:fb:09:5b:55:b7:3d:58:54:c5:27: c0:16:f2:70:de:cf:b6:40:4a:73:a3:27:7b:ba:14:ee:f3:d8: 9c:12:e4:f1:15:d4:47:6f:f2:0d:ff:85:b1:b4:47:c3:3d:67: 0c:40:75:4e:e7:92:4f:a0:78:40:ac:d9:1b:2b:62:8f:b4:72: 3a:a7:fe:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dXhEiwi8o07Q8LR1oS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0 NWE3ZTMwHhcNMjUxMjA2MDAwMDM0WhcNMjUxMjA3MDAwMDM0WjAzMTEwLwYDVQQD EygxZGZhYjAyNjQwMTAwZmE2YTA0MjVhNzg4MTA4ZjY3MWQ2ZDVlYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82FIXgcYKn7PPBv4WygKNng1RzRU OOdA3Kc++OMkh+iGcQMK81PkqvuKYNJpDxBYGQjaCz1SyovPsDs1Yyx5SF9EoUCC b/llkmg4Zs+gK1yBKqM9Vv+F0Tfl2N7Zsydq1zVWWW9R6RRVJ+QhZ4VnpLsKp3B2 7ekyuLWfBaQwXuH91Uvkbc7S5JGv4765TZ86FrDJ6Gex1wIZTaVkgpz//Fa1Lo+p GsDBfbB4uLbR9IWJ8DLaHUuON/n4Mlfh+kRyDDwyYmuGhmTZZnbk83VL8Arj8hSn QFX66G9FRItoAXy9rnYLxTjwn+S7HgzQuVEQhUVvQ/Zadxz1aosQ0e8fYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB36sCZAEA+moEJaeIEI9nHW1epQMB8GA1UdIwQY MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeTLlmTo EDYse0YGyp0PtSpqbtLv6Agj+6ML9EEiAfCXjeFzPrc5HV/Rw5H6w7mP0Bg7hncc AL6ck60hpe5TmG7n/U1z4lhkbiohVqSjTcjBBAPsehqqswOFat5MReJ+SGMLVYYE Jx9OfqCKvMPUrsANUDdU8SHwF4YxYa9UU7vnQFS2KUeWk5lCy4UB3Il4KAFF1Kyt h4RSVVB/k0wp/XCyzBH6k2HW9Y7iwq2X1Ce5zJJwaune7kqNPwr7CVtVtz1YVMUn wBbycN7PtkBKc6Mne7oU7vPYnBLk8RXUR2/yDf+FsbRHwz1nDEB1TueST6B4QKzZ Gytij7RyOqf+RA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:54:16 2025 by rpki-client