This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json) Hash identifier: 6q65KdcUBGyX52EUFfnAl1BXTnv7itHpK+gSDl3vvc4= Subject key identifier: FC:C6:D3:9F:86:8E:99:6D:7E:00:3E:56:03:82:78:9C:1B:78:30:B7 Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70 Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70 Certificate serial: 019AF68A06B623DAA98A5E060B4991992785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft Manifest number: 1768 Signing time: Sun 07 Dec 2025 02:00:31 +0000 Manifest this update: Sun 07 Dec 2025 02:00:31 +0000 Manifest next update: Mon 08 Dec 2025 02:00:31 +0000 Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=) 2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: +sOsFR7taxzgxi9TZ7LwRyFUFW5y4xIfjTeHavTRxFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:06:b6:23:da:a9:8a:5e:06:0b:49:91:99:27:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70 Validity Not Before: Dec 7 02:00:31 2025 GMT Not After : Dec 8 02:00:31 2025 GMT Subject: CN=fcc6d39f868e996d7e003e560382789c1b7830b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:ad:59:ba:dd:f2:37:cd:8c:db:94:02:35: dd:78:48:be:85:b8:14:3c:91:5d:f3:31:df:4a:f6: 8a:84:d5:a6:16:b1:e9:5d:62:12:08:67:a6:28:6a: ea:df:30:42:32:33:93:57:0f:8c:60:bd:8f:52:ae: d3:41:20:5a:9f:ac:76:82:ec:bb:1e:cf:68:b3:0b: 73:6b:f0:4d:3b:10:59:d8:4c:4e:f7:96:a5:44:3e: 0e:8f:6e:80:0a:df:8f:84:e0:31:8d:62:a1:d9:e5: fe:45:df:80:3b:ab:5a:44:fc:c5:75:49:6d:ff:00: 2a:fa:e3:a9:06:18:dd:77:ad:72:4a:d1:3a:d6:2c: 00:99:eb:0c:f3:c3:95:0f:9f:5a:07:ff:db:db:40: 88:2c:d5:2f:d3:f4:8d:9c:81:ac:ef:5e:57:ea:3a: cb:02:e3:e4:e2:16:30:a1:30:27:95:13:7b:bf:38: 94:03:48:05:e7:b9:e1:26:ca:d5:c8:85:c2:9f:1d: a2:4d:f8:77:b6:98:c7:12:cd:4b:d7:9c:ea:3c:e7: 4f:4e:9a:af:ca:3c:c9:6a:15:2b:1c:77:22:52:83: f7:65:88:df:25:5e:71:86:87:54:b2:6c:39:fd:89: ac:3f:9d:dc:b7:7c:8c:1d:a7:02:d6:19:53:b5:3d: 92:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C6:D3:9F:86:8E:99:6D:7E:00:3E:56:03:82:78:9C:1B:78:30:B7 X509v3 Authority Key Identifier: keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cf:d9:f7:6d:f9:d9:bd:b1:72:d3:fc:79:e7:18:13:13:f2: a3:b5:3a:19:b3:73:59:d0:cc:fd:08:79:e1:ed:39:39:f0:75: 48:94:13:bf:0f:38:32:62:08:ff:a0:c9:4b:29:80:6d:98:2e: 88:93:56:cd:a6:5d:8b:41:19:fd:56:9a:da:7a:ae:03:07:13: 5c:ff:fe:58:d0:23:e6:2c:e7:d4:90:9c:50:4a:c9:a4:a7:70: 28:d4:33:b5:5e:e7:e2:27:58:89:b4:5c:ed:c9:70:fb:6e:e5: 78:a7:49:c7:5c:15:65:e2:c4:ae:40:87:00:ca:17:2e:c5:44: 0b:60:d8:b7:eb:f0:85:9b:25:43:ab:8b:93:b3:e2:da:37:d7: 27:e2:84:1f:87:45:2e:80:08:0b:47:2c:88:cb:c1:7a:e2:87: 45:81:54:58:3d:75:c8:09:63:97:36:43:c3:6b:2b:3d:db:50: a7:57:b9:3c:e3:ef:03:d9:dc:bb:f7:42:f1:18:69:25:2a:e9: a1:89:37:d0:87:d9:f8:0c:c0:3d:f2:ea:c9:f4:51:73:31:5a: d1:94:48:2b:ba:b9:90:e1:74:a7:aa:80:17:c5:3b:9d:96:ea: 2c:6e:a0:34:e3:e3:92:f0:07:bd:b9:c0:25:d2:7a:96:73:df: b2:b4:e0:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iga2I9qpil4GC0mRmSeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj YjdhNzAwHhcNMjUxMjA3MDIwMDMxWhcNMjUxMjA4MDIwMDMxWjAzMTEwLwYDVQQD EyhmY2M2ZDM5Zjg2OGU5OTZkN2UwMDNlNTYwMzgyNzg5YzFiNzgzMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEqtWbrd8jfNjNuUAjXdeEi+hbgU PJFd8zHfSvaKhNWmFrHpXWISCGemKGrq3zBCMjOTVw+MYL2PUq7TQSBan6x2guy7 Hs9oswtza/BNOxBZ2ExO95alRD4Oj26ACt+PhOAxjWKh2eX+Rd+AO6taRPzFdUlt /wAq+uOpBhjdd61yStE61iwAmesM88OVD59aB//b20CILNUv0/SNnIGs715X6jrL AuPk4hYwoTAnlRN7vziUA0gF57nhJsrVyIXCnx2iTfh3tpjHEs1L15zqPOdPTpqv yjzJahUrHHciUoP3ZYjfJV5xhodUsmw5/YmsP53ct3yMHacC1hlTtT2SswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzG05+GjpltfgA+VgOCeJwbeDC3MB8GA1UdIwQY MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt YmUwNjVlMWFjMDY3LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3 LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM/Z9235 2b2xctP8eecYExPyo7U6GbNzWdDM/Qh54e05OfB1SJQTvw84MmII/6DJSymAbZgu iJNWzaZdi0EZ/Vaa2nquAwcTXP/+WNAj5izn1JCcUErJpKdwKNQztV7n4idYibRc 7clw+27leKdJx1wVZeLErkCHAMoXLsVEC2DYt+vwhZslQ6uLk7Pi2jfXJ+KEH4dF LoAIC0csiMvBeuKHRYFUWD11yAljlzZDw2srPdtQp1e5POPvA9ncu/dC8RhpJSrp oYk30IfZ+AzAPfLqyfRRczFa0ZRIK7q5kOF0p6qAF8U7nZbqLG6gNOPjkvAHvbnA JdJ6lnPfsrTgCA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:31 2025 by rpki-client