This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json) Hash identifier: 6mKURQchbcVRh28NzuUq0ByAcoc8McOzpo/ieRzv6R0= Subject key identifier: DD:43:1F:3C:87:D7:E5:4C:B3:0F:FC:50:DB:76:71:16:19:7D:2F:C2 Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd Certificate serial: 019B19BB37146C295A8148E36EFA00919863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft Manifest number: 0C47 Signing time: Sat 13 Dec 2025 22:00:58 +0000 Manifest this update: Sat 13 Dec 2025 22:00:58 +0000 Manifest next update: Sun 14 Dec 2025 22:00:58 +0000 Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=) 2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: QJMnsrANnJbVAYhAqMJfn4hq3wUAfLIV00aaf9VBNiM=) 3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:37:14:6c:29:5a:81:48:e3:6e:fa:00:91:98:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd Validity Not Before: Dec 13 22:00:58 2025 GMT Not After : Dec 14 22:00:58 2025 GMT Subject: CN=dd431f3c87d7e54cb30ffc50db767116197d2fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:c4:f7:f1:2a:d8:fe:f0:2e:64:83:fa:17: 8b:15:28:75:c6:7d:fe:17:ca:f7:5e:43:8e:f7:e3: 75:64:65:5b:3f:c5:1e:ad:eb:86:91:ae:bb:7d:36: ae:63:96:3b:85:f8:9d:14:58:dc:3f:a7:38:13:93: e4:f5:23:85:3a:42:34:49:f9:5e:55:cc:6a:d1:8a: 63:b9:8b:aa:e0:60:f7:a3:76:60:50:e4:32:3e:b3: 9d:63:6b:ca:ef:da:ca:a2:25:b1:72:d9:4b:9b:bd: f5:3a:3e:22:93:3a:a1:b8:ad:91:19:b3:3d:4e:61: c6:f5:35:ea:fe:08:d9:a8:47:21:52:e7:55:70:fb: 08:9c:35:ef:22:e2:50:bf:43:86:72:c8:c1:3f:58: 24:7b:00:d6:5c:2e:1d:85:42:e2:3c:3d:41:ee:6a: 68:a9:6d:5e:75:e2:26:d5:fa:52:55:cc:5a:51:b1: 96:c5:25:08:c4:31:2e:74:5d:70:06:47:ed:ac:ea: 55:56:66:c4:4d:72:f3:6b:06:76:7e:37:1e:5b:e1: 4c:cd:fc:3f:7a:8e:9f:fd:50:a3:5a:7b:f7:4c:24: 06:c1:0e:89:e5:00:f4:ce:d9:5f:d0:74:24:17:49: 22:ab:2a:e8:98:be:d1:a6:74:0b:b7:0c:1a:87:16: 3a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:43:1F:3C:87:D7:E5:4C:B3:0F:FC:50:DB:76:71:16:19:7D:2F:C2 X509v3 Authority Key Identifier: keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e8:d9:fd:55:61:e0:a0:9b:a6:2a:3e:d0:cb:31:c0:3d:96: 94:18:64:80:8d:a7:0f:17:d8:63:f6:3e:46:50:af:11:a0:2f: f4:44:23:80:19:32:13:47:12:ff:cf:cc:f0:64:09:b0:21:79: e7:39:3c:1f:05:2e:ba:f3:e8:0f:79:96:09:c4:09:fa:67:a3: cd:34:dc:00:84:b3:91:67:79:f0:07:fe:d5:88:7d:40:63:e9: bb:5b:36:37:63:9b:67:5e:31:30:e6:69:7b:78:f5:8b:74:d0: 70:9a:dd:50:29:79:1c:cb:3f:ba:7c:a3:1b:a8:79:41:5e:23: 7a:76:af:d1:7e:2c:78:68:80:c8:32:6c:cc:71:14:d6:2e:69: 4b:47:1b:0f:57:d6:e6:2c:a5:1c:59:16:c5:d3:1f:94:58:ff: 52:2e:67:4b:c0:4c:2e:9c:4e:81:ef:14:3c:95:a5:aa:f9:ca: 4b:3c:3b:97:0b:33:44:b4:43:c7:30:b2:b1:63:e3:4a:30:85: 09:44:9d:3c:63:bc:66:92:32:b0:03:f8:18:0a:31:5b:c2:a4: 90:8d:d8:c2:7f:60:f6:ee:37:1c:39:a7:ee:46:7f:80:50:5f: f9:b6:89:7e:a2:d2:ff:14:4b:8e:4d:8d:2a:7f:6f:fc:46:66: 24:2a:d4:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuzcUbClagUjjbvoAkZhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OWVmMTljMjczZGVkZWQxOWNlZjZiMzY4MzliM2NlYjAx ZWRlZmQwHhcNMjUxMjEzMjIwMDU4WhcNMjUxMjE0MjIwMDU4WjAzMTEwLwYDVQQD EyhkZDQzMWYzYzg3ZDdlNTRjYjMwZmZjNTBkYjc2NzExNjE5N2QyZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm/E9/Eq2P7wLmSD+heLFSh1xn3+ F8r3XkOO9+N1ZGVbP8UereuGka67fTauY5Y7hfidFFjcP6c4E5Pk9SOFOkI0Sfle Vcxq0YpjuYuq4GD3o3ZgUOQyPrOdY2vK79rKoiWxctlLm731Oj4ikzqhuK2RGbM9 TmHG9TXq/gjZqEchUudVcPsInDXvIuJQv0OGcsjBP1gkewDWXC4dhULiPD1B7mpo qW1edeIm1fpSVcxaUbGWxSUIxDEudF1wBkftrOpVVmbETXLzawZ2fjceW+FMzfw/ eo6f/VCjWnv3TCQGwQ6J5QD0ztlf0HQkF0kiqyromL7RpnQLtwwahxY6MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1DHzyH1+VMsw/8UNt2cRYZfS/CMB8GA1UdIwQY MBaAFOee8ZwnPe3tGc72s2g5s86wHt79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUt ZDliNzJlZDdjYjRkLzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUtZDliNzJlZDdjYjRk LzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALujZ/VVh 4KCbpio+0MsxwD2WlBhkgI2nDxfYY/Y+RlCvEaAv9EQjgBkyE0cS/8/M8GQJsCF5 5zk8HwUuuvPoD3mWCcQJ+mejzTTcAISzkWd58Af+1Yh9QGPpu1s2N2ObZ14xMOZp e3j1i3TQcJrdUCl5HMs/unyjG6h5QV4jenav0X4seGiAyDJszHEU1i5pS0cbD1fW 5iylHFkWxdMflFj/Ui5nS8BMLpxOge8UPJWlqvnKSzw7lwszRLRDxzCysWPjSjCF CUSdPGO8ZpIysAP4GAoxW8KkkI3Ywn9g9u43HDmn7kZ/gFBf+baJfqLS/xRLjk2N Kn9v/EZmJCrUeQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:20 2025 by rpki-client