This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json) Hash identifier: dS5OvD+dKok0Tql1/OzFY33gawqPRidqK/w1bNom658= Subject key identifier: 96:2B:43:F0:B8:10:F1:F6:33:B8:10:75:CB:9D:95:0B:3A:BC:02:65 Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Certificate serial: 019B1193939CFA862187E8DA77029C57CB5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft Manifest number: 10E0 Signing time: Fri 12 Dec 2025 08:00:42 +0000 Manifest this update: Fri 12 Dec 2025 08:00:42 +0000 Manifest next update: Sat 13 Dec 2025 08:00:42 +0000 Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=) 2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=) 3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=) 4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: Mk1TaXfEzmppNY1c00086bDq2bAdi/POveY7t/3vwqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:93:9c:fa:86:21:87:e8:da:77:02:9c:57:cb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Validity Not Before: Dec 12 08:00:42 2025 GMT Not After : Dec 13 08:00:42 2025 GMT Subject: CN=962b43f0b810f1f633b81075cb9d950b3abc0265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9f:60:4d:57:ed:9f:69:66:89:af:9a:82:55: bc:64:b1:d1:ed:a3:1e:48:ab:3a:13:9d:5e:a6:0d: 95:5a:be:0e:21:d8:2c:c3:7e:ab:84:62:d2:f5:e8: 18:9d:35:49:61:88:f9:da:f3:c6:01:e8:82:ca:78: 31:d4:72:40:d4:e4:0e:db:20:c0:8e:f4:10:9a:5d: 56:41:fc:d8:6f:f1:b8:aa:ba:9d:bd:fb:1d:f8:59: 52:c0:78:d6:62:21:d0:d6:c6:02:82:d3:13:f5:4c: 04:77:fe:fc:02:aa:f4:ea:1c:fb:15:4e:17:93:f0: ef:c0:3d:f4:7c:86:ed:96:e7:6a:ed:4b:47:f5:4f: b4:e1:b9:f7:c2:ac:e7:50:17:b1:c0:7f:2f:5e:4e: 5c:04:b8:3b:e7:41:1c:6b:e0:4b:82:51:89:23:b0: 32:73:f0:c0:0c:fd:b6:b9:d9:5c:49:53:66:4e:f2: 38:8e:5e:cb:61:88:c0:0a:22:24:77:5f:78:ad:e2: 9b:a3:84:9c:01:5e:47:27:69:b5:b9:07:93:22:4e: c6:04:9c:57:a7:b7:d4:4e:77:28:1e:09:86:8d:4a: 1d:58:8c:89:17:80:8e:df:67:6b:75:91:84:7e:5e: 36:5e:8d:73:0e:a4:c4:82:a1:a1:20:46:46:33:82: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2B:43:F0:B8:10:F1:F6:33:B8:10:75:CB:9D:95:0B:3A:BC:02:65 X509v3 Authority Key Identifier: keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:50:82:de:37:96:d2:4e:7f:fa:d5:c2:d8:6b:61:60:2d:11: bc:53:66:9c:26:3e:b9:82:f9:1a:39:6c:48:4d:ac:b9:d2:18: 52:90:24:ca:37:6c:d0:06:7e:e8:be:13:60:b9:d9:81:e5:be: 3f:67:58:82:f2:70:3a:1d:fd:37:39:e9:a7:c8:db:64:89:5b: cc:96:42:14:41:a3:5e:c4:ac:54:3a:0c:76:b1:3c:d3:22:1f: 97:53:89:2c:d8:a1:b4:e8:eb:43:dc:f7:1c:33:2a:01:bd:67: fa:cf:0c:ad:88:b7:08:12:7a:f7:ca:92:00:36:2f:a5:48:02: a9:1e:d7:aa:e6:df:c5:8d:ea:1c:a8:7c:74:25:89:1b:db:d4: c3:ca:89:f8:79:15:88:54:99:a4:19:ba:e8:20:22:bc:9a:cb: 60:3c:81:33:36:10:4e:6e:49:eb:0c:bc:41:99:b7:81:3c:89: 13:bd:b6:0f:8e:3f:cd:8e:65:b1:19:87:50:40:a2:71:3f:3e: 7c:9b:09:5c:1f:9a:36:45:77:1e:7a:4a:4f:de:4b:de:ab:d0: 10:6e:2d:ef:89:ae:df:b4:b9:fb:66:59:87:91:65:12:51:da: f3:0d:ec:1e:c5:c7:0b:c9:3a:91:cf:3e:bc:89:67:5c:dc:74: 2b:40:d2:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk5Oc+oYhh+jadwKcV8tdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj NGY2NDUwHhcNMjUxMjEyMDgwMDQyWhcNMjUxMjEzMDgwMDQyWjAzMTEwLwYDVQQD Eyg5NjJiNDNmMGI4MTBmMWY2MzNiODEwNzVjYjlkOTUwYjNhYmMwMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J9gTVftn2lmia+aglW8ZLHR7aMe SKs6E51epg2VWr4OIdgsw36rhGLS9egYnTVJYYj52vPGAeiCyngx1HJA1OQO2yDA jvQQml1WQfzYb/G4qrqdvfsd+FlSwHjWYiHQ1sYCgtMT9UwEd/78Aqr06hz7FU4X k/DvwD30fIbtludq7UtH9U+04bn3wqznUBexwH8vXk5cBLg750Eca+BLglGJI7Ay c/DADP22udlcSVNmTvI4jl7LYYjACiIkd194reKbo4ScAV5HJ2m1uQeTIk7GBJxX p7fUTncoHgmGjUodWIyJF4CO32drdZGEfl42Xo1zDqTEgqGhIEZGM4LvowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYrQ/C4EPH2M7gQdcudlQs6vAJlMB8GA1UdIwQY MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3 LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1CC3jeW 0k5/+tXC2GthYC0RvFNmnCY+uYL5GjlsSE2sudIYUpAkyjds0AZ+6L4TYLnZgeW+ P2dYgvJwOh39Nznpp8jbZIlbzJZCFEGjXsSsVDoMdrE80yIfl1OJLNihtOjrQ9z3 HDMqAb1n+s8MrYi3CBJ698qSADYvpUgCqR7XqubfxY3qHKh8dCWJG9vUw8qJ+HkV iFSZpBm66CAivJrLYDyBMzYQTm5J6wy8QZm3gTyJE722D44/zY5lsRmHUECicT8+ fJsJXB+aNkV3HnpKT95L3qvQEG4t74mu37S5+2ZZh5FlElHa8w3sHsXHC8k6kc8+ vIlnXNx0K0DSyA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:01:22 2025 by rpki-client