This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json) Hash identifier: koP/wvZU71HItDALhyBjeluxRXzv1jfx1qOB//acRyM= Subject key identifier: DE:9E:CF:FC:D2:83:D5:2A:5B:71:EB:BA:66:D8:3D:9A:ED:E8:41:34 Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248 Certificate serial: 019AF9549A9ECFB64EE07BFA74B5AB2863EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft Manifest number: 08 Signing time: Sun 07 Dec 2025 15:01:02 +0000 Manifest this update: Sun 07 Dec 2025 15:01:02 +0000 Manifest next update: Mon 08 Dec 2025 15:01:02 +0000 Files and hashes: 1: 2Rd6Xj6wiV3raIwL5cSqXIH30zs.roa (hash: mcr43yG8w/sxouuaXQhH08XNyvdGHXOCp9ED1nTWn+k=) 2: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: OLGbqzeaJUayul6itkqW71QaE0xEyCAVxWCdbJN/VCU=) 3: rMUucMZwyHqVe68VNeoN6D-FuLA.asa (hash: nVyVPJj6zrsI6p0L4gt0DztUXIz3kVI0kWZGXavJ6p4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:54:9a:9e:cf:b6:4e:e0:7b:fa:74:b5:ab:28:63:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248 Validity Not Before: Dec 7 15:01:02 2025 GMT Not After : Dec 8 15:01:02 2025 GMT Subject: CN=de9ecffcd283d52a5b71ebba66d83d9aede84134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d3:3e:b6:7b:ed:66:b3:a7:f2:39:af:62:66: 67:9c:64:aa:1a:ae:f8:99:19:1a:62:42:c1:e0:2a: 28:8d:c1:44:cf:92:6f:5d:8d:b5:b9:82:26:c1:16: fa:30:c3:64:f1:17:91:b1:11:38:a8:96:3c:19:d1: 28:87:fb:6f:bd:40:da:45:a5:2f:9b:61:3f:7e:c6: e7:e5:f0:90:cd:de:60:00:df:dd:ae:69:26:30:e2: 6d:7e:98:74:b3:86:75:1e:61:75:71:75:e0:82:25: c2:a7:1d:f1:c1:cc:57:5a:7e:df:88:0e:ee:96:5e: bc:24:1a:9a:59:24:19:3c:0e:6c:e5:06:40:8e:ad: 06:96:4e:c4:61:5d:56:16:74:e6:63:b8:0e:6a:c2: f2:34:16:b7:ad:2b:70:36:3a:52:30:f2:68:41:49: ee:71:50:a7:2d:a4:54:98:a8:62:71:f6:9b:d0:06: 52:5f:52:1e:56:93:5f:52:5c:ce:f3:3a:66:b9:b3: 5a:3d:4a:df:6f:18:f2:bb:df:d1:49:77:af:56:a3: 96:2d:97:ee:df:2a:36:44:05:93:9a:49:8f:ca:db: ce:91:1b:5c:0e:1e:69:50:2b:7b:05:fc:1e:52:86: 46:e6:eb:df:a3:7b:c9:0b:c8:53:5e:ec:6c:ae:cf: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9E:CF:FC:D2:83:D5:2A:5B:71:EB:BA:66:D8:3D:9A:ED:E8:41:34 X509v3 Authority Key Identifier: keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6a:b0:a0:b1:b2:99:0e:5c:2a:a2:d3:9c:c3:bf:69:35:31: 05:b1:df:e4:15:d3:bd:b6:a3:e0:15:67:94:d1:dd:e0:d4:59: d5:61:c4:12:ef:7a:1d:61:02:07:f9:9e:e0:5f:18:2a:21:5c: cb:3f:f9:5b:b5:05:82:89:31:8a:75:b3:d2:da:b8:fb:09:df: 2d:1d:c0:5c:fb:2c:4d:61:36:b3:46:59:20:5c:fc:32:af:33: 0f:58:6b:0e:54:a1:14:17:37:5e:d4:f0:63:f8:c5:ce:12:c1: cf:5e:61:b0:21:3d:22:9e:9c:b3:43:3c:2a:eb:db:58:86:e6: 0a:23:2b:3d:34:17:a8:18:ff:1b:65:a7:7b:9e:8a:c4:79:cd: 69:70:bc:01:43:fe:50:41:15:0f:14:b4:da:1c:67:08:56:bf: 46:4a:d4:df:4f:17:4a:55:13:0d:2b:10:99:27:43:06:b1:42: bb:3d:9b:b2:54:ee:ae:7c:32:7b:c1:8e:61:48:ae:8f:e5:a1: 94:98:a3:fa:50:49:82:d2:19:ae:82:27:4b:e9:f3:c8:86:06: b6:45:13:3c:b5:b1:b9:3f:6d:69:58:00:51:52:09:92:d9:30: 43:12:36:08:04:11:98:e2:4d:94:66:c7:cb:b5:b4:18:24:53: 71:43:38:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VJqez7ZO4Hv6dLWrKGPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTc1ODc3M2E5OWU3NzFiOTBjYTliYjIyZjdmY2FkYmZi NjMyNDgwHhcNMjUxMjA3MTUwMTAyWhcNMjUxMjA4MTUwMTAyWjAzMTEwLwYDVQQD EyhkZTllY2ZmY2QyODNkNTJhNWI3MWViYmE2NmQ4M2Q5YWVkZTg0MTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9M+tnvtZrOn8jmvYmZnnGSqGq74 mRkaYkLB4CoojcFEz5JvXY21uYImwRb6MMNk8ReRsRE4qJY8GdEoh/tvvUDaRaUv m2E/fsbn5fCQzd5gAN/drmkmMOJtfph0s4Z1HmF1cXXggiXCpx3xwcxXWn7fiA7u ll68JBqaWSQZPA5s5QZAjq0Glk7EYV1WFnTmY7gOasLyNBa3rStwNjpSMPJoQUnu cVCnLaRUmKhicfab0AZSX1IeVpNfUlzO8zpmubNaPUrfbxjyu9/RSXevVqOWLZfu 3yo2RAWTmkmPytvOkRtcDh5pUCt7BfweUoZG5uvfo3vJC8hTXuxsrs8yTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6ez/zSg9UqW3HrumbYPZrt6EE0MB8GA1UdIwQY MBaAFEkXWHc6medxuQypuyL3/K2/tjJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUt ZTdkYjk1ZTNiY2M0LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUtZTdkYjk1ZTNiY2M0 LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2qwoLGy mQ5cKqLTnMO/aTUxBbHf5BXTvbaj4BVnlNHd4NRZ1WHEEu96HWECB/me4F8YKiFc yz/5W7UFgokxinWz0tq4+wnfLR3AXPssTWE2s0ZZIFz8Mq8zD1hrDlShFBc3XtTw Y/jFzhLBz15hsCE9Ip6cs0M8KuvbWIbmCiMrPTQXqBj/G2Wne56KxHnNaXC8AUP+ UEEVDxS02hxnCFa/RkrU308XSlUTDSsQmSdDBrFCuz2bslTurnwye8GOYUiuj+Wh lJij+lBJgtIZroInS+nzyIYGtkUTPLWxuT9taVgAUVIJktkwQxI2CAQRmOJNlGbH y7W0GCRTcUM4Kw== -----END CERTIFICATE-----Generated at Sun Dec 7 16:56:09 2025 by rpki-client