This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft File: Sr9C0dMjaItaMnFsIpBIz5tKKco.mft (raw, json) Hash identifier: 7WPNv/9WxdJM3RJ5uu8Zt6EoIPJHcLRkprC9bPsGsYQ= Subject key identifier: 73:80:3C:3D:EB:7A:52:05:B0:2A:CB:34:F9:F5:08:3E:09:D0:00:33 Authority key identifier: 4A:BF:42:D1:D3:23:68:8B:5A:32:71:6C:22:90:48:CF:9B:4A:29:CA Certificate issuer: /CN=4abf42d1d323688b5a32716c229048cf9b4a29ca Certificate serial: 019B5A521FE5F796752425F944BFF51BF56C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft Manifest number: 3A Signing time: Fri 26 Dec 2025 11:01:30 +0000 Manifest this update: Fri 26 Dec 2025 11:01:30 +0000 Manifest next update: Sat 27 Dec 2025 11:01:30 +0000 Files and hashes: 1: Sr9C0dMjaItaMnFsIpBIz5tKKco.crl (hash: TutBGJvr2z5CBKCVbkzUKPZC+JdmacjHOkFDCqFjnqE=) 2: aUh3x7DI2Z0QyBQuTYq_U_DtZqQ.roa (hash: idW0XNrijAGGDeXUERFO9a49l8MnLifc9mzLJwTjB58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:1f:e5:f7:96:75:24:25:f9:44:bf:f5:1b:f5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4abf42d1d323688b5a32716c229048cf9b4a29ca Validity Not Before: Dec 26 11:01:30 2025 GMT Not After : Dec 27 11:01:30 2025 GMT Subject: CN=73803c3deb7a5205b02acb34f9f5083e09d00033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:c0:ec:7e:a7:5d:a9:66:59:df:97:50:b3: 19:d5:9a:c8:c8:92:9c:2f:dc:d8:49:fa:6a:83:95: 26:6d:57:99:34:5d:d5:e4:99:3c:5e:7a:f9:19:58: b1:a9:8c:ba:3f:95:7a:fd:e1:e6:fc:61:8d:c6:9a: 87:66:9d:33:d8:45:16:3c:13:9e:3b:83:ec:94:73: 3e:9f:07:67:09:d5:74:f1:87:f5:14:2a:6c:7c:aa: 79:ca:87:b1:b8:25:e9:bb:fc:ca:df:3d:aa:6b:a3: 50:37:be:d3:f8:35:66:02:39:6b:65:ab:37:45:aa: fd:bd:79:07:9d:71:80:22:9f:b0:34:ae:32:8d:0d: d1:51:97:4a:b9:ec:cd:66:fd:d7:6b:54:70:a4:35: 29:e5:8e:d8:20:87:a4:ac:f8:36:eb:97:2e:89:c9: 54:ea:64:bc:ab:f1:56:ac:a2:4d:5a:20:a2:8a:f1: ac:90:98:c7:81:c9:2e:40:d8:62:27:8a:d5:da:98: 1b:54:82:3b:0e:e9:9a:9d:fa:39:19:07:c6:d2:6e: 47:19:6d:c0:3c:4f:0f:5a:8a:36:a5:65:c1:f9:fb: 5d:db:05:40:10:8c:28:49:8b:b2:7e:36:a9:db:00: 9a:4c:3a:92:29:70:e0:8f:8e:44:b7:f3:eb:96:8b: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:3C:3D:EB:7A:52:05:B0:2A:CB:34:F9:F5:08:3E:09:D0:00:33 X509v3 Authority Key Identifier: keyid:4A:BF:42:D1:D3:23:68:8B:5A:32:71:6C:22:90:48:CF:9B:4A:29:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a5:07:a2:01:40:dc:e4:c6:ed:d3:05:00:35:5a:2f:ff:03: 8a:b0:e9:84:40:5a:58:e1:f1:7c:47:aa:70:1c:c0:e9:7a:be: f5:41:99:1b:35:f8:1a:01:77:37:20:0c:50:46:f1:24:99:0f: 5d:38:df:97:4c:45:a5:a6:ce:22:30:a0:53:74:4b:ac:80:7b: 41:6c:ba:e1:71:c0:29:dd:a8:d9:01:c6:80:3e:bb:67:72:50: 77:64:c0:19:9f:57:5d:a7:3a:0a:03:d4:0f:0e:71:d4:4c:14: c5:50:b5:3b:36:68:85:85:18:f3:24:67:d4:17:e9:81:48:88: 42:9f:54:5a:14:3a:a8:b5:7c:2e:6e:de:7c:13:a9:90:73:09: 9a:c4:fe:59:ea:87:95:a7:fb:07:67:4f:99:03:fd:21:97:fc: 49:94:9a:21:b4:27:87:6a:8e:4d:77:e4:50:19:c6:ac:14:c5: 28:a2:98:c7:a9:3a:60:dd:7e:46:97:49:e3:0c:0b:c7:0f:86: 7f:1f:83:68:3a:f5:0e:eb:f3:f1:66:78:21:fd:2e:df:e5:b5: 6c:e7:d8:32:dd:d1:5a:1f:bd:fc:80:fa:af:36:75:2e:43:d0: 89:89:cc:2a:90:76:54:83:e0:39:94:94:cc:94:06:07:f0:ce: be:7d:20:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUh/l95Z1JCX5RL/1G/VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYmY0MmQxZDMyMzY4OGI1YTMyNzE2YzIyOTA0OGNmOWI0 YTI5Y2EwHhcNMjUxMjI2MTEwMTMwWhcNMjUxMjI3MTEwMTMwWjAzMTEwLwYDVQQD Eyg3MzgwM2MzZGViN2E1MjA1YjAyYWNiMzRmOWY1MDgzZTA5ZDAwMDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBLA7H6nXalmWd+XULMZ1ZrIyJKc L9zYSfpqg5UmbVeZNF3V5Jk8Xnr5GVixqYy6P5V6/eHm/GGNxpqHZp0z2EUWPBOe O4PslHM+nwdnCdV08Yf1FCpsfKp5yoexuCXpu/zK3z2qa6NQN77T+DVmAjlrZas3 Rar9vXkHnXGAIp+wNK4yjQ3RUZdKuezNZv3Xa1RwpDUp5Y7YIIekrPg265cuiclU 6mS8q/FWrKJNWiCiivGskJjHgckuQNhiJ4rV2pgbVII7Dumanfo5GQfG0m5HGW3A PE8PWoo2pWXB+ftd2wVAEIwoSYuyfjap2wCaTDqSKXDgj45Et/PrlotXFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOAPD3relIFsCrLNPn1CD4J0AAzMB8GA1UdIwQY MBaAFEq/QtHTI2iLWjJxbCKQSM+bSinKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3I5QzBkTWphSXRhTW5Gc0lwQkl6NXRLS2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jMzNkYTQtYzE1ZC00ZjJjLTlkYmEt ZWE4OTBhNmQ0NjFkLzEvU3I5QzBkTWphSXRhTW5Gc0lwQkl6NXRLS2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jMzNkYTQtYzE1ZC00ZjJjLTlkYmEtZWE4OTBhNmQ0NjFk LzEvU3I5QzBkTWphSXRhTW5Gc0lwQkl6NXRLS2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6UHogFA 3OTG7dMFADVaL/8DirDphEBaWOHxfEeqcBzA6Xq+9UGZGzX4GgF3NyAMUEbxJJkP XTjfl0xFpabOIjCgU3RLrIB7QWy64XHAKd2o2QHGgD67Z3JQd2TAGZ9XXac6CgPU Dw5x1EwUxVC1OzZohYUY8yRn1BfpgUiIQp9UWhQ6qLV8Lm7efBOpkHMJmsT+WeqH laf7B2dPmQP9IZf8SZSaIbQnh2qOTXfkUBnGrBTFKKKYx6k6YN1+RpdJ4wwLxw+G fx+DaDr1Duvz8WZ4If0u3+W1bOfYMt3RWh+9/ID6rzZ1LkPQiYnMKpB2VIPgOZSU zJQGB/DOvn0gEA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:45 2025 by rpki-client