This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json) Hash identifier: lbN074LCMkLsh23vSPC2m0K85Jg/CXaCy7f52fbJOdM= Subject key identifier: 93:00:1B:02:83:5D:7D:C4:C8:F9:FD:28:69:29:F7:87:2A:02:4C:A7 Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb Certificate serial: 019B2D7965299039FF4B0E75B93E276A38DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft Manifest number: 0EB4 Signing time: Wed 17 Dec 2025 18:01:29 +0000 Manifest this update: Wed 17 Dec 2025 18:01:29 +0000 Manifest next update: Thu 18 Dec 2025 18:01:29 +0000 Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=) 2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: vC0l+wPs9F1ZR8UPAhL9iY8mjiXGcyZ0hQfyp/rr10k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:65:29:90:39:ff:4b:0e:75:b9:3e:27:6a:38:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb Validity Not Before: Dec 17 18:01:29 2025 GMT Not After : Dec 18 18:01:29 2025 GMT Subject: CN=93001b02835d7dc4c8f9fd286929f7872a024ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:4c:34:ce:33:8d:19:af:a4:9e:58:68:28: bf:0b:eb:6d:81:bc:22:08:c3:6c:f7:1a:c7:7d:fb: 64:5c:9e:fa:9e:ab:45:d5:c6:47:ae:81:e6:b9:a1: f2:18:6b:5c:89:17:cb:3e:f5:09:54:52:1b:04:f0: aa:33:ef:52:d2:cc:94:1f:87:19:e1:3c:3d:e1:16: 8a:7a:ec:f1:c5:4e:86:d0:86:c4:c8:c4:f4:f2:91: 21:02:6d:3f:e3:5e:f3:40:bb:3b:cb:72:0d:ba:b4: 89:ba:0c:45:64:ea:de:a3:74:31:fb:97:72:a5:0e: 46:48:72:b9:98:94:ab:8c:2c:8e:97:8f:55:47:a2: c8:09:f1:68:60:f0:95:13:7f:48:e5:11:20:82:a3: 33:df:c7:7b:54:f4:89:e1:c7:01:51:2b:5a:92:74: 58:32:00:5a:ba:85:d5:d5:2d:31:01:19:36:92:52: 27:6a:0e:2c:bb:bd:32:bf:18:f9:03:65:4a:ad:eb: 4e:ba:5b:7c:3c:7a:fc:a4:a8:f5:d8:56:ae:18:32: 54:5f:50:ab:b0:51:e8:d6:f0:6d:91:5c:a4:8e:36: d8:b4:48:4c:d9:10:69:6f:d7:07:6b:ff:3d:1b:5c: a1:d3:60:ef:c3:b3:74:a2:f9:cf:10:05:b0:b1:9a: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:00:1B:02:83:5D:7D:C4:C8:F9:FD:28:69:29:F7:87:2A:02:4C:A7 X509v3 Authority Key Identifier: keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ca:de:6c:0c:44:b2:0e:ba:6d:9c:91:a2:eb:5f:6e:5b:da: 93:12:a9:77:94:09:bc:8b:e1:be:ed:f8:82:ee:ec:97:c0:e6: 90:dc:5e:9b:6f:d1:99:83:64:4f:83:d3:0f:93:76:1e:2a:72: 5c:2b:d7:1b:46:25:3c:85:02:1c:b6:92:f9:76:94:1e:70:fe: 3d:bc:93:a4:56:29:d1:8b:03:96:19:f7:0e:6e:ee:12:1c:b2: d4:47:bd:70:14:04:11:df:52:bc:0c:5b:30:d5:72:45:e5:89: da:7a:19:42:49:04:4a:10:be:1e:e3:8e:f3:6c:f4:fd:3a:a9: fe:10:fc:4c:76:5a:e5:21:02:f7:33:00:22:2e:7d:35:16:db: 93:5c:98:19:ca:ad:44:72:e5:7d:38:e4:7a:b0:9f:d3:88:1d: fd:ae:a5:ac:85:50:6d:90:f2:e3:6f:a2:5f:85:32:a2:c7:fa: 0e:f7:d5:5f:c0:0c:c3:5a:a7:9a:e3:ac:46:b7:42:77:4c:51: d4:39:69:f9:e5:10:82:02:36:9c:22:76:5b:35:70:9b:b9:51: 1b:4a:2c:fa:90:84:f9:b6:21:bd:a7:16:cf:3f:c9:8e:40:3d: b2:b3:1d:ca:62:cd:3b:c2:47:2d:3a:ce:57:8d:c5:55:76:06: 45:72:b6:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteWUpkDn/Sw51uT4najjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj NjYxZWIwHhcNMjUxMjE3MTgwMTI5WhcNMjUxMjE4MTgwMTI5WjAzMTEwLwYDVQQD Eyg5MzAwMWIwMjgzNWQ3ZGM0YzhmOWZkMjg2OTI5Zjc4NzJhMDI0Y2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKtMNM4zjRmvpJ5YaCi/C+ttgbwi CMNs9xrHfftkXJ76nqtF1cZHroHmuaHyGGtciRfLPvUJVFIbBPCqM+9S0syUH4cZ 4Tw94RaKeuzxxU6G0IbEyMT08pEhAm0/417zQLs7y3INurSJugxFZOreo3Qx+5dy pQ5GSHK5mJSrjCyOl49VR6LICfFoYPCVE39I5REggqMz38d7VPSJ4ccBUStaknRY MgBauoXV1S0xARk2klInag4su70yvxj5A2VKretOult8PHr8pKj12FauGDJUX1Cr sFHo1vBtkVykjjbYtEhM2RBpb9cHa/89G1yh02Dvw7N0ovnPEAWwsZrMRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMAGwKDXX3EyPn9KGkp94cqAkynMB8GA1UdIwQY MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3 LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8rebAxE sg66bZyRoutfblvakxKpd5QJvIvhvu34gu7sl8DmkNxem2/RmYNkT4PTD5N2Hipy XCvXG0YlPIUCHLaS+XaUHnD+PbyTpFYp0YsDlhn3Dm7uEhyy1Ee9cBQEEd9SvAxb MNVyReWJ2noZQkkEShC+HuOO82z0/Tqp/hD8THZa5SEC9zMAIi59NRbbk1yYGcqt RHLlfTjkerCf04gd/a6lrIVQbZDy42+iX4Uyosf6DvfVX8AMw1qnmuOsRrdCd0xR 1Dlp+eUQggI2nCJ2WzVwm7lRG0os+pCE+bYhvacWzz/JjkA9srMdymLNO8JHLTrO V43FVXYGRXK2HA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:51:45 2025 by rpki-client