This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft File: Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json) Hash identifier: 22BxTDcUVhbUnMqxpDp+2E6PASSqbM7AVtxF3dtgMUs= Subject key identifier: 5B:59:F2:05:88:6E:1C:4D:EF:E0:51:05:5C:B5:D3:6E:71:44:B3:B6 Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e Certificate serial: 019B5976B09D3A8A604B75897B034A370407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft Manifest number: 0A12 Signing time: Fri 26 Dec 2025 07:01:49 +0000 Manifest this update: Fri 26 Dec 2025 07:01:49 +0000 Manifest next update: Sat 27 Dec 2025 07:01:49 +0000 Files and hashes: 1: 8dRpFL3Tx6_eHYDV0GF9jVjNRKU.roa (hash: CYL1YeCCG8xFxfjQulVKl6xa2WJtFP2ORTHbcUggMA4=) 2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: hYesXjdEipT9oyfXH49d7ubk2KJH0cALbXPxHd69qoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:b0:9d:3a:8a:60:4b:75:89:7b:03:4a:37:04:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e Validity Not Before: Dec 26 07:01:49 2025 GMT Not After : Dec 27 07:01:49 2025 GMT Subject: CN=5b59f205886e1c4defe051055cb5d36e7144b3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:98:6b:39:ac:b7:91:f7:c6:5d:49:e9:4b: a6:24:68:59:b9:3b:08:a8:f4:7b:90:5e:31:d5:ca: 90:3e:7e:84:43:65:b7:f8:cb:1a:9a:b7:23:62:1f: 9d:9e:d3:43:92:79:ca:cc:2d:2a:3b:b8:37:72:83: ea:a1:39:5b:10:d1:a9:4c:a9:9e:27:d9:d4:06:23: df:d4:00:9b:ab:51:a9:b0:ca:6d:e5:d0:67:ca:3c: f8:09:b2:db:70:19:96:58:43:b3:0e:51:d0:76:4a: 74:96:24:28:c2:84:c8:e3:43:f4:a8:4c:66:05:0c: 79:66:bc:fa:d4:52:a7:c4:3c:be:e7:ea:05:a7:9a: ff:89:4a:cb:5f:44:70:f7:e3:da:76:57:4d:89:3a: f9:f8:6a:0c:36:00:30:0d:41:b1:2e:77:f1:86:ef: ae:40:79:51:28:65:27:58:84:6e:4d:62:3b:b0:27: 9a:52:b6:62:b5:72:5a:a2:76:67:cd:d5:49:cc:77: 85:94:4b:0e:94:cf:96:d3:96:59:71:06:f2:9d:80: d9:60:4d:78:e5:1d:fb:5e:65:5c:14:8c:df:02:eb: 29:1c:de:ba:18:6c:48:dc:9f:2f:4c:ec:a6:57:5a: 96:b5:39:b3:5a:d7:f5:44:0a:f0:8b:0a:ed:6b:a2: b1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:59:F2:05:88:6E:1C:4D:EF:E0:51:05:5C:B5:D3:6E:71:44:B3:B6 X509v3 Authority Key Identifier: keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:56:af:fd:45:38:8c:0a:a5:c3:e8:db:a5:49:de:c8:64:be: ac:dd:4c:4b:94:8b:9f:29:21:24:e4:9f:51:f8:6d:66:27:6e: b1:38:03:68:98:05:2e:fe:38:0d:42:2e:15:95:54:25:70:e6: f4:38:f6:e0:77:42:73:2d:3f:df:ad:d3:b2:1d:2c:f3:36:32: 2e:d4:e4:1c:49:01:53:1b:b0:e3:71:1b:1b:39:cf:e5:53:38: b8:cd:7f:bc:b6:b2:89:35:58:23:00:30:0d:04:79:7b:17:98: d4:a6:cb:d5:90:d6:bb:99:0e:61:a8:7f:c2:10:75:c0:7f:18: 01:a0:81:e1:a6:98:18:e1:57:6f:9e:7b:95:01:5b:26:06:e6: 80:3c:dd:ae:1f:5b:54:55:9b:72:75:65:92:fc:55:f3:6b:57: 48:56:d2:78:86:66:80:9a:9f:cd:85:8a:62:ea:ea:67:ed:6a: 76:21:c7:87:32:c0:61:30:76:df:00:99:9b:2e:aa:af:e7:5d: 55:05:a6:e2:a9:ff:6d:cc:dc:0a:62:2b:14:b2:a8:d9:75:58: 22:ed:23:ed:e8:e9:1f:98:90:9e:51:d1:7f:a4:08:d2:e9:bc: 72:db:16:82:90:3e:d8:cd:14:cf:fb:a3:53:8c:2f:e5:77:e7: 06:34:56:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdrCdOopgS3WJewNKNwQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2Y3ODc2ZDRjNTU1NGI3NzJhNTdlN2YxYzRjZWQzN2Zi NWUxOWUwHhcNMjUxMjI2MDcwMTQ5WhcNMjUxMjI3MDcwMTQ5WjAzMTEwLwYDVQQD Eyg1YjU5ZjIwNTg4NmUxYzRkZWZlMDUxMDU1Y2I1ZDM2ZTcxNDRiM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4WYazmst5H3xl1J6UumJGhZuTsI qPR7kF4x1cqQPn6EQ2W3+MsamrcjYh+dntNDknnKzC0qO7g3coPqoTlbENGpTKme J9nUBiPf1ACbq1GpsMpt5dBnyjz4CbLbcBmWWEOzDlHQdkp0liQowoTI40P0qExm BQx5Zrz61FKnxDy+5+oFp5r/iUrLX0Rw9+PadldNiTr5+GoMNgAwDUGxLnfxhu+u QHlRKGUnWIRuTWI7sCeaUrZitXJaonZnzdVJzHeFlEsOlM+W05ZZcQbynYDZYE14 5R37XmVcFIzfAuspHN66GGxI3J8vTOymV1qWtTmzWtf1RArwiwrta6KxEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtZ8gWIbhxN7+BRBVy1025xRLO2MB8GA1UdIwQY MBaAFEp/eHbUxVVLdypX5/HEztN/teGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQt YWIxZWE0MzUzYjdmLzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQtYWIxZWE0MzUzYjdm LzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFav/UU4 jAqlw+jbpUneyGS+rN1MS5SLnykhJOSfUfhtZidusTgDaJgFLv44DUIuFZVUJXDm 9Dj24HdCcy0/363Tsh0s8zYyLtTkHEkBUxuw43EbGznP5VM4uM1/vLayiTVYIwAw DQR5exeY1KbL1ZDWu5kOYah/whB1wH8YAaCB4aaYGOFXb557lQFbJgbmgDzdrh9b VFWbcnVlkvxV82tXSFbSeIZmgJqfzYWKYurqZ+1qdiHHhzLAYTB23wCZmy6qr+dd VQWm4qn/bczcCmIrFLKo2XVYIu0j7ejpH5iQnlHRf6QI0um8ctsWgpA+2M0Uz/uj U4wv5XfnBjRWOw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:12 2025 by rpki-client