This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json) Hash identifier: lTtbW8RsNwC/J/2PqbfZInZvB0kodon05EGNKYH0/OU= Subject key identifier: 26:64:22:AC:D1:FF:79:2C:97:A0:9A:C3:48:2A:A8:55:61:B5:59:82 Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0 Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0 Certificate serial: 019AFD30FA2CEED761AF2D0AEC15D38305A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft Manifest number: 0799 Signing time: Mon 08 Dec 2025 09:00:36 +0000 Manifest this update: Mon 08 Dec 2025 09:00:36 +0000 Manifest next update: Tue 09 Dec 2025 09:00:36 +0000 Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=) 2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: J/yytLnwyrv3Q7mfldPSnhDhKiGqtNNEIoyAYTuT2ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:30:fa:2c:ee:d7:61:af:2d:0a:ec:15:d3:83:05:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0 Validity Not Before: Dec 8 09:00:36 2025 GMT Not After : Dec 9 09:00:36 2025 GMT Subject: CN=266422acd1ff792c97a09ac3482aa85561b55982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:47:1e:af:bd:ca:4b:09:ab:05:f9:22:a0: cc:43:42:79:24:eb:bc:de:08:cd:22:03:45:1c:f3: ab:9f:2f:8f:a5:42:b1:68:90:6c:ce:f6:46:c2:f3: d5:8f:b3:b6:cf:90:2a:bc:83:7a:cd:38:65:b1:cd: de:73:b4:9d:66:ca:52:31:46:41:5c:3d:cd:38:8e: 0c:cb:2d:94:06:54:f1:fb:70:d7:6e:02:0b:c6:3f: 82:2a:c2:fb:7d:19:7c:e3:13:b4:ee:ca:89:56:d1: 24:af:29:9c:6a:54:7f:80:31:d6:57:cc:89:6d:15: 7d:b7:7f:88:85:a2:bc:ab:69:4e:8d:e2:66:98:e9: b2:af:96:72:1c:dd:29:87:92:da:c6:74:7e:99:56: a0:6a:ce:5e:fe:77:e8:73:88:c4:8e:e7:a4:70:ed: 02:27:ac:78:45:94:cf:5d:a9:4a:6f:74:93:c6:98: a3:e3:1b:8b:89:86:a8:e0:b5:a7:d8:55:ce:e5:21: 95:b8:ce:7f:93:45:61:ec:ac:04:ec:f2:36:22:03: 45:29:1b:27:7a:35:fa:94:d7:7b:9f:31:59:ca:f1: 9a:ab:da:ef:18:9f:f5:77:f5:1a:04:86:44:22:56: 23:70:c7:da:14:97:45:53:a7:a1:19:17:ba:74:41: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:64:22:AC:D1:FF:79:2C:97:A0:9A:C3:48:2A:A8:55:61:B5:59:82 X509v3 Authority Key Identifier: keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fb:c2:5e:32:1c:16:2c:a3:45:43:8e:c4:58:1f:16:a2:28: 25:43:b9:40:17:4a:e2:ce:ce:36:a5:a5:4c:8a:58:e9:b1:83: 9d:6e:3d:f3:8a:2c:5c:21:e9:76:df:2d:00:ec:19:4d:8e:81: df:4a:a3:33:d5:0c:8c:37:31:c5:9e:ac:53:df:c9:7a:ba:01: 6b:34:f1:eb:aa:e5:d7:f2:00:fb:68:4b:b1:03:04:2a:3b:b4: 34:53:45:c6:34:52:78:6e:d9:08:68:e8:db:9a:4b:13:03:ac: 07:d7:07:5c:77:e0:79:90:15:b5:29:53:2d:60:d2:8a:d2:bd: 79:70:7a:c2:c2:1b:43:1d:3f:c2:ac:fd:af:6d:22:6b:d3:16: 94:06:b3:67:ff:e7:bd:a2:19:d9:d3:77:0f:88:77:47:5b:fe: 4b:62:a1:ee:36:63:e9:3f:28:39:98:c4:16:1f:cd:28:6b:97: af:3b:53:4e:89:83:a6:06:eb:5f:7f:c3:e4:ef:cc:3d:5e:07: 54:d4:02:98:7d:e4:4e:2c:e7:68:b2:2a:27:03:cf:38:1f:91: 9a:ae:98:78:61:c6:9e:af:ba:bd:82:e4:cd:62:eb:42:e8:e3: 61:b0:c4:99:d9:3f:27:e0:9e:d3:1d:79:bd:f1:38:00:db:12: 7b:5f:96:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9MPos7tdhry0K7BXTgwWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGU1NzhkYWM3OTJkOTVlMjE3ZDk4NzFlMDRmNjY5NzNi YjdlYjAwHhcNMjUxMjA4MDkwMDM2WhcNMjUxMjA5MDkwMDM2WjAzMTEwLwYDVQQD EygyNjY0MjJhY2QxZmY3OTJjOTdhMDlhYzM0ODJhYTg1NTYxYjU1OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOZHHq+9yksJqwX5IqDMQ0J5JOu8 3gjNIgNFHPOrny+PpUKxaJBszvZGwvPVj7O2z5AqvIN6zThlsc3ec7SdZspSMUZB XD3NOI4Myy2UBlTx+3DXbgILxj+CKsL7fRl84xO07sqJVtEkrymcalR/gDHWV8yJ bRV9t3+IhaK8q2lOjeJmmOmyr5ZyHN0ph5LaxnR+mVagas5e/nfoc4jEjuekcO0C J6x4RZTPXalKb3STxpij4xuLiYao4LWn2FXO5SGVuM5/k0Vh7KwE7PI2IgNFKRsn ejX6lNd7nzFZyvGaq9rvGJ/1d/UaBIZEIlYjcMfaFJdFU6ehGRe6dEF3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZkIqzR/3ksl6Caw0gqqFVhtVmCMB8GA1UdIwQY MBaAFEneV42seS2V4hfZhx4E9mlzu36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYt NjNlMDIwZmVlY2Y5LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYtNjNlMDIwZmVlY2Y5 LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfvCXjIc FiyjRUOOxFgfFqIoJUO5QBdK4s7ONqWlTIpY6bGDnW4984osXCHpdt8tAOwZTY6B 30qjM9UMjDcxxZ6sU9/JeroBazTx66rl1/IA+2hLsQMEKju0NFNFxjRSeG7ZCGjo 25pLEwOsB9cHXHfgeZAVtSlTLWDSitK9eXB6wsIbQx0/wqz9r20ia9MWlAazZ//n vaIZ2dN3D4h3R1v+S2Kh7jZj6T8oOZjEFh/NKGuXrztTTomDpgbrX3/D5O/MPV4H VNQCmH3kTiznaLIqJwPPOB+Rmq6YeGHGnq+6vYLkzWLrQujjYbDEmdk/J+Ce0x15 vfE4ANsSe1+WVw== -----END CERTIFICATE-----Generated at Mon Dec 8 15:39:15 2025 by rpki-client