This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json) Hash identifier: Uhj0aiS35WRHi5wp9qUGeOFFgPuBaJexUSFwUdK1w2A= Subject key identifier: BD:32:1F:F8:9D:9C:6E:40:93:B3:5A:4C:54:FC:A8:A9:9C:E5:DA:FC Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c Certificate serial: 019B1013A111D6389DD000C55FCF7977C000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft Manifest number: 164D Signing time: Fri 12 Dec 2025 01:01:20 +0000 Manifest this update: Fri 12 Dec 2025 01:01:20 +0000 Manifest next update: Sat 13 Dec 2025 01:01:20 +0000 Files and hashes: 1: 63o-_PEDVGcrdV7Bgi2toHySFlk.roa (hash: 0y8sb4KpuKm+TioBZ+61oUD6+dI0ZD86gR4wRX+mbCE=) 2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: NLGz1gmOxjC3vGXbOMIQNFCid4olPcqCtPFZDHEr6vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:a1:11:d6:38:9d:d0:00:c5:5f:cf:79:77:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c Validity Not Before: Dec 12 01:01:20 2025 GMT Not After : Dec 13 01:01:20 2025 GMT Subject: CN=bd321ff89d9c6e4093b35a4c54fca8a99ce5dafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:44:31:5c:5f:4a:e0:dc:41:c2:cc:ea:cc: 1e:84:5c:fc:88:e5:97:58:4e:2e:ad:f7:7d:19:ce: c6:66:04:e7:a3:7b:7a:d1:9d:a2:1a:d6:71:86:71: 35:cf:52:f6:f5:23:6e:3e:35:a3:92:32:8c:50:b7: cd:16:5b:ab:c7:91:7e:c7:3e:ea:cb:db:a2:8b:95: d7:8f:d0:0b:fe:c1:78:ca:cd:46:90:04:3d:32:b6: 7f:ca:d7:69:9d:19:81:a2:96:a6:cb:7a:36:8c:cb: d2:7f:75:8c:23:a8:7e:c4:c6:88:b3:e9:7c:6e:3b: 23:10:f8:de:6d:93:32:15:bf:c1:3a:b1:20:eb:a7: 35:d2:08:55:bd:9e:56:13:e7:61:76:9b:bc:9a:6d: 53:95:24:ad:f3:64:b0:54:8c:0a:44:91:d0:dc:5b: 30:6b:03:fb:c0:9e:66:29:62:da:4f:20:df:e0:96: 08:a9:77:3d:d1:ec:38:5e:4c:3c:e1:56:e5:84:0a: 2b:2a:12:2d:16:1a:f1:cf:cc:a5:d7:b4:e1:bc:fd: f8:85:96:b4:ea:ba:1a:4e:38:2b:30:cc:e7:4a:5d: 2f:15:7a:6e:71:c8:e5:f0:52:aa:10:75:3b:ea:30: e7:d4:8f:3d:88:80:86:97:c4:58:28:d3:6a:05:c6: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:32:1F:F8:9D:9C:6E:40:93:B3:5A:4C:54:FC:A8:A9:9C:E5:DA:FC X509v3 Authority Key Identifier: keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:dc:ae:46:9e:5a:38:cd:25:ac:ac:9d:d7:32:f1:db:77:72: c5:ca:ae:03:fe:d9:80:5b:02:fa:dc:47:f4:30:06:dd:1f:d0: dd:24:95:be:ac:8f:a5:85:d1:42:85:27:6f:20:ce:76:55:ac: b1:82:20:f4:47:54:dc:8a:5a:3a:54:10:bc:c1:dc:67:0d:e5: 59:e4:41:e9:11:f0:ed:ee:a0:89:0c:d5:98:66:1d:18:d5:a1: 0a:8e:02:9e:9f:9a:7e:c3:18:3b:b2:7b:8f:42:7e:60:85:d3: e9:43:91:a1:69:b6:26:1c:36:62:82:64:a2:0b:67:2a:d5:32: 22:e6:0e:fa:9d:56:6a:07:66:ef:ef:d9:eb:2a:c2:d9:da:4b: 3b:ff:0c:97:70:7f:45:ef:0c:e9:d6:31:3b:b9:3b:01:09:1e: 31:42:38:33:e7:3a:dc:5d:3e:1f:13:38:32:04:2c:47:c0:4f: a1:3b:b2:87:4a:1a:f8:d1:3e:49:69:ee:f9:2a:51:21:23:6f: 95:3e:3c:2d:f0:1c:ed:ae:5f:f1:74:01:cc:41:f6:30:c7:e0: c6:a4:b8:0f:bb:c0:f2:5f:45:a6:0e:1f:1d:27:4b:fb:21:ba: 9b:8e:39:d3:9d:14:14:0d:5c:c9:84:9d:05:ac:49:1e:7e:59: 8b:26:7c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE6ER1jid0ADFX895d8AAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx N2MzOGMwHhcNMjUxMjEyMDEwMTIwWhcNMjUxMjEzMDEwMTIwWjAzMTEwLwYDVQQD EyhiZDMyMWZmODlkOWM2ZTQwOTNiMzVhNGM1NGZjYThhOTljZTVkYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAustEMVxfSuDcQcLM6swehFz8iOWX WE4urfd9Gc7GZgTno3t60Z2iGtZxhnE1z1L29SNuPjWjkjKMULfNFlurx5F+xz7q y9uii5XXj9AL/sF4ys1GkAQ9MrZ/ytdpnRmBopamy3o2jMvSf3WMI6h+xMaIs+l8 bjsjEPjebZMyFb/BOrEg66c10ghVvZ5WE+dhdpu8mm1TlSSt82SwVIwKRJHQ3Fsw awP7wJ5mKWLaTyDf4JYIqXc90ew4Xkw84VblhAorKhItFhrxz8yl17ThvP34hZa0 6roaTjgrMMznSl0vFXpuccjl8FKqEHU76jDn1I89iICGl8RYKNNqBcZ0wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0yH/idnG5Ak7NaTFT8qKmc5dr8MB8GA1UdIwQY MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt OWM3NmQxMGVjNTMyLzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldyuRp5a OM0lrKyd1zLx23dyxcquA/7ZgFsC+txH9DAG3R/Q3SSVvqyPpYXRQoUnbyDOdlWs sYIg9EdU3IpaOlQQvMHcZw3lWeRB6RHw7e6giQzVmGYdGNWhCo4Cnp+afsMYO7J7 j0J+YIXT6UORoWm2Jhw2YoJkogtnKtUyIuYO+p1Wagdm7+/Z6yrC2dpLO/8Ml3B/ Re8M6dYxO7k7AQkeMUI4M+c63F0+HxM4MgQsR8BPoTuyh0oa+NE+SWnu+SpRISNv lT48LfAc7a5f8XQBzEH2MMfgxqS4D7vA8l9Fpg4fHSdL+yG6m445050UFA1cyYSd BaxJHn5ZiyZ8Ww== -----END CERTIFICATE-----Generated at Fri Dec 12 03:25:18 2025 by rpki-client