This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json) Hash identifier: 9ASNVB2wWy/2Vcu0xRFtG8hlmw3+Tk8Xf+1Wr/BXnAM= Subject key identifier: 44:8C:1F:DD:CC:BC:2C:D2:D9:E3:55:7D:98:96:A8:37:7F:33:EB:9D Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b Certificate serial: 019AF5E5BD221B533F7C43198B13BED8442D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft Manifest number: 0557 Signing time: Sat 06 Dec 2025 23:01:05 +0000 Manifest this update: Sat 06 Dec 2025 23:01:05 +0000 Manifest next update: Sun 07 Dec 2025 23:01:05 +0000 Files and hashes: 1: joUfA7wmiDy4bESPg0qWDrSmTss.roa (hash: 1QUrxZN7VrpsU9R2lfkft3ATlxKCm7MpFqrD8hOkNNA=) 2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=) 3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: LfidhHFvuMJf0pEVvV5WvVY17TWIFUPCWGww4MvM6dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:bd:22:1b:53:3f:7c:43:19:8b:13:be:d8:44:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b Validity Not Before: Dec 6 23:01:05 2025 GMT Not After : Dec 7 23:01:05 2025 GMT Subject: CN=448c1fddccbc2cd2d9e3557d9896a8377f33eb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:e5:ca:17:41:47:19:1a:47:51:9e:e6:f2: 8c:91:a1:55:fb:79:25:cc:10:32:f0:51:2f:7b:7f: 99:94:46:62:cc:23:cc:73:6b:b8:7d:d3:c8:d7:28: 5e:ea:9a:c9:c8:2d:ad:ae:70:f3:22:2d:d2:c4:ff: e9:cb:24:83:e0:c1:d7:a1:b6:04:63:f5:4d:50:7b: 54:32:b7:1b:b4:2d:61:cb:14:96:29:9a:9e:f2:ab: 2b:3f:77:51:19:8d:a9:9c:39:41:84:13:d0:65:01: d3:a5:3b:ed:de:96:98:ab:06:27:cc:8e:44:c0:3a: dd:0c:62:a7:d4:8d:5c:d0:bb:e0:d1:d5:73:d0:26: f5:88:94:19:af:35:c2:6a:a6:99:3b:d1:f7:4b:90: 9d:dd:48:fd:10:e8:62:87:45:26:a4:cf:5c:81:4e: 05:57:00:b4:54:d6:18:39:43:a6:ea:12:1d:34:f8: 29:83:06:a9:f5:03:33:f5:8b:ff:34:dd:a1:74:7c: 9d:b7:05:64:19:7d:54:e0:db:d2:c5:de:19:01:f9: 98:01:e1:67:fd:34:23:ab:06:4e:9a:2d:3c:24:99: 2d:51:ee:26:2a:a7:cc:85:e4:29:3d:54:45:49:b3: 76:9c:f8:24:73:0f:54:05:c7:b7:13:11:e0:5a:6a: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8C:1F:DD:CC:BC:2C:D2:D9:E3:55:7D:98:96:A8:37:7F:33:EB:9D X509v3 Authority Key Identifier: keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f1:ea:40:83:a8:83:5d:24:e1:3e:95:77:66:37:89:fa:ef: 7e:91:db:59:ca:87:b2:8e:c2:55:42:f2:2b:ee:0e:ac:22:e3: 51:a6:85:99:fc:a5:f8:f2:f8:98:c2:e6:1e:a5:27:aa:e2:50: d1:11:c6:7f:38:18:2e:75:3d:72:22:3b:c3:60:0e:94:36:1b: 2a:ff:d4:d2:cf:34:d4:49:8e:b3:73:c4:08:9f:cd:c3:64:d2: 94:92:c7:de:b9:6b:3c:d5:05:f1:1c:6d:62:63:0b:45:1a:e1: 29:77:ce:aa:34:9b:d6:c8:3f:80:74:f1:9e:df:4c:d7:31:25: f0:d4:32:11:95:b4:67:e9:ae:eb:2c:76:5f:9c:29:42:b4:3d: c0:57:1c:0b:e9:07:da:5e:52:25:cc:ca:18:88:fa:67:06:f1: ec:c2:12:ba:9b:69:c7:d4:63:8b:88:f4:bc:f6:49:25:5f:fa: bb:c9:80:1e:1a:f2:f1:6a:d5:af:10:54:6c:00:b1:0a:c0:6e: 22:a2:07:e5:bb:98:28:d7:70:80:6c:05:f3:cb:dd:bb:df:50: 91:a2:8b:ad:56:82:d5:a0:14:fd:17:0f:4a:48:82:51:2b:bd: fa:23:96:88:7c:be:3a:5d:78:de:36:fa:c7:cf:19:d1:72:d1: 45:a8:b1:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15b0iG1M/fEMZixO+2EQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4 MzRiM2IwHhcNMjUxMjA2MjMwMTA1WhcNMjUxMjA3MjMwMTA1WjAzMTEwLwYDVQQD Eyg0NDhjMWZkZGNjYmMyY2QyZDllMzU1N2Q5ODk2YTgzNzdmMzNlYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhujlyhdBRxkaR1Ge5vKMkaFV+3kl zBAy8FEve3+ZlEZizCPMc2u4fdPI1yhe6prJyC2trnDzIi3SxP/pyySD4MHXobYE Y/VNUHtUMrcbtC1hyxSWKZqe8qsrP3dRGY2pnDlBhBPQZQHTpTvt3paYqwYnzI5E wDrdDGKn1I1c0Lvg0dVz0Cb1iJQZrzXCaqaZO9H3S5Cd3Uj9EOhih0UmpM9cgU4F VwC0VNYYOUOm6hIdNPgpgwap9QMz9Yv/NN2hdHydtwVkGX1U4NvSxd4ZAfmYAeFn /TQjqwZOmi08JJktUe4mKqfMheQpPVRFSbN2nPgkcw9UBce3ExHgWmoX2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESMH93MvCzS2eNVfZiWqDd/M+udMB8GA1UdIwQY MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt NDY1YWRjMjk1OWYyLzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavHqQIOo g10k4T6Vd2Y3ifrvfpHbWcqHso7CVULyK+4OrCLjUaaFmfyl+PL4mMLmHqUnquJQ 0RHGfzgYLnU9ciI7w2AOlDYbKv/U0s801EmOs3PECJ/Nw2TSlJLH3rlrPNUF8Rxt YmMLRRrhKXfOqjSb1sg/gHTxnt9M1zEl8NQyEZW0Z+mu6yx2X5wpQrQ9wFccC+kH 2l5SJczKGIj6Zwbx7MISuptpx9Rji4j0vPZJJV/6u8mAHhry8WrVrxBUbACxCsBu IqIH5buYKNdwgGwF88vdu99QkaKLrVaC1aAU/RcPSkiCUSu9+iOWiHy+Ol143jb6 x88Z0XLRRaixQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:08:42 2025 by rpki-client