This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json) Hash identifier: +4kz/BNOoXW+9j6lnnrDuyXYA7IE1bQScjyt+30NUZc= Subject key identifier: BC:C2:2A:78:FD:64:C1:FD:E1:31:BE:97:61:71:53:9A:20:68:C8:CD Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Certificate serial: 019B1CBBE979FBE737798CC6C12685A411E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft Manifest number: 0B92 Signing time: Sun 14 Dec 2025 12:00:35 +0000 Manifest this update: Sun 14 Dec 2025 12:00:35 +0000 Manifest next update: Mon 15 Dec 2025 12:00:35 +0000 Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: pVN8eynI5Maimc2yaR0+k9uv/TKeoLx6iQXWB/7zZJ4=) 2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=) 3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=) 4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bb:e9:79:fb:e7:37:79:8c:c6:c1:26:85:a4:11:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Validity Not Before: Dec 14 12:00:35 2025 GMT Not After : Dec 15 12:00:35 2025 GMT Subject: CN=bcc22a78fd64c1fde131be976171539a2068c8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:2c:da:1e:b3:2d:53:3d:8c:97:25:17:75: d1:d7:db:dd:e2:d8:71:f5:fa:28:50:ae:46:ce:14: d2:22:9f:c3:cc:09:44:9e:5f:b7:e3:5f:ea:4c:14: 2b:2b:cc:97:de:6a:e6:cb:ff:71:1a:16:f6:f5:2a: 6c:3f:3a:30:3b:1a:ec:b1:6b:a5:8c:7e:22:b1:3e: f1:47:7f:cf:59:58:a9:cd:8a:5e:d1:e5:8e:5a:cb: 66:05:6d:84:a1:44:4e:2f:ce:9e:76:de:34:f6:d7: b6:43:86:ed:6d:72:ed:20:4c:e6:0c:82:0e:38:59: 07:92:90:c8:14:8c:5a:db:50:66:0d:01:64:9b:b3: 92:08:38:70:24:4a:a5:62:ef:79:8f:5a:e0:6d:03: 8a:a1:24:5f:bd:99:b3:35:40:ae:3f:0c:19:30:4e: 9a:c4:a5:20:b8:33:20:62:df:20:18:11:a5:55:7f: dd:15:bb:f0:2c:40:f7:cb:56:67:b1:61:e6:1e:ce: 46:4f:69:57:f5:30:cd:85:a1:18:81:63:38:67:2a: 4f:67:91:cd:59:ae:c1:d2:a9:e0:9c:d6:44:d1:78: b5:45:b3:24:fa:8a:4b:e4:51:b4:1f:05:ca:8e:ca: d6:8c:36:09:e0:6c:74:83:c0:c5:04:62:6c:7e:96: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C2:2A:78:FD:64:C1:FD:E1:31:BE:97:61:71:53:9A:20:68:C8:CD X509v3 Authority Key Identifier: keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:7e:99:54:55:c4:ea:ef:11:3f:5b:46:f6:50:d4:64:00:db: e5:d0:16:65:7c:49:23:1e:c9:a2:da:21:29:4c:c9:7a:b8:0a: 5c:72:de:92:1f:6f:e3:aa:17:f6:ef:7c:53:13:1a:39:cc:9d: 07:e9:21:8e:0b:43:a3:1d:ec:2b:9d:df:c8:84:ee:33:97:09: 2b:86:7a:a4:c7:55:7b:4e:32:e9:5d:a9:42:ba:32:1e:33:7d: cc:fc:3f:6a:6a:c9:f5:2f:41:ec:31:aa:fa:f4:71:77:5a:0c: d8:04:a5:04:55:d5:12:b0:a6:06:22:61:f2:dd:a2:e0:13:0c: 0e:55:82:05:54:eb:f9:7a:cc:d4:f7:29:08:d9:b8:9f:cf:da: 48:6b:97:d5:74:78:8f:f8:31:82:24:a8:e7:b9:5e:64:bf:0c: bf:f5:4a:96:35:ca:d8:fd:5c:34:4d:e8:69:18:18:c4:40:3e: 35:e1:cf:d6:c1:04:d5:c2:2c:43:6b:d0:b0:91:29:c9:f9:d1: e4:22:93:8e:d9:10:bc:88:2d:03:fc:88:e8:97:b4:5c:7e:77: b7:43:5b:8e:4d:53:1d:56:e8:df:4f:33:a5:0e:cf:bc:02:22: ec:07:ef:2a:02:f7:a1:72:a9:46:a5:dc:2d:41:9d:84:c1:7f: 00:4b:78:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscu+l5++c3eYzGwSaFpBHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmZmMTFkZDBjNjZjZTY3ZmUwZjFkNzQ5YzA5MDllZjM0 MThkMjkwHhcNMjUxMjE0MTIwMDM1WhcNMjUxMjE1MTIwMDM1WjAzMTEwLwYDVQQD EyhiY2MyMmE3OGZkNjRjMWZkZTEzMWJlOTc2MTcxNTM5YTIwNjhjOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I4s2h6zLVM9jJclF3XR19vd4thx 9fooUK5GzhTSIp/DzAlEnl+341/qTBQrK8yX3mrmy/9xGhb29SpsPzowOxrssWul jH4isT7xR3/PWVipzYpe0eWOWstmBW2EoUROL86edt409te2Q4btbXLtIEzmDIIO OFkHkpDIFIxa21BmDQFkm7OSCDhwJEqlYu95j1rgbQOKoSRfvZmzNUCuPwwZME6a xKUguDMgYt8gGBGlVX/dFbvwLED3y1ZnsWHmHs5GT2lX9TDNhaEYgWM4ZypPZ5HN Wa7B0qngnNZE0Xi1RbMk+opL5FG0HwXKjsrWjDYJ4Gx0g8DFBGJsfpaP8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzCKnj9ZMH94TG+l2FxU5ogaMjNMB8GA1UdIwQY MBaAFHEv8R3Qxmzmf+Dx10nAkJ7zQY0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTct OWQ2M2IwNDc2ZTI0LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTctOWQ2M2IwNDc2ZTI0 LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwn6ZVFXE 6u8RP1tG9lDUZADb5dAWZXxJIx7JotohKUzJergKXHLekh9v46oX9u98UxMaOcyd B+khjgtDox3sK53fyITuM5cJK4Z6pMdVe04y6V2pQroyHjN9zPw/amrJ9S9B7DGq +vRxd1oM2ASlBFXVErCmBiJh8t2i4BMMDlWCBVTr+XrM1PcpCNm4n8/aSGuX1XR4 j/gxgiSo57leZL8Mv/VKljXK2P1cNE3oaRgYxEA+NeHP1sEE1cIsQ2vQsJEpyfnR 5CKTjtkQvIgtA/yI6Je0XH53t0Nbjk1THVbo308zpQ7PvAIi7AfvKgL3oXKpRqXc LUGdhMF/AEt4Og== -----END CERTIFICATE-----Generated at Sun Dec 14 18:56:18 2025 by rpki-client