This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json) Hash identifier: 14WVvI5xntvZCene7e27GLvzZ0zDa+YdxqgaRYfq6tQ= Subject key identifier: D3:0D:17:89:40:F5:55:6F:58:C3:69:80:19:40:00:40:C8:2E:38:D4 Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd Certificate serial: 019B12025F5635F34603B9B4199BBD06BD60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft Manifest number: 0C43 Signing time: Fri 12 Dec 2025 10:01:43 +0000 Manifest this update: Fri 12 Dec 2025 10:01:43 +0000 Manifest next update: Sat 13 Dec 2025 10:01:43 +0000 Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=) 2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: GPN3yL5QVoBK8f8pHHLre/yrVSSbb6ZKFScTfpyHdHY=) 3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:5f:56:35:f3:46:03:b9:b4:19:9b:bd:06:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd Validity Not Before: Dec 12 10:01:43 2025 GMT Not After : Dec 13 10:01:43 2025 GMT Subject: CN=d30d178940f5556f58c3698019400040c82e38d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:b2:ad:86:f2:d2:3e:64:03:d1:5d:80:9b: 7f:e7:68:c5:9c:6a:93:bf:41:42:3c:f5:31:15:84: 12:1c:f5:b0:55:dc:eb:49:9b:0e:02:e4:2b:8c:71: d0:25:df:5c:a1:29:4a:5a:0d:18:8f:46:dd:e3:4b: a0:1a:f8:d4:0d:3c:bf:34:e1:68:f5:4b:4f:37:98: e3:95:c6:0d:52:29:da:16:b5:df:2c:d5:b1:f9:5c: 7b:85:93:5d:4a:64:b7:f8:c4:ea:f1:1f:84:23:94: 8d:ce:8a:a3:9f:f7:7e:58:d5:c4:7a:e5:5c:56:33: 0a:e3:77:09:39:92:cd:b2:5b:cf:f5:8e:15:ce:b5: 8e:d6:bb:95:51:e4:05:ee:da:5a:e8:f5:d9:25:0a: 27:8d:5e:c6:97:54:66:b2:86:76:d3:84:db:c3:eb: 04:fd:aa:5e:a7:4e:fa:3a:e5:b4:3a:4d:e7:cd:25: 67:b4:c5:7d:a8:a4:9b:d7:30:b1:6f:a9:75:f2:14: de:35:d1:1a:66:8e:6e:70:42:74:67:27:0b:e8:79: dd:6b:01:4c:60:2c:dc:6b:54:99:cc:e4:40:d1:f1: 2e:13:6f:86:9d:25:10:70:70:f4:ee:06:43:d7:13: c9:8d:b8:da:0a:14:da:a1:c9:5f:2c:76:e6:8b:c3: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0D:17:89:40:F5:55:6F:58:C3:69:80:19:40:00:40:C8:2E:38:D4 X509v3 Authority Key Identifier: keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0f:fa:cc:ec:87:f4:81:db:f8:7f:48:b9:3c:95:41:f2:a2: a2:86:ad:67:9c:90:ef:9e:2e:b8:11:ed:15:da:4d:17:7a:26: d3:30:7f:3c:03:71:bd:9b:79:9a:7e:f6:57:dc:32:98:82:3a: bb:72:81:3d:5d:3e:b9:3e:fd:df:b5:8b:f4:71:b8:f9:73:d5: cc:39:fe:f5:98:cb:b3:95:11:f0:9a:eb:6e:e9:ce:21:9e:f4: e5:a3:72:85:41:11:05:ad:05:96:92:f2:65:0c:8b:a8:7e:e1: 1c:36:73:4d:5a:b1:78:51:fa:e3:9c:c7:51:61:ec:3c:36:74: d4:0b:48:95:fa:5b:95:a7:65:ed:c1:bb:b5:01:fe:bb:6b:0b: b5:a0:33:1a:2b:6a:5c:ab:a1:b7:90:3a:54:05:31:24:20:1d: 4f:f5:e0:57:50:57:86:6b:29:4c:4d:ce:05:8b:1f:4f:0e:5f: 91:9c:f9:4d:47:a2:c3:f1:90:0c:1d:51:f6:4b:09:cc:02:38: 9a:b7:52:f6:d5:b1:e7:73:54:48:10:7b:f9:ab:2e:34:e1:3a: 8a:c7:77:0a:0b:8a:eb:a3:55:e5:d9:18:fe:ef:5f:67:5c:49: f6:12:d2:93:3f:84:d8:95:51:98:dd:2d:ff:a3:40:d3:67:02: bf:f5:39:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAl9WNfNGA7m0GZu9Br1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OWVmMTljMjczZGVkZWQxOWNlZjZiMzY4MzliM2NlYjAx ZWRlZmQwHhcNMjUxMjEyMTAwMTQzWhcNMjUxMjEzMTAwMTQzWjAzMTEwLwYDVQQD EyhkMzBkMTc4OTQwZjU1NTZmNThjMzY5ODAxOTQwMDA0MGM4MmUzOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TOyrYby0j5kA9FdgJt/52jFnGqT v0FCPPUxFYQSHPWwVdzrSZsOAuQrjHHQJd9coSlKWg0Yj0bd40ugGvjUDTy/NOFo 9UtPN5jjlcYNUinaFrXfLNWx+Vx7hZNdSmS3+MTq8R+EI5SNzoqjn/d+WNXEeuVc VjMK43cJOZLNslvP9Y4VzrWO1ruVUeQF7tpa6PXZJQonjV7Gl1RmsoZ204Tbw+sE /apep076OuW0Ok3nzSVntMV9qKSb1zCxb6l18hTeNdEaZo5ucEJ0ZycL6HndawFM YCzca1SZzORA0fEuE2+GnSUQcHD07gZD1xPJjbjaChTaoclfLHbmi8PDnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMNF4lA9VVvWMNpgBlAAEDILjjUMB8GA1UdIwQY MBaAFOee8ZwnPe3tGc72s2g5s86wHt79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUt ZDliNzJlZDdjYjRkLzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUtZDliNzJlZDdjYjRk LzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOA/6zOyH 9IHb+H9IuTyVQfKiooatZ5yQ754uuBHtFdpNF3om0zB/PANxvZt5mn72V9wymII6 u3KBPV0+uT7937WL9HG4+XPVzDn+9ZjLs5UR8JrrbunOIZ705aNyhUERBa0FlpLy ZQyLqH7hHDZzTVqxeFH645zHUWHsPDZ01AtIlfpbladl7cG7tQH+u2sLtaAzGitq XKuht5A6VAUxJCAdT/XgV1BXhmspTE3OBYsfTw5fkZz5TUeiw/GQDB1R9ksJzAI4 mrdS9tWx53NUSBB7+asuNOE6isd3CguK66NV5dkY/u9fZ1xJ9hLSkz+E2JVRmN0t /6NA02cCv/U5Ag== -----END CERTIFICATE-----Generated at Fri Dec 12 19:28:31 2025 by rpki-client