This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft File: siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json) Hash identifier: lVswyPC3+79krAiG0S2ZnVXuOsx//aabVD+W5SzmI/c= Subject key identifier: 0C:BF:B3:7C:33:F9:6E:3B:92:19:3C:DC:F8:EF:9C:AD:A3:C3:03:6D Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c Certificate serial: 019B42B77D52EF24CF506601EDD2104AC095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft Manifest number: 06A4 Signing time: Sun 21 Dec 2025 21:01:19 +0000 Manifest this update: Sun 21 Dec 2025 21:01:19 +0000 Manifest next update: Mon 22 Dec 2025 21:01:19 +0000 Files and hashes: 1: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (hash: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=) 2: 4fc8oS9l6XipIztCEOKX5rStKEs.roa (hash: QJlqsQqRFXjTlCtGRezlM1Uj5b/+zIGZvP1ClcUSG6U=) 3: K4EzHSk1OTprfFu33wbkhRI9yVU.roa (hash: kwoZBLXnxtnLuus/aL73h2OdIKgHiGaRAdqLJUprZV4=) 4: iC_8dMVxXZ00UyStzCwzLDNTo54.roa (hash: XW49T+GyZoj1zoB/seC/GjDOMUSaP8XJ+XDar1fKOFQ=) 5: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: 42I7Ri1hfgmop/Tm4ABJHy3NPrUU394ue/u/MIfJrkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:7d:52:ef:24:cf:50:66:01:ed:d2:10:4a:c0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c Validity Not Before: Dec 21 21:01:19 2025 GMT Not After : Dec 22 21:01:19 2025 GMT Subject: CN=0cbfb37c33f96e3b92193cdcf8ef9cada3c3036d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:2b:d4:83:48:e6:2a:0a:03:7d:41:ee:c9: 73:d6:16:26:5f:b2:ab:46:50:f7:11:79:dc:73:1b: 46:83:5b:68:20:a4:0a:fa:dd:af:07:29:6f:2d:7a: b9:04:b7:2f:27:32:5c:67:fb:c4:dc:da:ab:18:47: c7:33:2d:f7:0e:9a:2f:56:ce:da:24:cf:8b:a3:d6: f9:5c:c1:bd:0c:35:f9:71:7f:71:55:c2:5a:ed:15: 9f:d4:39:d1:51:3d:2a:1d:ec:ec:52:ac:88:13:c0: 89:5e:90:99:f5:c5:7d:de:77:65:7d:01:8c:d5:bb: a1:b1:7c:e6:04:f1:87:52:8c:dd:25:c0:24:95:d1: 84:54:80:a1:9f:01:09:b7:a5:06:94:7c:c1:dc:31: d1:08:da:58:8c:3c:19:bc:a8:cc:a3:7f:0d:ea:ca: 5a:15:04:2f:21:8e:4a:79:48:28:84:52:e3:6f:2c: 6f:b5:82:ff:c1:dd:93:60:97:13:0d:dd:af:e5:58: 9b:55:31:f0:eb:2d:ac:dc:c3:17:84:6c:6b:31:14: fd:7a:48:97:93:51:6c:8d:01:31:8e:02:3c:d8:35: 7c:86:90:e7:64:3a:d1:a1:10:f3:74:e2:db:f5:05: d1:1f:5d:5e:95:bc:6e:0e:9a:a6:ba:c7:87:65:ef: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BF:B3:7C:33:F9:6E:3B:92:19:3C:DC:F8:EF:9C:AD:A3:C3:03:6D X509v3 Authority Key Identifier: keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fb:da:f4:91:51:7f:54:fc:0d:ed:07:8d:42:30:f7:5d:27: b0:82:d1:d4:71:9b:e0:a0:40:51:b9:3b:2a:60:88:f7:db:ea: b2:69:b7:34:ff:bd:77:f3:b8:9f:3b:00:40:e0:ee:cb:0e:51: 41:98:82:de:5d:da:d0:5f:7f:c1:f4:2a:54:98:c9:7b:50:7c: a0:20:ac:2e:34:bd:a8:ce:c0:5a:7e:06:16:f8:6e:24:b6:a6: 7b:34:ed:04:fd:e4:a3:21:41:c3:99:6a:70:54:03:0f:7a:d3: 2a:67:28:9e:35:57:91:c4:24:20:bd:ad:c8:94:18:d1:ea:4c: 2d:1b:a1:40:d8:02:63:27:a6:6c:fd:36:db:1e:b3:b2:bf:69: c3:a0:a7:a9:c7:9b:4c:9a:13:60:cf:66:7e:56:a0:1c:09:d7: 92:be:27:b9:ca:a7:ba:52:31:91:66:98:e9:89:ff:ec:f0:ec: 8f:5a:bd:ee:7c:e7:c2:82:25:e5:2f:cc:df:91:5e:0e:b6:49: 53:1f:14:ad:83:d1:25:aa:8b:1e:e0:d1:55:1b:c6:78:7a:c9: 85:0b:d8:e4:5b:c8:0c:fc:62:5b:82:58:7d:e9:7d:8b:28:47: 9d:72:45:3d:55:51:81:bd:68:5a:c7:34:db:be:1d:b7:e3:60: 0f:2e:a4:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt31S7yTPUGYB7dIQSsCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMjY0MDM1MWFiMjFhMGRjN2FhYTE1ZmFiNWIxMTA5Nzc3 MTRhM2MwHhcNMjUxMjIxMjEwMTE5WhcNMjUxMjIyMjEwMTE5WjAzMTEwLwYDVQQD EygwY2JmYjM3YzMzZjk2ZTNiOTIxOTNjZGNmOGVmOWNhZGEzYzMwMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjkr1INI5ioKA31B7slz1hYmX7Kr RlD3EXnccxtGg1toIKQK+t2vBylvLXq5BLcvJzJcZ/vE3NqrGEfHMy33DpovVs7a JM+Lo9b5XMG9DDX5cX9xVcJa7RWf1DnRUT0qHezsUqyIE8CJXpCZ9cV93ndlfQGM 1buhsXzmBPGHUozdJcAkldGEVIChnwEJt6UGlHzB3DHRCNpYjDwZvKjMo38N6spa FQQvIY5KeUgohFLjbyxvtYL/wd2TYJcTDd2v5VibVTHw6y2s3MMXhGxrMRT9ekiX k1FsjQExjgI82DV8hpDnZDrRoRDzdOLb9QXRH11elbxuDpqmuseHZe/FkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy/s3wz+W47khk83PjvnK2jwwNtMB8GA1UdIwQY MBaAFLImQDUashoNx6qhX6tbEQl3cUo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQt MTc5ZTZlNDI5MGMwLzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQtMTc5ZTZlNDI5MGMw LzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPva9JFR f1T8De0HjUIw910nsILR1HGb4KBAUbk7KmCI99vqsmm3NP+9d/O4nzsAQODuyw5R QZiC3l3a0F9/wfQqVJjJe1B8oCCsLjS9qM7AWn4GFvhuJLamezTtBP3koyFBw5lq cFQDD3rTKmconjVXkcQkIL2tyJQY0epMLRuhQNgCYyembP022x6zsr9pw6Cnqceb TJoTYM9mflagHAnXkr4nucqnulIxkWaY6Yn/7PDsj1q97nznwoIl5S/M35FeDrZJ Ux8UrYPRJaqLHuDRVRvGeHrJhQvY5FvIDPxiW4JYfel9iyhHnXJFPVVRgb1oWsc0 274dt+NgDy6kgw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:59:45 2025 by rpki-client