This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json) Hash identifier: aOCillvGeTgT+uk0Yyzu92rz2I/oFMmaGAgv80xXleY= Subject key identifier: 1C:92:10:3E:10:49:41:3E:9D:CA:13:87:4A:D9:E3:31:7A:D9:2E:D0 Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3 Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3 Certificate serial: 019ACC44DBCE6F457C504B644EE07E743D01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft Manifest number: 1709 Signing time: Fri 28 Nov 2025 21:00:55 +0000 Manifest this update: Fri 28 Nov 2025 21:00:55 +0000 Manifest next update: Sat 29 Nov 2025 21:00:55 +0000 Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=) 2: H1ot2MdUTN3jveoJS7U1sYASkIY.roa (hash: ysbPlqFJhEFUNGGIg/X6JBUO2rkOODa5SQIBLfuQqpI=) 3: H4lyP83NjE4StXhzWVmNmQgWeD4.roa (hash: C6GXgty+pdVrNR5OI7BiS07ixVEg3xvCstT2O6bzlQY=) 4: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: WmcGeoDexnTlqc1DnSY5WCTlt9T09cHuxoqJTt3bo70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:44:db:ce:6f:45:7c:50:4b:64:4e:e0:7e:74:3d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3 Validity Not Before: Nov 28 21:00:55 2025 GMT Not After : Nov 29 21:00:55 2025 GMT Subject: CN=1c92103e1049413e9dca13874ad9e3317ad92ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:5c:6f:08:f4:ae:da:03:6f:1e:fb:67:96: e9:2b:82:0e:a0:ec:02:63:7a:d0:38:7b:06:2c:30: 44:73:92:cf:78:ef:c9:95:78:71:1d:18:c5:29:f0: 61:5f:8f:d6:92:11:d4:7f:b4:93:d3:98:63:c4:72: 34:44:8d:0a:ae:9c:44:10:b7:ba:3e:81:8e:4b:d3: ba:74:6f:57:09:9d:ae:11:ec:8e:7d:64:8e:ca:b6: 69:2c:26:29:6e:7d:f4:8a:83:a4:52:09:ef:f6:09: 9b:2c:ca:64:ef:9c:39:35:35:09:5c:a1:69:e0:da: 43:49:1d:fe:5a:db:b2:ca:cd:db:4e:0e:5c:40:3d: be:5c:4a:84:ce:ec:ab:1f:65:fc:40:bd:53:e0:94: 47:aa:eb:7f:a7:2c:54:3f:51:36:f7:51:ac:8c:82: 6f:a9:b7:fe:c8:43:be:e0:f0:4c:19:f4:f1:1e:04: 9a:16:a8:37:ad:05:5b:61:38:6f:02:3b:cd:ee:69: e8:d2:79:c3:ed:d2:3d:8d:f3:29:41:e6:65:11:58: 1e:0c:32:38:92:66:bc:32:8c:99:8f:d4:14:b3:b5: 98:95:44:47:27:4b:ff:ef:99:ec:6a:23:e2:33:29: 07:3d:18:d4:e5:29:1e:08:ae:a5:c9:90:c3:bc:2a: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:92:10:3E:10:49:41:3E:9D:CA:13:87:4A:D9:E3:31:7A:D9:2E:D0 X509v3 Authority Key Identifier: keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e6:50:3a:80:49:7e:72:1a:61:8a:84:60:1e:ac:c5:b7:cc: 42:c0:81:92:b4:6f:e2:a5:64:57:b1:7f:19:ff:aa:71:55:57: 1d:65:e0:c2:b8:89:b5:e9:ff:b0:6b:83:10:55:d1:ce:50:21: 37:33:ba:6e:44:33:59:16:ac:b3:ea:98:c1:08:69:81:5b:1c: 38:d5:cd:da:18:13:76:97:8d:3b:af:27:d0:a0:d6:ac:5c:18: 47:e4:75:74:37:25:c9:97:f1:c8:5f:c6:69:2d:e3:33:cc:ed: 23:d9:c8:73:a6:42:8d:b0:19:ad:f4:0b:e9:1b:45:8a:6f:49: f2:a9:f0:f3:f3:ee:93:29:db:de:2b:66:c6:6f:f2:23:f8:73: 66:0a:40:97:7b:e2:e3:ac:d0:16:e5:fa:20:73:63:56:b6:ad: 46:2c:8a:df:53:60:32:18:a6:e6:67:c3:9e:90:f0:10:25:6e: 68:8b:a3:3a:b7:7b:74:e4:59:9b:fa:a2:0b:2e:81:d2:85:37: 04:c7:55:ff:fe:cc:29:5c:13:d4:c1:05:e1:d7:a3:4c:32:4d: d8:1d:38:67:76:8d:08:38:4f:e6:15:4e:33:e4:96:21:70:82: c4:ee:b2:17:e6:c1:75:d4:ff:f0:c5:e1:f2:ee:f7:48:9e:0b: 40:c7:81:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrMRNvOb0V8UEtkTuB+dD0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0 NWE3ZTMwHhcNMjUxMTI4MjEwMDU1WhcNMjUxMTI5MjEwMDU1WjAzMTEwLwYDVQQD EygxYzkyMTAzZTEwNDk0MTNlOWRjYTEzODc0YWQ5ZTMzMTdhZDkyZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKtcbwj0rtoDbx77Z5bpK4IOoOwC Y3rQOHsGLDBEc5LPeO/JlXhxHRjFKfBhX4/WkhHUf7ST05hjxHI0RI0KrpxEELe6 PoGOS9O6dG9XCZ2uEeyOfWSOyrZpLCYpbn30ioOkUgnv9gmbLMpk75w5NTUJXKFp 4NpDSR3+Wtuyys3bTg5cQD2+XEqEzuyrH2X8QL1T4JRHqut/pyxUP1E291GsjIJv qbf+yEO+4PBMGfTxHgSaFqg3rQVbYThvAjvN7mno0nnD7dI9jfMpQeZlEVgeDDI4 kma8MoyZj9QUs7WYlURHJ0v/75nsaiPiMykHPRjU5SkeCK6lyZDDvCr/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBySED4QSUE+ncoTh0rZ4zF62S7QMB8GA1UdIwQY MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+ZQOoBJ fnIaYYqEYB6sxbfMQsCBkrRv4qVkV7F/Gf+qcVVXHWXgwriJten/sGuDEFXRzlAh NzO6bkQzWRass+qYwQhpgVscONXN2hgTdpeNO68n0KDWrFwYR+R1dDclyZfxyF/G aS3jM8ztI9nIc6ZCjbAZrfQL6RtFim9J8qnw8/Pukynb3itmxm/yI/hzZgpAl3vi 46zQFuX6IHNjVratRiyK31NgMhim5mfDnpDwECVuaIujOrd7dORZm/qiCy6B0oU3 BMdV//7MKVwT1MEF4dejTDJN2B04Z3aNCDhP5hVOM+SWIXCCxO6yF+bBddT/8MXh 8u73SJ4LQMeB9A== -----END CERTIFICATE-----Generated at Fri Nov 28 23:39:00 2025 by rpki-client