This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: lRXOY/pPeFMvWGdaiyEJmoVBq79KteTxe9Yn/o554BA= Subject key identifier: 1C:06:2B:78:66:45:62:C3:BD:63:06:E4:E9:AC:63:F3:F8:BC:31:9B Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B21760E8DB049564BA253C2BACAFA7594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 089B Signing time: Mon 15 Dec 2025 10:02:23 +0000 Manifest this update: Mon 15 Dec 2025 10:02:23 +0000 Manifest next update: Tue 16 Dec 2025 10:02:23 +0000 Files and hashes: 1: 1-EZfm36xDgODSAJSHjoDKqosl0A.roa (hash: YJXvTARkaZsNuPWx3R0tfgZi43JI9omATgYJzudFfVw=) 2: 8wPWU2vG9yor96syg0xci6OMavk.roa (hash: 58okY/hMSnPqb+2am85BaYPbNkOmLTFbAoYMmjPkzSM=) 3: A8u38dlgw8e8wVBstLEUX0BIwKA.roa (hash: wMifdjJKZOKPZclZ2LTT2h1hBhv48+8C1YSb4m0Dn8w=) 4: AcDYJhONPbrOnDXucR_bbR1A5kg.roa (hash: 88oN9iWkRyRsEw49ibrN6cr6y4laodB6sXFL6B6zm+E=) 5: Cj1iRWtZaWr3CQT35mnwIkfqqYs.roa (hash: 9ZVHBVyd/Pk4UvvVMqUwxdLUlrLbgZ/V2ltofM5wDow=) 6: MjYi-LSjoIJQHulT2C8hiHI7HD8.roa (hash: dC5UZCibXUg9xVnIxopZdKZtoheRYoCMgnJyaeHGfKM=) 7: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=) 8: OYN3165s9Ipm3JZkmY2YoXxPwXc.roa (hash: cpcbNpWtjSyDgdmGg67sZ/aJK/DRgTol1F8VTQooe2I=) 9: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: LsMNuvxCKljPqoaz1KO3aJCvFQKBMatxksWaATp7AzA=) 10: XhNIRKox72ceLxS-HicNdteAlnc.roa (hash: QNRbEve8iPmaf5PJ3d4wKSJFvAQJTgfZsNNYbZDbIlc=) 11: gcyVEfl2Y641X6JyrJ5gHsnWGHM.roa (hash: 4fScV3KfjcgkIMTXmX6XzXUXdZUkt2FHTuue2HpZKoE=) 12: i0xOZ9Jhra30YZPBjOHXbYaWfqk.roa (hash: 037VXUJZVI+mWu72PU8YPxD3JLA/Q6+4Wqo2f8ZWqyE=) 13: kTJsplmwURGCaPzG4ayo6wcNo7A.roa (hash: l/8qlEM8+mm6CRnvB68H+M19y+bDF0JqtLE1zP1nToE=) 14: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=) 15: pSBQwLUPyYWO99fSCGOORj9giws.roa (hash: JkOzR+BpOFLVw+DBFx5vd7D/7xkaT2h6VtCqnTT04N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:0e:8d:b0:49:56:4b:a2:53:c2:ba:ca:fa:75:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Dec 15 10:02:23 2025 GMT Not After : Dec 16 10:02:23 2025 GMT Subject: CN=1c062b78664562c3bd6306e4e9ac63f3f8bc319b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:87:64:0c:ea:66:34:94:89:1d:99:35:21: 44:56:a3:81:99:14:7b:99:4a:86:31:bb:e4:29:98: ea:8b:7a:54:71:7f:5c:40:44:2b:33:fe:69:df:0e: a6:12:83:36:c9:d7:a6:16:00:c2:17:9f:57:7a:c0: ce:f5:fe:aa:fc:de:55:82:f1:81:7d:92:51:77:77: bc:d3:8b:af:02:76:f7:3d:86:c0:b1:69:19:2f:e9: 8b:79:3e:e1:44:68:4e:8f:c5:1d:f6:e8:96:b1:7e: a4:9f:5a:f1:da:94:6a:03:ad:80:d0:50:56:13:3a: 5d:fe:4c:b1:6f:e8:23:de:c9:2b:89:e9:4d:57:35: b8:b3:ba:a5:40:f9:9c:91:1f:da:b8:13:48:ea:45: d8:b6:1b:0c:c7:96:3e:93:1d:cc:76:7b:01:91:96: ee:99:b5:84:9b:04:ec:38:69:53:d0:a1:65:45:ea: 12:5e:34:7a:03:c3:94:08:17:74:0d:97:c9:da:f5: 5d:28:ad:f3:b2:7b:bd:90:d3:2c:aa:4d:1d:08:32: cb:51:07:09:33:98:2c:85:6a:20:66:a4:c0:cf:c7: 52:c8:55:80:4b:93:0f:12:51:6c:44:9a:f0:4c:4b: 3d:1c:e4:df:65:f2:48:7d:08:0b:31:d0:cb:25:a2: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:06:2B:78:66:45:62:C3:BD:63:06:E4:E9:AC:63:F3:F8:BC:31:9B X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f5:4d:c8:75:61:01:21:9a:cb:bc:06:42:9d:2b:ef:3a:5b: 7c:14:85:21:f1:60:80:5d:98:93:6b:93:b2:0e:5c:42:43:dc: fa:96:b0:1f:3b:f9:77:33:9c:8a:00:a9:42:b1:29:28:ad:c8: 5b:1c:9d:ab:fd:2c:12:e5:d6:0b:58:60:7c:05:e0:1b:ff:ce: 59:52:94:e4:5e:8b:5b:60:3c:29:a7:b6:9d:f1:ad:eb:e5:51: 21:a7:3f:ac:13:2a:0c:0f:bf:51:15:7e:51:56:6e:cd:a6:4a: b5:0c:14:9a:3b:6c:1b:d5:c4:e5:15:2f:73:7b:b6:04:2f:f6: 07:43:3f:52:ab:3e:c4:a0:e5:c1:44:e5:5a:34:9f:96:43:72: a9:a6:4a:08:7e:d5:f4:08:a0:b8:31:39:04:ac:a2:39:99:32: 01:0e:f7:de:d1:23:b7:71:3f:3c:9c:0a:b0:88:8e:9e:99:e4: 2c:f1:ea:e2:1e:40:1b:53:8e:96:e2:5f:ea:dc:50:26:68:4c: 8d:91:ba:8f:21:76:f4:5b:25:3b:e6:d1:2e:93:20:f2:f5:36: 5e:ed:55:ba:b8:b5:e3:34:9f:4e:7e:eb:75:0d:6e:3f:1f:87: 8e:9a:96:51:bd:6f:25:0f:49:22:42:5f:b9:ca:a7:f4:2c:8f: f0:c1:d2:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdg6NsElWS6JTwrrK+nWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjUxMjE1MTAwMjIzWhcNMjUxMjE2MTAwMjIzWjAzMTEwLwYDVQQD EygxYzA2MmI3ODY2NDU2MmMzYmQ2MzA2ZTRlOWFjNjNmM2Y4YmMzMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4qHZAzqZjSUiR2ZNSFEVqOBmRR7 mUqGMbvkKZjqi3pUcX9cQEQrM/5p3w6mEoM2ydemFgDCF59XesDO9f6q/N5VgvGB fZJRd3e804uvAnb3PYbAsWkZL+mLeT7hRGhOj8Ud9uiWsX6kn1rx2pRqA62A0FBW Ezpd/kyxb+gj3skrielNVzW4s7qlQPmckR/auBNI6kXYthsMx5Y+kx3MdnsBkZbu mbWEmwTsOGlT0KFlReoSXjR6A8OUCBd0DZfJ2vVdKK3zsnu9kNMsqk0dCDLLUQcJ M5gshWogZqTAz8dSyFWAS5MPElFsRJrwTEs9HOTfZfJIfQgLMdDLJaKqTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwGK3hmRWLDvWMG5OmsY/P4vDGbMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPVNyHVh ASGay7wGQp0r7zpbfBSFIfFggF2Yk2uTsg5cQkPc+pawHzv5dzOcigCpQrEpKK3I Wxydq/0sEuXWC1hgfAXgG//OWVKU5F6LW2A8Kae2nfGt6+VRIac/rBMqDA+/URV+ UVZuzaZKtQwUmjtsG9XE5RUvc3u2BC/2B0M/Uqs+xKDlwUTlWjSflkNyqaZKCH7V 9AiguDE5BKyiOZkyAQ733tEjt3E/PJwKsIiOnpnkLPHq4h5AG1OOluJf6txQJmhM jZG6jyF29FslO+bRLpMg8vU2Xu1Vuri14zSfTn7rdQ1uPx+HjpqWUb1vJQ9JIkJf ucqn9CyP8MHSng== -----END CERTIFICATE-----Generated at Mon Dec 15 13:40:28 2025 by rpki-client