This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json) Hash identifier: qDfbArsFgio46dGHn47c6jfm19Bf+nG8ZVoaRh1GYCI= Subject key identifier: E8:E9:FB:0C:84:6A:6C:99:ED:8C:0C:97:75:07:84:94:7E:1E:7C:7B Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b Certificate serial: 019AF1D2525D0C4EA57B5759A4382BD7CCAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft Manifest number: 08A2 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: hvY7O0Hdc5HofpcOBVRRjGVv0adCac7BNTNBdl0KDxU=) 2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:52:5d:0c:4e:a5:7b:57:59:a4:38:2b:d7:cc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=e8e9fb0c846a6c99ed8c0c97750784947e1e7c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:37:f1:cc:34:0d:26:8b:20:8c:03:8e:fc: 4c:42:90:2e:7e:10:0b:ef:3c:15:d7:95:3a:09:06: 57:45:fd:19:91:e8:b6:2e:09:05:87:25:59:20:11: 33:85:f4:d8:15:9c:bb:c9:37:ef:82:ce:a2:e5:09: cd:ac:3c:ed:45:0b:5e:39:0e:09:99:ed:4e:35:05: f5:da:e9:91:e6:47:08:f3:3e:c1:26:e9:ee:21:0d: 66:86:3d:58:e8:58:33:f8:0a:73:41:3d:46:4c:15: 6f:76:f4:47:d5:30:1d:d3:d3:3e:51:fc:fe:7d:fc: b4:54:d9:93:9e:3f:89:d7:38:f5:92:75:9b:c0:cf: 3f:27:f9:2e:1f:a8:a0:a5:e7:70:31:28:8c:e7:88: dc:8c:5c:5e:e4:51:40:c2:8b:ec:90:cf:6c:31:14: 88:73:83:aa:fe:1c:7a:b1:38:84:41:fe:f9:16:1e: d1:4b:9e:f2:10:3d:8b:49:36:cf:b8:48:6f:4b:e4: 39:cc:1e:cb:50:a8:79:65:40:98:27:e9:d4:77:98: ee:2b:b2:76:7a:87:fd:7b:83:52:47:27:ea:1f:99: ae:12:c5:12:8b:1c:a2:f3:74:77:ed:4a:8d:67:ff: b9:c2:61:94:0c:f4:3d:ba:2f:77:bb:d3:f6:37:4c: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E9:FB:0C:84:6A:6C:99:ED:8C:0C:97:75:07:84:94:7E:1E:7C:7B X509v3 Authority Key Identifier: keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2a:08:9c:2a:e0:1b:53:f8:74:42:b6:44:99:fb:3a:a6:a5: 5b:c7:54:ec:78:86:eb:90:bf:06:c5:73:57:68:10:8f:06:97: 2e:db:7d:b4:33:c6:eb:2e:04:f9:81:70:39:ec:ca:01:74:e5: ca:e0:da:43:c7:7a:44:3f:80:3c:89:5a:87:c8:ae:64:49:49: 19:6c:80:16:0b:f7:ab:86:75:7f:45:83:f2:6e:1f:05:1b:fc: 1e:fc:ef:76:96:2c:d3:eb:f6:92:c7:fd:b7:aa:a4:82:db:19: d5:5b:2e:d1:e4:2a:c8:9c:49:c1:e4:4c:e3:bc:bb:7b:9f:ef: f0:c4:27:19:b2:32:bb:7a:62:6b:a3:3e:69:6d:62:80:57:09: 8e:ac:93:24:fd:e2:68:bc:0d:3b:c5:f0:d9:05:2a:53:72:aa: 69:77:f8:57:cb:6a:80:46:8e:a6:a6:03:d4:37:db:9f:20:0f: 8f:7b:88:a3:57:8f:69:e1:11:22:e0:6e:43:fd:24:d1:1e:d3: fa:6c:bb:a2:45:72:97:a0:e2:ad:08:21:de:69:67:77:16:4f: 17:e6:8c:1e:eb:3c:75:96:a1:29:66:47:f8:34:04:a5:e0:26: 4a:92:b5:4c:11:0c:19:ab:12:0a:eb:46:cb:1b:8c:28:05:dd: e2:68:69:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lJdDE6le1dZpDgr18ytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDQ1ZTU4MjA2YTFiOWQ1OWVkZGZhOGY5ODhiMzI3MTdi ZjljNmIwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EyhlOGU5ZmIwYzg0NmE2Yzk5ZWQ4YzBjOTc3NTA3ODQ5NDdlMWU3YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/038cw0DSaLIIwDjvxMQpAufhAL 7zwV15U6CQZXRf0Zkei2LgkFhyVZIBEzhfTYFZy7yTfvgs6i5QnNrDztRQteOQ4J me1ONQX12umR5kcI8z7BJunuIQ1mhj1Y6Fgz+ApzQT1GTBVvdvRH1TAd09M+Ufz+ ffy0VNmTnj+J1zj1knWbwM8/J/kuH6igpedwMSiM54jcjFxe5FFAwovskM9sMRSI c4Oq/hx6sTiEQf75Fh7RS57yED2LSTbPuEhvS+Q5zB7LUKh5ZUCYJ+nUd5juK7J2 eof9e4NSRyfqH5muEsUSixyi83R37UqNZ/+5wmGUDPQ9ui93u9P2N0xxmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjp+wyEamyZ7YwMl3UHhJR+Hnx7MB8GA1UdIwQY MBaAFEvUXlggahudWe3fqPmIsycXv5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQt MDc4NTEwY2VhYzBkLzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQtMDc4NTEwY2VhYzBk LzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHioInCrg G1P4dEK2RJn7OqalW8dU7HiG65C/BsVzV2gQjwaXLtt9tDPG6y4E+YFwOezKAXTl yuDaQ8d6RD+APIlah8iuZElJGWyAFgv3q4Z1f0WD8m4fBRv8HvzvdpYs0+v2ksf9 t6qkgtsZ1Vsu0eQqyJxJweRM47y7e5/v8MQnGbIyu3pia6M+aW1igFcJjqyTJP3i aLwNO8Xw2QUqU3KqaXf4V8tqgEaOpqYD1DfbnyAPj3uIo1ePaeERIuBuQ/0k0R7T +my7okVyl6DirQgh3mlndxZPF+aMHus8dZahKWZH+DQEpeAmSpK1TBEMGasSCutG yxuMKAXd4mhppA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:19 2025 by rpki-client