This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json) Hash identifier: VEL1/LJ+d90Ae2tNpbyJn78c4A8OaPZzzWp1jsd3mPo= Subject key identifier: C9:18:A5:BC:2B:B2:4A:56:27:6A:B3:4B:69:53:79:82:86:33:7F:31 Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Certificate serial: 019AF465646D3DADD99E2B9232F6A8A7BAA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft Manifest number: 0D6A Signing time: Sat 06 Dec 2025 16:01:16 +0000 Manifest this update: Sat 06 Dec 2025 16:01:16 +0000 Manifest next update: Sun 07 Dec 2025 16:01:16 +0000 Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=) 2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=) 3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=) 4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: mneZwelgwupWmQQBMKXhMqeHlZQSR4SS04VO8t5eHwQ=) 5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=) 6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:64:6d:3d:ad:d9:9e:2b:92:32:f6:a8:a7:ba:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Validity Not Before: Dec 6 16:01:16 2025 GMT Not After : Dec 7 16:01:16 2025 GMT Subject: CN=c918a5bc2bb24a56276ab34b6953798286337f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:51:fe:0a:99:ea:9b:34:ec:d4:c2:b9:78: 1d:28:f6:37:6c:6f:d8:74:57:6c:38:84:70:c8:32: 29:a9:76:cd:4e:e5:34:c5:b5:4b:06:22:f4:54:ea: f7:58:8e:58:f9:a5:e7:d6:41:24:94:47:d8:d6:50: e7:ff:c0:14:1d:5e:fd:3e:e8:58:f7:08:68:5d:2e: d8:8e:28:25:cc:e6:cb:94:59:ef:63:a3:43:62:87: 6a:bd:4a:11:c6:b8:d1:9d:55:e7:42:41:f0:23:cd: cc:4d:d2:66:f2:bf:a4:b0:ca:1e:d8:c5:3c:b6:f4: 7f:46:2e:a6:c5:d5:17:d2:ae:fa:2e:52:b0:fd:43: 3a:0c:1a:cf:f4:43:e1:19:20:5f:bd:a1:76:e1:b0: 66:38:d9:61:5d:44:b6:dd:de:1e:b7:d9:01:79:b0: 4b:62:25:7f:14:bf:5b:c5:34:bb:8d:4c:e4:41:4b: 94:46:14:dd:db:17:25:69:d9:f0:c1:62:83:40:e9: 0a:9a:45:9a:10:90:93:40:69:72:98:b9:08:b4:5b: ca:45:5a:0f:29:8c:bf:cc:5f:a9:96:7c:83:64:f4: 07:2c:66:4b:dc:59:f2:c7:3a:92:dd:94:67:d4:a7: 07:d5:58:57:2c:d5:ae:2b:65:7b:0a:be:0f:40:fe: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:18:A5:BC:2B:B2:4A:56:27:6A:B3:4B:69:53:79:82:86:33:7F:31 X509v3 Authority Key Identifier: keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:09:83:ba:0c:da:48:d3:3b:5e:9a:ef:e1:26:a7:dc:7c:cd: d7:ca:21:8a:83:88:2a:66:79:56:32:2e:4c:e6:8e:d7:b0:af: 9b:49:83:5f:80:4d:51:31:27:a0:2a:26:84:c2:f2:60:6b:e7: c3:64:f2:e8:9e:be:af:3d:0b:3b:66:09:92:50:29:56:93:d7: c5:ef:73:6d:72:7f:f7:94:0a:9f:d8:e5:b7:1a:87:9c:ef:27: 4e:99:87:d5:b7:39:dc:a9:59:89:69:a0:f0:93:aa:dd:6d:b2: 97:5a:bc:db:6d:b8:aa:91:21:87:1c:b3:9d:ac:6c:c9:ff:b5: 5e:9b:f8:4d:a3:ca:41:0e:75:9a:e3:61:43:4f:92:cf:41:7b: 52:8a:24:a5:8d:3c:23:38:ac:9d:47:0d:26:60:aa:37:27:18: 63:a6:50:5d:8d:83:48:93:5e:c5:31:1a:8e:4c:6e:27:3e:62: b9:11:31:f2:d8:ad:62:6b:76:07:31:c2:7a:41:d9:09:2b:c4: 83:84:a0:23:1f:1b:90:cd:1c:c4:4a:5f:99:57:d3:8b:00:20: f1:ed:fe:61:72:ef:fa:93:80:09:7a:e9:5b:db:77:99:9e:fc: c7:68:c0:5a:0e:34:f7:fe:1b:1c:f8:15:22:c9:97:a9:c7:db: d6:4d:b2:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWRtPa3ZniuSMvaop7qjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi YWZiMWIwHhcNMjUxMjA2MTYwMTE2WhcNMjUxMjA3MTYwMTE2WjAzMTEwLwYDVQQD EyhjOTE4YTViYzJiYjI0YTU2Mjc2YWIzNGI2OTUzNzk4Mjg2MzM3ZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/xR/gqZ6ps07NTCuXgdKPY3bG/Y dFdsOIRwyDIpqXbNTuU0xbVLBiL0VOr3WI5Y+aXn1kEklEfY1lDn/8AUHV79PuhY 9whoXS7YjiglzObLlFnvY6NDYodqvUoRxrjRnVXnQkHwI83MTdJm8r+ksMoe2MU8 tvR/Ri6mxdUX0q76LlKw/UM6DBrP9EPhGSBfvaF24bBmONlhXUS23d4et9kBebBL YiV/FL9bxTS7jUzkQUuURhTd2xcladnwwWKDQOkKmkWaEJCTQGlymLkItFvKRVoP KYy/zF+plnyDZPQHLGZL3FnyxzqS3ZRn1KcH1VhXLNWuK2V7Cr4PQP7CAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkYpbwrskpWJ2qzS2lTeYKGM38xMB8GA1UdIwQY MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt NGY0Yjk5NGUwZWIyLzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAmDugza SNM7Xprv4San3HzN18ohioOIKmZ5VjIuTOaO17Cvm0mDX4BNUTEnoComhMLyYGvn w2Ty6J6+rz0LO2YJklApVpPXxe9zbXJ/95QKn9jltxqHnO8nTpmH1bc53KlZiWmg 8JOq3W2yl1q82224qpEhhxyznaxsyf+1Xpv4TaPKQQ51muNhQ0+Sz0F7UookpY08 IzisnUcNJmCqNycYY6ZQXY2DSJNexTEajkxuJz5iuREx8titYmt2BzHCekHZCSvE g4SgIx8bkM0cxEpfmVfTiwAg8e3+YXLv+pOACXrpW9t3mZ78x2jAWg409/4bHPgV IsmXqcfb1k2yHg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:20 2025 by rpki-client