This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json) Hash identifier: mPnwD22w8H/eduz4PNpTzNmfKmB+BjAEPh/gcUSCbAE= Subject key identifier: 98:20:78:02:D2:03:0A:EF:98:C0:B9:19:72:11:44:C3:1D:75:F2:9C Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Certificate serial: 019AF50B342422D2C99CAF996409D05FC1E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft Manifest number: 1453 Signing time: Sat 06 Dec 2025 19:02:23 +0000 Manifest this update: Sat 06 Dec 2025 19:02:23 +0000 Manifest next update: Sun 07 Dec 2025 19:02:23 +0000 Files and hashes: 1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=) 2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=) 3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=) 4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=) 5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=) 6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=) 7: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: fk+Iy+dTY1VW2kpYCYKPkisLoObDD4gXBzDT0l7IG4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:34:24:22:d2:c9:9c:af:99:64:09:d0:5f:c1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Validity Not Before: Dec 6 19:02:23 2025 GMT Not After : Dec 7 19:02:23 2025 GMT Subject: CN=98207802d2030aef98c0b919721144c31d75f29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:34:4f:7b:39:ac:10:f1:75:af:72:a7:f1: 47:b0:19:4a:92:40:1c:cf:7a:5e:d7:b1:3c:f8:57: d1:76:44:7e:48:87:c2:80:f8:f4:07:cf:0e:6f:ed: dc:77:97:bd:fa:54:ca:9c:65:12:0f:48:55:d3:8e: 45:33:fa:7c:ec:49:15:1d:ed:bf:a0:33:63:b3:b9: 8a:f0:b4:43:82:e7:de:43:31:78:9e:9e:3f:de:52: f2:b2:78:3a:e9:51:29:66:ce:df:15:08:55:22:52: e8:2c:6e:2d:ae:80:6d:7e:98:9b:58:ba:0a:d2:0c: 32:68:22:ac:63:e3:c1:3b:9d:91:13:67:cb:3b:fd: 45:da:54:d4:12:01:d0:a3:2d:34:ef:ec:02:2f:bc: e5:2f:27:4b:d1:40:7a:6a:47:b4:96:67:07:ed:7e: 54:ed:fd:83:f8:92:fd:96:ff:27:e7:bc:86:80:ba: 28:49:b3:b2:23:a4:5d:ff:14:f5:ee:4e:12:22:ec: 69:c5:9c:7f:7a:b2:5e:df:ad:8b:c3:cc:03:88:17: 45:a3:bd:a9:51:8a:19:b0:01:64:27:1d:d3:cc:74: ff:0e:63:44:75:35:9b:c0:39:1e:be:0b:1f:87:3c: 7a:8d:c0:0f:01:35:a3:d7:be:ee:a3:8a:66:60:37: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:20:78:02:D2:03:0A:EF:98:C0:B9:19:72:11:44:C3:1D:75:F2:9C X509v3 Authority Key Identifier: keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b1:27:95:6f:42:c3:4c:9a:7b:32:c0:e3:8a:16:14:24:4c: c2:b4:83:34:b5:ab:00:65:21:f7:76:8e:93:54:d6:61:e7:85: c4:b5:fb:dc:bb:b5:b3:14:72:83:88:2f:9a:f9:a1:35:15:02: af:26:9e:66:af:8c:bb:7d:25:10:58:3f:c0:2b:a9:d7:66:08: 75:2f:5c:ee:28:11:65:bb:2c:1a:71:88:aa:06:bb:81:e4:74: 29:fc:d7:4b:2a:99:3a:a6:26:7c:9d:89:0c:21:35:c8:73:de: ba:93:68:b3:f2:79:d1:8f:1e:3f:f2:55:4f:b6:5e:f1:87:05: ff:55:6c:ec:cc:5d:c7:04:7e:27:99:33:59:fa:5a:49:b5:e5: 83:90:cf:ba:22:5f:71:9b:81:00:f5:22:b7:2e:e9:39:9a:1d: 05:a5:9f:49:e4:da:9e:4f:4b:b0:1c:18:67:69:77:e5:97:02: 14:3d:37:ec:b1:dc:17:c1:45:bb:5a:71:73:07:02:54:bc:f2: 22:bd:1a:9b:37:e6:88:ef:a4:1e:77:20:34:69:fe:45:6f:4e: b2:23:99:eb:d2:6f:e4:ae:33:cb:4f:49:0b:7e:25:bd:ac:fc: 8c:91:4f:7c:93:db:fe:ba:b8:10:76:13:b4:86:22:84:0c:6c: 9b:fa:60:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzQkItLJnK+ZZAnQX8HpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy YjAzYzAwHhcNMjUxMjA2MTkwMjIzWhcNMjUxMjA3MTkwMjIzWjAzMTEwLwYDVQQD Eyg5ODIwNzgwMmQyMDMwYWVmOThjMGI5MTk3MjExNDRjMzFkNzVmMjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh80T3s5rBDxda9yp/FHsBlKkkAc z3pe17E8+FfRdkR+SIfCgPj0B88Ob+3cd5e9+lTKnGUSD0hV045FM/p87EkVHe2/ oDNjs7mK8LRDgufeQzF4np4/3lLysng66VEpZs7fFQhVIlLoLG4troBtfpibWLoK 0gwyaCKsY+PBO52RE2fLO/1F2lTUEgHQoy007+wCL7zlLydL0UB6ake0lmcH7X5U 7f2D+JL9lv8n57yGgLooSbOyI6Rd/xT17k4SIuxpxZx/erJe362Lw8wDiBdFo72p UYoZsAFkJx3TzHT/DmNEdTWbwDkevgsfhzx6jcAPATWj177uo4pmYDc+zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJggeALSAwrvmMC5GXIRRMMddfKcMB8GA1UdIwQY MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt YTcyNDdlOWQ1ZjNhLzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbEnlW9C w0yaezLA44oWFCRMwrSDNLWrAGUh93aOk1TWYeeFxLX73Lu1sxRyg4gvmvmhNRUC ryaeZq+Mu30lEFg/wCup12YIdS9c7igRZbssGnGIqga7geR0KfzXSyqZOqYmfJ2J DCE1yHPeupNos/J50Y8eP/JVT7Ze8YcF/1Vs7MxdxwR+J5kzWfpaSbXlg5DPuiJf cZuBAPUity7pOZodBaWfSeTank9LsBwYZ2l35ZcCFD037LHcF8FFu1pxcwcCVLzy Ir0amzfmiO+kHncgNGn+RW9OsiOZ69Jv5K4zy09JC34lvaz8jJFPfJPb/rq4EHYT tIYihAxsm/pgfg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:45:02 2025 by rpki-client