This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json) Hash identifier: sT3ul0i9Tq3mpWqN+NSFoA8/tzRBKh7FRatEg3vMurc= Subject key identifier: 44:9B:D5:FD:2A:AB:BC:33:C7:C2:D1:B9:D4:0B:04:16:18:34:2C:FE Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d Certificate serial: 019AF163D6EA6F5F71CED890CECFF4853E84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: Gu6hRioZyMbKDyUUve5awqOtvIpppzLwo8xzR1UwArU=) 2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d6:ea:6f:5f:71:ce:d8:90:ce:cf:f4:85:3e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=449bd5fd2aabbc33c7c2d1b9d40b041618342cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:7e:f5:57:c8:98:8c:2e:c8:21:11:ec:67: dd:27:a2:c6:4b:ed:77:6b:ae:6a:e1:d5:36:e5:f7: 84:4a:f4:14:07:37:ff:5a:60:88:3b:44:c5:71:26: 08:75:6e:42:0a:c9:96:bd:d2:a1:37:43:db:17:52: cf:0f:78:ab:c0:f1:80:a5:20:61:05:4a:ee:c6:f2: f8:a1:ea:0a:bf:d7:3f:39:4c:e7:17:d0:ca:45:17: e7:13:e3:95:89:29:c9:66:61:d7:a6:73:57:86:a3: 7e:ea:3f:91:cb:c9:e9:07:13:b7:c8:ab:c8:d3:fa: 65:85:aa:cc:3e:bc:12:16:7a:1e:8f:e0:fe:8b:fa: c4:f6:05:ff:96:5a:14:a0:a3:e9:4d:8d:6a:08:9e: 4e:d2:94:ef:c9:f5:a9:22:02:8f:7c:bc:ea:23:8f: f6:14:17:84:9a:60:d3:ef:69:2e:7f:df:11:93:df: ed:f5:fb:26:f7:7e:ea:38:1e:d0:76:de:76:bb:82: 5e:fa:1b:79:d0:66:60:b8:fa:2e:93:0e:a3:f4:38: 92:4b:7c:55:0c:de:de:ea:50:b1:01:84:14:28:03: 35:77:fd:24:d3:1e:1c:07:18:5a:60:c0:50:95:b2: 2a:49:fa:23:aa:19:6b:a5:85:14:f7:cc:34:92:99: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9B:D5:FD:2A:AB:BC:33:C7:C2:D1:B9:D4:0B:04:16:18:34:2C:FE X509v3 Authority Key Identifier: keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d1:26:c3:21:14:fd:b1:43:3e:ca:92:c0:3e:61:65:fb:ae: 1a:a6:7a:b2:d7:13:b7:a9:97:f9:9f:12:57:42:c5:0b:53:1e: 30:09:e8:b7:39:8f:b3:5d:75:39:05:07:4e:05:d9:2c:9d:59: 02:0a:ae:0b:c2:19:9c:3d:91:0e:e2:45:2d:7a:67:6f:f7:8c: 0e:16:63:d8:24:ad:4d:63:df:82:fd:e5:22:49:15:25:11:cc: 28:64:e3:3c:0e:41:ec:9b:b2:c0:57:3e:65:57:39:21:d3:d4: c3:53:67:e6:10:f0:16:a4:70:23:73:ad:00:20:3e:49:24:2e: a3:92:4e:68:26:9a:30:56:90:f4:4d:09:8c:5d:56:10:28:af: ad:15:e0:25:c7:2f:07:70:b1:95:8b:52:b9:41:77:ca:65:1d: 2f:a2:8b:00:69:e9:d6:57:cd:95:50:29:18:66:e8:d0:50:60: 31:e0:e7:c2:ca:c7:7e:1b:7c:6b:33:88:5a:aa:7e:5c:d2:73: 18:8e:4c:5b:cd:21:41:78:f0:c8:b3:ce:08:d8:57:3a:9d:9b: 0c:a6:92:44:03:ab:c0:d3:59:d1:75:ae:f6:29:75:14:a1:6c: ac:a1:9e:be:a3:c0:98:b9:11:c9:2e:9f:d5:8a:f7:c2:1d:cf: d6:c8:e8:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9bqb19xztiQzs/0hT6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl ZDI2NmQwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD Eyg0NDliZDVmZDJhYWJiYzMzYzdjMmQxYjlkNDBiMDQxNjE4MzQyY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31+9VfImIwuyCER7GfdJ6LGS+13 a65q4dU25feESvQUBzf/WmCIO0TFcSYIdW5CCsmWvdKhN0PbF1LPD3irwPGApSBh BUruxvL4oeoKv9c/OUznF9DKRRfnE+OViSnJZmHXpnNXhqN+6j+Ry8npBxO3yKvI 0/plharMPrwSFnoej+D+i/rE9gX/lloUoKPpTY1qCJ5O0pTvyfWpIgKPfLzqI4/2 FBeEmmDT72kuf98Rk9/t9fsm937qOB7Qdt52u4Je+ht50GZguPoukw6j9DiSS3xV DN7e6lCxAYQUKAM1d/0k0x4cBxhaYMBQlbIqSfojqhlrpYUU98w0kplpgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESb1f0qq7wzx8LRudQLBBYYNCz+MB8GA1UdIwQY MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt YmFjMjAwMjkzMmQ5LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5 LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdEmwyEU /bFDPsqSwD5hZfuuGqZ6stcTt6mX+Z8SV0LFC1MeMAnotzmPs111OQUHTgXZLJ1Z AgquC8IZnD2RDuJFLXpnb/eMDhZj2CStTWPfgv3lIkkVJRHMKGTjPA5B7JuywFc+ ZVc5IdPUw1Nn5hDwFqRwI3OtACA+SSQuo5JOaCaaMFaQ9E0JjF1WECivrRXgJccv B3CxlYtSuUF3ymUdL6KLAGnp1lfNlVApGGbo0FBgMeDnwsrHfht8azOIWqp+XNJz GI5MW80hQXjwyLPOCNhXOp2bDKaSRAOrwNNZ0XWu9il1FKFsrKGevqPAmLkRyS6f 1Yr3wh3P1sjo2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:47 2025 by rpki-client