This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json) Hash identifier: Jmo8QS5L8eO5vBaqh6kej7J1waCqGukj83xCgPoJ/5s= Subject key identifier: 23:30:14:6D:B4:93:44:89:3F:35:5B:58:30:43:22:2E:17:B8:3B:08 Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a Certificate serial: 019AF12F2CA04399F5BF769BBC8793502BF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft Manifest number: 144E Signing time: Sat 06 Dec 2025 01:03:11 +0000 Manifest this update: Sat 06 Dec 2025 01:03:11 +0000 Manifest next update: Sun 07 Dec 2025 01:03:11 +0000 Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: LYT98IWcEfLNdyp70337YXx36triP8Kqo1Eu+p3HFiE=) 2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:2c:a0:43:99:f5:bf:76:9b:bc:87:93:50:2b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a Validity Not Before: Dec 6 01:03:11 2025 GMT Not After : Dec 7 01:03:11 2025 GMT Subject: CN=2330146db49344893f355b583043222e17b83b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:c0:91:16:da:51:69:e9:28:4b:00:12:35: a7:bc:82:f9:ea:4f:b6:64:ef:f3:7a:b2:2e:b6:02: 53:36:54:33:75:56:9d:1a:e5:83:56:a8:94:00:44: a7:dd:7f:ec:e4:0f:4b:d6:f9:97:81:48:83:dd:b6: b0:5b:3a:09:23:51:76:60:4e:78:8b:55:1c:11:ee: 4e:b5:94:62:80:1a:6b:bb:6d:52:88:b9:78:95:ef: 48:05:08:d7:62:27:0f:05:6a:d3:90:48:92:37:04: 8e:ce:98:1c:e7:37:93:8a:04:d7:bf:b2:f2:26:ca: 60:2f:20:6f:6d:80:74:17:5e:e8:8c:d5:b6:fa:c5: 6b:33:fa:98:db:a0:c3:3f:47:7f:97:74:d9:d6:d4: af:2e:32:c3:65:0a:28:fa:ef:ab:35:0d:7b:a9:7c: d9:69:f6:91:f5:08:a3:4a:47:43:21:8e:61:7d:0d: c6:2d:2c:e5:22:fd:d6:a8:b3:9c:96:63:4c:bf:d0: f2:a4:67:b7:f5:c5:2f:f3:7e:cc:c7:dc:12:54:d5: 1f:46:94:bd:6c:e6:f5:66:60:56:80:94:79:c4:e5: 08:56:e8:7d:b9:76:46:0b:7b:54:f9:81:af:8f:3d: b2:21:56:15:21:10:2b:a3:6e:70:bd:84:5a:7c:b4: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:30:14:6D:B4:93:44:89:3F:35:5B:58:30:43:22:2E:17:B8:3B:08 X509v3 Authority Key Identifier: keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d5:90:79:47:98:a8:d2:70:4f:5e:16:9a:92:1a:a0:6a:d4: a1:4e:d7:bf:63:0f:5b:26:93:58:d8:d8:75:69:41:fe:09:a4: 8d:61:fe:bf:7c:9c:4e:82:09:68:02:12:86:9e:7a:68:d1:b5: 54:e6:51:34:fb:14:8b:f5:2e:b5:e6:86:c1:10:ec:f2:a8:80: 9b:a8:00:d9:4c:bf:20:8c:c8:77:3a:4b:c5:0d:db:b5:eb:9a: 2d:53:d0:a4:a7:46:b7:14:7a:fe:d3:9c:3c:77:3c:7e:5c:28: ec:4d:ad:10:71:ac:70:cf:03:09:8d:87:1f:f8:82:46:5e:33: 57:6a:2b:98:2b:0d:ad:11:35:f9:19:6e:95:e2:e1:f2:4c:fa: 30:bb:88:35:74:4f:29:91:65:03:85:dd:f8:5c:db:51:52:9a: 66:9d:5c:3a:10:76:39:62:c0:83:01:b6:fa:db:da:1f:d4:da: aa:24:16:0d:36:5e:ef:49:0c:57:a8:e4:71:84:c7:21:32:f8: 49:c1:64:a3:eb:e4:e3:e1:68:f2:cf:3f:0b:a9:02:09:87:d0: 23:ff:97:48:37:de:67:14:7e:c5:37:f7:82:7b:93:9e:22:1b: 57:ef:03:f0:59:ae:11:91:bc:f1:1c:0b:37:48:b1:c6:a0:a9: 53:d0:5d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLyygQ5n1v3abvIeTUCv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNWM3ZDljNzQ0MGU1Y2I0YjBhNjc2MTU2M2MwZDg1MGYw ODExMWEwHhcNMjUxMjA2MDEwMzExWhcNMjUxMjA3MDEwMzExWjAzMTEwLwYDVQQD EygyMzMwMTQ2ZGI0OTM0NDg5M2YzNTViNTgzMDQzMjIyZTE3YjgzYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyTAkRbaUWnpKEsAEjWnvIL56k+2 ZO/zerIutgJTNlQzdVadGuWDVqiUAESn3X/s5A9L1vmXgUiD3bawWzoJI1F2YE54 i1UcEe5OtZRigBpru21SiLl4le9IBQjXYicPBWrTkEiSNwSOzpgc5zeTigTXv7Ly JspgLyBvbYB0F17ojNW2+sVrM/qY26DDP0d/l3TZ1tSvLjLDZQoo+u+rNQ17qXzZ afaR9QijSkdDIY5hfQ3GLSzlIv3WqLOclmNMv9DypGe39cUv837Mx9wSVNUfRpS9 bOb1ZmBWgJR5xOUIVuh9uXZGC3tU+YGvjz2yIVYVIRAro25wvYRafLTMoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMwFG20k0SJPzVbWDBDIi4XuDsIMB8GA1UdIwQY MBaAFEtcfZx0QOXLSwpnYVY8DYUPCBEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzIt YTVlZWJkMjhkNDk2LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzItYTVlZWJkMjhkNDk2 LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotWQeUeY qNJwT14WmpIaoGrUoU7Xv2MPWyaTWNjYdWlB/gmkjWH+v3ycToIJaAIShp56aNG1 VOZRNPsUi/UuteaGwRDs8qiAm6gA2Uy/IIzIdzpLxQ3bteuaLVPQpKdGtxR6/tOc PHc8flwo7E2tEHGscM8DCY2HH/iCRl4zV2ormCsNrRE1+RluleLh8kz6MLuINXRP KZFlA4Xd+FzbUVKaZp1cOhB2OWLAgwG2+tvaH9TaqiQWDTZe70kMV6jkcYTHITL4 ScFko+vk4+Fo8s8/C6kCCYfQI/+XSDfeZxR+xTf3gnuTniIbV+8D8FmuEZG88RwL N0ixxqCpU9BdDw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:17 2025 by rpki-client