This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json) Hash identifier: OAiFuLZXRw6xK3yvjIkVsyRd8vYPH1SLKDWOEh1DmZw= Subject key identifier: E9:F3:E7:D3:17:F9:3E:38:CA:56:95:E5:52:96:3D:16:9C:58:B9:6D Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8 Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8 Certificate serial: 019AF464E48B7161D899886D5214ECADC658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft Manifest number: 177E Signing time: Sat 06 Dec 2025 16:00:44 +0000 Manifest this update: Sat 06 Dec 2025 16:00:44 +0000 Manifest next update: Sun 07 Dec 2025 16:00:44 +0000 Files and hashes: 1: 0hP_n0pnEZN4K6poUlA-xqEv6yE.roa (hash: F/NswoqCQCtEeweJPN7XVnbp503CyUvfgOPod22wDEM=) 2: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=) 3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: Bz6aag4lO9ql29oc9mIs/RjTclCsfMAwEywCwOI4qvI=) 4: eiTWJKHAu5xriuE2QvW7x5YIzOU.roa (hash: s87ilBuA43+J3H8PQ6AAVQPStmwyHIxSZQ+1oBAYKOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:e4:8b:71:61:d8:99:88:6d:52:14:ec:ad:c6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8 Validity Not Before: Dec 6 16:00:44 2025 GMT Not After : Dec 7 16:00:44 2025 GMT Subject: CN=e9f3e7d317f93e38ca5695e552963d169c58b96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:cf:f6:e5:c3:af:27:9f:e9:6f:2d:04:a0: 20:f0:0b:e9:48:2b:5b:5b:db:9a:00:df:ab:36:6e: 54:03:13:1a:82:62:ad:b8:0a:dd:db:80:e8:ed:3a: 82:10:d1:53:f0:36:e0:51:47:1d:a5:cb:83:15:78: 83:94:63:49:6d:39:45:56:95:1e:54:7a:13:77:91: 41:0d:5c:7b:64:d6:df:33:be:c7:6d:b5:18:69:22: af:c4:a5:7d:0c:6a:bd:c2:74:3a:07:ce:50:50:83: ef:e5:e5:47:93:29:10:89:ce:e4:c7:2d:ee:85:59: c1:1e:ca:69:cd:28:58:c9:fb:7b:96:3f:bd:16:26: 77:95:37:43:63:c7:7d:2e:5d:6f:65:58:b3:f4:b8: 4e:3a:a4:17:b2:b7:6f:63:3e:02:ad:81:80:d1:9f: 47:33:41:cd:69:14:e2:4f:e5:6b:dc:14:bf:c2:4c: be:b8:2b:5f:31:bf:9f:1b:92:5e:f1:a6:6b:3f:9f: 9e:f3:1a:4f:70:c0:b1:f1:da:cc:ed:54:ee:81:e2: 25:95:ae:10:cc:5f:e9:c8:0d:24:af:66:df:46:ff: 73:5a:c9:f4:16:d9:5e:42:26:26:5f:f9:e1:68:c3: 52:ad:81:e5:3d:41:7a:ca:fb:29:a1:a4:82:c2:b6: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:E7:D3:17:F9:3E:38:CA:56:95:E5:52:96:3D:16:9C:58:B9:6D X509v3 Authority Key Identifier: keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:0b:41:56:89:17:52:bc:87:68:1e:25:87:ab:f7:1a:ff:7e: c5:53:2f:9d:80:36:b9:35:01:d2:d5:69:d1:d8:9d:ef:65:55: 60:17:19:76:68:0f:cc:d1:0d:0e:1e:19:54:02:59:94:cf:e9: ef:3a:b1:4e:35:78:84:16:5c:22:a2:b4:2d:a3:07:6d:76:35: 9c:50:2b:75:12:8b:c2:5b:31:76:eb:d8:4b:da:59:b6:b8:0d: f5:b4:f3:25:72:c3:17:89:23:c2:e8:d8:9d:f5:9e:b7:2a:c6: 91:e8:b4:bc:1e:03:23:9e:e1:9d:a2:80:bd:b0:03:a4:20:65: d5:dd:96:56:23:7b:c5:b0:b9:df:2a:e4:a7:b0:75:fa:2b:5f: ae:d4:8a:5f:57:63:4c:0e:98:a6:a1:31:c5:49:42:d1:9f:4b: 01:1d:af:ac:4e:8c:0f:2a:8f:74:f0:83:a3:c8:6f:ab:cc:59: 46:3e:81:a7:0c:04:b1:18:84:2c:3a:ff:2e:20:84:31:57:bf: 59:72:80:ea:1a:5f:17:3d:f2:c3:83:c8:ab:63:28:d9:66:f9: fd:01:41:af:41:cd:64:8e:60:88:c8:b5:cf:4d:0e:6b:81:09: e6:c0:1c:48:0c:da:1e:51:a5:e2:9a:c5:e5:96:73:2e:f2:84: 08:ba:e0:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZOSLcWHYmYhtUhTsrcZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5 MzI5ZjgwHhcNMjUxMjA2MTYwMDQ0WhcNMjUxMjA3MTYwMDQ0WjAzMTEwLwYDVQQD EyhlOWYzZTdkMzE3ZjkzZTM4Y2E1Njk1ZTU1Mjk2M2QxNjljNThiOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJXP9uXDryef6W8tBKAg8AvpSCtb W9uaAN+rNm5UAxMagmKtuArd24Do7TqCENFT8DbgUUcdpcuDFXiDlGNJbTlFVpUe VHoTd5FBDVx7ZNbfM77HbbUYaSKvxKV9DGq9wnQ6B85QUIPv5eVHkykQic7kxy3u hVnBHsppzShYyft7lj+9FiZ3lTdDY8d9Ll1vZViz9LhOOqQXsrdvYz4CrYGA0Z9H M0HNaRTiT+Vr3BS/wky+uCtfMb+fG5Je8aZrP5+e8xpPcMCx8drM7VTugeIlla4Q zF/pyA0kr2bfRv9zWsn0FtleQiYmX/nhaMNSrYHlPUF6yvspoaSCwrY04wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnz59MX+T44ylaV5VKWPRacWLltMB8GA1UdIwQY MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt NjRhNmEwNWI5OTA1LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1 LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwtBVokX UryHaB4lh6v3Gv9+xVMvnYA2uTUB0tVp0did72VVYBcZdmgPzNENDh4ZVAJZlM/p 7zqxTjV4hBZcIqK0LaMHbXY1nFArdRKLwlsxduvYS9pZtrgN9bTzJXLDF4kjwujY nfWetyrGkei0vB4DI57hnaKAvbADpCBl1d2WViN7xbC53yrkp7B1+itfrtSKX1dj TA6YpqExxUlC0Z9LAR2vrE6MDyqPdPCDo8hvq8xZRj6BpwwEsRiELDr/LiCEMVe/ WXKA6hpfFz3yw4PIq2Mo2Wb5/QFBr0HNZI5giMi1z00Oa4EJ5sAcSAzaHlGl4prF 5ZZzLvKECLrgiA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:56 2025 by rpki-client