This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json) Hash identifier: ewP8+OuuCtIvgRKud3f/RSsRnNIbrJ/eyEwX+smUrjg= Subject key identifier: 44:94:A4:1E:3F:92:5D:64:83:3E:C7:36:DF:A2:F1:0B:4C:15:60:08 Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Certificate serial: 019AF31B52EA750B8FEE6FB8853511EA6340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft Manifest number: 04A7 Signing time: Sat 06 Dec 2025 10:00:45 +0000 Manifest this update: Sat 06 Dec 2025 10:00:45 +0000 Manifest next update: Sun 07 Dec 2025 10:00:45 +0000 Files and hashes: 1: A3eZlYEypGjwef6ovVTvAMEG2Sc.roa (hash: itiiU42XBZajUxpH3eQ5BL8/j+cYwxjPvYG7bJxrjyA=) 2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: 3LZ2Wam5oozV9xJKj64cGowbImopGYvz/VU1NILS97U=) 3: ZioYOGsNfMxy07UlqgZrBgcTE4o.roa (hash: 4f3pcz2xE9Ywmo/wXO916PUITihDfuTfzvT55VS4uaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:52:ea:75:0b:8f:ee:6f:b8:85:35:11:ea:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Validity Not Before: Dec 6 10:00:45 2025 GMT Not After : Dec 7 10:00:45 2025 GMT Subject: CN=4494a41e3f925d64833ec736dfa2f10b4c156008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:8e:bf:b7:e4:32:0a:3c:87:35:32:c4:7a: 17:8b:bf:e6:12:4f:cd:0e:59:91:80:9b:40:75:42: 81:93:b2:7e:09:21:7b:f2:3d:73:60:7d:bc:ed:f8: 3e:78:11:3a:d3:08:7d:e7:72:b1:9f:2a:53:40:1b: f6:3f:65:ab:f0:b4:a6:5f:2a:21:c1:0f:97:c1:99: c3:2a:72:29:57:10:63:f7:e1:33:7c:b0:4e:2b:74: eb:23:3c:f6:a1:d5:dc:30:0f:ce:41:18:d6:38:74: 83:62:df:93:86:4c:17:19:94:f2:fe:a7:4a:e1:1a: f2:38:ef:d7:1a:7d:04:d3:ba:48:93:11:62:1c:87: 8f:ee:fb:7c:15:70:73:c7:b8:26:81:f3:a3:fb:9b: 24:d8:59:c1:a4:15:a6:e9:8f:bc:3c:a6:8f:9e:fa: d8:55:9d:f6:1a:97:41:3a:90:e2:bc:51:57:d6:2f: 38:2d:e6:d8:57:aa:43:6e:14:f7:78:64:42:f9:ae: e9:d4:2a:c1:1c:3a:4e:a7:85:69:31:e1:92:be:1d: 96:2c:b2:d2:d0:04:b8:f2:84:fb:ae:ed:a8:7e:16: 49:c0:2c:47:69:e5:ee:ff:6a:97:c4:65:b2:9f:9c: 11:2b:39:8f:48:b6:6c:07:50:71:bf:d3:30:79:b0: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:94:A4:1E:3F:92:5D:64:83:3E:C7:36:DF:A2:F1:0B:4C:15:60:08 X509v3 Authority Key Identifier: keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:73:9b:19:9f:78:f5:98:4a:e1:a3:4b:5b:93:d2:2d:a7:78: 1a:6d:83:b2:58:f6:45:20:eb:c2:93:d6:9c:82:f7:95:b9:93: c5:98:9b:39:9c:3e:e2:19:a4:e6:45:20:71:a9:58:f5:aa:6f: bd:96:5d:3a:d6:48:ec:f2:c1:8d:3d:a6:eb:66:f9:6f:0c:97: d5:35:6e:7f:90:56:68:e7:3d:19:9f:94:e7:17:0a:83:78:a2: 78:46:98:8d:3a:78:b5:f3:1c:ed:bc:2c:22:91:3f:84:e1:b0: 03:79:16:be:cf:00:6f:9f:06:39:42:93:3a:06:e7:41:d4:9b: f5:89:48:f1:00:51:e1:87:be:15:7b:14:25:28:0b:e3:2e:09: 44:58:f3:52:8d:8f:1b:b4:79:93:82:55:c7:0c:96:e1:50:0d: c9:73:73:db:1c:33:11:b8:e7:31:28:97:4f:de:fd:64:64:37: 14:db:21:fc:76:c5:17:c7:26:09:b9:d1:ee:35:71:df:9c:c8: 0c:18:6d:67:e9:31:49:8e:30:ca:eb:46:4a:ef:a8:f2:e5:89: 3c:1b:08:ee:95:3f:e3:19:bf:c5:b4:e8:a4:21:92:1d:72:e9: 4a:10:77:16:bf:36:ef:cd:bf:27:0c:4d:65:bf:cd:5b:5a:6e: 4d:78:28:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1LqdQuP7m+4hTUR6mNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjhlMWZiYTdiNDRhN2I2NjYyMzZiMjEyNTNkN2Q2MzYy ZDBkODMwHhcNMjUxMjA2MTAwMDQ1WhcNMjUxMjA3MTAwMDQ1WjAzMTEwLwYDVQQD Eyg0NDk0YTQxZTNmOTI1ZDY0ODMzZWM3MzZkZmEyZjEwYjRjMTU2MDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw+Ov7fkMgo8hzUyxHoXi7/mEk/N DlmRgJtAdUKBk7J+CSF78j1zYH287fg+eBE60wh953KxnypTQBv2P2Wr8LSmXyoh wQ+XwZnDKnIpVxBj9+EzfLBOK3TrIzz2odXcMA/OQRjWOHSDYt+ThkwXGZTy/qdK 4RryOO/XGn0E07pIkxFiHIeP7vt8FXBzx7gmgfOj+5sk2FnBpBWm6Y+8PKaPnvrY VZ32GpdBOpDivFFX1i84LebYV6pDbhT3eGRC+a7p1CrBHDpOp4VpMeGSvh2WLLLS 0AS48oT7ru2ofhZJwCxHaeXu/2qXxGWyn5wRKzmPSLZsB1Bxv9MwebCEGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESUpB4/kl1kgz7HNt+i8QtMFWAIMB8GA1UdIwQY MBaAFEto4funtEp7ZmI2shJT19Y2LQ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMt OGIwNmVjNTY0YTFiLzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMtOGIwNmVjNTY0YTFi LzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHObGZ94 9ZhK4aNLW5PSLad4Gm2Dslj2RSDrwpPWnIL3lbmTxZibOZw+4hmk5kUgcalY9apv vZZdOtZI7PLBjT2m62b5bwyX1TVuf5BWaOc9GZ+U5xcKg3iieEaYjTp4tfMc7bws IpE/hOGwA3kWvs8Ab58GOUKTOgbnQdSb9YlI8QBR4Ye+FXsUJSgL4y4JRFjzUo2P G7R5k4JVxwyW4VANyXNz2xwzEbjnMSiXT979ZGQ3FNsh/HbFF8cmCbnR7jVx35zI DBhtZ+kxSY4wyutGSu+o8uWJPBsI7pU/4xm/xbTopCGSHXLpShB3Fr82782/JwxN Zb/NW1puTXgoNA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:32 2025 by rpki-client