This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json) Hash identifier: XwUeYl2rxcYZUJiQ7Cxh1AHsttsecMDFEwXFTxdcszM= Subject key identifier: B4:08:9B:AF:1F:85:C5:4D:35:02:0B:CE:35:E6:75:8C:83:33:8E:DB Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd Certificate serial: 019AF208CB463A5A372780EEB53007C8E3C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft Manifest number: 043A Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=) 2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: eQpsv4gq62Hbczy3uXB90aR+Jy3DKMH0pbuV432g9co=) 3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cb:46:3a:5a:37:27:80:ee:b5:30:07:c8:e3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=b4089baf1f85c54d35020bce35e6758c83338edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:89:a1:da:1c:96:63:31:b0:5b:90:26:75: 46:06:a4:ab:40:d8:28:6a:31:39:ba:09:19:10:64: 22:3f:7c:0e:93:22:8f:52:ab:a1:9a:1b:6d:84:d3: bc:5c:de:b4:44:cb:13:71:3e:34:cf:d3:b6:b6:ce: 30:3c:21:17:db:f0:9f:69:63:86:ba:f3:b7:92:73: 98:87:4a:9a:20:f3:17:ce:d2:d3:2c:8f:bf:96:c8: 00:2a:44:af:84:f3:37:fd:68:3c:7a:8b:d2:7c:4e: 5f:c7:d9:b2:56:2e:d0:13:a7:27:29:5e:13:bc:14: bb:21:6c:13:91:0a:d9:88:4b:bd:f4:64:dd:f5:8a: f6:09:b1:9f:b7:ea:71:d4:41:a2:9e:67:81:b2:24: 62:cf:00:08:e3:fe:47:bb:9f:37:cb:6d:f2:ce:67: 91:21:b5:1f:08:bb:15:29:1f:9c:a1:10:b6:33:db: 66:15:5a:c5:34:2f:5c:b6:e8:3a:60:44:d5:35:14: 8f:68:0e:c5:74:5a:04:f4:ff:60:da:3e:17:d9:f7: be:2e:9e:08:3e:00:e4:cf:34:8c:79:2b:42:a8:43: 57:95:fa:15:14:04:52:00:f0:94:f0:1f:92:ab:6a: 6f:cf:9c:40:1d:29:1b:ec:48:e9:e5:da:7a:6c:4d: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:08:9B:AF:1F:85:C5:4D:35:02:0B:CE:35:E6:75:8C:83:33:8E:DB X509v3 Authority Key Identifier: keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0d:7a:f9:0a:cb:f9:e4:e1:35:5b:2b:92:2b:e6:0b:46:07: 05:1c:9e:be:99:6a:04:f6:9e:57:ac:c1:1b:58:df:15:eb:ea: 79:2d:4a:53:6c:38:8b:19:6a:b4:46:78:63:09:d0:bf:5e:12: 3d:ec:f2:5a:0f:10:2c:f8:29:b6:e5:f9:52:52:44:c0:b0:d9: 4c:48:f6:88:ac:7a:bc:cc:ac:e7:b0:52:8e:24:55:a6:c9:d2: ae:7d:6e:9d:00:f9:5b:67:1a:e6:c2:8c:23:06:21:2a:0b:7a: dd:ed:c7:5d:44:41:82:c2:d0:75:bb:9d:a4:ee:3b:3e:a0:3e: 0b:c2:eb:1e:fd:a3:bd:56:6b:9c:37:10:12:b0:1b:82:19:18: 82:69:d1:a6:4a:4d:2b:41:36:01:fd:32:ed:2a:81:4f:2f:3d: fe:f9:10:50:b1:7c:14:4a:d8:52:9d:16:44:f6:08:77:6c:bb: c6:de:ac:18:7d:c0:4e:e1:df:bc:cd:4a:e0:07:51:ab:48:cb: dd:b6:63:69:74:5e:77:02:06:04:c8:9f:77:35:d9:a2:f8:d1: 10:30:16:15:52:3b:2d:2b:42:6e:5f:7d:bb:65:e7:61:f9:e1: 10:01:33:71:dc:b7:20:3e:88:1e:f1:40:40:cb:2a:5b:cb:23: 95:53:13:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMtGOlo3J4DutTAHyOPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNGZiZmNmNWZkYzQ4YWIwYmZiNTI4NTRmN2EwNGZjMWNm ZjFkYmQwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD EyhiNDA4OWJhZjFmODVjNTRkMzUwMjBiY2UzNWU2NzU4YzgzMzM4ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr6JodoclmMxsFuQJnVGBqSrQNgo ajE5ugkZEGQiP3wOkyKPUquhmhtthNO8XN60RMsTcT40z9O2ts4wPCEX2/CfaWOG uvO3knOYh0qaIPMXztLTLI+/lsgAKkSvhPM3/Wg8eovSfE5fx9myVi7QE6cnKV4T vBS7IWwTkQrZiEu99GTd9Yr2CbGft+px1EGinmeBsiRizwAI4/5Hu583y23yzmeR IbUfCLsVKR+coRC2M9tmFVrFNC9ctug6YETVNRSPaA7FdFoE9P9g2j4X2fe+Lp4I PgDkzzSMeStCqENXlfoVFARSAPCU8B+Sq2pvz5xAHSkb7Ejp5dp6bE2uvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQIm68fhcVNNQILzjXmdYyDM47bMB8GA1UdIwQY MBaAFEtPv89f3EirC/tShU96BPwc/x29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODIt OTJkZGVjNmJkMGEyLzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODItOTJkZGVjNmJkMGEy LzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ16+QrL +eThNVsrkivmC0YHBRyevplqBPaeV6zBG1jfFevqeS1KU2w4ixlqtEZ4YwnQv14S PezyWg8QLPgptuX5UlJEwLDZTEj2iKx6vMys57BSjiRVpsnSrn1unQD5W2ca5sKM IwYhKgt63e3HXURBgsLQdbudpO47PqA+C8LrHv2jvVZrnDcQErAbghkYgmnRpkpN K0E2Af0y7SqBTy89/vkQULF8FErYUp0WRPYId2y7xt6sGH3ATuHfvM1K4AdRq0jL 3bZjaXRedwIGBMifdzXZovjREDAWFVI7LStCbl99u2XnYfnhEAEzcdy3ID6IHvFA QMsqW8sjlVMTSg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:42 2025 by rpki-client