This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json) Hash identifier: rOOQAjyszM+MbIPWdFz9zhSg5PBHIp+l0rQGweRKtXM= Subject key identifier: 1F:59:89:0C:12:A2:B5:A3:EF:22:EA:71:9F:D6:F6:B3:B4:20:67:48 Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f Certificate serial: 019AF0BF4AF5ED8F011524DEAE136C8D879E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft Manifest number: 13FB Signing time: Fri 05 Dec 2025 23:00:59 +0000 Manifest this update: Fri 05 Dec 2025 23:00:59 +0000 Manifest next update: Sat 06 Dec 2025 23:00:59 +0000 Files and hashes: 1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=) 2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: w+TFW0ZRjKCy6QwPzt0LxkJYNwJPNI5Cy1h6ogpEbF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4a:f5:ed:8f:01:15:24:de:ae:13:6c:8d:87:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f Validity Not Before: Dec 5 23:00:59 2025 GMT Not After : Dec 6 23:00:59 2025 GMT Subject: CN=1f59890c12a2b5a3ef22ea719fd6f6b3b4206748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:9a:30:fc:85:06:37:5e:3a:c1:71:cf:41: 4c:17:4e:87:39:c6:10:6e:cc:90:ea:91:71:ab:d0: b3:40:55:ff:83:3c:36:f4:31:ec:2a:11:22:dc:7f: f0:2e:53:30:a6:ce:a9:b5:3e:10:6e:24:ec:c4:fb: 79:05:e1:e8:94:68:22:cc:5a:e7:d9:fa:67:40:b3: 14:6e:f3:5d:36:8b:0a:d2:4d:f3:da:dd:f8:4c:71: 8a:6c:39:e9:55:d2:bf:37:e8:e2:f5:e9:18:bd:55: ad:06:3f:b5:bc:93:b0:45:63:91:a8:53:3d:2e:a3: 36:7e:93:61:87:94:a9:30:6e:5c:9b:47:40:64:4e: 99:66:9e:22:70:7b:90:0b:19:75:2d:c1:aa:77:15: 0b:53:d1:77:80:e3:01:ec:0e:98:55:72:8b:55:b4: c7:a9:8a:c7:88:f4:b2:c7:1e:fb:57:3a:83:9c:46: ac:5e:20:4d:c2:4d:05:00:40:8a:8d:a3:d4:43:82: dc:3c:55:34:8b:4b:c2:98:49:d0:6e:16:ac:a3:17: c7:ab:60:e7:4c:08:fb:3b:32:3e:8f:54:ea:af:e0: 2b:c2:f9:71:fb:8c:da:63:c1:09:43:2e:c2:1c:36: f1:43:35:f5:f5:31:f3:e2:bd:8b:3d:f3:82:04:68: da:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:59:89:0C:12:A2:B5:A3:EF:22:EA:71:9F:D6:F6:B3:B4:20:67:48 X509v3 Authority Key Identifier: keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d2:25:dd:70:5a:33:89:59:93:29:08:e7:bd:97:bd:51:14: 5e:cf:6e:35:d0:75:9d:63:15:fc:ea:1f:71:3f:30:67:9e:a8: 60:01:b5:bb:7a:52:b3:a9:fe:1a:4f:cd:ff:3b:41:be:a0:ee: 46:cf:eb:fd:d5:06:26:1f:46:30:92:b1:02:b0:53:fb:a2:6e: b4:a6:9f:60:fe:b8:c6:e4:04:ab:51:f6:09:73:85:46:c4:4c: db:47:35:33:a7:ec:3f:2a:c5:65:38:2f:34:f4:6f:7a:1b:b1: 0a:01:ca:2d:34:5a:34:d5:9e:e0:6c:88:30:a9:e2:21:b3:10: ed:24:ab:fa:cf:a0:65:1c:b4:81:7b:d1:69:9d:3d:f8:ca:be: 27:1a:95:04:9e:d6:d3:87:dd:27:66:8d:f9:6e:1f:cd:b9:b1: 23:bb:b5:4c:4b:b8:da:39:8b:b9:7f:4e:9d:01:9a:0a:b1:87: 27:4b:69:86:15:25:a8:c0:80:83:e7:c1:a3:ef:0d:0d:87:2b: e0:4e:19:d0:8a:18:90:58:7d:e3:b0:e1:76:2a:d8:27:fe:57: c6:3c:d3:b7:7d:77:54:6f:1e:33:49:41:bb:2a:d8:dd:87:a4: c6:53:a4:99:4c:cd:8b:9d:77:ac:75:5a:a7:e3:44:28:d4:7a: 68:63:f8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0r17Y8BFSTerhNsjYeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzIwNjZkN2U2Y2E4YWQyZmZhNjJhNjliMDY3OTIzYTQy ZGY5NmYwHhcNMjUxMjA1MjMwMDU5WhcNMjUxMjA2MjMwMDU5WjAzMTEwLwYDVQQD EygxZjU5ODkwYzEyYTJiNWEzZWYyMmVhNzE5ZmQ2ZjZiM2I0MjA2NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua2aMPyFBjdeOsFxz0FMF06HOcYQ bsyQ6pFxq9CzQFX/gzw29DHsKhEi3H/wLlMwps6ptT4QbiTsxPt5BeHolGgizFrn 2fpnQLMUbvNdNosK0k3z2t34THGKbDnpVdK/N+ji9ekYvVWtBj+1vJOwRWORqFM9 LqM2fpNhh5SpMG5cm0dAZE6ZZp4icHuQCxl1LcGqdxULU9F3gOMB7A6YVXKLVbTH qYrHiPSyxx77VzqDnEasXiBNwk0FAECKjaPUQ4LcPFU0i0vCmEnQbhasoxfHq2Dn TAj7OzI+j1Tqr+Arwvlx+4zaY8EJQy7CHDbxQzX19THz4r2LPfOCBGjaVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9ZiQwSorWj7yLqcZ/W9rO0IGdIMB8GA1UdIwQY MBaAFEtyBm1+bKitL/pippsGeSOkLflvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hNjRiMDktNjRkZi00NzBjLWE2NGQt MWY2OTkxODc3YjI2LzEvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hNjRiMDktNjRkZi00NzBjLWE2NGQtMWY2OTkxODc3YjI2 LzEvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9Il3XBa M4lZkykI572XvVEUXs9uNdB1nWMV/OofcT8wZ56oYAG1u3pSs6n+Gk/N/ztBvqDu Rs/r/dUGJh9GMJKxArBT+6JutKafYP64xuQEq1H2CXOFRsRM20c1M6fsPyrFZTgv NPRvehuxCgHKLTRaNNWe4GyIMKniIbMQ7SSr+s+gZRy0gXvRaZ09+Mq+JxqVBJ7W 04fdJ2aN+W4fzbmxI7u1TEu42jmLuX9OnQGaCrGHJ0tphhUlqMCAg+fBo+8NDYcr 4E4Z0IoYkFh947DhdirYJ/5XxjzTt313VG8eM0lBuyrY3YekxlOkmUzNi513rHVa p+NEKNR6aGP4Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:24 2025 by rpki-client