This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json) Hash identifier: 1DJIG+4AhdSPNk1iJXsL6AWz5TDBU6tXSov/51EzqqI= Subject key identifier: CA:B7:1D:27:3A:37:BF:12:61:8F:A1:01:91:C4:3E:D1:E4:1C:50:D6 Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Certificate serial: 019AF2099E0FD5DA1C91EAF340F3C35363B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: 1-zGnEYhHEJZbGiVDDJ7lMa4jVco.roa (hash: Gx3FxUVxBxJq4qnDLAiEnjFJGIMtyJzB9V760MVraNU=) 2: VUHc1KjtIfYjmNEdSGPUlUJ4fi4.roa (hash: 8qyyorbzGiXmM0ae0euzHEycmczWxq6A21gLOn7zqfM=) 3: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=) 4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: HXOGQA4mQ4wD/8JpQfXVN8d6GWdSPaLbxMt3kGAdlbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9e:0f:d5:da:1c:91:ea:f3:40:f3:c3:53:63:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=cab71d273a37bf12618fa10191c43ed1e41c50d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:9e:66:26:2f:76:7a:d0:93:72:92:41:fa: 33:bc:ef:41:49:6b:8d:62:03:4d:33:21:4c:1c:24: 96:5d:6b:20:d6:7c:df:a7:3a:01:3e:89:0d:3a:8e: 97:5c:a5:a1:eb:e5:3f:22:5b:3b:7b:d6:7e:d8:72: 55:bc:89:10:25:62:04:6c:fa:0e:9a:01:bc:74:50: 54:0d:33:61:fa:a2:73:f4:68:cc:5e:69:df:57:b0: de:7f:78:d6:69:58:43:74:6f:b4:48:23:aa:91:5c: 96:4a:27:ab:18:27:78:5a:bc:79:d3:1b:a4:7a:72: 07:da:80:07:1e:66:51:92:6b:f8:3b:24:e5:7a:a4: 22:2a:d2:91:89:7f:15:85:fb:b1:99:32:8a:c5:e9: 92:fd:b2:64:00:ed:fe:46:5f:03:aa:bd:dc:2d:36: cd:c7:47:d3:13:d3:26:19:e8:06:29:fb:21:cf:04: ba:ac:f8:c9:e6:07:02:52:12:3c:ee:49:32:4d:67: 59:53:58:92:9e:df:37:08:ee:1d:bd:1a:1a:8b:36: 19:af:e1:5c:d6:d6:73:96:33:6d:21:57:40:3d:61: 34:31:2f:93:ae:52:ed:0b:5b:03:e3:b7:4e:c7:02: aa:4b:48:7b:dc:33:e8:ee:9e:54:dc:d2:4c:dd:84: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B7:1D:27:3A:37:BF:12:61:8F:A1:01:91:C4:3E:D1:E4:1C:50:D6 X509v3 Authority Key Identifier: keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e4:4c:b1:a3:3e:59:81:70:a3:1f:76:5a:35:e0:18:53:f7: 13:4b:32:2d:f4:aa:46:2f:48:4f:01:57:6e:7c:05:55:25:63: 87:31:36:b0:40:79:0f:67:c1:f9:1b:1d:e3:35:4a:3d:0e:e2: dd:53:bd:13:d2:e6:d0:0c:14:37:b0:96:4f:fb:e6:b4:6a:f5: 2b:66:4a:8f:8e:83:ca:18:db:53:49:8c:41:d9:82:f3:0e:2d: 6b:b4:2d:e2:f1:18:41:92:51:85:db:45:20:da:bf:cc:d1:96: 71:34:39:1f:3b:56:06:20:fc:ba:f2:bf:61:c6:73:15:22:24: 50:74:83:c4:c8:b0:3f:49:e2:0a:db:cb:5b:18:6a:c2:06:d5: 9c:00:29:0b:95:48:ff:07:0d:cc:d1:31:ec:c7:40:51:f6:f1: 4a:d9:5a:72:3c:d9:01:77:e2:60:88:c4:d7:6d:58:cd:f5:a5: f6:12:d2:f1:b3:47:9c:72:9e:1c:1f:c5:87:9d:da:fd:63:03: 3d:dc:64:b9:68:cc:d7:82:00:f5:d9:0e:2d:ca:57:7c:99:68: f3:a2:91:09:c5:09:7b:c4:fc:79:90:bb:c6:61:68:b5:51:27: 9f:f2:bb:f6:91:dd:4a:0f:a1:e3:09:02:b8:89:6c:fb:e8:07: d6:12:ce:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ4P1dockerzQPPDU2O5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw OWU1MGQwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EyhjYWI3MWQyNzNhMzdiZjEyNjE4ZmExMDE5MWM0M2VkMWU0MWM1MGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKKeZiYvdnrQk3KSQfozvO9BSWuN YgNNMyFMHCSWXWsg1nzfpzoBPokNOo6XXKWh6+U/Ils7e9Z+2HJVvIkQJWIEbPoO mgG8dFBUDTNh+qJz9GjMXmnfV7Def3jWaVhDdG+0SCOqkVyWSierGCd4Wrx50xuk enIH2oAHHmZRkmv4OyTleqQiKtKRiX8VhfuxmTKKxemS/bJkAO3+Rl8Dqr3cLTbN x0fTE9MmGegGKfshzwS6rPjJ5gcCUhI87kkyTWdZU1iSnt83CO4dvRoaizYZr+Fc 1tZzljNtIVdAPWE0MS+TrlLtC1sD47dOxwKqS0h73DPo7p5U3NJM3YQaswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq3HSc6N78SYY+hAZHEPtHkHFDWMB8GA1UdIwQY MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt MmIxMDUwNTFiYTU5LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5 LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWORMsaM+ WYFwox92WjXgGFP3E0syLfSqRi9ITwFXbnwFVSVjhzE2sEB5D2fB+Rsd4zVKPQ7i 3VO9E9Lm0AwUN7CWT/vmtGr1K2ZKj46DyhjbU0mMQdmC8w4ta7Qt4vEYQZJRhdtF INq/zNGWcTQ5HztWBiD8uvK/YcZzFSIkUHSDxMiwP0niCtvLWxhqwgbVnAApC5VI /wcNzNEx7MdAUfbxStlacjzZAXfiYIjE121YzfWl9hLS8bNHnHKeHB/Fh53a/WMD PdxkuWjM14IA9dkOLcpXfJlo86KRCcUJe8T8eZC7xmFotVEnn/K79pHdSg+h4wkC uIls++gH1hLO6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:56 2025 by rpki-client