This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json) Hash identifier: IcSE9uWTq0E40jiKsPrYePnvZi4bsCzjXh+jmuTgRAk= Subject key identifier: E7:48:F9:1B:85:9A:EB:82:3B:FB:D1:09:A6:30:9F:20:23:9B:DF:2D Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae Certificate serial: 019AF12D19FD332A6A1DE1EEB123DB3F6C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: /VhPwUg78nGnyp+gUYgI3/qPb2CFJhM0+9xePq2bMgw=) 2: f3uE1VDv54J39oNndZpR1jGOB3k.roa (hash: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:19:fd:33:2a:6a:1d:e1:ee:b1:23:db:3f:6c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=e748f91b859aeb823bfbd109a6309f20239bdf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:eb:04:ce:b9:70:89:73:06:da:93:22:aa: 1a:7d:69:b0:74:37:b2:fa:31:9b:df:15:b4:c6:0a: 69:47:0a:06:af:6e:d2:6a:16:a0:80:7e:d0:15:f6: 76:80:13:76:da:45:77:b4:3e:53:3e:a7:5e:68:0b: bb:d6:25:7b:4e:6b:5e:cf:f9:57:6d:dd:08:8d:5d: 9e:a4:be:00:7a:9e:ae:98:5b:39:e8:2c:28:54:01: 1a:72:a4:80:91:49:b6:8c:a8:92:41:80:64:0f:20: bb:7f:cb:70:bb:2e:06:b8:7c:c6:e5:c2:0a:74:d2: f8:65:70:12:a9:02:67:62:e0:1b:74:dd:6c:87:3d: 36:f5:3d:35:c0:23:e4:d8:31:f9:f2:13:77:17:53: 01:eb:21:91:5b:12:35:54:a1:9e:5a:29:d4:ee:c7: ec:34:e4:99:64:e8:04:92:bb:68:37:9e:e0:da:eb: e7:d9:cb:d9:3d:88:ec:9f:53:97:b9:9c:82:56:9a: 65:40:09:04:f0:03:15:ec:a0:81:5b:19:56:be:9b: 8c:2f:e8:e6:82:95:9b:91:09:f4:44:e5:85:96:61: 3a:fa:75:f3:f3:68:12:5e:aa:aa:6a:43:5b:5a:f1: 0b:f4:c6:c9:bd:56:45:bc:4b:51:9a:4b:f0:da:80: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:48:F9:1B:85:9A:EB:82:3B:FB:D1:09:A6:30:9F:20:23:9B:DF:2D X509v3 Authority Key Identifier: keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b0:9c:70:48:72:6e:4d:45:1d:cf:45:0c:e1:ec:1a:6e:86: b0:00:b0:8f:b4:2f:a7:c0:74:74:f3:b9:24:de:42:71:fd:46: d2:e7:d8:3e:a9:b1:d3:d4:83:91:6f:e1:cd:28:b6:2b:8d:97: 06:61:cb:b8:89:e0:22:6a:51:dd:a0:10:3c:c1:29:95:9c:62: 51:5f:a7:dd:d4:5a:be:26:27:77:a3:ce:63:dd:62:e4:f8:30: b0:3b:5b:e9:3f:db:ec:a5:3d:56:8b:3c:e4:83:82:53:09:b3: aa:8c:3d:89:d4:2b:15:e4:16:54:6b:f7:19:67:65:f9:93:f1: e0:7c:15:a2:d7:66:ad:bf:4f:6a:a9:85:2c:71:0e:e6:71:0c: 67:71:f2:a7:b7:7e:84:78:02:b6:80:77:70:3e:67:a5:6b:23: b1:1e:a3:b9:0f:c2:a7:f6:78:cd:0d:cc:7f:db:d6:4a:f4:aa: bf:94:69:4c:f0:39:47:b1:88:76:61:ff:72:53:42:80:55:8e: 4d:7a:d7:f2:b6:f9:f6:93:f1:f9:52:21:1d:04:17:76:16:40: 5e:b4:a3:da:11:8b:f5:b7:f0:99:8a:7c:4d:9d:07:d3:64:e8: 90:21:b6:3e:ad:b0:02:b5:ca:63:1c:2a:e9:db:90:22:34:f8: c4:2f:7a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRn9MypqHeHusSPbP2yWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYWM5ZDI2ZjdhMDViNGQ5MjUyNDk4MDU3YTM4MTRhY2Fm N2QxYWUwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD EyhlNzQ4ZjkxYjg1OWFlYjgyM2JmYmQxMDlhNjMwOWYyMDIzOWJkZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMLrBM65cIlzBtqTIqoafWmwdDey +jGb3xW0xgppRwoGr27SahaggH7QFfZ2gBN22kV3tD5TPqdeaAu71iV7Tmtez/lX bd0IjV2epL4Aep6umFs56CwoVAEacqSAkUm2jKiSQYBkDyC7f8twuy4GuHzG5cIK dNL4ZXASqQJnYuAbdN1shz029T01wCPk2DH58hN3F1MB6yGRWxI1VKGeWinU7sfs NOSZZOgEkrtoN57g2uvn2cvZPYjsn1OXuZyCVpplQAkE8AMV7KCBWxlWvpuML+jm gpWbkQn0ROWFlmE6+nXz82gSXqqqakNbWvEL9MbJvVZFvEtRmkvw2oB2/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdI+RuFmuuCO/vRCaYwnyAjm98tMB8GA1UdIwQY MBaAFEusnSb3oFtNklJJgFejgUrK99GuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMDhkN2UtMTlhNS00MmI5LTgwOGMt YmRiNjQ5Mjk5ODNmLzEvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8wMDhkN2UtMTlhNS00MmI5LTgwOGMtYmRiNjQ5Mjk5ODNm LzEvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7CccEhy bk1FHc9FDOHsGm6GsACwj7Qvp8B0dPO5JN5Ccf1G0ufYPqmx09SDkW/hzSi2K42X BmHLuIngImpR3aAQPMEplZxiUV+n3dRaviYnd6POY91i5PgwsDtb6T/b7KU9Vos8 5IOCUwmzqow9idQrFeQWVGv3GWdl+ZPx4HwVotdmrb9PaqmFLHEO5nEMZ3Hyp7d+ hHgCtoB3cD5npWsjsR6juQ/Cp/Z4zQ3Mf9vWSvSqv5RpTPA5R7GIdmH/clNCgFWO TXrX8rb59pPx+VIhHQQXdhZAXrSj2hGL9bfwmYp8TZ0H02TokCG2Pq2wArXKYxwq 6duQIjT4xC96ow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:51 2025 by rpki-client