This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft File: S5nNYSQguFk0kdhobOTEr4W5CtU.mft (raw, json) Hash identifier: +oKP8xudjFwvdnGRv2cIs9ce3eKgloI+ufKrjkuV878= Subject key identifier: B6:6F:8E:92:95:0E:01:1C:EE:0B:00:8D:36:A0:D1:0D:68:B6:70:49 Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5 Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5 Certificate serial: 019AF276AE9BE770AB90B0E569AFF29D21BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft Manifest number: 0192 Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: 4qD1Oc9Rkwf3nkPKdA3PqgFhBVg.roa (hash: FAYdaSueDZBgvCYn8/TIySq6P0JIfXLy0IlKcRVzUNU=) 2: S5nNYSQguFk0kdhobOTEr4W5CtU.crl (hash: AVR6aCPrrCW7bVSmGn+sGriIw1eg7RR2jBajMx7ej/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ae:9b:e7:70:ab:90:b0:e5:69:af:f2:9d:21:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5 Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=b66f8e92950e011cee0b008d36a0d10d68b67049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:80:14:a2:d7:a5:1d:02:a6:27:a5:f3:8c:f2: ff:b4:10:c4:a7:ad:69:48:52:3e:45:43:f9:59:5b: 30:f2:01:fa:b6:a1:ab:40:de:20:bf:8a:92:82:ae: d6:b0:02:18:c0:59:4a:e8:8c:fd:69:d9:91:7f:b3: 44:bb:f2:b9:52:e2:71:77:4e:ec:23:c9:33:de:ea: 60:71:9d:af:f0:f5:58:93:d0:52:97:41:8b:9f:61: d9:98:7b:31:8b:e7:01:20:9a:2a:3c:ef:77:59:25: 6b:4c:fb:71:e7:b3:d6:1c:4b:3d:26:89:a7:69:a3: 85:17:f4:5c:e3:b8:ab:14:40:15:82:90:34:f4:7a: 65:b1:0d:f8:d5:80:00:1a:19:a3:17:d7:08:be:78: f6:ff:58:25:4b:d0:86:0b:24:90:07:85:50:88:ca: e8:2c:bb:fb:57:4f:3b:17:c3:44:de:30:f9:ae:81: 70:25:cc:f2:0a:58:dd:88:bc:36:b7:90:63:ff:d2: a9:67:39:9c:97:84:55:27:a3:96:5d:96:39:4c:cc: 12:e6:c5:81:f1:40:02:64:38:2f:c9:58:36:d3:1b: 57:19:82:16:43:9f:f4:09:e4:fa:e8:61:64:19:ec: f4:ab:c0:f1:f8:51:fa:78:a2:c2:f1:07:d9:3e:2c: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6F:8E:92:95:0E:01:1C:EE:0B:00:8D:36:A0:D1:0D:68:B6:70:49 X509v3 Authority Key Identifier: keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5b:99:b5:d0:4e:19:35:a9:92:b1:36:a4:33:61:e1:f1:0a: 87:04:f2:e4:66:6d:92:f7:a7:b7:12:91:60:31:e5:6c:4a:51: fb:e2:cf:0a:98:dd:8f:14:d7:ea:2a:6d:9c:80:27:a9:38:9f: c5:50:59:14:ea:2a:0c:70:fe:ee:a7:f0:78:a0:0e:31:27:47: 94:cf:71:d3:64:22:df:d8:eb:5a:c6:72:43:76:23:11:3a:a5: 80:22:5c:cf:af:32:e2:40:ae:03:e5:7b:90:a3:70:49:c3:79: 54:20:28:2f:60:a8:b6:e0:9b:15:1d:73:22:78:80:87:cd:20: 7a:95:e7:e2:5f:32:ff:1f:06:63:f5:1a:44:a9:56:81:ef:b6: 59:4d:39:f7:e6:c4:84:49:e2:74:2b:f8:83:f5:33:35:cb:81: e9:23:06:01:dc:c2:2e:b6:1f:a1:62:43:d0:14:39:ca:87:97: ae:ba:0f:93:c2:97:6a:21:63:ba:a0:68:89:f0:28:a9:38:e4: ae:92:4b:a2:53:15:60:64:86:ae:d1:ea:aa:ba:22:4e:f7:50: d8:30:87:8e:6d:47:85:fd:70:90:72:6f:f4:78:b3:7b:1b:77: 22:a0:a8:49:5a:17:b4:8e:a8:3c:22:7c:7d:3f:bc:a4:b0:23: 2f:1e:ab:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydq6b53CrkLDlaa/ynSG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTljZDYxMjQyMGI4NTkzNDkxZDg2ODZjZTRjNGFmODVi OTBhZDUwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD EyhiNjZmOGU5Mjk1MGUwMTFjZWUwYjAwOGQzNmEwZDEwZDY4YjY3MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYAUotelHQKmJ6XzjPL/tBDEp61p SFI+RUP5WVsw8gH6tqGrQN4gv4qSgq7WsAIYwFlK6Iz9admRf7NEu/K5UuJxd07s I8kz3upgcZ2v8PVYk9BSl0GLn2HZmHsxi+cBIJoqPO93WSVrTPtx57PWHEs9Jomn aaOFF/Rc47irFEAVgpA09HplsQ341YAAGhmjF9cIvnj2/1glS9CGCySQB4VQiMro LLv7V087F8NE3jD5roFwJczyCljdiLw2t5Bj/9KpZzmcl4RVJ6OWXZY5TMwS5sWB 8UACZDgvyVg20xtXGYIWQ5/0CeT66GFkGez0q8Dx+FH6eKLC8QfZPizpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZvjpKVDgEc7gsAjTag0Q1otnBJMB8GA1UdIwQY MBaAFEuZzWEkILhZNJHYaGzkxK+FuQrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTct OTc0NzIwODg5ZmZhLzEvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTctOTc0NzIwODg5ZmZh LzEvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFuZtdBO GTWpkrE2pDNh4fEKhwTy5GZtkventxKRYDHlbEpR++LPCpjdjxTX6iptnIAnqTif xVBZFOoqDHD+7qfweKAOMSdHlM9x02Qi39jrWsZyQ3YjETqlgCJcz68y4kCuA+V7 kKNwScN5VCAoL2CotuCbFR1zIniAh80gepXn4l8y/x8GY/UaRKlWge+2WU059+bE hEnidCv4g/UzNcuB6SMGAdzCLrYfoWJD0BQ5yoeXrroPk8KXaiFjuqBoifAoqTjk rpJLolMVYGSGrtHqqroiTvdQ2DCHjm1Hhf1wkHJv9Hizext3IqCoSVoXtI6oPCJ8 fT+8pLAjLx6rTw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:39 2025 by rpki-client