This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: 9C+Zi5MceAeTUPRjN7I6K+85Hf4suSKIQI9YR712Bj0= Subject key identifier: 55:3E:E6:DF:19:40:3D:D2:61:35:45:51:A6:C4:1B:5C:EF:AA:13:1D Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019AF1D22C5C2B08348962FCFCB40D04D7C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: FhoglKStZl44+G5DWj4MzeTY2NAeJvHetLOKrywsDIk=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2c:5c:2b:08:34:89:62:fc:fc:b4:0d:04:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=553ee6df19403dd261354551a6c41b5cefaa131d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:e3:b6:bf:52:76:a1:6c:28:50:a7:bf:49: e1:75:d6:62:a4:bf:73:4e:f1:c0:dd:57:85:c5:d3: 49:45:fd:66:83:20:69:bf:ab:d6:0a:05:23:77:5e: db:43:da:4a:e7:c2:17:c1:18:0a:2e:1c:5f:48:db: 35:a5:d3:68:4c:86:a6:82:5e:53:b7:2a:71:ba:de: 05:f0:1c:99:5f:fb:7b:0b:95:e5:14:8a:ea:53:d0: 84:60:ac:0c:a3:bc:61:77:e5:06:fd:d6:b5:f5:32: f3:9d:ad:aa:2b:98:e0:86:33:6f:38:79:48:48:9a: 05:0e:9a:08:97:67:4a:cb:23:4b:d4:a4:3c:5d:a9: 64:a6:7d:c8:01:14:64:42:da:10:58:dd:40:8c:8d: 8b:45:c0:6a:33:5b:9e:e4:23:42:5c:f6:e7:4b:bb: 9c:0c:a6:b9:3f:1e:62:47:a9:54:4b:af:6f:cd:40: da:be:51:a9:b2:4c:f1:c6:5c:16:42:0e:a5:b0:3d: d7:45:cd:40:21:f7:76:94:82:63:43:1a:63:67:73: 6b:f4:92:f6:d4:86:5e:88:f6:9a:3a:38:2b:7b:60: 1a:e0:49:61:bc:c4:b1:f0:5a:03:64:83:cd:78:50: 0f:82:6f:ec:0a:9c:62:e1:12:87:c9:30:5f:98:d9: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3E:E6:DF:19:40:3D:D2:61:35:45:51:A6:C4:1B:5C:EF:AA:13:1D X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:aa:02:89:35:34:a6:ca:4f:9c:a6:da:e0:25:28:e5:73:ad: 13:99:f3:09:12:17:b3:be:05:32:1c:97:64:b7:1d:ac:cd:f8: 2c:53:9f:97:fb:e0:fd:5e:b1:87:38:38:fd:a5:58:d5:15:5e: c3:f6:fd:e7:8a:28:e6:6b:7b:fb:e3:91:f0:83:bc:89:0a:c0: be:88:6b:01:28:49:35:c5:af:8f:8a:13:d2:31:b9:36:07:a2: d6:4b:e6:5c:d5:2b:ea:69:32:a3:33:27:7a:ca:71:9d:b4:f0: a5:97:59:f5:8d:59:af:67:98:99:69:7a:37:e5:71:b2:a0:34: af:d7:58:d3:a0:ce:93:b6:f2:69:62:61:f6:fa:7d:af:bc:3b: 24:67:1c:60:7b:06:a6:82:db:34:bc:3b:4e:1d:17:be:dc:d7: 74:5b:d5:bf:a9:4c:0e:63:56:27:99:74:4f:b3:a1:d8:db:e1: e3:b0:77:c1:39:ab:b1:13:6e:c8:db:3d:1d:52:1b:b7:4d:1d: 66:94:e5:f6:c0:32:6a:c1:09:08:6e:9e:c2:fd:33:45:f7:c2: 1e:97:b4:78:31:d8:0b:78:c9:e0:c9:30:9e:3f:0d:30:a5:f1: e3:b2:96:33:d2:8a:c0:02:93:e1:68:bd:15:47:61:af:14:5d: 3c:09:9d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ixcKwg0iWL8/LQNBNfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD Eyg1NTNlZTZkZjE5NDAzZGQyNjEzNTQ1NTFhNmM0MWI1Y2VmYWExMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcfjtr9SdqFsKFCnv0nhddZipL9z TvHA3VeFxdNJRf1mgyBpv6vWCgUjd17bQ9pK58IXwRgKLhxfSNs1pdNoTIamgl5T typxut4F8ByZX/t7C5XlFIrqU9CEYKwMo7xhd+UG/da19TLzna2qK5jghjNvOHlI SJoFDpoIl2dKyyNL1KQ8Xalkpn3IARRkQtoQWN1AjI2LRcBqM1ue5CNCXPbnS7uc DKa5Px5iR6lUS69vzUDavlGpskzxxlwWQg6lsD3XRc1AIfd2lIJjQxpjZ3Nr9JL2 1IZeiPaaOjgre2Aa4ElhvMSx8FoDZIPNeFAPgm/sCpxi4RKHyTBfmNnPPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFU+5t8ZQD3SYTVFUabEG1zvqhMdMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKoCiTU0 pspPnKba4CUo5XOtE5nzCRIXs74FMhyXZLcdrM34LFOfl/vg/V6xhzg4/aVY1RVe w/b954oo5mt7++OR8IO8iQrAvohrAShJNcWvj4oT0jG5Ngei1kvmXNUr6mkyozMn espxnbTwpZdZ9Y1Zr2eYmWl6N+VxsqA0r9dY06DOk7byaWJh9vp9r7w7JGccYHsG poLbNLw7Th0XvtzXdFvVv6lMDmNWJ5l0T7Oh2Nvh47B3wTmrsRNuyNs9HVIbt00d ZpTl9sAyasEJCG6ewv0zRffCHpe0eDHYC3jJ4Mkwnj8NMKXx47KWM9KKwAKT4Wi9 FUdhrxRdPAmdwA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:14 2025 by rpki-client