This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json) Hash identifier: ZdzdYKZNr6wjp2s6o/eniiVeeHRls/H4KcP3LZMquXQ= Subject key identifier: 33:99:59:CB:BF:32:AE:10:2D:D9:43:9B:0D:EA:B6:4E:8B:78:CE:F8 Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Certificate serial: 019AF0F5EC10991544E5358491DA9388E325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 00:00:39 +0000 Manifest this update: Sat 06 Dec 2025 00:00:39 +0000 Manifest next update: Sun 07 Dec 2025 00:00:39 +0000 Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: QaPn/RS0FTUGv42RtyHI/SzH7DsO2JxlIEnBcNpVXGM=) 2: XokqtWFIqT_7Y6x0Y8bvhw_rTk0.roa (hash: pu/AyDOQYIhXZhlQAW0PUPOuqEy3eFycFh4kcz6z1H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ec:10:99:15:44:e5:35:84:91:da:93:88:e3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Validity Not Before: Dec 6 00:00:39 2025 GMT Not After : Dec 7 00:00:39 2025 GMT Subject: CN=339959cbbf32ae102dd9439b0deab64e8b78cef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:36:41:90:7e:ac:ab:cf:62:70:a8:ed:e2:38: ac:d8:cf:ab:8d:07:04:54:28:da:f7:62:ad:e7:5c: c1:82:4a:a0:57:e3:24:72:10:58:0c:43:48:ba:dc: e5:03:97:f4:f2:e2:75:53:65:65:5e:b8:b9:bc:34: 07:b2:a0:81:3d:61:13:94:54:a7:c8:a0:80:35:ec: 55:a2:2b:34:60:97:a5:1c:6e:f6:dc:27:d1:18:02: fc:98:50:5b:c4:42:1a:bf:82:3e:d1:db:82:05:20: fb:f4:31:7f:87:a7:0a:44:38:bd:11:6a:16:21:1f: 39:ec:a1:72:1e:6f:fa:dd:8f:d3:63:eb:fc:f0:b7: 1b:72:13:62:f8:c3:b1:75:d2:9f:36:4b:ef:db:6d: c7:1d:c7:00:c6:ac:c6:f1:8a:b7:3f:4f:b9:e7:6e: b0:f4:6a:8e:15:98:f2:89:44:60:ef:83:b3:d5:f1: 4b:91:2b:b9:0e:01:73:5c:dd:7f:ec:c3:cf:1a:f9: 1f:ef:5b:9b:c2:de:60:f2:6b:b0:d9:b0:22:cc:5e: a3:3a:77:40:39:43:ba:8b:59:ad:0b:e1:87:01:00: 83:57:35:23:e3:b7:f6:ef:13:1c:d3:27:ee:3f:d7: 9b:d0:e4:b2:dd:ec:38:36:da:f1:de:6f:83:b5:09: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:99:59:CB:BF:32:AE:10:2D:D9:43:9B:0D:EA:B6:4E:8B:78:CE:F8 X509v3 Authority Key Identifier: keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:35:da:47:05:55:ab:b9:ff:f7:3b:43:22:81:4a:77:de:04: ab:51:40:96:8b:d4:dd:93:76:54:f3:57:6d:9c:3a:c5:2a:0e: 0c:25:b9:00:14:51:73:6d:40:62:a7:6a:8a:86:cc:35:f8:9e: c7:c3:04:da:fa:7e:c4:48:40:19:6b:19:c0:dc:9f:38:4f:5c: 89:5b:5b:46:c0:55:bd:24:71:76:96:45:bc:b1:19:b3:74:84: 37:99:f8:3d:bf:f2:a0:83:d1:1b:88:bf:ae:a6:a3:f5:1a:fb: ae:7f:e1:72:10:7c:08:32:b0:c3:ad:57:cf:98:e9:4b:63:01: 69:aa:43:45:65:c6:f4:ab:07:0d:e2:55:f3:fa:1b:10:59:2b: ab:c0:dd:9e:e9:b4:03:06:a3:e1:43:09:31:57:33:77:c0:5f: 8e:f5:73:03:e2:37:79:44:44:7d:e8:28:cb:ae:a5:86:41:c6: 1c:bb:9d:8e:bb:a6:2c:19:01:5f:07:6a:4d:45:e0:63:b1:fb: 4b:e6:ff:2b:12:24:ce:55:1d:9e:4e:d8:62:6d:4f:57:81:ec: 50:a2:bb:5a:4e:d1:a8:6a:e8:71:9e:be:22:72:eb:76:b8:28: 11:74:e3:a5:c2:5f:bc:fe:15:46:10:c4:27:af:5d:38:33:1f: 1a:d6:14:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9ewQmRVE5TWEkdqTiOMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz ODc0YzYwHhcNMjUxMjA2MDAwMDM5WhcNMjUxMjA3MDAwMDM5WjAzMTEwLwYDVQQD EygzMzk5NTljYmJmMzJhZTEwMmRkOTQzOWIwZGVhYjY0ZThiNzhjZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TZBkH6sq89icKjt4jis2M+rjQcE VCja92Kt51zBgkqgV+MkchBYDENIutzlA5f08uJ1U2VlXri5vDQHsqCBPWETlFSn yKCANexVois0YJelHG723CfRGAL8mFBbxEIav4I+0duCBSD79DF/h6cKRDi9EWoW IR857KFyHm/63Y/TY+v88LcbchNi+MOxddKfNkvv223HHccAxqzG8Yq3P0+5526w 9GqOFZjyiURg74Oz1fFLkSu5DgFzXN1/7MPPGvkf71ubwt5g8muw2bAizF6jOndA OUO6i1mtC+GHAQCDVzUj47f27xMc0yfuP9eb0OSy3ew4Ntrx3m+DtQkCFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOZWcu/Mq4QLdlDmw3qtk6LeM74MB8GA1UdIwQY MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt Y2U1OTUyMmVmNjZmLzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTXaRwVV q7n/9ztDIoFKd94Eq1FAlovU3ZN2VPNXbZw6xSoODCW5ABRRc21AYqdqiobMNfie x8ME2vp+xEhAGWsZwNyfOE9ciVtbRsBVvSRxdpZFvLEZs3SEN5n4Pb/yoIPRG4i/ rqaj9Rr7rn/hchB8CDKww61Xz5jpS2MBaapDRWXG9KsHDeJV8/obEFkrq8Ddnum0 Awaj4UMJMVczd8BfjvVzA+I3eUREfegoy66lhkHGHLudjrumLBkBXwdqTUXgY7H7 S+b/KxIkzlUdnk7YYm1PV4HsUKK7Wk7RqGrocZ6+InLrdrgoEXTjpcJfvP4VRhDE J69dODMfGtYUsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:58 2025 by rpki-client