This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json) Hash identifier: kh6vHJ8v3tHyrf2yBBViuFpr6Gkn9cgyIwlu2mZ5nZg= Subject key identifier: 17:B7:BF:CC:4C:89:86:13:F6:A6:AE:63:16:4C:26:33:AB:01:50:F6 Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Certificate serial: 019B34202417D9D723DA77FC83790D627687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 01:01:20 +0000 Manifest this update: Fri 19 Dec 2025 01:01:20 +0000 Manifest next update: Sat 20 Dec 2025 01:01:20 +0000 Files and hashes: 1: PdEh-weHu1GNZzYwzSA2l6p4u4o.roa (hash: 81mX5r4txhMt28KzY3Hm4i2MJKH8dzlyDiigOnDnwXc=) 2: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: sbsil/6XlzDMeALe3YaaQ8q11iDxy3jLanU5/KglpIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:24:17:d9:d7:23:da:77:fc:83:79:0d:62:76:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Validity Not Before: Dec 19 01:01:20 2025 GMT Not After : Dec 20 01:01:20 2025 GMT Subject: CN=17b7bfcc4c898613f6a6ae63164c2633ab0150f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:82:77:97:cd:0c:21:c0:5b:04:c3:3c:c1: 01:72:3a:45:0d:79:df:fc:6e:d1:63:54:65:89:09: 85:c4:6a:06:e6:86:51:08:ef:5a:49:58:56:3c:44: 2e:81:f9:44:86:64:4a:c0:fb:0c:dd:79:8f:59:fb: 1e:38:86:a6:7e:11:c6:a9:a5:08:c4:25:8c:bb:88: f7:d6:4e:75:53:29:15:2d:cf:cc:0b:1b:ab:0e:1d: 06:ea:99:cb:c0:dd:4f:19:8e:bc:e8:df:08:af:44: 4a:3e:2f:1d:d9:59:b8:fa:ca:49:eb:ef:fc:a3:4f: 64:19:63:53:5c:92:e5:c4:61:cf:de:d7:65:c5:35: f3:b3:78:a1:af:e6:f2:98:16:aa:29:d4:b3:32:c3: 79:35:ec:7a:41:49:2c:23:7b:ff:00:60:36:69:8a: 92:8b:8b:d7:76:a4:b5:04:46:a8:20:1a:4c:2b:55: da:bd:da:20:1d:bd:ab:47:81:65:6c:b9:1f:4a:4a: 6d:f8:7a:73:1e:83:3f:de:31:c2:f1:35:ad:44:58: 1b:ec:b3:a9:3b:88:af:ed:fc:7b:d2:07:98:c8:54: 5f:89:d7:d1:7f:85:5e:e9:62:a8:8a:06:5a:6f:8b: f5:b0:7c:18:34:ac:c9:c9:db:be:b6:82:47:c7:8f: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B7:BF:CC:4C:89:86:13:F6:A6:AE:63:16:4C:26:33:AB:01:50:F6 X509v3 Authority Key Identifier: keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:44:58:07:b4:f5:17:70:cc:cc:04:fb:3f:a6:08:56:fd:f8: 97:ae:f4:d0:1b:bd:6c:fc:68:a0:b0:ee:79:99:85:5e:74:77: df:18:b4:d2:ed:c6:62:ed:38:db:dc:53:dc:b2:ca:4c:0e:2c: 21:09:92:37:91:1d:06:e5:65:b1:23:58:55:55:9c:11:45:60: 30:5f:ec:0f:c0:9e:b7:ed:ab:2c:4a:db:84:7f:bf:f0:bf:ac: 77:27:fa:2d:b1:0e:ce:cc:6f:3e:1b:bf:f4:ef:cc:5b:3d:83: 76:c0:e0:31:b3:77:c6:bc:af:57:b2:05:cf:93:8a:56:c1:14: 5c:bd:c6:a1:33:b1:7f:68:54:66:ee:35:dc:d3:bc:03:ce:42: b2:0c:ff:f8:47:79:32:e0:b1:6a:d4:0c:29:75:fc:34:65:79: 4a:76:ed:75:e2:c6:10:77:e8:bf:05:e5:6b:e2:98:3f:d9:92: 0c:7c:2e:a5:57:ae:14:4a:ee:f7:bc:7d:b7:46:de:06:2e:7f: 24:cc:fc:c1:42:8f:f7:ca:e2:a2:92:18:1d:a3:4d:45:05:71: 33:92:f4:80:97:71:15:16:34:e1:d7:08:3a:6c:b4:69:5e:15: 69:b6:ca:8a:f8:b9:f4:95:47:7e:3f:14:b8:3e:a9:31:4c:6a: 77:09:5a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0ICQX2dcj2nf8g3kNYnaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz ODc0YzYwHhcNMjUxMjE5MDEwMTIwWhcNMjUxMjIwMDEwMTIwWjAzMTEwLwYDVQQD EygxN2I3YmZjYzRjODk4NjEzZjZhNmFlNjMxNjRjMjYzM2FiMDE1MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0yCd5fNDCHAWwTDPMEBcjpFDXnf /G7RY1RliQmFxGoG5oZRCO9aSVhWPEQugflEhmRKwPsM3XmPWfseOIamfhHGqaUI xCWMu4j31k51UykVLc/MCxurDh0G6pnLwN1PGY686N8Ir0RKPi8d2Vm4+spJ6+/8 o09kGWNTXJLlxGHP3tdlxTXzs3ihr+bymBaqKdSzMsN5Nex6QUksI3v/AGA2aYqS i4vXdqS1BEaoIBpMK1XavdogHb2rR4FlbLkfSkpt+HpzHoM/3jHC8TWtRFgb7LOp O4iv7fx70geYyFRfidfRf4Ve6WKoigZab4v1sHwYNKzJydu+toJHx4/KiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe3v8xMiYYT9qauYxZMJjOrAVD2MB8GA1UdIwQY MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt Y2U1OTUyMmVmNjZmLzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABURYB7T1 F3DMzAT7P6YIVv34l6700Bu9bPxooLDueZmFXnR33xi00u3GYu0429xT3LLKTA4s IQmSN5EdBuVlsSNYVVWcEUVgMF/sD8Cet+2rLErbhH+/8L+sdyf6LbEOzsxvPhu/ 9O/MWz2DdsDgMbN3xryvV7IFz5OKVsEUXL3GoTOxf2hUZu413NO8A85Csgz/+Ed5 MuCxatQMKXX8NGV5SnbtdeLGEHfovwXla+KYP9mSDHwupVeuFEru97x9t0beBi5/ JMz8wUKP98riopIYHaNNRQVxM5L0gJdxFRY04dcIOmy0aV4VabbKivi59JVHfj8U uD6pMUxqdwla1A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:58:27 2025 by rpki-client