This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft File: S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json) Hash identifier: X7+lplPw0ny2G350AgBifwKvSC0nRXkrI603GcWWWFU= Subject key identifier: 6B:3A:65:70:51:A3:04:AA:FE:18:C1:26:BC:17:B9:18:E7:D7:A4:38 Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09 Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509 Certificate serial: 019AF19B182935D196385CDD17EF7383C840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft Manifest number: 123B Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: yVgd+V5lUHHbvg7lrvakwEQbmCGHofMxlQ97T8TntEo=) 2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:18:29:35:d1:96:38:5c:dd:17:ef:73:83:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=6b3a657051a304aafe18c126bc17b918e7d7a438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:93:dc:01:23:56:b3:5f:b0:9e:a9:ed:b0:c4: 37:29:88:b6:52:6c:d0:bb:a9:3b:93:a5:f2:52:26: d7:45:33:41:13:4c:c1:ce:e6:af:b9:40:96:a8:06: 67:98:0b:49:69:7f:fc:ec:bd:ae:00:c0:45:d2:45: de:26:4c:b2:cb:70:21:f1:c4:64:0e:f7:d8:9e:7c: ec:9b:29:8a:c3:7d:8b:89:f7:6e:95:ad:7a:de:17: 4e:fc:42:ac:20:4c:ae:6a:f1:83:4b:12:3e:70:47: 26:95:7b:6c:05:8f:70:fb:3c:b9:58:11:ce:1b:75: 0f:2a:54:73:4e:28:99:cf:c7:dc:6a:2f:10:5e:a6: 7c:01:cd:50:97:6e:d0:10:df:ee:ad:35:75:d1:bf: fa:f7:89:c4:4a:e7:e6:13:a1:74:e4:67:1c:18:59: 6c:a1:bd:f9:20:7e:be:5c:2a:f4:5d:dd:50:31:4f: 81:89:f8:78:8a:4f:8d:06:df:57:a8:96:66:41:7f: 23:a7:d5:d5:53:5a:e8:21:7a:15:7f:27:a0:8b:1c: 0e:6b:54:e2:36:a7:c1:ec:b3:d5:f5:f4:57:17:36: e3:75:09:98:4d:be:f2:6d:e9:bc:ca:d9:17:15:c6: 2d:f7:8f:f0:08:c6:b6:80:b8:cc:27:d3:2c:bc:44: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3A:65:70:51:A3:04:AA:FE:18:C1:26:BC:17:B9:18:E7:D7:A4:38 X509v3 Authority Key Identifier: keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8d:c2:30:97:b6:32:d1:9e:06:28:f4:7a:4e:da:a7:fe:80: da:c4:bb:b7:bb:fc:c1:fc:60:fb:8c:30:8c:14:93:8e:a2:47: ab:07:70:ba:c8:e2:2e:86:e5:04:89:dc:ab:e1:54:c3:8b:24: f7:b5:a6:03:c4:fa:da:90:19:e8:32:6b:c2:b4:68:0c:23:c6: 4b:f3:10:15:38:3e:ab:cb:1c:f6:07:19:77:fb:cf:85:b8:9c: 47:9e:6b:7d:8f:da:42:44:f5:b6:69:03:06:e6:7f:26:d2:46: dc:ad:21:da:fd:09:ad:61:59:41:9e:54:4d:35:66:6d:ee:a0: a9:b0:dc:84:6c:80:17:3c:e8:d0:22:55:0c:1e:7d:10:2d:bb: 33:ca:da:27:b4:d5:cc:ce:3a:6e:cc:65:b0:34:33:d4:3b:5c: 51:9b:e4:07:d9:1e:bf:bf:97:f5:42:eb:dc:26:41:5f:5a:26: 9b:f6:08:c9:87:25:e6:3d:cf:ae:2a:8c:1d:f1:55:bf:d8:f2: 5f:20:e5:39:df:cf:6e:c6:5e:a8:f0:ac:dd:f2:60:d3:0a:ba: 4c:be:a6:ef:af:36:50:2c:07:3a:a7:ef:01:d9:02:84:ed:45: 90:32:36:03:5e:13:84:d8:91:83:fc:8c:17:0b:a4:14:4f:65: dd:0d:37:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxgpNdGWOFzdF+9zg8hAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiY2Q3MmQ2Y2IzODVhM2EzM2M2YzhmZTU0NTljNjg2YTY4 NDk1MDkwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD Eyg2YjNhNjU3MDUxYTMwNGFhZmUxOGMxMjZiYzE3YjkxOGU3ZDdhNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JPcASNWs1+wnqntsMQ3KYi2UmzQ u6k7k6XyUibXRTNBE0zBzuavuUCWqAZnmAtJaX/87L2uAMBF0kXeJkyyy3Ah8cRk DvfYnnzsmymKw32Lifdula163hdO/EKsIEyuavGDSxI+cEcmlXtsBY9w+zy5WBHO G3UPKlRzTiiZz8fcai8QXqZ8Ac1Ql27QEN/urTV10b/694nESufmE6F05GccGFls ob35IH6+XCr0Xd1QMU+Bifh4ik+NBt9XqJZmQX8jp9XVU1roIXoVfyegixwOa1Ti NqfB7LPV9fRXFzbjdQmYTb7ybem8ytkXFcYt94/wCMa2gLjMJ9MsvEQtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGs6ZXBRowSq/hjBJrwXuRjn16Q4MB8GA1UdIwQY MBaAFEvNctbLOFo6M8bI/lRZxoamhJUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wOGY2NzEtM2MzNS00NTBhLWE5MGUt MmNjZTk2MDA2NjBmLzEvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wOGY2NzEtM2MzNS00NTBhLWE5MGUtMmNjZTk2MDA2NjBm LzEvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao3CMJe2 MtGeBij0ek7ap/6A2sS7t7v8wfxg+4wwjBSTjqJHqwdwusjiLoblBIncq+FUw4sk 97WmA8T62pAZ6DJrwrRoDCPGS/MQFTg+q8sc9gcZd/vPhbicR55rfY/aQkT1tmkD BuZ/JtJG3K0h2v0JrWFZQZ5UTTVmbe6gqbDchGyAFzzo0CJVDB59EC27M8raJ7TV zM46bsxlsDQz1DtcUZvkB9kev7+X9ULr3CZBX1omm/YIyYcl5j3PriqMHfFVv9jy XyDlOd/PbsZeqPCs3fJg0wq6TL6m7682UCwHOqfvAdkChO1FkDI2A14ThNiRg/yM FwukFE9l3Q036w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:12 2025 by rpki-client