This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft File: S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json) Hash identifier: J8n/ux4FVu2CRVGLBltlHD1tubX0cGScxoD4KeT7lR8= Subject key identifier: 9F:FC:64:4D:54:AE:96:25:81:9E:7C:4F:C2:8D:74:17:6D:C4:2C:E2 Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83 Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83 Certificate serial: 019AF19ACFB3941F9748F815FD5125DB2BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft Manifest number: 16BA Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: UO1Ag91A0HZqsnv4P+Y+dyHxGTUbb0XYxxnGOeD8r6Y=) 2: v6SZGiKR24BVvAjZdd8cz7dRNVo.roa (hash: SrmYXvyqUl8YVIgTkfPYRcexlIdDbvR6648X1c8kcVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cf:b3:94:1f:97:48:f8:15:fd:51:25:db:2b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83 Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=9ffc644d54ae9625819e7c4fc28d74176dc42ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9c:fc:46:ce:7d:d6:3f:d5:0b:c5:dd:a1:2d: 80:a4:59:7b:f4:d7:e5:aa:4b:c5:39:19:9c:25:2c: 70:0c:ac:29:c1:c4:35:33:a7:d7:58:d0:5f:2a:77: f5:aa:34:89:d9:b9:6a:57:24:2d:9f:e5:31:09:97: 82:7f:08:a3:b2:ff:2e:73:62:64:6c:e7:b3:9b:93: 96:f0:a2:2f:96:fb:ef:a1:bf:5b:67:53:9e:73:6b: 7c:c8:27:53:15:fc:73:59:c1:02:aa:20:54:86:b6: 41:6e:58:05:55:c9:2f:cd:9b:53:39:64:43:9b:ff: 4c:6c:61:f3:93:53:cb:18:17:9a:01:df:9e:6f:1a: ee:7c:5d:ab:e0:3c:04:19:23:07:4f:da:c1:2d:2d: 1b:e7:0a:ab:ba:f1:11:5e:3b:21:19:21:44:10:86: 88:0a:83:b3:9c:95:e8:f8:b9:e7:f1:0b:32:96:76: 4f:d6:01:33:25:3a:dc:86:87:f7:72:da:56:43:0e: 81:96:d0:42:60:8a:f9:81:f2:51:d1:7d:e1:46:50: db:0a:e3:e6:d5:82:55:31:26:93:ea:6b:00:04:7d: a7:99:87:15:37:3c:c1:db:98:1a:32:7e:56:9f:bc: 48:6a:d5:65:bb:79:c5:e3:f5:8a:05:f7:df:f0:ed: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FC:64:4D:54:AE:96:25:81:9E:7C:4F:C2:8D:74:17:6D:C4:2C:E2 X509v3 Authority Key Identifier: keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:87:d8:34:a3:86:d5:9d:1a:7c:61:c3:16:7b:6c:eb:cc:42: 9b:e6:91:89:33:0f:1b:1d:ba:1e:58:22:2c:fb:ea:6b:a7:a2: 42:6f:c8:a9:85:9c:c5:fd:d3:65:e6:db:79:a0:46:a2:e5:3f: 94:11:b1:df:16:28:4b:fb:7b:c5:02:ec:4b:81:a3:c8:eb:63: f0:c6:7a:7e:cb:7d:ad:1a:ea:d5:df:ba:c0:80:dd:ec:75:eb: 35:3b:92:08:15:12:5f:f1:8b:70:e5:51:32:57:02:10:8e:27: a1:e4:ae:0a:c6:ef:7a:0d:06:5a:b5:d0:73:14:ad:ba:02:3e: 50:c5:43:4b:d6:c5:82:4d:65:1b:2f:44:21:4b:bc:d6:2e:55: 43:1c:84:1c:87:3e:ca:bb:26:92:7f:74:a2:bc:10:a2:04:cd: 04:59:48:aa:12:e2:24:9b:45:2c:7d:8f:cb:e6:40:b7:03:5b: c6:c8:be:24:47:70:12:14:6f:93:bb:6f:3d:fe:06:58:56:88: 8a:18:14:d8:39:05:c4:b4:1b:7d:5e:95:4a:5f:85:a6:15:46: 27:56:6c:3c:12:44:1e:5e:3f:b0:8e:23:86:59:60:4a:26:64: 3a:fa:f6:96:37:92:18:80:72:13:58:cc:92:f2:93:e2:e0:09: ec:65:a7:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxms+zlB+XSPgV/VEl2yurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTNjNmExMGQxNDFmMDBhZWZhZGUwMWJjZDM0OTJmNzU0 ZjRlODMwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD Eyg5ZmZjNjQ0ZDU0YWU5NjI1ODE5ZTdjNGZjMjhkNzQxNzZkYzQyY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJz8Rs591j/VC8XdoS2ApFl79Nfl qkvFORmcJSxwDKwpwcQ1M6fXWNBfKnf1qjSJ2blqVyQtn+UxCZeCfwijsv8uc2Jk bOezm5OW8KIvlvvvob9bZ1Oec2t8yCdTFfxzWcECqiBUhrZBblgFVckvzZtTOWRD m/9MbGHzk1PLGBeaAd+ebxrufF2r4DwEGSMHT9rBLS0b5wqruvERXjshGSFEEIaI CoOznJXo+Lnn8QsylnZP1gEzJTrchof3ctpWQw6BltBCYIr5gfJR0X3hRlDbCuPm 1YJVMSaT6msABH2nmYcVNzzB25gaMn5Wn7xIatVlu3nF4/WKBfff8O10owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/8ZE1UrpYlgZ58T8KNdBdtxCziMB8GA1UdIwQY MBaAFEuTxqENFB8ArvreAbzTSS91T06DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEt ZTEwNGM5ODJkN2EwLzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEtZTEwNGM5ODJkN2Ew LzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARofYNKOG 1Z0afGHDFnts68xCm+aRiTMPGx26HlgiLPvqa6eiQm/IqYWcxf3TZebbeaBGouU/ lBGx3xYoS/t7xQLsS4GjyOtj8MZ6fst9rRrq1d+6wIDd7HXrNTuSCBUSX/GLcOVR MlcCEI4noeSuCsbveg0GWrXQcxStugI+UMVDS9bFgk1lGy9EIUu81i5VQxyEHIc+ yrsmkn90orwQogTNBFlIqhLiJJtFLH2Py+ZAtwNbxsi+JEdwEhRvk7tvPf4GWFaI ihgU2DkFxLQbfV6VSl+FphVGJ1ZsPBJEHl4/sI4jhllgSiZkOvr2ljeSGIByE1jM kvKT4uAJ7GWnnw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:41 2025 by rpki-client