This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json) Hash identifier: 91yAeCeYsqaAEGMVmFtyGhh3SoQx8YxFuXxuOqGJEgM= Subject key identifier: D7:6B:DB:10:34:CB:FB:24:59:84:10:BC:4B:09:62:65:95:09:58:C7 Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df Certificate serial: 019AF276B220CE91C4A4E78437BEC2D7FE70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft Manifest number: 1392 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=) 2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: dJUhcmrP6GsvHJlWoiy6burd4V2quPJsvHaDZ1ZOMQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b2:20:ce:91:c4:a4:e7:84:37:be:c2:d7:fe:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=d76bdb1034cbfb24598410bc4b096265950958c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:bc:0b:b1:0a:a3:7f:55:37:a2:98:f9:7c: 42:e1:94:05:a2:72:31:bb:cb:72:09:fd:66:4a:f4: 6b:f9:ae:c4:7f:86:cd:08:90:97:03:68:cd:6f:7b: 05:26:61:3d:55:81:5d:a5:31:32:4d:f1:63:0b:42: bf:9a:dd:67:36:3d:a8:fe:80:f9:df:f4:38:e3:da: f9:5b:6f:bc:1d:ea:8a:79:37:c7:1b:a8:56:96:19: e1:5b:60:3d:f6:dd:67:bc:a1:47:4a:9c:ff:ce:63: 44:a2:a5:33:82:78:65:04:ec:20:4d:b6:47:dd:53: 45:e6:e6:a7:34:65:c3:71:1b:b1:23:ca:33:0e:e6: fb:29:47:e7:1c:16:30:44:a3:2d:d0:94:b8:1b:89: 52:82:fa:6a:de:59:bc:9a:0d:6e:7b:61:c3:f6:54: 8f:22:32:fe:6f:67:52:b8:1a:87:11:32:68:b1:b6: 1d:26:b0:98:72:c0:a4:88:9f:7d:0f:11:18:e8:50: 9f:8b:eb:6d:a4:62:3d:11:86:bd:f7:76:31:1a:6d: 77:08:3a:37:bf:7c:bb:7b:5e:b4:69:75:63:50:6b: bd:16:10:3d:98:3e:32:9b:eb:7b:8c:d4:96:86:52: 79:af:5f:ef:99:44:ae:1c:47:51:29:5d:74:35:f0: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6B:DB:10:34:CB:FB:24:59:84:10:BC:4B:09:62:65:95:09:58:C7 X509v3 Authority Key Identifier: keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8e:5b:f1:d6:db:25:18:cc:57:40:b0:ef:7b:1a:58:c9:39: 78:d8:75:ee:af:da:98:06:20:91:4c:c5:b5:a5:f6:c8:ee:29: 40:da:8d:c0:44:19:74:6d:71:6e:ef:7a:29:7f:ce:ca:9a:7c: 54:39:45:39:20:4c:06:23:cc:cd:9a:0b:82:79:53:60:69:d8: 77:92:fc:c8:ae:9f:b5:9e:d4:8d:83:36:a1:bc:10:ff:82:f6: 47:de:0d:34:f5:cb:bb:76:f5:86:67:ae:9b:d2:35:5d:d5:ee: 88:f1:12:82:f9:e4:13:1e:08:e7:3e:02:4f:cb:3f:4c:c7:81: c8:27:e2:f6:ca:3d:92:82:52:a6:f6:ce:75:ee:ed:97:5f:5a: 33:04:e6:4e:1f:59:90:e7:5f:60:77:a3:da:76:a0:50:b1:25: 26:92:d8:5b:7e:d1:5f:6e:a4:08:da:b0:f2:7f:c5:d6:0e:3a: dc:0e:d0:ae:89:b7:32:77:8d:62:23:bc:9d:f7:50:f8:1d:58: 19:d2:b7:7f:b8:98:94:ef:ee:6a:82:41:c5:6a:3b:6f:cd:8e: 34:eb:eb:b8:57:75:58:9e:1d:51:81:4a:2e:7a:89:3d:2b:f7: 75:ca:5a:ba:0f:fc:6c:25:2d:44:66:11:be:c7:84:57:aa:82: 60:03:ae:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrIgzpHEpOeEN77C1/5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNmQ3ZWE0MTAzMzgzN2YwOGMyOGM0NzQyOTg0YjgyYjhm NDQzZGYwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EyhkNzZiZGIxMDM0Y2JmYjI0NTk4NDEwYmM0YjA5NjI2NTk1MDk1OGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisW8C7EKo39VN6KY+XxC4ZQFonIx u8tyCf1mSvRr+a7Ef4bNCJCXA2jNb3sFJmE9VYFdpTEyTfFjC0K/mt1nNj2o/oD5 3/Q449r5W2+8HeqKeTfHG6hWlhnhW2A99t1nvKFHSpz/zmNEoqUzgnhlBOwgTbZH 3VNF5uanNGXDcRuxI8ozDub7KUfnHBYwRKMt0JS4G4lSgvpq3lm8mg1ue2HD9lSP IjL+b2dSuBqHETJosbYdJrCYcsCkiJ99DxEY6FCfi+ttpGI9EYa993YxGm13CDo3 v3y7e160aXVjUGu9FhA9mD4ym+t7jNSWhlJ5r1/vmUSuHEdRKV10NfAzZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdr2xA0y/skWYQQvEsJYmWVCVjHMB8GA1UdIwQY MBaAFEttfqQQM4N/CMKMR0KYS4K49EPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzIxLXBCQXpnMzhJd294SFFwaExncmowUTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xZDA2ODEtZmUyMC00N2EzLTk0ZGYt NWVlODcyMWMxY2ZjLzEvUzIxLXBCQXpnMzhJd294SFFwaExncmowUTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xZDA2ODEtZmUyMC00N2EzLTk0ZGYtNWVlODcyMWMxY2Zj LzEvUzIxLXBCQXpnMzhJd294SFFwaExncmowUTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY5b8dbb JRjMV0Cw73saWMk5eNh17q/amAYgkUzFtaX2yO4pQNqNwEQZdG1xbu96KX/Oypp8 VDlFOSBMBiPMzZoLgnlTYGnYd5L8yK6ftZ7UjYM2obwQ/4L2R94NNPXLu3b1hmeu m9I1XdXuiPESgvnkEx4I5z4CT8s/TMeByCfi9so9koJSpvbOde7tl19aMwTmTh9Z kOdfYHej2nagULElJpLYW37RX26kCNqw8n/F1g463A7Qrom3MneNYiO8nfdQ+B1Y GdK3f7iYlO/uaoJBxWo7b82ONOvruFd1WJ4dUYFKLnqJPSv3dcpaug/8bCUtRGYR vseEV6qCYAOuzw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:49 2025 by rpki-client