This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json) Hash identifier: 9mfG6+kf5InLbJVytHnfS6irlN4lw9QKOiME2Oi3IHY= Subject key identifier: 4C:66:D5:68:09:9C:BF:43:1F:CB:30:6F:BB:EC:2E:F5:29:09:3D:8B Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea Certificate serial: 019AF23FE564FB7F6029CBBC2E14B70F5D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: kabNYYUJ03+s/Y7784psYh3W8Q49SHThKZchlw2ZDcE=) 2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e5:64:fb:7f:60:29:cb:bc:2e:14:b7:0f:5d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=4c66d568099cbf431fcb306fbbec2ef529093d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:21:f3:7c:b6:81:9c:3a:03:d4:c9:2b:29: 40:58:d9:b9:3b:e4:62:ce:1e:c7:8a:72:3f:5f:f4: f5:54:e9:a5:53:0b:2d:3e:72:d8:6e:6f:55:06:22: e2:e9:40:3e:d8:8d:bd:15:28:f6:c8:b1:56:5c:dd: 35:77:e6:cd:49:79:99:9c:32:24:fb:a5:16:9d:ca: 22:58:af:f0:9d:4a:8a:46:28:99:ee:fe:40:ad:6b: 69:1e:70:64:da:5a:5f:49:b6:2c:47:77:c9:a8:68: 6e:42:a3:27:f2:ca:34:99:f9:ef:3f:b2:7b:86:64: 6e:0f:dc:62:1f:b9:58:ff:91:ac:f1:54:a0:ff:c7: ee:1b:ac:78:06:1d:81:43:4b:6c:58:9e:71:45:1e: a7:97:0c:c8:49:03:33:71:29:26:5b:5a:5a:5c:22: 2b:d7:7e:92:22:c9:ac:19:4d:d2:6c:da:5f:d9:1d: 6f:88:d1:64:12:8b:e7:88:8e:08:44:5f:8d:3e:3e: 54:17:8e:6a:8b:d7:d2:4e:d1:d1:84:33:42:f2:c4: 7b:81:46:05:6e:6c:9f:0b:eb:0d:bc:fe:06:58:16: 70:b2:b0:04:da:2a:92:17:6d:bb:61:9a:7a:e2:f7: f8:5e:36:ef:38:71:15:e7:57:b1:a8:dc:33:df:2c: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:66:D5:68:09:9C:BF:43:1F:CB:30:6F:BB:EC:2E:F5:29:09:3D:8B X509v3 Authority Key Identifier: keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b7:9d:42:d7:30:3b:be:01:72:3f:63:6b:1c:c8:8c:a7:3f: 7e:65:ee:ad:9d:70:b8:4e:84:28:4c:a8:2d:85:46:8f:34:40: 20:b2:9b:07:19:e1:9d:ce:7e:81:2f:db:83:5e:44:bc:dd:da: f0:68:4a:5d:b5:ce:96:02:3e:70:a6:93:3d:fb:b3:f0:82:b9: 63:34:6d:32:23:f9:5b:4a:63:8f:e1:f1:08:56:80:5a:df:76: 96:ba:83:30:c3:15:d9:45:39:2d:d3:f1:66:1b:b6:bb:3d:6f: 61:9b:68:1a:a3:79:7c:04:71:67:f5:6c:cd:f1:22:66:2b:2a: e1:10:27:c0:e8:74:49:fd:58:5c:a2:41:19:90:a5:c3:52:b8: 31:cf:c5:e0:8b:2b:36:c0:ca:8b:fd:c0:d6:28:54:c1:c5:0c: 64:2f:50:4c:5a:dc:40:88:1c:b0:48:4e:32:bb:94:69:9b:46: 3a:8a:3a:b2:60:64:49:7d:5e:06:1e:df:2b:80:25:6b:e8:7d: 74:8a:a2:56:94:29:f9:cc:29:cc:ad:3f:37:8c:f9:aa:1c:18: 2d:27:d8:ca:9b:9e:2f:a5:36:ff:70:10:70:f3:08:bb:23:5e: f4:7c:4b:38:f4:17:76:ef:02:f7:3d:2d:0c:63:3e:a3:29:f2: b5:25:f6:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+Vk+39gKcu8LhS3D10pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4 ODQ5ZWEwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD Eyg0YzY2ZDU2ODA5OWNiZjQzMWZjYjMwNmZiYmVjMmVmNTI5MDkzZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofoh83y2gZw6A9TJKylAWNm5O+Ri zh7HinI/X/T1VOmlUwstPnLYbm9VBiLi6UA+2I29FSj2yLFWXN01d+bNSXmZnDIk +6UWncoiWK/wnUqKRiiZ7v5ArWtpHnBk2lpfSbYsR3fJqGhuQqMn8so0mfnvP7J7 hmRuD9xiH7lY/5Gs8VSg/8fuG6x4Bh2BQ0tsWJ5xRR6nlwzISQMzcSkmW1paXCIr 136SIsmsGU3SbNpf2R1viNFkEovniI4IRF+NPj5UF45qi9fSTtHRhDNC8sR7gUYF bmyfC+sNvP4GWBZwsrAE2iqSF227YZp64vf4XjbvOHEV51exqNwz3yzJHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExm1WgJnL9DH8swb7vsLvUpCT2LMB8GA1UdIwQY MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt Njk3MTFmZTgzZDIzLzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbedQtcw O74Bcj9jaxzIjKc/fmXurZ1wuE6EKEyoLYVGjzRAILKbBxnhnc5+gS/bg15EvN3a 8GhKXbXOlgI+cKaTPfuz8IK5YzRtMiP5W0pjj+HxCFaAWt92lrqDMMMV2UU5LdPx Zhu2uz1vYZtoGqN5fARxZ/VszfEiZisq4RAnwOh0Sf1YXKJBGZClw1K4Mc/F4Isr NsDKi/3A1ihUwcUMZC9QTFrcQIgcsEhOMruUaZtGOoo6smBkSX1eBh7fK4Ala+h9 dIqiVpQp+cwpzK0/N4z5qhwYLSfYypueL6U2/3AQcPMIuyNe9HxLOPQXdu8C9z0t DGM+oynytSX2fA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:55 2025 by rpki-client