This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json) Hash identifier: Gm5ZQVD2/EN4H9cVE89dQ5ER1AQVhGvUZUFvCZTsV9s= Subject key identifier: 4A:B9:CD:1C:51:F0:E7:8B:6C:F7:FB:72:64:2F:68:7E:50:D0:8E:DE Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a Certificate serial: 019AF19B4B72EE4ACE502141F3EFB2A174C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: 5dOeHmReGHpglp9CPLficnPxbRA.roa (hash: u/adm8/lzLOzXE337fHeCi8QttPIgGUNVZ/GPwCUh0o=) 2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: CTUOqc68tFazqKui8nN1pXI9l3ziod0cNaATlaJjMmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4b:72:ee:4a:ce:50:21:41:f3:ef:b2:a1:74:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=4ab9cd1c51f0e78b6cf7fb72642f687e50d08ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:3a:84:a1:fb:0a:88:d1:01:1b:2d:10:20: c5:49:3b:f3:73:ff:4b:cd:39:9d:8d:81:1c:4f:dd: 29:68:a1:17:ec:5c:30:fa:0f:a2:fd:b6:e4:28:ea: 5b:75:e1:8b:5a:c0:b3:a1:be:f4:62:39:8d:91:90: fd:37:a3:69:0c:6f:7b:d2:63:51:e3:f6:9d:14:8c: e2:d1:33:e9:84:b0:7c:be:6b:2f:14:b8:3e:02:cc: d9:38:ef:c9:42:80:46:33:7c:98:bc:fe:89:0e:13: 7e:92:10:00:70:58:0c:bc:d1:56:53:7b:d1:5d:ce: 7d:bc:43:99:19:ae:64:59:e3:b8:7d:4d:cd:d1:11: 52:9a:41:c7:e9:55:f4:a0:82:2e:a2:6a:8a:30:90: 1b:79:32:e4:98:f1:db:91:fe:42:f0:54:63:14:b7: 9e:cd:b4:28:db:2d:ab:9e:ad:e1:dd:8d:9f:ab:08: 8b:ea:45:c2:52:e4:5b:02:ed:9a:65:0d:c7:d9:db: 33:65:e0:20:6a:e7:aa:4c:86:13:a5:9f:28:52:b2: 77:21:b7:75:0d:18:71:7f:d8:00:a1:4c:98:78:c0: a0:2f:4a:7a:7b:57:f5:b8:bb:82:ec:2b:4d:44:b3: 2f:ca:c6:6b:86:18:98:11:02:ba:ad:5a:81:ab:a9: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:CD:1C:51:F0:E7:8B:6C:F7:FB:72:64:2F:68:7E:50:D0:8E:DE X509v3 Authority Key Identifier: keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:15:85:a5:d9:da:53:1b:0a:91:a4:3f:52:44:91:bc:25:95: 72:3d:56:d3:fc:e9:ff:1b:6e:f6:b2:45:d4:b0:bc:d5:34:30: df:d3:5d:a6:cd:9e:e0:49:06:59:c6:e2:e8:b2:93:1d:30:36: f3:d4:22:f9:cf:55:09:34:9a:27:56:59:82:7e:7d:f2:a4:88: a0:9a:f3:8a:6c:4d:cf:cb:dc:1b:31:b6:c9:39:03:a7:59:66: 1e:b6:cb:86:29:17:2d:35:fb:71:95:f3:74:83:15:fc:55:40: 72:68:df:b6:47:c8:e3:fc:c6:8e:4e:7d:d0:23:81:c3:ff:c9: 05:4c:40:21:b6:9d:63:b7:01:57:43:71:78:73:e8:cb:8e:5d: 9d:11:1a:03:af:02:94:53:15:bf:f7:95:3b:1e:2a:c6:5f:83: aa:c2:9e:b0:a1:3a:f3:ce:c9:36:db:b9:ae:03:78:1e:6b:fa: 5c:95:f3:c8:4a:5e:e5:c3:39:e9:52:d3:23:fd:15:bb:2e:d3: 39:ab:81:d7:cd:8c:66:95:55:a6:70:57:59:da:d9:df:02:f4: f8:ef:57:a8:d7:37:5a:c7:60:d1:65:2c:49:ec:f4:81:1b:c7: 40:bc:55:00:7e:51:c2:f3:33:da:60:3f:f4:fe:0d:0a:dd:c6: e4:cd:54:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0ty7krOUCFB8++yoXTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjFjYzhhMzY1Y2M0MDM4MmEzMWRhZDU0ZjZjYjcyM2Y1 ODc1OGEwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD Eyg0YWI5Y2QxYzUxZjBlNzhiNmNmN2ZiNzI2NDJmNjg3ZTUwZDA4ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsQ6hKH7CojRARstECDFSTvzc/9L zTmdjYEcT90paKEX7Fww+g+i/bbkKOpbdeGLWsCzob70YjmNkZD9N6NpDG970mNR 4/adFIzi0TPphLB8vmsvFLg+AszZOO/JQoBGM3yYvP6JDhN+khAAcFgMvNFWU3vR Xc59vEOZGa5kWeO4fU3N0RFSmkHH6VX0oIIuomqKMJAbeTLkmPHbkf5C8FRjFLee zbQo2y2rnq3h3Y2fqwiL6kXCUuRbAu2aZQ3H2dszZeAgaueqTIYTpZ8oUrJ3Ibd1 DRhxf9gAoUyYeMCgL0p6e1f1uLuC7CtNRLMvysZrhhiYEQK6rVqBq6nTUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq5zRxR8OeLbPf7cmQvaH5Q0I7eMB8GA1UdIwQY MBaAFEthzIo2XMQDgqMdrVT2y3I/WHWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYt YzRmZDUzZWJlYjY3LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYtYzRmZDUzZWJlYjY3 LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRWFpdna UxsKkaQ/UkSRvCWVcj1W0/zp/xtu9rJF1LC81TQw39Ndps2e4EkGWcbi6LKTHTA2 89Qi+c9VCTSaJ1ZZgn598qSIoJrzimxNz8vcGzG2yTkDp1lmHrbLhikXLTX7cZXz dIMV/FVAcmjftkfI4/zGjk590COBw//JBUxAIbadY7cBV0NxeHPoy45dnREaA68C lFMVv/eVOx4qxl+DqsKesKE6887JNtu5rgN4Hmv6XJXzyEpe5cM56VLTI/0Vuy7T OauB182MZpVVpnBXWdrZ3wL0+O9XqNc3Wsdg0WUsSez0gRvHQLxVAH5RwvMz2mA/ 9P4NCt3G5M1UCg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:04 2025 by rpki-client