This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json) Hash identifier: pIAHy1jRQQ7PLbAztNFQBQ7nPwGw95J56Nt1vQcI3Rc= Subject key identifier: 25:15:ED:91:1B:3A:F3:39:CF:9C:95:1A:DF:0F:D4:B8:B7:3A:09:0B Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d Certificate serial: 019AF12CEF595EE904E08AAA4FACEE3E7C5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft Manifest number: 05BF Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=) 2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: U/NB8z0x1/QWZDxBfK1Gk16eFBjWpiWZgBGMt7c8nvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ef:59:5e:e9:04:e0:8a:aa:4f:ac:ee:3e:7c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=2515ed911b3af339cf9c951adf0fd4b8b73a090b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:0a:f3:42:b5:d7:6d:b9:47:df:d3:ed:7c: 38:ac:85:7b:6a:1d:16:10:2f:80:e3:fb:01:6e:a9: 22:d1:1b:54:50:a2:f9:1d:e4:43:e7:f3:bf:d1:1d: 13:c3:ca:42:b6:59:36:95:ba:39:12:90:01:68:60: 41:eb:a0:09:04:cd:cb:eb:4c:89:61:ff:50:d1:df: 39:49:33:b0:dc:db:6e:2f:12:54:1b:c8:4b:26:db: 97:4d:42:7a:9a:fb:01:9e:2e:62:7e:5d:6f:e9:0b: d1:84:a9:a6:64:11:91:16:53:4b:24:b1:76:7c:f8: 6a:99:3a:9b:f2:1b:44:00:09:ee:cc:9e:a4:b0:fc: 91:42:b0:1b:5f:cc:34:71:e3:d4:74:60:70:6d:4a: 32:21:61:80:36:e7:08:eb:99:63:61:c8:92:b2:dc: 4f:5b:0e:e0:3b:57:c3:f6:6f:d3:44:d5:9d:8c:7c: ea:51:e6:18:e4:f2:27:95:96:71:f5:76:01:c7:ea: 9b:d0:67:a8:6f:5c:c2:9a:08:e3:2c:0f:60:10:1d: 98:4f:e1:b3:0b:83:87:8a:c2:01:d1:9f:e7:dc:45: 37:71:3c:50:b6:4e:c3:d8:c7:9d:82:3d:aa:69:76: 0c:d7:46:3f:6a:29:de:11:56:63:4e:4e:5f:2d:e4: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:15:ED:91:1B:3A:F3:39:CF:9C:95:1A:DF:0F:D4:B8:B7:3A:09:0B X509v3 Authority Key Identifier: keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:06:f9:59:c1:ad:24:9f:54:fe:2c:9e:95:dd:a8:9a:36:fb: 50:fe:b8:aa:3c:79:8b:0b:ea:ec:75:0e:f4:8a:28:94:12:ea: 1d:b4:f3:a4:ad:83:22:10:b0:2f:78:ea:b5:9c:cc:bc:71:ef: ce:14:58:1a:28:fe:d9:71:a4:ce:62:bb:2a:9a:1f:df:8c:55: 81:d0:56:9d:dd:64:85:a0:7a:b7:8c:ac:25:19:e1:67:b3:9a: cd:dc:0d:09:94:0d:3a:aa:e4:e1:45:5c:32:f0:52:5f:13:e2: ec:d8:c8:84:05:da:4c:c4:c7:80:f7:69:4c:06:69:64:ef:fc: 66:ae:67:e3:73:7c:59:91:d3:be:46:ad:64:ac:65:75:8f:68: 73:24:1f:1e:89:5a:de:08:09:67:63:b8:e1:f8:39:be:59:3a: d9:88:f9:17:b4:88:52:ce:6b:19:10:fe:59:25:3b:55:81:17: 1c:13:de:21:73:28:80:90:7d:3d:45:5e:7c:47:89:d2:e8:42: 54:d1:df:7b:4c:53:2c:ed:79:6a:ca:68:0d:33:87:a0:d8:d3: b7:aa:9d:c2:6c:af:24:35:14:49:6c:0b:7a:a5:99:87:80:8f: c8:3b:d4:f0:f8:57:c3:21:60:3a:a4:dd:a6:19:82:2c:44:ad: 31:49:e1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO9ZXukE4IqqT6zuPnxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTkxOWE4NGUxYTIyOWY3ODlkOTM5ZDFhYWE3MTJhNGQz YzM5OWQwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EygyNTE1ZWQ5MTFiM2FmMzM5Y2Y5Yzk1MWFkZjBmZDRiOGI3M2EwOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoAK80K11225R9/T7Xw4rIV7ah0W EC+A4/sBbqki0RtUUKL5HeRD5/O/0R0Tw8pCtlk2lbo5EpABaGBB66AJBM3L60yJ Yf9Q0d85STOw3NtuLxJUG8hLJtuXTUJ6mvsBni5ifl1v6QvRhKmmZBGRFlNLJLF2 fPhqmTqb8htEAAnuzJ6ksPyRQrAbX8w0cePUdGBwbUoyIWGANucI65ljYciSstxP Ww7gO1fD9m/TRNWdjHzqUeYY5PInlZZx9XYBx+qb0Geob1zCmgjjLA9gEB2YT+Gz C4OHisIB0Z/n3EU3cTxQtk7D2Medgj2qaXYM10Y/aineEVZjTk5fLeQGJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUV7ZEbOvM5z5yVGt8P1Li3OgkLMB8GA1UdIwQY MBaAFEvpGahOGiKfeJ2TnRqqcSpNPDmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMt MTE5NWZlMDUwZGUxLzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMtMTE5NWZlMDUwZGUx LzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwb5WcGt JJ9U/iyeld2omjb7UP64qjx5iwvq7HUO9IoolBLqHbTzpK2DIhCwL3jqtZzMvHHv zhRYGij+2XGkzmK7Kpof34xVgdBWnd1khaB6t4ysJRnhZ7OazdwNCZQNOqrk4UVc MvBSXxPi7NjIhAXaTMTHgPdpTAZpZO/8Zq5n43N8WZHTvkatZKxldY9ocyQfHola 3ggJZ2O44fg5vlk62Yj5F7SIUs5rGRD+WSU7VYEXHBPeIXMogJB9PUVefEeJ0uhC VNHfe0xTLO15aspoDTOHoNjTt6qdwmyvJDUUSWwLeqWZh4CPyDvU8PhXwyFgOqTd phmCLEStMUnhHw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:56 2025 by rpki-client