This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json) Hash identifier: edGhNWOZGRONOWZsI51DBpa6OTTp655X0/BQwDRGfe0= Subject key identifier: 40:4E:E4:11:13:01:83:27:29:DA:AB:07:56:E0:23:69:17:99:E6:06 Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d Certificate serial: 019B2B1C83E7128C82A3FA9E1D630A2586F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft Manifest number: 05DD Signing time: Wed 17 Dec 2025 07:00:47 +0000 Manifest this update: Wed 17 Dec 2025 07:00:47 +0000 Manifest next update: Thu 18 Dec 2025 07:00:47 +0000 Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=) 2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: PhvJWhs/TuT8v/JYDGycyHloF9z98GeZhmfFZHpEmNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:83:e7:12:8c:82:a3:fa:9e:1d:63:0a:25:86:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d Validity Not Before: Dec 17 07:00:47 2025 GMT Not After : Dec 18 07:00:47 2025 GMT Subject: CN=404ee4111301832729daab0756e023691799e606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:11:eb:dd:1e:02:22:63:a3:9d:8f:5f:ef: 0c:6c:15:9c:5a:1a:3e:c6:e0:07:99:6a:0a:1e:ea: 90:73:f7:b6:f3:41:03:8a:73:32:72:70:0b:e7:0a: 2e:a2:be:de:16:89:ca:a1:61:bf:0e:cc:f7:b1:1c: 36:91:59:55:08:5b:d1:be:35:9a:2d:28:76:76:a3: e1:ce:98:b0:83:ff:9e:7e:b5:3d:f6:dd:83:b5:31: e0:c3:1c:59:b6:a4:9a:86:ec:b1:a6:d0:1b:c6:49: ae:da:eb:99:e7:90:94:e1:06:0c:e1:ef:5e:08:f5: 43:d6:7e:46:79:9d:2c:4b:24:fd:77:6e:e1:b4:d6: d3:0f:84:9f:04:82:ab:d5:b4:8c:fb:3e:b6:a3:d8: da:04:51:fb:7c:a3:53:60:02:96:10:74:3f:82:38: 33:ca:c2:79:e6:7e:d6:c0:94:e7:54:e5:2f:3e:d2: c0:1b:c1:c5:3b:e7:ea:f0:52:07:42:0f:4c:a0:00: 1a:2d:79:ab:68:90:b3:94:50:df:f2:e2:10:e3:f9: 91:5c:15:97:43:21:af:ca:2a:a0:6b:42:e9:de:df: 98:d9:6b:b4:a7:32:5e:55:dd:7d:0d:a1:ba:3e:7d: 5c:29:ac:b7:7d:6b:83:e0:65:50:36:f1:fe:90:16: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4E:E4:11:13:01:83:27:29:DA:AB:07:56:E0:23:69:17:99:E6:06 X509v3 Authority Key Identifier: keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9e:d2:5c:bf:c6:68:94:44:5e:e3:c2:d5:16:51:c5:7b:d3: 8d:b6:0e:16:14:95:27:35:36:ef:d7:88:38:b1:84:45:6f:9f: 36:8b:3f:40:9b:34:38:7a:f3:33:7e:6d:b6:16:27:5a:c4:f8: 55:c3:b7:d5:05:2b:4d:0b:ca:b1:54:ee:65:72:64:51:49:7f: 33:a6:aa:ce:31:4c:40:6a:3b:98:3d:61:b8:bb:f4:df:77:d0: 58:79:a8:07:f5:3a:17:27:57:51:87:22:69:3b:2b:f5:00:ff: 70:e4:9c:d0:58:77:ce:e3:7a:19:8a:70:ae:5b:a2:7b:92:3e: ea:ac:1f:17:8c:90:e2:1c:51:1c:f6:84:01:b3:fa:39:c0:e4: 2e:a2:39:c8:d9:17:90:3d:7f:9a:31:74:b2:88:f8:bd:fa:8e: 6b:0f:79:ce:06:de:d1:2f:fc:69:5d:6a:6f:58:82:d8:4b:98: 9a:97:54:73:6e:cb:aa:52:ae:f3:13:f9:9d:c4:f5:db:54:ac: 9c:78:63:57:93:3b:d6:0a:bb:11:9b:a8:f5:6a:e0:98:f8:12: 44:32:9b:e0:4e:ba:5c:42:f3:f8:bc:b0:2f:f9:22:02:c6:1c: bf:66:ea:a1:50:83:fb:71:b4:16:b7:60:c6:44:d3:93:f3:7e: ee:a7:ef:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHIPnEoyCo/qeHWMKJYb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTkxOWE4NGUxYTIyOWY3ODlkOTM5ZDFhYWE3MTJhNGQz YzM5OWQwHhcNMjUxMjE3MDcwMDQ3WhcNMjUxMjE4MDcwMDQ3WjAzMTEwLwYDVQQD Eyg0MDRlZTQxMTEzMDE4MzI3MjlkYWFiMDc1NmUwMjM2OTE3OTllNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOoR690eAiJjo52PX+8MbBWcWho+ xuAHmWoKHuqQc/e280EDinMycnAL5wouor7eFonKoWG/Dsz3sRw2kVlVCFvRvjWa LSh2dqPhzpiwg/+efrU99t2DtTHgwxxZtqSahuyxptAbxkmu2uuZ55CU4QYM4e9e CPVD1n5GeZ0sSyT9d27htNbTD4SfBIKr1bSM+z62o9jaBFH7fKNTYAKWEHQ/gjgz ysJ55n7WwJTnVOUvPtLAG8HFO+fq8FIHQg9MoAAaLXmraJCzlFDf8uIQ4/mRXBWX QyGvyiqga0Lp3t+Y2Wu0pzJeVd19DaG6Pn1cKay3fWuD4GVQNvH+kBbqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBO5BETAYMnKdqrB1bgI2kXmeYGMB8GA1UdIwQY MBaAFEvpGahOGiKfeJ2TnRqqcSpNPDmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMt MTE5NWZlMDUwZGUxLzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMtMTE5NWZlMDUwZGUx LzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY57SXL/G aJREXuPC1RZRxXvTjbYOFhSVJzU279eIOLGERW+fNos/QJs0OHrzM35tthYnWsT4 VcO31QUrTQvKsVTuZXJkUUl/M6aqzjFMQGo7mD1huLv033fQWHmoB/U6FydXUYci aTsr9QD/cOSc0Fh3zuN6GYpwrluie5I+6qwfF4yQ4hxRHPaEAbP6OcDkLqI5yNkX kD1/mjF0soj4vfqOaw95zgbe0S/8aV1qb1iC2EuYmpdUc27LqlKu8xP5ncT121Ss nHhjV5M71gq7EZuo9WrgmPgSRDKb4E66XELz+LywL/kiAsYcv2bqoVCD+3G0Frdg xkTTk/N+7qfvIQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:02:28 2025 by rpki-client