This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json) Hash identifier: My7lHbXf568eWAqmvSNEffYdgrbGN7zvivtDRoxPqMw= Subject key identifier: E4:D9:C0:01:56:68:F5:11:CF:A2:8C:A0:38:AE:A8:A3:57:87:7A:0D Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a Certificate serial: 019AF1D1C9B05EAECE15E91EE2E9CA20BFFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft Manifest number: 0AF4 Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (hash: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=) 2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: XP/ONH7jCFYHuQeXT4lgB2H/5nIqHvTrxrNhfPqNGBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c9:b0:5e:ae:ce:15:e9:1e:e2:e9:ca:20:bf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=e4d9c0015668f511cfa28ca038aea8a357877a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:ce:64:48:76:ed:23:d0:0a:d4:94:60:38: 4a:32:24:27:56:80:d8:90:47:57:a2:73:16:86:5f: b6:de:05:6d:89:89:d3:f4:ae:45:9d:e7:55:4c:9f: 8d:69:c3:af:70:19:19:25:45:af:87:b4:8e:f1:e6: 01:b9:7f:b1:e5:7b:94:7d:91:4f:c6:1b:4e:12:a7: 33:e6:57:5e:6f:6f:b2:84:cc:81:37:eb:2e:d0:02: b9:1f:f7:2a:01:63:1c:f5:bd:d8:bf:d0:c1:ea:17: 21:66:f7:6f:a4:d0:cf:2a:15:f2:78:e4:ac:91:05: ac:8b:a2:3c:6e:e2:3c:23:53:56:0d:83:6b:e5:d4: 82:c3:22:40:e0:47:53:ef:7d:0b:7b:68:a4:02:95: a5:f8:7a:f3:0e:13:2f:c2:e6:ef:1d:39:9d:02:a7: 7c:26:ed:ca:cc:32:96:4e:51:b4:c5:be:30:1c:40: 91:98:65:12:fc:43:12:d2:eb:37:04:cf:05:03:b8: b8:05:ac:c8:38:f8:83:c0:95:57:4b:f6:b7:35:83: 9c:fd:17:51:ad:59:bd:7e:3e:0d:af:8d:0d:13:81: 89:74:dc:e8:2f:0d:8c:62:01:26:2d:59:8e:b8:a7: dd:e1:30:f5:85:83:51:e0:fd:7a:2c:8a:be:ea:02: 6a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D9:C0:01:56:68:F5:11:CF:A2:8C:A0:38:AE:A8:A3:57:87:7A:0D X509v3 Authority Key Identifier: keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c4:e3:ca:76:ff:b0:32:05:8d:ca:5d:af:c0:b5:fa:7c:e3: 05:d9:74:aa:31:6c:35:f3:b3:9b:9c:67:ff:ff:2d:12:51:62: 68:84:b9:2e:bd:f7:78:f3:ef:9c:af:5e:98:67:85:46:ab:bc: e1:6d:af:19:6a:9e:70:91:96:ee:77:00:b3:6b:6b:c0:d8:5e: c9:e7:bb:23:48:24:4d:b4:64:39:20:60:e4:8d:bc:b1:94:51: f6:92:d9:34:f9:da:31:ae:6b:82:80:61:0f:dc:a4:bd:11:16: 7d:d6:d7:d5:77:74:4a:56:d3:f0:7b:5f:67:f9:45:e4:5e:7a: f0:5b:d9:1e:2e:b5:1a:de:98:d6:bd:27:6e:99:6d:6e:a8:de: 6d:f9:5a:49:bf:c2:ca:1c:7f:f4:b2:3b:72:f1:30:c3:89:d9: 73:c6:b4:7d:b3:9b:a4:44:fa:b3:19:10:a0:d9:91:45:79:e0: 35:e3:a2:03:50:41:d0:0e:d8:e8:55:0e:ad:c6:19:ac:df:9a: f2:cd:d1:cb:02:af:1e:fe:be:ea:fd:4e:c7:f8:2d:a5:03:3c: 48:0f:bc:1a:9c:25:e9:b0:ac:86:70:11:7c:41:2c:23:27:e1: 30:e2:58:8b:d7:9d:88:b1:22:ff:a1:7b:a8:31:23:03:15:5a: 4e:51:9d:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cmwXq7OFeke4unKIL/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTNmOTU2N2Y2ZDZhZDg5NDEyYzA1MTVmNzQ2NDc2MTJk Y2UwNGEwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EyhlNGQ5YzAwMTU2NjhmNTExY2ZhMjhjYTAzOGFlYThhMzU3ODc3YTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtibOZEh27SPQCtSUYDhKMiQnVoDY kEdXonMWhl+23gVtiYnT9K5FnedVTJ+NacOvcBkZJUWvh7SO8eYBuX+x5XuUfZFP xhtOEqcz5ldeb2+yhMyBN+su0AK5H/cqAWMc9b3Yv9DB6hchZvdvpNDPKhXyeOSs kQWsi6I8buI8I1NWDYNr5dSCwyJA4EdT730Le2ikApWl+HrzDhMvwubvHTmdAqd8 Ju3KzDKWTlG0xb4wHECRmGUS/EMS0us3BM8FA7i4BazIOPiDwJVXS/a3NYOc/RdR rVm9fj4Nr40NE4GJdNzoLw2MYgEmLVmOuKfd4TD1hYNR4P16LIq+6gJq2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTZwAFWaPURz6KMoDiuqKNXh3oNMB8GA1UdIwQY MBaAFEtT+VZ/bWrYlBLAUV90ZHYS3OBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFQNVZuOXRhdGlVRXNCUlgzUmtkaExjNEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82ZTk4MDQtOGEwNy00MjM4LWI5ZDEt MWZhNTIyYTA1Nzk1LzEvUzFQNVZuOXRhdGlVRXNCUlgzUmtkaExjNEVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82ZTk4MDQtOGEwNy00MjM4LWI5ZDEtMWZhNTIyYTA1Nzk1 LzEvUzFQNVZuOXRhdGlVRXNCUlgzUmtkaExjNEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcTjynb/ sDIFjcpdr8C1+nzjBdl0qjFsNfOzm5xn//8tElFiaIS5Lr33ePPvnK9emGeFRqu8 4W2vGWqecJGW7ncAs2trwNheyee7I0gkTbRkOSBg5I28sZRR9pLZNPnaMa5rgoBh D9ykvREWfdbX1Xd0SlbT8HtfZ/lF5F568FvZHi61Gt6Y1r0nbpltbqjebflaSb/C yhx/9LI7cvEww4nZc8a0fbObpET6sxkQoNmRRXngNeOiA1BB0A7Y6FUOrcYZrN+a 8s3RywKvHv6+6v1Ox/gtpQM8SA+8Gpwl6bCshnARfEEsIyfhMOJYi9ediLEi/6F7 qDEjAxVaTlGdRg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:20 2025 by rpki-client