This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json) Hash identifier: D6V9EdAGbH6Es0Ly4S7yXc3HJQ/9n9deAENhR+8AeDw= Subject key identifier: 7D:70:B1:31:C2:A9:50:E5:0C:9E:E8:BF:D9:CF:03:0C:51:68:3B:E1 Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53 Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53 Certificate serial: 019AF2ADAD11C51C535FF15CFA21EB3F493A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=) 2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: g1/CqiXj1LpzgSOT7G+JLz+8TInRXwA1Kp2+bhZDLVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ad:11:c5:1c:53:5f:f1:5c:fa:21:eb:3f:49:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53 Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=7d70b131c2a950e50c9ee8bfd9cf030c51683be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b5:61:55:1d:ca:b2:5e:0c:92:31:fd:e7:94: 0d:45:53:27:90:f3:4f:97:42:d8:00:01:62:68:f1: 85:01:aa:e8:ac:c6:cc:08:ba:5b:02:62:99:a0:d3: af:21:b2:84:16:26:51:96:da:b4:bb:52:2a:96:59: 10:a2:cb:a6:d8:d5:f9:64:ed:70:6e:2b:70:62:7e: 14:00:a6:3c:7e:eb:ae:6b:d5:93:36:80:05:85:68: d8:8b:43:e6:2b:de:d4:ab:8a:67:f1:09:a8:8c:79: 3c:1c:e4:88:fa:77:f5:d2:02:a9:cd:6e:5f:8c:dc: 7b:eb:fe:50:ef:a9:fc:23:c6:81:43:09:26:5d:54: 09:78:f3:35:0d:63:a1:5f:3c:b5:6e:60:5b:e5:42: ac:9a:9d:35:f6:40:38:d6:5a:d6:f3:1f:ec:91:90: 74:1d:23:ea:39:0c:51:2e:0d:97:20:61:ef:0f:99: 9d:2f:a2:85:f6:e5:a5:7c:a5:1f:e6:f6:f0:fd:b3: f1:03:82:23:10:41:04:6c:90:3d:74:71:e5:72:88: db:df:e3:35:0f:f2:95:6f:b4:f0:1a:1a:6f:b8:5c: 08:28:e3:05:10:47:f9:65:7f:49:e2:6e:54:24:f7: bf:d4:cb:9b:3e:75:83:86:b1:bb:8c:bb:62:b4:35: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:70:B1:31:C2:A9:50:E5:0C:9E:E8:BF:D9:CF:03:0C:51:68:3B:E1 X509v3 Authority Key Identifier: keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d2:5f:35:c3:5e:df:84:69:1e:98:29:0b:26:c8:08:78:20: 56:ea:4e:1a:9c:65:84:0a:e0:38:e6:0c:4e:13:0e:60:e7:58: 1d:88:f2:69:15:46:e2:65:ad:98:c8:59:fa:1e:3a:9a:92:4a: 6a:10:ab:54:7c:ac:b8:c7:77:73:d7:c0:6a:21:48:cb:00:10: 1d:ce:38:ea:a0:d8:cc:85:dd:31:7f:c8:f0:49:19:7c:73:22: 97:22:fd:19:05:15:ab:63:e3:8d:f1:98:81:6a:3f:98:b2:74: 41:4f:9c:7f:6a:1c:f8:47:a8:e4:d0:3d:ac:a0:a1:a3:2a:0b: b1:ab:03:6d:99:49:03:17:03:70:27:2c:26:6c:89:5c:68:8a: 3b:9e:90:68:cc:cc:59:53:a3:03:1c:f3:d9:93:e3:42:b2:52: 54:45:41:5e:66:d2:ec:a1:87:70:f7:c9:d5:d3:6b:ed:9d:71: 75:fd:6b:0b:c7:90:87:22:97:fa:cd:c7:71:5c:46:b5:b3:d3: 49:98:ed:af:9e:c3:c5:28:8a:18:04:73:a7:65:a8:4f:99:ac: f7:aa:84:df:73:d8:3b:33:2b:28:91:a4:0e:e4:95:19:3e:23: 9e:bc:79:8b:b8:47:c2:44:85:f4:ca:cd:83:db:0a:39:7d:59: 44:4c:1b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra0RxRxTX/Fc+iHrP0k6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGIyNWFkN2M5NjU4OWU0YThjYWE1ZmE0ODkyY2M0ZGZj YzdiNTMwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD Eyg3ZDcwYjEzMWMyYTk1MGU1MGM5ZWU4YmZkOWNmMDMwYzUxNjgzYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rVhVR3Ksl4MkjH955QNRVMnkPNP l0LYAAFiaPGFAarorMbMCLpbAmKZoNOvIbKEFiZRltq0u1IqllkQosum2NX5ZO1w bitwYn4UAKY8fuuua9WTNoAFhWjYi0PmK97Uq4pn8QmojHk8HOSI+nf10gKpzW5f jNx76/5Q76n8I8aBQwkmXVQJePM1DWOhXzy1bmBb5UKsmp019kA41lrW8x/skZB0 HSPqOQxRLg2XIGHvD5mdL6KF9uWlfKUf5vbw/bPxA4IjEEEEbJA9dHHlcojb3+M1 D/KVb7TwGhpvuFwIKOMFEEf5ZX9J4m5UJPe/1MubPnWDhrG7jLtitDUPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1wsTHCqVDlDJ7ov9nPAwxRaDvhMB8GA1UdIwQY MBaAFLOLJa18llieSoyqX6SJLMTfzHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTct M2Y0MDU0N2U1MmQxLzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTctM2Y0MDU0N2U1MmQx LzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNJfNcNe 34RpHpgpCybICHggVupOGpxlhArgOOYMThMOYOdYHYjyaRVG4mWtmMhZ+h46mpJK ahCrVHysuMd3c9fAaiFIywAQHc446qDYzIXdMX/I8EkZfHMilyL9GQUVq2PjjfGY gWo/mLJ0QU+cf2oc+Eeo5NA9rKChoyoLsasDbZlJAxcDcCcsJmyJXGiKO56QaMzM WVOjAxzz2ZPjQrJSVEVBXmbS7KGHcPfJ1dNr7Z1xdf1rC8eQhyKX+s3HcVxGtbPT SZjtr57DxSiKGARzp2WoT5ms96qE33PYOzMrKJGkDuSVGT4jnrx5i7hHwkSF9MrN g9sKOX1ZREwbNA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:25 2025 by rpki-client