This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json) Hash identifier: dw3t9gCixIutMiZCuUV0TCrT1szgjD2U7B5iyNkJ8PE= Subject key identifier: C2:63:BE:8D:3A:ED:81:25:12:60:2F:EA:65:46:78:D0:3C:45:AB:C4 Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d Certificate serial: 019B318CA21FEEACBFAF5A8C280075D430F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft Manifest number: 0BE0 Signing time: Thu 18 Dec 2025 13:00:58 +0000 Manifest this update: Thu 18 Dec 2025 13:00:58 +0000 Manifest next update: Fri 19 Dec 2025 13:00:58 +0000 Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=) 2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: CLxQVcMXot9FI6eRu1co36HhwuSQJ1ydTXlvrh5JIu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:a2:1f:ee:ac:bf:af:5a:8c:28:00:75:d4:30:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d Validity Not Before: Dec 18 13:00:58 2025 GMT Not After : Dec 19 13:00:58 2025 GMT Subject: CN=c263be8d3aed812512602fea654678d03c45abc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:39:ce:80:9c:c5:dc:ee:dd:01:81:d4:22: d6:9f:66:3e:b3:ed:cf:77:bb:f2:9f:ea:1f:2b:85: 1e:68:38:1e:97:e8:d9:54:eb:1a:8a:2f:29:40:e8: 07:2a:56:39:7f:aa:bf:84:37:d0:c0:99:cb:f8:3d: 17:ea:72:de:e1:c0:b1:24:ec:37:19:ff:08:4c:c2: 6c:0f:4b:f5:58:83:b0:69:97:7a:f1:35:8a:9a:68: d3:1e:79:3a:f6:f7:b4:cf:bc:80:6c:63:a7:ad:60: ef:de:c0:97:42:1c:73:7d:af:a9:3d:99:78:d1:e6: 02:36:58:a4:fd:66:c4:d1:53:4a:5f:de:65:01:2d: 32:44:8f:01:50:e3:a5:d0:25:eb:56:e5:f9:12:04: 06:93:31:b4:95:dc:14:87:19:36:74:e0:8c:41:44: 46:b3:be:e2:18:31:d2:08:38:89:ad:6f:ba:14:27: 20:b0:2c:5b:61:7a:2f:f7:f4:38:48:66:95:1b:3c: 8a:d6:b6:62:f0:ab:7f:91:59:4b:14:d1:c4:70:00: 7b:d4:a6:f7:49:51:6c:78:4c:df:9a:af:e5:a2:c5: 85:de:1d:3b:93:6b:52:9a:b3:24:5a:87:60:2b:a4: 53:0d:64:5c:ed:4c:f1:b8:a9:a5:2a:77:bf:5f:2f: dd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:63:BE:8D:3A:ED:81:25:12:60:2F:EA:65:46:78:D0:3C:45:AB:C4 X509v3 Authority Key Identifier: keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:2b:58:4f:7d:af:0b:dd:74:7e:7d:2f:19:7c:38:96:b3:fa: 27:76:14:e7:af:59:cb:e8:f1:43:da:20:3d:62:04:44:6c:5f: 48:76:72:29:d2:ea:61:7a:a9:94:6b:1f:94:88:c5:9e:43:09: 3b:94:1f:96:ab:9d:4a:a3:22:c2:95:39:11:f9:3a:8c:96:bb: a4:97:32:84:87:da:0a:49:ef:0f:7e:22:1d:e6:3e:6f:90:ef: f7:7a:38:b8:f6:10:f2:61:82:f4:7a:bb:1b:b2:fa:35:72:4f: 1f:5f:b3:90:c6:54:1a:5a:31:09:62:d6:c4:96:34:09:f9:3c: d8:0b:17:55:34:66:d9:d4:b1:2a:f0:43:ce:92:0d:c3:e2:e2: 56:8f:a0:76:31:5e:06:b2:4a:ba:ed:de:7f:fa:92:69:d3:bc: fc:b6:70:f3:53:6b:6b:21:71:af:e5:8a:10:fe:af:72:3a:69: 6b:ba:dc:05:f6:4f:30:1f:26:2b:ec:f4:27:dd:f2:f0:17:29: 91:57:64:7e:9b:a7:a6:44:c0:b0:57:3d:02:e9:bc:ee:37:de: ea:4e:ba:3b:33:69:04:f1:90:bc:f4:bf:09:a4:39:07:54:4a: ec:41:d1:a7:47:31:ba:29:54:f8:f4:01:a1:74:f6:95:42:4f: 85:6f:8f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjKIf7qy/r1qMKAB11DD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBhM2E2YzRhODU3MjUwMzc1OThiMzkxM2UyMTg2OWRi ZGQzOGQwHhcNMjUxMjE4MTMwMDU4WhcNMjUxMjE5MTMwMDU4WjAzMTEwLwYDVQQD EyhjMjYzYmU4ZDNhZWQ4MTI1MTI2MDJmZWE2NTQ2NzhkMDNjNDVhYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JA5zoCcxdzu3QGB1CLWn2Y+s+3P d7vyn+ofK4UeaDgel+jZVOsaii8pQOgHKlY5f6q/hDfQwJnL+D0X6nLe4cCxJOw3 Gf8ITMJsD0v1WIOwaZd68TWKmmjTHnk69ve0z7yAbGOnrWDv3sCXQhxzfa+pPZl4 0eYCNlik/WbE0VNKX95lAS0yRI8BUOOl0CXrVuX5EgQGkzG0ldwUhxk2dOCMQURG s77iGDHSCDiJrW+6FCcgsCxbYXov9/Q4SGaVGzyK1rZi8Kt/kVlLFNHEcAB71Kb3 SVFseEzfmq/losWF3h07k2tSmrMkWodgK6RTDWRc7UzxuKmlKne/Xy/dwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJjvo067YElEmAv6mVGeNA8RavEMB8GA1UdIwQY MBaAFEtwo6bEqFclA3WYs5E+IYadvdONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUt NDgyNWIyOWRkNTcyLzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUtNDgyNWIyOWRkNTcy LzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtytYT32v C910fn0vGXw4lrP6J3YU569Zy+jxQ9ogPWIERGxfSHZyKdLqYXqplGsflIjFnkMJ O5QflqudSqMiwpU5Efk6jJa7pJcyhIfaCknvD34iHeY+b5Dv93o4uPYQ8mGC9Hq7 G7L6NXJPH1+zkMZUGloxCWLWxJY0Cfk82AsXVTRm2dSxKvBDzpINw+LiVo+gdjFe BrJKuu3ef/qSadO8/LZw81NrayFxr+WKEP6vcjppa7rcBfZPMB8mK+z0J93y8Bcp kVdkfpunpkTAsFc9Aum87jfe6k66OzNpBPGQvPS/CaQ5B1RK7EHRp0cxuilU+PQB oXT2lUJPhW+Pyg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:31:58 2025 by rpki-client