This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json) Hash identifier: i4yih2HW5hk9Jav8D9moYuDsPXk1FAOBbnTPGYAH3nk= Subject key identifier: 2C:8F:03:74:54:5B:C4:6E:C7:19:84:87:CB:C8:50:8E:30:15:E0:F7 Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7 Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7 Certificate serial: 019B300C25C44BDEF9A9CC62EB8A8E2E4458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft Manifest number: 1058 Signing time: Thu 18 Dec 2025 06:01:01 +0000 Manifest this update: Thu 18 Dec 2025 06:01:01 +0000 Manifest next update: Fri 19 Dec 2025 06:01:01 +0000 Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: n+FQi/yF5Ogt3IOjSM4IUjpGgmfu8opge3Kzswp34uw=) 2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:25:c4:4b:de:f9:a9:cc:62:eb:8a:8e:2e:44:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7 Validity Not Before: Dec 18 06:01:01 2025 GMT Not After : Dec 19 06:01:01 2025 GMT Subject: CN=2c8f0374545bc46ec7198487cbc8508e3015e0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:65:e1:45:d0:81:fe:53:ee:3c:24:b1:84: 09:8c:79:9b:09:b9:0a:a2:78:85:2d:8a:f6:9d:8c: 9c:28:ed:8b:56:f2:f3:74:ac:c6:17:74:43:05:2b: 24:e1:aa:53:11:d0:62:53:cd:5e:76:27:2e:c5:e3: 19:fa:24:61:b0:c0:a5:fb:7d:a9:e7:ca:31:80:fb: 80:eb:ee:f3:c5:07:14:85:a5:e1:5c:30:c7:63:d4: 29:a5:99:91:8f:70:37:2c:3b:00:11:86:f1:f5:71: 42:46:33:47:d0:77:63:d1:32:e2:60:23:ed:51:6b: 57:00:90:42:ef:12:cc:1b:99:a7:a3:0a:92:63:9e: db:0e:00:c2:a2:db:4d:c0:b6:5b:26:e4:83:fc:89: f7:49:f0:24:48:4e:00:74:e6:fa:50:8d:e2:0e:dc: a6:df:10:fd:60:26:90:b2:85:d2:d1:84:3b:0a:5d: 2b:2a:24:0b:67:ec:f5:08:77:86:20:2c:e6:fc:4a: 8a:3a:c7:39:82:c5:23:fb:dd:7a:b5:7d:ee:68:4b: 91:8a:c0:e8:68:84:11:5d:ba:b2:a5:50:04:35:55: e2:88:4a:76:58:cf:79:7f:e8:86:1d:d9:48:8a:eb: f7:4c:d0:7e:ef:df:16:ee:2c:17:9a:d3:e4:11:9b: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8F:03:74:54:5B:C4:6E:C7:19:84:87:CB:C8:50:8E:30:15:E0:F7 X509v3 Authority Key Identifier: keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9e:e9:17:6b:40:21:34:9b:57:3f:8d:09:37:9d:28:1e:28: e3:af:40:2c:fe:ac:c0:87:0f:02:3d:d2:a3:63:5c:6a:6d:76: c0:f6:1f:5c:0e:e6:e6:5e:57:5a:c4:64:0c:59:4a:0b:a3:02: c8:89:af:7b:49:38:86:31:14:8f:52:dd:78:28:f6:04:26:48: 61:74:5e:79:89:9f:6c:be:9a:f3:bd:62:e7:4a:c7:c7:de:38: 7e:a5:4a:db:83:60:8c:7f:a4:55:02:9d:a2:07:fe:6e:49:8f: 79:b0:97:ec:4f:b1:a3:6c:a1:5d:35:27:66:be:cf:9b:ab:f7: 98:db:59:8d:85:f3:65:3e:fc:c2:56:42:cd:84:08:b5:0b:b1: c6:2f:0c:13:e0:46:57:83:e7:43:9c:73:cf:5a:49:f4:42:61: 69:dd:b1:c8:21:de:96:3d:50:d0:5d:27:1d:8c:88:0d:92:02: ab:79:0e:77:6d:71:38:14:93:19:f0:66:21:60:ee:de:2d:90: 36:2b:1e:29:cd:7f:9b:5e:04:c1:02:86:a5:9b:60:12:cc:60: 87:df:82:d9:86:51:f8:0b:8e:d9:ff:93:5a:52:af:fb:4b:7c: b5:f0:8b:02:a5:d8:57:58:7f:99:ab:15:fb:cd:36:8a:70:50: 3a:04:f8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDCXES975qcxi64qOLkRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYmJjMTA2OTc3NWE4MDQ4MDZiNTBiYWVkN2VjZTg0OGFi ZGU4YTcwHhcNMjUxMjE4MDYwMTAxWhcNMjUxMjE5MDYwMTAxWjAzMTEwLwYDVQQD EygyYzhmMDM3NDU0NWJjNDZlYzcxOTg0ODdjYmM4NTA4ZTMwMTVlMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwotl4UXQgf5T7jwksYQJjHmbCbkK oniFLYr2nYycKO2LVvLzdKzGF3RDBSsk4apTEdBiU81edicuxeMZ+iRhsMCl+32p 58oxgPuA6+7zxQcUhaXhXDDHY9QppZmRj3A3LDsAEYbx9XFCRjNH0Hdj0TLiYCPt UWtXAJBC7xLMG5mnowqSY57bDgDCottNwLZbJuSD/In3SfAkSE4AdOb6UI3iDtym 3xD9YCaQsoXS0YQ7Cl0rKiQLZ+z1CHeGICzm/EqKOsc5gsUj+916tX3uaEuRisDo aIQRXbqypVAENVXiiEp2WM95f+iGHdlIiuv3TNB+798W7iwXmtPkEZtE5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyPA3RUW8RuxxmEh8vIUI4wFeD3MB8GA1UdIwQY MBaAFEu7wQaXdagEgGtQuu1+zoSKveinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQt OWNmZjg0OTZlMzM0LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQtOWNmZjg0OTZlMzM0 LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJ7pF2tA ITSbVz+NCTedKB4o469ALP6swIcPAj3So2Ncam12wPYfXA7m5l5XWsRkDFlKC6MC yImve0k4hjEUj1LdeCj2BCZIYXReeYmfbL6a871i50rHx944fqVK24NgjH+kVQKd ogf+bkmPebCX7E+xo2yhXTUnZr7Pm6v3mNtZjYXzZT78wlZCzYQItQuxxi8ME+BG V4PnQ5xzz1pJ9EJhad2xyCHelj1Q0F0nHYyIDZICq3kOd21xOBSTGfBmIWDu3i2Q NiseKc1/m14EwQKGpZtgEsxgh9+C2YZR+AuO2f+TWlKv+0t8tfCLAqXYV1h/masV +802inBQOgT4zg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:54 2025 by rpki-client