This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json) Hash identifier: DgCRvwSXfqgGF1NO/VxdBeNpyif5hqGJMvZAzUAeATw= Subject key identifier: 11:B2:E7:20:14:D6:6C:72:75:41:CB:5B:32:71:C4:AA:07:83:46:9F Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b Certificate serial: 019AF209B6953FCECAD4B276F92D29D00090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft Manifest number: 162B Signing time: Sat 06 Dec 2025 05:01:54 +0000 Manifest this update: Sat 06 Dec 2025 05:01:54 +0000 Manifest next update: Sun 07 Dec 2025 05:01:54 +0000 Files and hashes: 1: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: VRRolhuoMmZ1V3J/7u1X//zB/IpOJU4x3yLFssdwwMw=) 2: u4XkgPABKlmzAjFlFb35_bSOoZM.roa (hash: 5OhzujGDvwa+oBk89U1CXUeSGEyZAhhsIH31ZmjrM8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:b6:95:3f:ce:ca:d4:b2:76:f9:2d:29:d0:00:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b Validity Not Before: Dec 6 05:01:54 2025 GMT Not After : Dec 7 05:01:54 2025 GMT Subject: CN=11b2e72014d66c727541cb5b3271c4aa0783469f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:75:2e:c4:83:e7:5c:99:2a:e2:02:81:29: da:3c:6f:fc:b5:4d:6d:e8:4c:57:0b:b3:f2:02:a1: ee:89:57:43:0c:dd:a7:13:e7:80:a9:99:4e:b2:a0: ba:b7:b7:7f:bb:7d:db:18:25:7a:b0:b2:79:b2:cc: a8:bc:af:0f:bd:e2:9b:ed:c8:f1:9b:05:cf:62:b8: 33:f2:1d:1d:fc:e9:25:8a:24:29:9a:f0:86:c6:31: f3:1a:30:4a:08:cb:38:99:54:61:b9:11:df:ff:06: c8:36:30:2b:85:8e:87:5f:62:a8:e6:10:96:f9:6d: 2e:cd:4b:be:85:db:f9:38:0d:08:1a:1a:0c:50:2b: c9:37:86:31:75:14:47:ed:db:f9:53:8a:0b:ea:55: 67:e2:61:15:70:0f:27:b7:e8:26:f4:4e:d0:2b:49: f6:7f:56:8b:c1:78:98:6d:07:7f:42:72:7e:ea:84: a5:1c:e4:d0:a9:d7:e1:d3:2d:51:14:c6:99:8a:a5: 33:16:60:a3:8f:a1:52:61:a3:bc:68:b2:aa:cc:06: f1:17:04:95:19:47:69:a8:cb:50:ff:c5:61:b6:2c: 69:73:60:72:81:72:d8:b2:4b:27:b1:b3:f5:b3:e9: 87:2c:04:33:f1:bd:e6:50:ca:db:15:82:bf:c7:fb: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B2:E7:20:14:D6:6C:72:75:41:CB:5B:32:71:C4:AA:07:83:46:9F X509v3 Authority Key Identifier: keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e5:87:a5:7a:75:7b:18:e2:98:5c:c2:9a:78:f4:66:c6:28: 10:8b:db:eb:83:e4:21:58:b5:08:b9:c3:c4:cf:f6:a2:6e:5c: f9:51:39:3b:9f:fa:1e:e8:58:58:e6:c7:f8:d1:1e:70:01:1b: e4:24:3c:6e:54:99:1d:67:06:15:d9:c9:ac:00:24:62:ef:ed: 1f:af:22:ae:45:02:83:97:12:cf:f9:d6:9e:ad:27:62:bd:56: ef:df:81:87:3d:05:84:a1:d4:c0:c0:5b:5a:c9:a6:94:2b:bc: 5d:06:a1:74:c1:ca:28:be:bc:78:a1:69:92:2d:be:eb:e8:99: 3a:3d:7c:85:1b:1c:e8:f2:bf:9f:e7:c3:e8:73:fc:4e:01:74: 48:82:4d:2c:f7:02:03:36:53:3b:f0:12:8c:f9:bf:ca:96:21: 01:2d:48:6b:a7:60:2b:ee:b8:c3:f6:d1:60:b1:6b:8f:08:cb: 53:72:4a:24:a3:cb:b4:6a:95:51:4e:3e:88:35:f9:c6:4f:b2: c7:44:38:23:00:a5:ef:a0:57:f0:31:31:53:94:d4:3a:d8:fd: 99:1c:18:4e:f8:41:26:5a:14:55:c7:2d:77:85:ff:37:af:9c: c6:a6:eb:7f:a4:ea:bb:c0:53:fa:ab:87:9f:00:4f:3e:fb:0e: 72:93:8e:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbaVP87K1LJ2+S0p0ACQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNWQ0NWEyYWJiOTYwZDJiY2U3NThlY2U3MzNiMTI2ZGNh N2U3MWIwHhcNMjUxMjA2MDUwMTU0WhcNMjUxMjA3MDUwMTU0WjAzMTEwLwYDVQQD EygxMWIyZTcyMDE0ZDY2YzcyNzU0MWNiNWIzMjcxYzRhYTA3ODM0NjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GV1LsSD51yZKuICgSnaPG/8tU1t 6ExXC7PyAqHuiVdDDN2nE+eAqZlOsqC6t7d/u33bGCV6sLJ5ssyovK8PveKb7cjx mwXPYrgz8h0d/OkliiQpmvCGxjHzGjBKCMs4mVRhuRHf/wbINjArhY6HX2Ko5hCW +W0uzUu+hdv5OA0IGhoMUCvJN4YxdRRH7dv5U4oL6lVn4mEVcA8nt+gm9E7QK0n2 f1aLwXiYbQd/QnJ+6oSlHOTQqdfh0y1RFMaZiqUzFmCjj6FSYaO8aLKqzAbxFwSV GUdpqMtQ/8Vhtixpc2BygXLYsksnsbP1s+mHLAQz8b3mUMrbFYK/x/tvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGy5yAU1mxydUHLWzJxxKoHg0afMB8GA1UdIwQY MBaAFEtdRaKruWDSvOdY7OczsSbcp+cbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hOTA1ZTktZjkzYi00ZDYwLTgxMDgt ODEwYjlmNWNjNDE1LzEvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hOTA1ZTktZjkzYi00ZDYwLTgxMDgtODEwYjlmNWNjNDE1 LzEvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduWHpXp1 exjimFzCmnj0ZsYoEIvb64PkIVi1CLnDxM/2om5c+VE5O5/6HuhYWObH+NEecAEb 5CQ8blSZHWcGFdnJrAAkYu/tH68irkUCg5cSz/nWnq0nYr1W79+Bhz0FhKHUwMBb WsmmlCu8XQahdMHKKL68eKFpki2+6+iZOj18hRsc6PK/n+fD6HP8TgF0SIJNLPcC AzZTO/ASjPm/ypYhAS1Ia6dgK+64w/bRYLFrjwjLU3JKJKPLtGqVUU4+iDX5xk+y x0Q4IwCl76BX8DExU5TUOtj9mRwYTvhBJloUVcctd4X/N6+cxqbrf6Tqu8BT+quH nwBPPvsOcpOOng== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:26 2025 by rpki-client