This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json) Hash identifier: 4/gHEyC3kZOCyVckvkY+npC2Floh58QmoeR5fCkwPnM= Subject key identifier: C7:07:BF:97:DD:74:F4:21:CA:8A:1E:1A:82:E7:A8:F2:5B:A3:E3:3F Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019AF2767AE495955F79A79A09738CD14CA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: 3X4fLjQOSwkh1q7Lc1xfQdSqrOA.roa (hash: AzHH5krqdSeT+1rrrFJs2C0Mi40aQNEqK7h23pXcpz4=) 2: 88qLgGj10Cs_nSQp3PLGT1rngvg.roa (hash: nYU1G5sM/izSikkszbz9aOMiki4FnycpJAsPojWHOBw=) 3: QGXKuMyMj7np7BrXR-UiykLNelo.roa (hash: TouINLMwq+4tSpfvKTTYgiCKqK8iE1oP/BBT+AyGC04=) 4: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: E3FZjnrPrDt5vepb7motBE4LIy+X4XfKrpW5c0EwZ/c=) 5: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7a:e4:95:95:5f:79:a7:9a:09:73:8c:d1:4c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=c707bf97dd74f421ca8a1e1a82e7a8f25ba3e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:b5:07:3c:db:c2:9f:52:d0:4c:1b:aa:c5: 75:c0:3e:db:89:0b:97:3b:0a:b0:04:9a:2d:c7:16: f4:bb:3c:c9:04:75:fb:16:32:37:f0:8a:cd:a2:f6: bc:dd:a8:d4:ac:97:3f:d5:71:17:3f:92:d2:a6:f4: c6:6b:68:59:06:6e:31:68:3f:47:ed:e1:ad:de:68: bd:54:35:73:79:de:9c:1d:9a:cb:7e:11:84:2d:90: be:9a:1f:79:76:fc:db:e0:df:a0:c3:89:5b:34:67: cf:a2:c6:84:48:e1:11:64:23:af:05:94:d1:a4:56: b1:e8:9f:54:93:ec:eb:d2:cf:02:0e:11:d1:56:75: 12:a6:ba:c7:5c:12:d6:d1:ef:cf:1f:bf:2c:4f:65: 8d:c6:84:12:b6:e4:a4:c9:0d:64:e6:2f:e9:59:5b: 7c:fa:81:11:7b:ce:f4:fb:e9:1c:63:a7:e9:8c:29: e1:12:6a:97:e8:97:4d:67:4d:24:67:18:e2:b7:86: 9b:84:87:91:c9:44:cc:d9:55:c9:83:16:5e:d5:df: 5d:ee:c4:81:42:8d:fa:5d:01:f6:d6:d1:d5:99:64: 45:3f:79:de:38:c1:c8:51:35:3b:27:31:8c:91:06: 07:7a:2f:e8:48:b4:c6:39:f7:d4:4f:2d:0a:7d:0d: 1e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:07:BF:97:DD:74:F4:21:CA:8A:1E:1A:82:E7:A8:F2:5B:A3:E3:3F X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ec:2a:54:62:40:9e:88:46:0a:9f:ae:ad:16:72:35:10:67: 28:43:40:bc:f8:23:e6:f7:9c:5a:1e:fb:7d:29:94:dc:d1:bd: ab:08:10:4e:72:df:d3:31:52:0e:57:4f:4d:90:d9:73:ee:fa: ca:ba:b2:e0:a3:8d:cc:09:98:3c:9a:e1:e5:63:7e:dd:f1:35: 93:46:c6:f6:ba:fc:aa:87:f2:3a:84:15:b1:e5:33:58:3d:c5: 2e:38:62:f7:ca:77:b6:d7:d8:c6:c1:19:b4:e4:2c:d9:74:94: 9c:6d:01:fe:9e:ad:bf:f6:b9:3a:bd:41:cd:28:42:21:5d:85: d4:31:f3:f6:6c:6e:bb:f5:19:4a:06:84:4c:de:f5:3b:c8:11: 59:8f:30:7c:57:c5:db:a4:71:ec:36:65:78:78:0a:54:ee:7a: 6d:03:2a:38:4a:d2:94:47:40:e2:0f:cc:fd:fd:61:55:13:5e: ed:07:b0:aa:72:12:68:80:3a:e2:e7:a5:2a:6f:d6:82:62:44: b9:c8:51:28:c1:3a:ce:e6:01:8f:d3:8c:ee:10:96:6b:7c:36: 08:e7:08:23:1c:eb:e8:c2:fc:97:1b:8a:c9:f5:f2:4b:4b:b3: c0:2b:2a:69:47:d3:fb:6f:9f:6d:23:8f:97:06:fe:07:9a:4f: 41:f7:cf:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnrklZVfeaeaCXOM0UyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD EyhjNzA3YmY5N2RkNzRmNDIxY2E4YTFlMWE4MmU3YThmMjViYTNlMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtim1Bzzbwp9S0EwbqsV1wD7biQuX OwqwBJotxxb0uzzJBHX7FjI38IrNova83ajUrJc/1XEXP5LSpvTGa2hZBm4xaD9H 7eGt3mi9VDVzed6cHZrLfhGELZC+mh95dvzb4N+gw4lbNGfPosaESOERZCOvBZTR pFax6J9Uk+zr0s8CDhHRVnUSprrHXBLW0e/PH78sT2WNxoQStuSkyQ1k5i/pWVt8 +oERe870++kcY6fpjCnhEmqX6JdNZ00kZxjit4abhIeRyUTM2VXJgxZe1d9d7sSB Qo36XQH21tHVmWRFP3neOMHIUTU7JzGMkQYHei/oSLTGOffUTy0KfQ0eaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcHv5fddPQhyooeGoLnqPJbo+M/MB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOwqVGJA nohGCp+urRZyNRBnKENAvPgj5vecWh77fSmU3NG9qwgQTnLf0zFSDldPTZDZc+76 yrqy4KONzAmYPJrh5WN+3fE1k0bG9rr8qofyOoQVseUzWD3FLjhi98p3ttfYxsEZ tOQs2XSUnG0B/p6tv/a5Or1BzShCIV2F1DHz9mxuu/UZSgaETN71O8gRWY8wfFfF 26Rx7DZleHgKVO56bQMqOErSlEdA4g/M/f1hVRNe7QewqnISaIA64uelKm/WgmJE uchRKME6zuYBj9OM7hCWa3w2COcIIxzr6ML8lxuKyfXyS0uzwCsqaUfT+2+fbSOP lwb+B5pPQffPaw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:32 2025 by rpki-client