This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json) Hash identifier: yTM+hhEGjvlX4xcAPxBzE9lyOtKxlaoRZjnl8FLyCwg= Subject key identifier: 35:95:72:AA:2C:C3:52:D1:0C:00:7D:0A:B3:F2:0C:79:76:76:D9:B2 Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca Certificate serial: 019AF12CCB48030F5576834391633845077C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft Manifest number: 0326 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: ip4wTrWB8I6TM5h/P5ZtZ0ukEA9e97aEA9QGVK0IHn8=) 2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cb:48:03:0f:55:76:83:43:91:63:38:45:07:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=359572aa2cc352d10c007d0ab3f20c797676d9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:e5:12:d0:c7:ec:f3:35:6f:e4:41:89:47: e5:ee:38:09:cc:5e:20:e3:4c:98:51:9f:6c:8b:a3: 7f:06:41:8a:9b:1e:f3:a9:11:14:22:e0:15:37:6e: 2d:b2:78:18:a1:58:33:10:cb:cf:a8:c0:f2:68:a4: df:cc:4d:50:cc:9a:1b:87:f0:56:65:5d:41:28:10: 30:26:4e:70:54:bf:5e:4d:73:81:9a:e0:9d:5c:76: 88:1b:b0:ff:c4:6a:a2:dd:96:01:32:41:b8:b9:67: 17:fd:32:36:9a:6f:f9:d2:19:ef:5e:05:c0:e3:76: 29:15:ba:5d:ae:5d:13:6d:00:96:1c:51:96:6c:2c: fb:3e:d2:f7:81:c6:c8:a4:f8:87:fa:4a:1d:d4:a8: f0:17:5e:ef:1f:94:f8:69:cd:27:42:bb:ed:38:c7: 90:ed:11:ac:a8:30:4e:27:a6:85:8c:63:3d:34:4f: 0d:44:ac:94:f3:90:7c:68:c6:72:f5:d9:6f:2b:00: 00:0a:6a:ff:bf:3f:c2:05:5b:5d:75:a4:5e:99:ab: 4b:c3:0c:5f:41:cc:48:03:bc:f8:3a:bc:1f:2c:a6: d9:34:7f:26:66:41:d1:53:20:c1:3e:cd:db:c0:4e: 2b:4c:e0:7e:a2:c7:e7:d2:57:70:99:b2:2a:9f:d6: ee:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:95:72:AA:2C:C3:52:D1:0C:00:7D:0A:B3:F2:0C:79:76:76:D9:B2 X509v3 Authority Key Identifier: keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7d:dc:81:a2:64:c2:7d:d4:3b:08:0a:a6:3a:8e:42:b6:39: d0:6c:c9:86:5c:eb:81:49:7c:fc:05:f7:05:7e:7f:0f:49:84: bf:55:73:2f:57:b9:a1:40:f9:3e:f3:ab:14:53:31:43:77:4a: ff:bd:61:40:f1:e1:17:a7:c7:57:a3:c7:3a:61:f9:7a:ae:3a: c8:60:ce:72:a0:9f:3f:25:95:90:83:de:3e:4d:68:9a:0d:ca: f4:73:ef:64:14:01:91:85:07:9d:02:d4:1d:56:16:a3:5d:14: 8c:ff:c6:f0:26:3f:72:2a:8c:5f:45:56:dd:70:a4:86:a5:82: d3:85:1b:93:34:8a:b0:50:fd:43:4d:0b:1d:8e:d4:98:4e:fe: 73:29:c8:61:a0:cd:c0:3e:4c:67:23:f1:e5:bc:bf:2f:f7:fd: 19:70:60:39:08:54:24:08:c3:f9:e0:24:a1:02:33:5d:07:91: 78:09:b7:08:07:61:49:c2:67:f4:e5:11:8f:9e:ff:c6:bd:ef: 88:26:db:8e:0e:be:fe:51:ef:9d:bb:c6:bc:10:11:fb:77:23: 87:5d:a4:b7:11:9c:6d:ac:ac:01:ae:fa:cd:8f:c9:fe:6b:f6: 83:50:45:1c:83:64:5a:8f:34:99:77:17:f1:5f:fb:eb:b2:9e: 62:d8:0b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMtIAw9VdoNDkWM4RQd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTdhMzlkYjVjN2FhMzZiZTgyY2Q3NTFlNTBjYjkwMjMw MzNkY2EwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD EygzNTk1NzJhYTJjYzM1MmQxMGMwMDdkMGFiM2YyMGM3OTc2NzZkOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaDlEtDH7PM1b+RBiUfl7jgJzF4g 40yYUZ9si6N/BkGKmx7zqREUIuAVN24tsngYoVgzEMvPqMDyaKTfzE1QzJobh/BW ZV1BKBAwJk5wVL9eTXOBmuCdXHaIG7D/xGqi3ZYBMkG4uWcX/TI2mm/50hnvXgXA 43YpFbpdrl0TbQCWHFGWbCz7PtL3gcbIpPiH+kod1KjwF17vH5T4ac0nQrvtOMeQ 7RGsqDBOJ6aFjGM9NE8NRKyU85B8aMZy9dlvKwAACmr/vz/CBVtddaRematLwwxf QcxIA7z4OrwfLKbZNH8mZkHRUyDBPs3bwE4rTOB+osfn0ldwmbIqn9bu1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWVcqosw1LRDAB9CrPyDHl2dtmyMB8GA1UdIwQY MBaAFEtXo521x6o2voLNdR5Qy5AjAz3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmIt YjNkMTg5NmYzNjlmLzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmItYjNkMTg5NmYzNjlm LzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL33cgaJk wn3UOwgKpjqOQrY50GzJhlzrgUl8/AX3BX5/D0mEv1VzL1e5oUD5PvOrFFMxQ3dK /71hQPHhF6fHV6PHOmH5eq46yGDOcqCfPyWVkIPePk1omg3K9HPvZBQBkYUHnQLU HVYWo10UjP/G8CY/ciqMX0VW3XCkhqWC04UbkzSKsFD9Q00LHY7UmE7+cynIYaDN wD5MZyPx5by/L/f9GXBgOQhUJAjD+eAkoQIzXQeReAm3CAdhScJn9OURj57/xr3v iCbbjg6+/lHvnbvGvBAR+3cjh12ktxGcbaysAa76zY/J/mv2g1BFHINkWo80mXcX 8V/767KeYtgLVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:46 2025 by rpki-client