This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json) Hash identifier: pAfmyr9XUluDBsPwmarE+XVTJ5VMM9ByRXufynWtQ7I= Subject key identifier: C3:69:C9:B5:D7:AE:EC:4F:BA:8F:E2:EE:3D:79:35:26:C3:24:75:C1 Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Certificate serial: 019B439333211F4934BE67DDC0D6CAE7DB8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 01:01:18 +0000 Manifest this update: Mon 22 Dec 2025 01:01:18 +0000 Manifest next update: Tue 23 Dec 2025 01:01:18 +0000 Files and hashes: 1: PdEh-weHu1GNZzYwzSA2l6p4u4o.roa (hash: 81mX5r4txhMt28KzY3Hm4i2MJKH8dzlyDiigOnDnwXc=) 2: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: rVu01XdPHoPqNJ5D913KA0DgkCZOmXA72cqb9ARtlXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:33:21:1f:49:34:be:67:dd:c0:d6:ca:e7:db:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Validity Not Before: Dec 22 01:01:18 2025 GMT Not After : Dec 23 01:01:18 2025 GMT Subject: CN=c369c9b5d7aeec4fba8fe2ee3d793526c32475c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0e:ee:76:f6:69:f4:32:a7:02:00:12:e1:16: 91:d0:24:56:4a:1c:53:58:6f:de:43:83:1f:f7:1c: 31:65:5f:f1:5f:d3:23:5b:d0:2a:dc:f3:11:85:73: 42:42:62:07:68:b3:ab:e5:90:71:1d:63:33:a8:b9: 61:25:22:ba:cb:b2:fb:c2:ff:e8:89:7b:8b:22:34: f3:58:e8:e8:70:ac:a6:69:16:d7:be:79:16:7d:f8: c2:87:6e:c4:0d:80:97:85:81:ce:8e:6b:b4:74:90: 6a:ec:d9:dd:27:74:28:a6:37:df:39:09:66:11:08: 50:30:2b:9e:72:96:df:ea:b4:43:67:24:28:72:8e: a3:f1:a0:0b:03:10:fd:2f:65:f6:87:47:18:72:a7: f5:7a:c5:ea:97:2b:1d:68:d7:e6:09:c3:85:58:6d: 22:5f:ad:08:4a:9b:73:96:96:ec:ef:d2:3c:1b:a1: 81:1b:7a:5a:11:de:f6:bb:4b:cf:30:95:83:c7:f7: 2e:3a:1f:18:87:7b:8f:14:8d:16:e4:64:e1:72:1c: dd:96:f1:88:45:d0:e4:05:34:ee:87:99:95:11:47: dd:df:a0:06:bc:6d:31:ed:a2:5f:6b:b9:37:6a:b8: c6:68:bf:b6:44:41:23:87:44:ac:64:f1:8f:1c:9f: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:C9:B5:D7:AE:EC:4F:BA:8F:E2:EE:3D:79:35:26:C3:24:75:C1 X509v3 Authority Key Identifier: keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:00:9b:9b:f1:57:92:1d:f2:0a:dc:24:45:d8:b0:c5:6e:1d: f3:cd:91:f1:b0:fb:70:0e:37:a3:a6:64:ba:d2:0b:1e:06:c5: 7a:a0:f8:37:fa:89:2a:de:86:c0:09:be:b8:c1:95:87:f6:fb: 7c:9b:76:57:f8:65:b0:6d:c0:ae:ac:d6:a3:e9:76:12:65:c8: bc:60:4d:29:68:23:67:fd:43:c1:af:d2:26:e8:aa:72:8c:ec: 76:c6:80:50:fa:68:f5:b0:4a:c1:4e:bc:ef:8b:9f:e5:68:6c: c3:b9:1a:9d:3d:f3:26:5f:af:d9:65:b4:c9:e3:cb:87:14:b1: 41:e1:d6:fd:5d:56:39:dc:a3:a8:b7:c7:81:b9:6c:c7:bb:cb: 2f:e0:a2:ee:66:e3:89:91:f5:d3:87:83:c3:5a:a3:bd:af:87: 23:27:30:a1:45:be:df:d2:aa:44:df:ae:be:f4:9d:b9:ed:a1: b3:ee:cb:1b:61:93:2b:05:a5:38:1e:1c:49:81:fe:42:2a:dd: 58:31:a3:22:3f:0d:f4:21:d9:e1:3a:f6:06:11:9b:33:5f:e8: ac:08:82:ff:0f:70:77:ef:58:df:37:88:1f:6d:8d:f0:b4:18: ba:15:a0:43:50:f2:ac:1c:76:0d:e7:a1:a9:ad:15:5f:45:07: ef:5c:70:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkzMhH0k0vmfdwNbK59uMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz ODc0YzYwHhcNMjUxMjIyMDEwMTE4WhcNMjUxMjIzMDEwMTE4WjAzMTEwLwYDVQQD EyhjMzY5YzliNWQ3YWVlYzRmYmE4ZmUyZWUzZDc5MzUyNmMzMjQ3NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q7udvZp9DKnAgAS4RaR0CRWShxT WG/eQ4Mf9xwxZV/xX9MjW9Aq3PMRhXNCQmIHaLOr5ZBxHWMzqLlhJSK6y7L7wv/o iXuLIjTzWOjocKymaRbXvnkWffjCh27EDYCXhYHOjmu0dJBq7NndJ3QopjffOQlm EQhQMCuecpbf6rRDZyQoco6j8aALAxD9L2X2h0cYcqf1esXqlysdaNfmCcOFWG0i X60ISptzlpbs79I8G6GBG3paEd72u0vPMJWDx/cuOh8Yh3uPFI0W5GThchzdlvGI RdDkBTTuh5mVEUfd36AGvG0x7aJfa7k3arjGaL+2REEjh0SsZPGPHJ8q9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNpybXXruxPuo/i7j15NSbDJHXBMB8GA1UdIwQY MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt Y2U1OTUyMmVmNjZmLzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwCbm/FX kh3yCtwkRdiwxW4d882R8bD7cA43o6ZkutILHgbFeqD4N/qJKt6GwAm+uMGVh/b7 fJt2V/hlsG3ArqzWo+l2EmXIvGBNKWgjZ/1Dwa/SJuiqcozsdsaAUPpo9bBKwU68 74uf5Whsw7kanT3zJl+v2WW0yePLhxSxQeHW/V1WOdyjqLfHgblsx7vLL+Ci7mbj iZH104eDw1qjva+HIycwoUW+39KqRN+uvvSdue2hs+7LG2GTKwWlOB4cSYH+Qird WDGjIj8N9CHZ4Tr2BhGbM1/orAiC/w9wd+9Y3zeIH22N8LQYuhWgQ1DyrBx2Deeh qa0VX0UH71xwAQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:09:46 2025 by rpki-client