This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json) Hash identifier: /XWc/nC9YWfZ/j4KwUtTOcsEAWuxTwjMJUhTmzrs9wY= Subject key identifier: 89:DF:2E:5B:A5:2A:07:52:25:70:4A:7F:81:1B:05:1D:E7:8B:61:E8 Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Certificate serial: 019B0F6E88248566E75217B21F3AE1BDEAF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft Manifest number: 0D78 Signing time: Thu 11 Dec 2025 22:01:00 +0000 Manifest this update: Thu 11 Dec 2025 22:01:00 +0000 Manifest next update: Fri 12 Dec 2025 22:01:00 +0000 Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=) 2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=) 3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=) 4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: JGqsF58z3XgTz3Dmyq8uRH8PpdFChOYEWhNRSvdUg7g=) 5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=) 6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:88:24:85:66:e7:52:17:b2:1f:3a:e1:bd:ea:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Validity Not Before: Dec 11 22:01:00 2025 GMT Not After : Dec 12 22:01:00 2025 GMT Subject: CN=89df2e5ba52a075225704a7f811b051de78b61e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:4d:96:32:9c:fa:a0:da:2d:8a:f5:bf:b9: e1:75:05:bd:7e:50:34:24:94:dd:ef:ee:01:51:dd: 3a:f9:55:5b:dc:87:11:cf:86:0c:29:f0:51:23:9f: 7f:c8:52:63:17:dc:5e:04:02:09:7d:b8:6f:85:0e: 23:dc:fb:73:25:ae:a8:c8:48:dd:49:78:69:eb:5e: 50:47:29:6f:21:fd:73:a4:a4:7c:3c:b1:3f:47:77: cd:0c:83:9e:f3:26:16:40:4c:d3:cb:c8:3b:df:cd: ef:04:92:a8:ab:74:fc:51:ae:f9:2e:3f:6c:e2:15: 30:2c:1a:68:5e:f2:0b:b2:c7:de:32:18:b6:68:fe: 75:fa:f4:5b:f0:c2:a7:5d:4a:12:8d:18:75:f7:e0: d2:f6:fe:10:e2:e0:79:b5:14:cc:06:d6:08:48:9b: cf:63:d2:43:9b:98:17:a7:ce:56:2b:e2:17:5d:fa: b2:90:3e:7e:d3:7b:51:79:6f:3b:24:27:28:8a:7b: e5:3f:20:23:ff:f6:96:d3:4a:12:3d:23:83:af:fa: f2:02:1a:f7:da:8c:13:67:7d:3b:e0:48:c6:ea:03: dc:fc:d2:71:87:4d:0c:10:9b:c3:87:19:3a:41:33: e1:97:c8:bb:bf:b5:54:16:7c:57:39:9d:88:25:b3: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DF:2E:5B:A5:2A:07:52:25:70:4A:7F:81:1B:05:1D:E7:8B:61:E8 X509v3 Authority Key Identifier: keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6e:fc:f6:23:a3:f7:81:2e:d9:fa:17:90:4d:13:2c:80:7f: 42:5e:fc:da:f5:4c:06:ec:0f:58:30:70:ac:36:63:51:e2:d8: dd:06:9e:7b:c5:88:68:fe:84:1b:5e:2e:4a:cd:66:7d:5d:33: d3:2e:b2:50:af:be:b5:1b:cd:59:93:46:4a:76:48:2a:62:66: 5d:97:31:3f:e0:01:cc:de:a9:ac:bf:7f:5b:e0:6c:7a:a2:9b: 97:fb:48:44:b5:18:26:71:cb:77:78:ca:fe:d8:d6:60:6c:13: 15:8a:fb:55:6c:e5:ea:5e:08:14:98:63:1a:28:a7:5a:78:81: e7:99:2b:bf:a9:aa:79:b0:e4:22:77:a7:75:e0:d4:88:78:6e: e2:64:ab:39:dc:78:6c:b4:9c:24:32:f3:36:df:44:01:36:6f: d1:bb:bc:ed:91:91:1a:d7:6c:62:d4:4e:26:4f:12:06:44:04: f4:72:e5:dc:92:9b:34:47:b6:71:8d:89:53:95:72:ec:3c:50: 45:de:df:90:3a:60:fb:10:ee:dc:04:3e:16:e4:93:05:7e:82: 96:81:9e:74:2c:cf:15:a1:cd:14:fa:c5:86:1f:52:6b:c9:41: 13:83:3e:b8:36:3f:59:6c:fc:e7:da:5c:74:54:b4:3b:2c:54: 27:78:0a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbogkhWbnUheyHzrhver2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi YWZiMWIwHhcNMjUxMjExMjIwMTAwWhcNMjUxMjEyMjIwMTAwWjAzMTEwLwYDVQQD Eyg4OWRmMmU1YmE1MmEwNzUyMjU3MDRhN2Y4MTFiMDUxZGU3OGI2MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtpNljKc+qDaLYr1v7nhdQW9flA0 JJTd7+4BUd06+VVb3IcRz4YMKfBRI59/yFJjF9xeBAIJfbhvhQ4j3PtzJa6oyEjd SXhp615QRylvIf1zpKR8PLE/R3fNDIOe8yYWQEzTy8g7383vBJKoq3T8Ua75Lj9s 4hUwLBpoXvILssfeMhi2aP51+vRb8MKnXUoSjRh19+DS9v4Q4uB5tRTMBtYISJvP Y9JDm5gXp85WK+IXXfqykD5+03tReW87JCcoinvlPyAj//aW00oSPSODr/ryAhr3 2owTZ3074EjG6gPc/NJxh00MEJvDhxk6QTPhl8i7v7VUFnxXOZ2IJbNnxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInfLlulKgdSJXBKf4EbBR3ni2HoMB8GA1UdIwQY MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt NGY0Yjk5NGUwZWIyLzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm789iOj 94Eu2foXkE0TLIB/Ql782vVMBuwPWDBwrDZjUeLY3Qaee8WIaP6EG14uSs1mfV0z 0y6yUK++tRvNWZNGSnZIKmJmXZcxP+ABzN6prL9/W+BseqKbl/tIRLUYJnHLd3jK /tjWYGwTFYr7VWzl6l4IFJhjGiinWniB55krv6mqebDkInendeDUiHhu4mSrOdx4 bLScJDLzNt9EATZv0bu87ZGRGtdsYtROJk8SBkQE9HLl3JKbNEe2cY2JU5Vy7DxQ Rd7fkDpg+xDu3AQ+FuSTBX6CloGedCzPFaHNFPrFhh9Sa8lBE4M+uDY/WWz859pc dFS0OyxUJ3gKgw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:35:33 2025 by rpki-client