This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft File: S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json) Hash identifier: 7HOlcUKaxxQapAsmeVF7RwkS5EWoSqf5ru+d2kx3os8= Subject key identifier: 5D:29:C5:F7:20:06:C8:2A:3A:B2:D3:84:59:D9:EC:B8:E4:AD:3E:2F Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12 Certificate issuer: /CN=4ba7b24f87ea51446d519afd4fe60419198ec012 Certificate serial: 019B5A888256BE20D4FA3520C343D5442248 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 12:00:54 +0000 Manifest this update: Fri 26 Dec 2025 12:00:54 +0000 Manifest next update: Sat 27 Dec 2025 12:00:54 +0000 Files and hashes: 1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: JP+Z6C4lpu2srbLYz3IhvzZggRreKczV8k+1nawigdk=) 2: k-8joWHq0IXSAeF06EYlGj2AITA.roa (hash: OrXpbU3ZTRNxide1ly7PEoXo5UOkEqSaVuBCmUkwkxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:82:56:be:20:d4:fa:35:20:c3:43:d5:44:22:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012 Validity Not Before: Dec 26 12:00:54 2025 GMT Not After : Dec 27 12:00:54 2025 GMT Subject: CN=5d29c5f72006c82a3ab2d38459d9ecb8e4ad3e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:9a:e7:4a:ed:d6:20:fe:5c:ca:ca:cc:a7: f8:d4:83:e2:fb:ad:36:ef:ce:a8:21:fe:27:b5:ac: 41:ba:9c:2d:29:72:45:c3:43:64:25:7c:67:33:3c: ec:1a:fa:2a:a6:59:f0:30:a7:22:5e:71:06:49:7c: f1:b9:ec:c3:06:54:c9:76:8b:32:81:76:5c:6a:98: eb:a9:4e:e1:cf:4d:4f:e7:a8:48:d9:f0:7a:9a:e1: e2:9a:27:c7:0b:26:fa:a9:b7:dc:cd:74:a2:2b:7f: 3d:7d:d6:fc:e1:c7:6c:5d:58:cc:6e:b7:70:6c:9c: 2e:96:e2:e4:36:6d:2b:ca:23:e7:67:ff:e0:c4:da: 4f:a9:1d:46:b8:fe:25:d8:b1:43:c0:70:b2:0b:39: 81:4a:f3:47:8e:19:04:e9:35:47:69:6e:fa:98:8d: 9c:2a:10:66:b1:73:51:e4:3e:86:2a:ca:d5:7f:39: 22:dd:21:cc:63:06:a8:ef:c8:6d:cb:0f:2c:2e:2f: c6:36:cf:35:61:8f:25:1c:3a:92:44:f5:6a:b0:11: a9:81:47:cf:93:20:ae:01:26:9a:7f:28:44:b6:cc: 5c:53:3a:ec:94:34:03:10:44:0e:17:bd:65:82:54: 5a:27:5d:e9:81:ac:00:06:c1:bc:d4:2d:41:f3:ed: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:29:C5:F7:20:06:C8:2A:3A:B2:D3:84:59:D9:EC:B8:E4:AD:3E:2F X509v3 Authority Key Identifier: keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2a:06:1b:24:08:ca:e8:87:a4:f7:52:a2:77:7e:a3:91:8e: 6a:00:ee:d9:13:62:a9:2d:f5:7c:8c:b0:44:52:bc:12:13:aa: 14:d7:9f:20:64:aa:4a:55:0c:4f:07:c2:9e:dc:88:50:d1:d6: d6:7d:56:e9:1f:14:29:c0:c8:ed:14:a7:77:9d:42:3f:dc:22: 0c:f3:75:49:4e:9c:5e:c6:97:e1:e4:84:ec:c8:66:e8:89:c5: 16:2f:2e:71:40:28:c7:83:9d:77:a8:aa:40:ee:b3:08:a0:8c: 39:c5:20:5f:fe:f5:93:48:ae:b1:7c:76:75:3f:18:4d:ca:10: 2a:2d:e4:70:a8:c9:2c:6e:42:8c:e5:74:2e:4e:f3:3d:06:2b: 2e:b7:e2:d5:34:a9:68:e1:a7:fd:1c:b1:ce:01:f5:51:4b:f4: 7d:fb:23:35:51:0f:b4:b4:fe:68:6a:02:b4:1d:d9:5d:42:77: 79:b7:b6:3c:4b:b9:04:1c:76:44:a9:d7:7d:92:5b:f2:6f:e9: 5b:43:6e:98:47:45:35:50:0a:e6:2d:57:c4:99:4b:3d:d7:87: 78:cb:b9:8c:5b:e2:ef:4e:9b:2a:eb:39:01:6b:7d:e8:f0:e2: 91:1d:f7:da:e5:63:8d:9f:f5:7f:59:fe:51:fc:dd:37:01:9f: ce:50:73:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiIJWviDU+jUgw0PVRCJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYTdiMjRmODdlYTUxNDQ2ZDUxOWFmZDRmZTYwNDE5MTk4 ZWMwMTIwHhcNMjUxMjI2MTIwMDU0WhcNMjUxMjI3MTIwMDU0WjAzMTEwLwYDVQQD Eyg1ZDI5YzVmNzIwMDZjODJhM2FiMmQzODQ1OWQ5ZWNiOGU0YWQzZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlWa50rt1iD+XMrKzKf41IPi+602 786oIf4ntaxBupwtKXJFw0NkJXxnMzzsGvoqplnwMKciXnEGSXzxuezDBlTJdosy gXZcapjrqU7hz01P56hI2fB6muHimifHCyb6qbfczXSiK389fdb84cdsXVjMbrdw bJwuluLkNm0ryiPnZ//gxNpPqR1GuP4l2LFDwHCyCzmBSvNHjhkE6TVHaW76mI2c KhBmsXNR5D6GKsrVfzki3SHMYwao78htyw8sLi/GNs81YY8lHDqSRPVqsBGpgUfP kyCuASaafyhEtsxcUzrslDQDEEQOF71lglRaJ13pgawABsG81C1B8+3vswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0pxfcgBsgqOrLThFnZ7LjkrT4vMB8GA1UdIwQY MBaAFEunsk+H6lFEbVGa/U/mBBkZjsASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgt YTI2ODg5ZWUyMmMyLzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgtYTI2ODg5ZWUyMmMy LzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATioGGyQI yuiHpPdSond+o5GOagDu2RNiqS31fIywRFK8EhOqFNefIGSqSlUMTwfCntyIUNHW 1n1W6R8UKcDI7RSnd51CP9wiDPN1SU6cXsaX4eSE7Mhm6InFFi8ucUAox4Odd6iq QO6zCKCMOcUgX/71k0iusXx2dT8YTcoQKi3kcKjJLG5CjOV0Lk7zPQYrLrfi1TSp aOGn/RyxzgH1UUv0ffsjNVEPtLT+aGoCtB3ZXUJ3ebe2PEu5BBx2RKnXfZJb8m/p W0NumEdFNVAK5i1XxJlLPdeHeMu5jFvi706bKus5AWt96PDikR332uVjjZ/1f1n+ UfzdNwGfzlBzOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:10:57 2025 by rpki-client