This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json) Hash identifier: KdiPt52St79Y1slSgQU3KOaFPZ9cpb8qhGb9iXrczJI= Subject key identifier: 9F:D9:4C:C7:E3:D7:7E:52:67:E1:33:0C:99:4B:D3:42:7D:76:DD:D9 Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a Certificate serial: 019B5977C5C1C393D860570C4E3B4518B7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft Manifest number: 1484 Signing time: Fri 26 Dec 2025 07:03:00 +0000 Manifest this update: Fri 26 Dec 2025 07:03:00 +0000 Manifest next update: Sat 27 Dec 2025 07:03:00 +0000 Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: 8wCHXVMKhSbdYNf9Ys6dzfa6+RoZlHGinxzqUIGYfYI=) 2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:c5:c1:c3:93:d8:60:57:0c:4e:3b:45:18:b7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a Validity Not Before: Dec 26 07:03:00 2025 GMT Not After : Dec 27 07:03:00 2025 GMT Subject: CN=9fd94cc7e3d77e5267e1330c994bd3427d76ddd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:35:56:e0:f0:b0:f2:03:80:6b:42:c8:62: 60:06:2b:e4:2c:fb:f1:7c:19:4c:be:62:66:16:7c: de:77:ec:e2:9f:97:60:6b:69:1a:9a:9c:39:ca:66: 9a:a1:4a:8d:b4:36:38:86:00:11:09:e6:4c:da:e4: 75:8e:ec:b9:51:49:6b:7e:10:82:49:d6:3e:9d:52: 04:96:32:f8:ad:0b:01:4c:8f:72:ad:1c:ab:26:26: 81:d0:01:4d:96:51:b5:fb:21:88:cf:74:64:cd:f3: 53:4f:86:5c:44:35:ed:88:46:f1:a0:99:63:80:be: 94:02:3f:ac:dc:56:a8:1a:2d:2c:4e:bf:78:41:83: 61:b2:91:b1:bc:12:96:58:78:a2:c4:df:e6:46:20: 69:3d:11:37:3e:2c:a8:12:a9:7f:ae:39:64:de:e1: 03:30:e0:04:91:14:e6:a6:10:e5:a6:48:dd:7b:b8: b3:dc:b1:71:6b:a8:ba:1e:4c:1e:3b:3b:96:67:89: 4c:5b:60:30:fd:5b:62:2d:2e:44:7a:a6:b3:d2:c6: 13:f9:9a:cd:d1:57:e4:f4:f3:ba:75:c5:18:97:65: 61:73:17:f3:f3:cc:f3:e3:02:79:af:ea:81:9e:94: b6:fa:25:b4:bd:a9:c3:a0:4d:e0:29:ae:4c:4b:f9: d8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D9:4C:C7:E3:D7:7E:52:67:E1:33:0C:99:4B:D3:42:7D:76:DD:D9 X509v3 Authority Key Identifier: keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ce:e1:bf:a4:81:d3:36:ca:d7:4b:a8:20:01:d7:7a:b2:1f: a8:07:9d:e9:2d:17:c5:39:18:3d:9b:ab:c5:55:00:dd:f6:1d: c0:2b:2e:e8:47:32:bb:14:75:1a:3a:71:1e:4a:c1:81:eb:aa: 50:0f:0d:9b:91:7f:9c:38:9f:f5:94:d6:71:a1:40:56:d3:a8: fc:5e:cd:09:a1:0a:dd:29:3f:6f:69:b9:cd:10:d3:c5:7e:08: ae:9a:94:44:67:ea:3c:bf:31:d4:2d:3f:e2:76:f9:c4:da:62: 17:6b:5a:d3:32:a4:2b:a4:d5:01:17:b5:f0:4f:d6:f4:78:64: 4e:46:f5:6b:2e:1e:2e:5f:d4:05:1b:86:82:04:a9:ad:c2:96: 83:d6:11:9c:a4:01:bd:1b:16:70:dc:c1:d9:ef:d0:d0:3e:18: 83:ea:bc:e6:e4:fe:4b:f6:cb:ea:33:2c:9f:8e:f2:55:bc:c7: 51:9f:1a:80:ea:a7:7d:a9:b5:5b:2e:1b:67:a5:59:9e:e1:e0: be:8f:74:e1:33:d5:7c:3e:7b:bd:1a:1f:dd:0d:11:ba:42:89: 93:58:8b:4e:4b:a2:72:37:6e:55:a6:2d:ee:a6:21:6a:8e:d4: 57:07:ed:ca:b9:16:ee:78:e9:00:13:1c:31:c9:8a:48:55:c8: c6:7d:c7:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd8XBw5PYYFcMTjtFGLevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNWM3ZDljNzQ0MGU1Y2I0YjBhNjc2MTU2M2MwZDg1MGYw ODExMWEwHhcNMjUxMjI2MDcwMzAwWhcNMjUxMjI3MDcwMzAwWjAzMTEwLwYDVQQD Eyg5ZmQ5NGNjN2UzZDc3ZTUyNjdlMTMzMGM5OTRiZDM0MjdkNzZkZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshM1VuDwsPIDgGtCyGJgBivkLPvx fBlMvmJmFnzed+zin5dga2kampw5ymaaoUqNtDY4hgARCeZM2uR1juy5UUlrfhCC SdY+nVIEljL4rQsBTI9yrRyrJiaB0AFNllG1+yGIz3RkzfNTT4ZcRDXtiEbxoJlj gL6UAj+s3FaoGi0sTr94QYNhspGxvBKWWHiixN/mRiBpPRE3PiyoEql/rjlk3uED MOAEkRTmphDlpkjde7iz3LFxa6i6HkweOzuWZ4lMW2Aw/VtiLS5Eeqaz0sYT+ZrN 0Vfk9PO6dcUYl2Vhcxfz88zz4wJ5r+qBnpS2+iW0vanDoE3gKa5MS/nYsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/ZTMfj135SZ+EzDJlL00J9dt3ZMB8GA1UdIwQY MBaAFEtcfZx0QOXLSwpnYVY8DYUPCBEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzIt YTVlZWJkMjhkNDk2LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzItYTVlZWJkMjhkNDk2 LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs7hv6SB 0zbK10uoIAHXerIfqAed6S0XxTkYPZurxVUA3fYdwCsu6EcyuxR1GjpxHkrBgeuq UA8Nm5F/nDif9ZTWcaFAVtOo/F7NCaEK3Sk/b2m5zRDTxX4IrpqURGfqPL8x1C0/ 4nb5xNpiF2ta0zKkK6TVARe18E/W9HhkTkb1ay4eLl/UBRuGggSprcKWg9YRnKQB vRsWcNzB2e/Q0D4Yg+q85uT+S/bL6jMsn47yVbzHUZ8agOqnfam1Wy4bZ6VZnuHg vo904TPVfD57vRof3Q0RukKJk1iLTkuicjduVaYt7qYhao7UVwftyrkW7njpABMc McmKSFXIxn3H5g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:35 2025 by rpki-client