This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json) Hash identifier: IMhXIaq0/PEnTMmROr0QRqvEnpCQhrwmCmNI6iYDJDU= Subject key identifier: 36:0B:34:CA:B1:8C:64:20:F6:5A:F6:82:F0:84:6A:F2:FF:34:51:F9 Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Certificate serial: 019B36B452761FA1AA23C5B66505EF1F59E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft Manifest number: 04CA Signing time: Fri 19 Dec 2025 13:02:25 +0000 Manifest this update: Fri 19 Dec 2025 13:02:25 +0000 Manifest next update: Sat 20 Dec 2025 13:02:25 +0000 Files and hashes: 1: A3eZlYEypGjwef6ovVTvAMEG2Sc.roa (hash: itiiU42XBZajUxpH3eQ5BL8/j+cYwxjPvYG7bJxrjyA=) 2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: DRrwJwOqtsTiQDRDfbBYS74cRbYmwrc9n62BunASKlY=) 3: ZioYOGsNfMxy07UlqgZrBgcTE4o.roa (hash: 4f3pcz2xE9Ywmo/wXO916PUITihDfuTfzvT55VS4uaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:52:76:1f:a1:aa:23:c5:b6:65:05:ef:1f:59:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Validity Not Before: Dec 19 13:02:25 2025 GMT Not After : Dec 20 13:02:25 2025 GMT Subject: CN=360b34cab18c6420f65af682f0846af2ff3451f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:57:54:fa:74:3d:c7:7d:5f:19:47:44:32: fb:93:85:8b:01:f2:63:54:51:1b:55:b6:23:1c:45: 8d:40:72:70:27:8d:54:a9:04:5c:ac:36:b4:44:bb: ef:2f:ce:c6:70:4b:c0:7c:be:b1:b9:15:91:ae:d3: cc:59:9a:95:4f:2c:1d:b8:4c:f1:84:5a:79:87:a4: 38:d6:a0:21:4f:5c:b5:98:fa:92:7b:ff:da:82:9b: 91:57:c3:5d:33:af:ed:d5:cb:7b:93:24:0a:e5:69: fb:f6:e2:5f:e1:43:5e:8f:19:96:74:8d:92:32:b9: cd:ba:08:a4:f4:d6:f0:d5:f4:92:6f:4d:36:26:d5: d5:a6:26:f2:8b:45:f3:99:5f:ee:94:f3:92:83:e6: 21:4b:5c:8c:7c:5d:a1:f9:a0:ce:e1:f3:4f:8e:37: 2b:83:ab:ec:c8:71:78:18:37:bf:96:9d:bc:32:1d: f6:7e:1c:4c:f2:bc:bd:05:14:11:43:7c:81:79:2f: 7a:ce:1a:68:84:1b:2e:a6:b8:0e:2a:c9:71:8a:fa: e5:f0:08:d8:48:bb:00:a7:18:a6:ef:b0:20:a9:36: 14:d3:4a:25:c4:48:3c:6c:85:cb:3e:19:08:57:3a: 13:60:ae:47:9c:cd:1d:68:31:c6:4a:d9:57:03:b0: 0e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:34:CA:B1:8C:64:20:F6:5A:F6:82:F0:84:6A:F2:FF:34:51:F9 X509v3 Authority Key Identifier: keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3c:20:90:89:00:6c:e1:94:b8:41:fc:74:aa:6a:1c:31:b5: ac:16:dc:54:a2:10:be:27:8c:c6:97:93:89:13:e7:38:93:93: e9:92:0c:43:23:b2:65:90:e9:8f:65:29:2f:b8:89:55:92:aa: 87:d4:85:64:36:90:48:be:fd:fe:0f:b4:2b:3c:d5:5f:a6:58: 35:3f:71:c1:f1:1f:40:6f:5a:1a:7e:70:6d:71:84:ba:89:c4: e5:1b:80:39:cd:2c:c8:e7:83:6e:6c:69:d4:db:ef:f7:af:7e: a2:05:44:65:f0:71:35:16:8f:b1:eb:6a:23:f7:1e:c5:4e:fc: 4c:56:3a:c4:b5:30:e8:1a:d1:12:61:e8:9d:4b:b9:3a:2a:81: 48:da:cd:3b:63:df:0c:48:12:65:1e:b2:4b:af:da:7d:97:ed: 8d:c9:39:2f:21:0d:96:64:58:f2:6a:b0:12:9f:84:a6:58:bb: 74:fe:8e:8c:ce:04:5e:74:9e:91:a7:cc:cb:0d:5e:09:e6:ff: 89:ca:35:d7:6f:0a:2a:d4:8d:48:f5:49:ea:66:d9:25:5d:fa: 8f:f4:97:38:f4:cd:50:31:2a:b1:d6:21:84:0b:db:42:2e:d5: b8:33:d1:ca:82:5a:c1:a3:4d:e0:22:c6:b6:65:2b:ac:2e:1c: 5f:88:47:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tFJ2H6GqI8W2ZQXvH1nnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjhlMWZiYTdiNDRhN2I2NjYyMzZiMjEyNTNkN2Q2MzYy ZDBkODMwHhcNMjUxMjE5MTMwMjI1WhcNMjUxMjIwMTMwMjI1WjAzMTEwLwYDVQQD EygzNjBiMzRjYWIxOGM2NDIwZjY1YWY2ODJmMDg0NmFmMmZmMzQ1MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrtXVPp0Pcd9XxlHRDL7k4WLAfJj VFEbVbYjHEWNQHJwJ41UqQRcrDa0RLvvL87GcEvAfL6xuRWRrtPMWZqVTywduEzx hFp5h6Q41qAhT1y1mPqSe//agpuRV8NdM6/t1ct7kyQK5Wn79uJf4UNejxmWdI2S MrnNugik9Nbw1fSSb002JtXVpibyi0XzmV/ulPOSg+YhS1yMfF2h+aDO4fNPjjcr g6vsyHF4GDe/lp28Mh32fhxM8ry9BRQRQ3yBeS96zhpohBsuprgOKslxivrl8AjY SLsApxim77AgqTYU00olxEg8bIXLPhkIVzoTYK5HnM0daDHGStlXA7AO8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYLNMqxjGQg9lr2gvCEavL/NFH5MB8GA1UdIwQY MBaAFEto4funtEp7ZmI2shJT19Y2LQ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMt OGIwNmVjNTY0YTFiLzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMtOGIwNmVjNTY0YTFi LzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzwgkIkA bOGUuEH8dKpqHDG1rBbcVKIQvieMxpeTiRPnOJOT6ZIMQyOyZZDpj2UpL7iJVZKq h9SFZDaQSL79/g+0KzzVX6ZYNT9xwfEfQG9aGn5wbXGEuonE5RuAOc0syOeDbmxp 1Nvv969+ogVEZfBxNRaPsetqI/cexU78TFY6xLUw6BrREmHonUu5OiqBSNrNO2Pf DEgSZR6yS6/afZftjck5LyENlmRY8mqwEp+Epli7dP6OjM4EXnSekafMyw1eCeb/ ico1128KKtSNSPVJ6mbZJV36j/SXOPTNUDEqsdYhhAvbQi7VuDPRyoJawaNN4CLG tmUrrC4cX4hHDQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:00 2025 by rpki-client