This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json) Hash identifier: i96scMR1YXYdgzY12Vm0iGBAhU3WFUMYvydsheUk3p0= Subject key identifier: E0:D6:1C:BB:64:39:7B:07:F3:40:E5:5C:18:07:0B:E3:B0:04:A8:E5 Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f Certificate serial: 019B0F6E8D5D4AD4361BC9A5FA3846D6FBC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 22:01:01 +0000 Manifest this update: Thu 11 Dec 2025 22:01:01 +0000 Manifest next update: Fri 12 Dec 2025 22:01:01 +0000 Files and hashes: 1: BFmKhRFnCi2AJyutOk-Yxml708c.roa (hash: 30fgE+QkDlz/nOmXI9WzL3BXCW8rLDMyhnps4H9jCSs=) 2: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: 9SaGrqJyrVy1eiqMbu91k/37FtdxGUxMGhrNzaFJOEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:8d:5d:4a:d4:36:1b:c9:a5:fa:38:46:d6:fb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f Validity Not Before: Dec 11 22:01:01 2025 GMT Not After : Dec 12 22:01:01 2025 GMT Subject: CN=e0d61cbb64397b07f340e55c18070be3b004a8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:d9:bb:17:3c:a4:b3:0b:f9:5c:35:9a:44: 9b:c7:83:37:dd:1c:04:fb:0b:2e:fa:67:28:52:15: 3d:f3:61:30:d7:b4:0f:09:b0:a8:4c:2a:d8:63:e0: 15:fc:31:af:31:9d:01:40:83:47:ae:ff:7f:4f:c4: f4:1d:8b:87:59:1a:8d:2a:6d:82:6c:54:7a:ee:32: 34:c7:23:ba:a3:ae:ab:d3:0b:0a:34:7e:ef:ce:62: 90:3c:85:95:d3:a4:80:b8:7e:5a:4d:69:be:18:b6: cb:ba:d3:83:5a:90:6a:e7:6b:7a:a8:11:8e:15:f9: 52:38:75:c0:ca:bf:60:ae:66:95:13:11:c5:95:af: a5:88:16:77:47:64:84:66:d2:57:40:19:d7:08:3c: ad:1f:2f:66:7d:3f:2d:95:bc:9b:2e:c9:97:05:1b: 30:1e:e7:65:94:80:2b:3c:4d:23:5f:eb:e5:96:88: 46:f4:a0:68:78:d0:52:76:17:57:17:c8:5a:27:14: 33:f7:1a:97:d8:f0:c4:7f:7e:7f:63:93:51:f3:57: ba:16:e4:f0:56:2f:ec:79:54:03:a6:bf:a0:11:a1: b8:f0:6b:b1:60:3f:6b:e7:ac:e8:3a:78:46:f8:fb: c8:bb:f1:c8:91:a9:c5:50:c5:cb:60:4a:cd:75:48: 35:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D6:1C:BB:64:39:7B:07:F3:40:E5:5C:18:07:0B:E3:B0:04:A8:E5 X509v3 Authority Key Identifier: keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:56:40:21:f1:2b:69:92:e2:39:a3:ad:32:d9:cf:e0:e2:d1: ba:f8:8f:ae:2b:67:bf:7f:2d:8f:be:7d:ee:a2:bd:78:ab:fe: 2e:8a:59:f7:01:7b:85:5f:45:e9:d1:a4:31:1f:4f:b0:7d:73: 50:68:6b:a9:4a:65:ca:8c:60:4c:ff:5d:b7:bd:3f:82:f4:f0: 72:2b:32:8d:68:9c:7f:c5:52:e0:df:17:7d:d7:c7:f0:42:02: 1a:52:d2:73:2e:24:2d:69:a1:06:bb:a7:eb:fd:2d:70:57:bf: 42:20:7d:23:8b:1a:05:e9:14:96:10:b5:37:e5:bf:85:83:dc: e1:b9:97:51:79:11:bd:dd:6c:52:cc:46:ca:45:d4:11:b7:44: 6b:9f:0b:6a:c9:a1:02:24:15:b7:b2:9c:41:77:60:b8:6b:8b: 8c:05:55:4e:8b:ba:5d:d9:1d:82:50:d5:06:60:e2:1f:06:8f: 05:d9:8a:01:4f:d3:39:67:65:3c:fd:f2:68:d3:d0:d5:15:93: 24:e6:8e:05:a9:73:fc:d4:55:bd:0c:c2:f0:92:24:a1:ec:0c: 39:b2:7d:f1:70:85:9b:a5:74:37:5b:37:92:ab:58:18:8c:81: 20:55:88:7e:4a:7c:0c:32:f1:52:3f:60:38:65:d0:51:b8:0b: 36:51:52:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbo1dStQ2G8ml+jhG1vvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjMyYTc1OGI1OTMwOWU4NjEwODlkNjU1M2FlZTA2N2E2 YjM1M2YwHhcNMjUxMjExMjIwMTAxWhcNMjUxMjEyMjIwMTAxWjAzMTEwLwYDVQQD EyhlMGQ2MWNiYjY0Mzk3YjA3ZjM0MGU1NWMxODA3MGJlM2IwMDRhOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqfZuxc8pLML+Vw1mkSbx4M33RwE +wsu+mcoUhU982Ew17QPCbCoTCrYY+AV/DGvMZ0BQINHrv9/T8T0HYuHWRqNKm2C bFR67jI0xyO6o66r0wsKNH7vzmKQPIWV06SAuH5aTWm+GLbLutODWpBq52t6qBGO FflSOHXAyr9grmaVExHFla+liBZ3R2SEZtJXQBnXCDytHy9mfT8tlbybLsmXBRsw HudllIArPE0jX+vllohG9KBoeNBSdhdXF8haJxQz9xqX2PDEf35/Y5NR81e6FuTw Vi/seVQDpr+gEaG48GuxYD9r56zoOnhG+PvIu/HIkanFUMXLYErNdUg1rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODWHLtkOXsH80DlXBgHC+OwBKjlMB8GA1UdIwQY MBaAFEtjKnWLWTCehhCJ1lU67gZ6azU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMt OTRjMGIwYjc2MDI5LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMtOTRjMGIwYjc2MDI5 LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1ZAIfEr aZLiOaOtMtnP4OLRuviPritnv38tj7597qK9eKv+LopZ9wF7hV9F6dGkMR9PsH1z UGhrqUplyoxgTP9dt70/gvTwcisyjWicf8VS4N8XfdfH8EICGlLScy4kLWmhBrun 6/0tcFe/QiB9I4saBekUlhC1N+W/hYPc4bmXUXkRvd1sUsxGykXUEbdEa58Lasmh AiQVt7KcQXdguGuLjAVVTou6XdkdglDVBmDiHwaPBdmKAU/TOWdlPP3yaNPQ1RWT JOaOBalz/NRVvQzC8JIkoewMObJ98XCFm6V0N1s3kqtYGIyBIFWIfkp8DDLxUj9g OGXQUbgLNlFSHw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:41:53 2025 by rpki-client