This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json) Hash identifier: W2o0B8F/hMiFH/BhXUe5PfJOMXZTjiKiU6oBG7KcyfY= Subject key identifier: F8:3D:DE:FD:3B:39:8E:A6:4D:5A:60:BF:B7:04:67:3B:E9:15:B1:23 Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f Certificate serial: 019B37FCBF577157E836FA21C9E4B8D19BB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 19:01:09 +0000 Manifest this update: Fri 19 Dec 2025 19:01:09 +0000 Manifest next update: Sat 20 Dec 2025 19:01:09 +0000 Files and hashes: 1: BFmKhRFnCi2AJyutOk-Yxml708c.roa (hash: 30fgE+QkDlz/nOmXI9WzL3BXCW8rLDMyhnps4H9jCSs=) 2: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: WtrmAbaEoZKGOt35XBvRMOey/BKq7iowayF7qliV6Ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:bf:57:71:57:e8:36:fa:21:c9:e4:b8:d1:9b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f Validity Not Before: Dec 19 19:01:09 2025 GMT Not After : Dec 20 19:01:09 2025 GMT Subject: CN=f83ddefd3b398ea64d5a60bfb704673be915b123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:e8:b6:98:5e:01:ff:e3:e0:11:44:72:87: a3:f6:73:81:40:81:82:98:73:92:1f:07:b1:30:94: 98:1a:48:10:80:cc:cc:05:6c:a0:ac:1b:68:04:7b: 9e:27:e5:88:dc:f7:4e:f4:86:62:b4:98:1a:d7:5e: 53:56:98:09:2c:8d:7a:b0:51:f2:10:90:2e:8b:75: a7:40:2a:0d:e3:96:f7:0d:a8:a3:35:d2:36:c3:e2: 51:6d:d8:b3:29:e6:c1:bf:fd:12:bd:76:10:55:2f: 58:d8:d9:16:5e:ad:61:93:c1:24:51:a9:d1:02:c1: 80:fc:21:8b:c8:e0:0d:35:9c:62:44:90:40:04:03: cd:52:73:33:03:6a:79:6e:e6:4b:be:f2:2d:fa:a0: de:4c:e8:4a:b4:24:1c:71:bc:18:df:fd:3d:69:4f: d4:1f:8c:3d:38:d8:5e:19:73:ee:b2:ac:e4:b6:e7: f7:5e:b6:d3:ac:04:7b:94:57:ed:00:ed:e9:a5:35: 25:18:b4:1e:7f:04:27:06:3f:70:89:bc:4d:3c:1b: 41:f4:b7:1e:24:8f:19:43:ae:ce:a1:19:39:11:d0: 1f:15:aa:85:2d:7c:a3:20:10:8c:eb:3b:33:fe:9e: 21:86:3b:5c:1d:32:c9:96:6b:08:a8:7d:3d:70:53: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:DE:FD:3B:39:8E:A6:4D:5A:60:BF:B7:04:67:3B:E9:15:B1:23 X509v3 Authority Key Identifier: keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b8:42:94:3d:c8:e7:f9:3c:16:79:c3:9a:e4:9d:aa:56:39: 83:52:af:8c:10:4d:a7:d8:88:8a:04:18:6c:6d:b8:7b:37:bb: 67:d4:6c:15:c6:a0:da:6b:42:75:f6:3f:7c:f8:d6:70:77:3f: b5:ed:92:da:c6:c1:ff:83:49:f0:96:f6:7f:d0:02:e7:dd:09: ba:73:71:91:9b:5b:59:19:d1:33:3e:e6:23:f7:c6:23:bb:66: 0c:1f:29:f5:5e:c3:e4:48:98:63:2e:6d:b3:16:ff:d4:8b:36: c2:1f:7f:03:51:d1:3b:19:1c:d3:86:bc:5b:b5:c2:48:fa:fd: 6c:c5:7e:0e:ad:ee:de:9b:c3:e6:27:24:dd:31:2b:e4:c5:67: 45:9e:95:db:1e:1d:1b:a3:32:f4:bc:1d:32:88:d4:66:88:d4: c6:4c:ae:2f:e9:82:91:2b:0c:89:c3:78:79:7b:df:e1:cd:94: f1:bc:7f:f9:ec:e7:06:36:0b:cf:7a:ac:1b:9d:63:91:cb:d4: 36:fa:43:18:78:57:ec:fc:fd:66:60:07:1e:49:a4:06:6a:e7: c7:bd:b7:f4:a2:1c:f3:bd:26:35:1d:04:87:fa:71:ba:5d:d1: 71:83:1f:b3:48:19:79:97:ed:6f:a7:21:9b:a5:47:8e:6a:1d: 24:b4:96:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/L9XcVfoNvohyeS40Zu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjMyYTc1OGI1OTMwOWU4NjEwODlkNjU1M2FlZTA2N2E2 YjM1M2YwHhcNMjUxMjE5MTkwMTA5WhcNMjUxMjIwMTkwMTA5WjAzMTEwLwYDVQQD EyhmODNkZGVmZDNiMzk4ZWE2NGQ1YTYwYmZiNzA0NjczYmU5MTViMTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ePotpheAf/j4BFEcoej9nOBQIGC mHOSHwexMJSYGkgQgMzMBWygrBtoBHueJ+WI3PdO9IZitJga115TVpgJLI16sFHy EJAui3WnQCoN45b3DaijNdI2w+JRbdizKebBv/0SvXYQVS9Y2NkWXq1hk8EkUanR AsGA/CGLyOANNZxiRJBABAPNUnMzA2p5buZLvvIt+qDeTOhKtCQccbwY3/09aU/U H4w9ONheGXPusqzktuf3XrbTrAR7lFftAO3ppTUlGLQefwQnBj9wibxNPBtB9Lce JI8ZQ67OoRk5EdAfFaqFLXyjIBCM6zsz/p4hhjtcHTLJlmsIqH09cFMWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg93v07OY6mTVpgv7cEZzvpFbEjMB8GA1UdIwQY MBaAFEtjKnWLWTCehhCJ1lU67gZ6azU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMt OTRjMGIwYjc2MDI5LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMtOTRjMGIwYjc2MDI5 LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrhClD3I 5/k8FnnDmuSdqlY5g1KvjBBNp9iIigQYbG24eze7Z9RsFcag2mtCdfY/fPjWcHc/ te2S2sbB/4NJ8Jb2f9AC590JunNxkZtbWRnRMz7mI/fGI7tmDB8p9V7D5EiYYy5t sxb/1Is2wh9/A1HROxkc04a8W7XCSPr9bMV+Dq3u3pvD5ick3TEr5MVnRZ6V2x4d G6My9LwdMojUZojUxkyuL+mCkSsMicN4eXvf4c2U8bx/+eznBjYLz3qsG51jkcvU NvpDGHhX7Pz9ZmAHHkmkBmrnx7239KIc870mNR0Eh/pxul3RcYMfs0gZeZftb6ch m6VHjmodJLSW9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 03:13:37 2025 by rpki-client