This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json) Hash identifier: 9WzpMky5BPEr1z+/y4HoboSTr4J+KBw1C3OSV5Alkwc= Subject key identifier: C9:97:BF:EE:55:FC:16:88:85:A7:BC:01:23:09:69:EC:B5:96:04:7E Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7 Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7 Certificate serial: 019B1FF42E831348F38EDCBF5E1EABA250B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft Manifest number: 1777 Signing time: Mon 15 Dec 2025 03:00:54 +0000 Manifest this update: Mon 15 Dec 2025 03:00:54 +0000 Manifest next update: Tue 16 Dec 2025 03:00:54 +0000 Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=) 2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: O2mkKBN5kJBlzgpUFIXDRzwqJJr9/yCoMFqZnGjmaF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:2e:83:13:48:f3:8e:dc:bf:5e:1e:ab:a2:50:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7 Validity Not Before: Dec 15 03:00:54 2025 GMT Not After : Dec 16 03:00:54 2025 GMT Subject: CN=c997bfee55fc168885a7bc01230969ecb596047e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:f7:97:76:07:5f:19:f8:6b:1c:ff:09:9d: 0b:0d:39:53:6a:c7:aa:b2:fe:6c:65:b7:5b:66:8f: 9b:01:97:4e:b2:cf:9b:ce:16:3d:5c:e4:d9:42:44: 00:9c:97:5f:ba:95:c8:35:c6:e3:b5:16:89:27:5f: 4e:75:9b:6f:0e:16:66:b0:96:90:cd:ea:f9:82:31: 2e:71:f0:27:4c:9f:4c:ae:5c:56:47:ab:55:9b:2e: f2:b9:75:d6:eb:b3:ff:a7:55:cc:12:fc:ff:75:37: eb:df:89:c7:e4:6d:49:31:72:95:21:13:0a:12:82: 64:ca:79:81:56:77:4d:7e:b2:fd:f3:bc:b7:70:30: 57:dd:58:64:9d:d4:1f:cf:e0:d7:48:b0:c0:92:ae: ed:d2:2a:47:05:e6:3e:05:0e:1e:59:30:04:e9:01: 57:66:00:95:3f:60:83:f1:35:f6:88:08:99:53:84: ab:78:8b:b9:ad:4b:2a:5e:08:a9:02:7c:c3:07:5d: 93:46:20:e9:66:e9:1b:cc:bb:ee:da:63:2e:c9:05: 77:4d:89:39:35:06:24:28:72:bb:d5:53:b8:93:59: c4:3d:00:35:ea:fe:c6:d3:50:ec:ea:b8:e7:53:15: af:4d:29:69:52:3b:1f:ba:6a:5c:03:3c:fe:6d:d6: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:BF:EE:55:FC:16:88:85:A7:BC:01:23:09:69:EC:B5:96:04:7E X509v3 Authority Key Identifier: keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d1:dc:c1:8e:1e:98:b4:e3:36:82:9d:bc:c4:6b:6d:69:30: 7b:83:27:41:75:57:7a:6d:b4:67:fe:49:96:fa:ad:db:4d:ce: b8:56:60:aa:b5:c3:c5:3f:9c:d9:c1:06:a7:1a:43:b4:aa:06: f1:75:3a:ab:10:c5:90:82:62:b6:5e:78:94:8c:44:ac:f4:70: e9:f8:8d:6e:dc:29:37:26:ec:d9:12:34:c4:b9:bc:62:a8:54: 49:18:97:31:53:b3:95:af:39:7b:c5:f4:73:33:62:49:6c:6b: 32:95:a9:07:e5:fd:5f:d7:15:50:b2:0f:25:cd:65:6d:3e:90: da:60:c9:97:2d:62:89:e6:63:2e:b0:b8:74:b6:a5:22:1b:4a: ed:01:0a:e2:f2:7f:73:f3:2b:35:4d:6d:4a:d2:f8:a5:ef:29: cf:46:2f:1a:c3:e5:a6:44:ec:14:10:b4:a5:0b:ba:13:ae:50: 5a:58:d4:ad:04:3b:22:9d:ae:75:14:a3:84:9f:9d:8f:89:ec: 9d:0f:d8:62:23:f6:b0:80:4b:04:e4:f0:8e:04:02:e4:d2:94: 71:52:78:66:ea:3f:06:a7:2c:b5:c1:b1:23:29:ea:e4:d9:e5: b8:ea:91:fe:c5:1e:56:9f:fd:48:f0:4c:c2:c4:11:e5:0b:97: 28:f1:4a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9C6DE0jzjty/Xh6rolC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM3YmQwYzQ0ODZiYTA3M2NlMmRlNTNiYTA3NGQ3MGU0 NWI1ZTcwHhcNMjUxMjE1MDMwMDU0WhcNMjUxMjE2MDMwMDU0WjAzMTEwLwYDVQQD EyhjOTk3YmZlZTU1ZmMxNjg4ODVhN2JjMDEyMzA5NjllY2I1OTYwNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuj3l3YHXxn4axz/CZ0LDTlTaseq sv5sZbdbZo+bAZdOss+bzhY9XOTZQkQAnJdfupXINcbjtRaJJ19OdZtvDhZmsJaQ zer5gjEucfAnTJ9MrlxWR6tVmy7yuXXW67P/p1XMEvz/dTfr34nH5G1JMXKVIRMK EoJkynmBVndNfrL987y3cDBX3VhkndQfz+DXSLDAkq7t0ipHBeY+BQ4eWTAE6QFX ZgCVP2CD8TX2iAiZU4SreIu5rUsqXgipAnzDB12TRiDpZukbzLvu2mMuyQV3TYk5 NQYkKHK71VO4k1nEPQA16v7G01Ds6rjnUxWvTSlpUjsfumpcAzz+bdY3UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmXv+5V/BaIhae8ASMJaey1lgR+MB8GA1UdIwQY MBaAFEuMe9DESGugc84t5TugdNcORbXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgt MDI0MGU3NDQ3NmE3LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgtMDI0MGU3NDQ3NmE3 LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtHcwY4e mLTjNoKdvMRrbWkwe4MnQXVXem20Z/5Jlvqt203OuFZgqrXDxT+c2cEGpxpDtKoG 8XU6qxDFkIJitl54lIxErPRw6fiNbtwpNybs2RI0xLm8YqhUSRiXMVOzla85e8X0 czNiSWxrMpWpB+X9X9cVULIPJc1lbT6Q2mDJly1iieZjLrC4dLalIhtK7QEK4vJ/ c/MrNU1tStL4pe8pz0YvGsPlpkTsFBC0pQu6E65QWljUrQQ7Ip2udRSjhJ+dj4ns nQ/YYiP2sIBLBOTwjgQC5NKUcVJ4Zuo/BqcstcGxIynq5NnluOqR/sUeVp/9SPBM wsQR5QuXKPFKDQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:15:03 2025 by rpki-client