This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft File: S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json) Hash identifier: w4oLHnPoB3y39JZGLbtDAkxR/9fmmOghL7ZYMAzu0KM= Subject key identifier: 40:1B:1D:B5:5B:C9:9A:ED:89:1A:B0:55:F4:72:D1:40:36:58:C3:08 Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09 Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509 Certificate serial: 019B10812D8B9CFA7D67A8E004E31C5F0ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft Manifest number: 124B Signing time: Fri 12 Dec 2025 03:00:59 +0000 Manifest this update: Fri 12 Dec 2025 03:00:59 +0000 Manifest next update: Sat 13 Dec 2025 03:00:59 +0000 Files and hashes: 1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: pxRuSRHzPz8cbXPzrd7Gi2PKRrcQwqpNraVr6LUvhuY=) 2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:2d:8b:9c:fa:7d:67:a8:e0:04:e3:1c:5f:0a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509 Validity Not Before: Dec 12 03:00:59 2025 GMT Not After : Dec 13 03:00:59 2025 GMT Subject: CN=401b1db55bc99aed891ab055f472d1403658c308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:6a:9d:da:f3:3f:5c:1e:30:78:9d:d9:91: 2e:e7:f8:7b:98:df:80:5c:46:38:7a:14:b9:13:24: c9:07:53:28:3a:ba:91:23:59:a3:37:e7:d6:bd:fa: ad:d8:d3:af:56:c7:50:b1:4c:7e:6a:1b:ab:99:f9: 85:d5:b3:a8:58:f2:16:47:74:df:b7:3b:7c:38:3b: 87:31:93:d7:e5:06:f2:fb:cb:80:59:aa:43:d0:c6: 29:98:96:ff:12:a2:3e:4a:44:bf:3c:5b:4d:9f:aa: 08:fe:fa:54:dd:42:4a:9e:0c:8f:5d:7f:92:a2:a0: 96:0d:4f:02:d3:1b:aa:f4:f6:34:ad:7c:33:00:25: 48:01:4a:40:f0:53:df:03:fb:20:79:5c:2c:9a:f0: 13:b8:1b:ac:ec:02:47:78:8b:dc:b3:11:27:f2:ec: ed:26:d8:5f:1b:55:a0:e6:ce:29:39:7d:c1:e0:bd: 8c:de:19:6f:8a:9c:48:d1:72:94:d9:e9:ed:11:d3: f3:22:83:9d:c4:32:60:32:e8:ca:d2:7c:34:d7:b6: 16:3e:94:0c:0a:9b:34:07:7f:a3:07:2a:27:46:6f: fe:3a:60:bb:82:17:1f:56:32:fb:f3:de:b5:26:be: f0:4b:4c:fe:9b:5a:7a:ba:a2:ba:f4:94:c5:a6:16: 7c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1B:1D:B5:5B:C9:9A:ED:89:1A:B0:55:F4:72:D1:40:36:58:C3:08 X509v3 Authority Key Identifier: keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ad:19:42:1f:0a:ac:f4:9c:f3:ac:15:84:53:6c:34:10:69: f4:ec:70:77:66:51:aa:ea:43:91:0c:4b:12:00:17:c2:94:41: 26:03:d8:91:45:4b:76:30:6c:e6:0c:0d:70:ef:72:b9:e4:0e: c9:98:63:95:b2:03:8e:e9:bc:b8:3d:68:cf:55:08:de:d9:0c: 39:9a:d3:8c:3c:1e:69:98:dc:0a:3e:6e:86:dc:52:12:6d:9d: 90:21:c5:d3:0e:dd:88:dc:2b:50:fb:ca:ff:ad:97:8c:92:b8: eb:da:3c:60:41:a6:17:f6:3f:de:98:48:e1:a4:8e:8a:af:6c: 18:ee:89:cb:b7:a9:f6:5e:8f:d3:2a:8a:c9:49:c6:1b:87:f9: 28:e5:26:a0:6a:0d:1d:91:2f:47:85:1f:82:bb:dc:5d:e9:a5: 7e:ad:11:37:d5:dd:fa:6d:ed:74:10:4a:17:d6:43:c3:97:1d: 44:24:8e:34:48:98:03:ca:c0:06:46:9a:15:f7:51:11:b7:56: 29:9d:e3:f2:74:8c:47:60:a7:3b:6b:99:9b:7a:a0:99:de:b8: 36:16:0c:30:e0:8e:ba:e4:6d:f9:9c:fe:cd:ff:bb:3c:5d:0e: 17:3e:5c:a5:04:f6:06:7a:1a:5a:87:34:2d:ec:f4:cc:7f:ef: ff:df:43:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgS2LnPp9Z6jgBOMcXwrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiY2Q3MmQ2Y2IzODVhM2EzM2M2YzhmZTU0NTljNjg2YTY4 NDk1MDkwHhcNMjUxMjEyMDMwMDU5WhcNMjUxMjEzMDMwMDU5WjAzMTEwLwYDVQQD Eyg0MDFiMWRiNTViYzk5YWVkODkxYWIwNTVmNDcyZDE0MDM2NThjMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L9qndrzP1weMHid2ZEu5/h7mN+A XEY4ehS5EyTJB1MoOrqRI1mjN+fWvfqt2NOvVsdQsUx+ahurmfmF1bOoWPIWR3Tf tzt8ODuHMZPX5Qby+8uAWapD0MYpmJb/EqI+SkS/PFtNn6oI/vpU3UJKngyPXX+S oqCWDU8C0xuq9PY0rXwzACVIAUpA8FPfA/sgeVwsmvATuBus7AJHeIvcsxEn8uzt JthfG1Wg5s4pOX3B4L2M3hlvipxI0XKU2entEdPzIoOdxDJgMujK0nw017YWPpQM Cps0B3+jByonRm/+OmC7ghcfVjL78961Jr7wS0z+m1p6uqK69JTFphZ8FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAbHbVbyZrtiRqwVfRy0UA2WMMIMB8GA1UdIwQY MBaAFEvNctbLOFo6M8bI/lRZxoamhJUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wOGY2NzEtM2MzNS00NTBhLWE5MGUt MmNjZTk2MDA2NjBmLzEvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wOGY2NzEtM2MzNS00NTBhLWE5MGUtMmNjZTk2MDA2NjBm LzEvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK0ZQh8K rPSc86wVhFNsNBBp9Oxwd2ZRqupDkQxLEgAXwpRBJgPYkUVLdjBs5gwNcO9yueQO yZhjlbIDjum8uD1oz1UI3tkMOZrTjDweaZjcCj5uhtxSEm2dkCHF0w7diNwrUPvK /62XjJK469o8YEGmF/Y/3phI4aSOiq9sGO6Jy7ep9l6P0yqKyUnGG4f5KOUmoGoN HZEvR4UfgrvcXemlfq0RN9Xd+m3tdBBKF9ZDw5cdRCSONEiYA8rABkaaFfdREbdW KZ3j8nSMR2CnO2uZm3qgmd64NhYMMOCOuuRt+Zz+zf+7PF0OFz5cpQT2BnoaWoc0 Lez0zH/v/99DXQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:00:54 2025 by rpki-client