This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json) Hash identifier: kMxkMIXFvljCqff0Kf1y3UiDLvtp36ADTFKFV7hxONM= Subject key identifier: BE:0C:03:3D:B5:02:B1:65:FD:FD:14:C9:09:E8:83:81:AE:CF:64:63 Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b Certificate serial: 019B33E8F6CC17F9B3FDEB729FE6B8EC6B2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft Manifest number: 1790 Signing time: Fri 19 Dec 2025 00:01:04 +0000 Manifest this update: Fri 19 Dec 2025 00:01:04 +0000 Manifest next update: Sat 20 Dec 2025 00:01:04 +0000 Files and hashes: 1: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: sdPV1IYL8jjMGOfb5OynlTdctMyU7CXA9ddCRq3e2BM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:f6:cc:17:f9:b3:fd:eb:72:9f:e6:b8:ec:6b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b Validity Not Before: Dec 19 00:01:04 2025 GMT Not After : Dec 20 00:01:04 2025 GMT Subject: CN=be0c033db502b165fdfd14c909e88381aecf6463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:2e:90:60:fd:f6:6f:72:18:2e:39:85:31: 23:1f:1a:56:df:b2:82:d1:8e:ec:df:2e:90:45:ce: 46:9e:3e:df:9c:e5:b0:60:b7:ef:b8:63:51:58:ef: ed:d7:02:e1:61:df:a6:f2:2a:c3:c3:d4:8f:c0:73: ef:39:55:6b:ef:2a:67:56:3a:fa:46:a9:97:37:ed: a0:d7:30:51:8d:c5:1d:4b:bf:8d:63:83:5a:78:02: c2:45:c7:5b:1f:c9:7e:f1:bb:2b:5e:ad:e7:13:50: 8c:e7:ef:f2:98:92:de:e6:51:82:02:4d:09:7c:b2: 9c:95:b2:90:b1:22:c2:06:d2:b0:9f:9d:d6:56:88: c9:66:8d:5c:97:9d:4e:86:af:b9:24:9a:ff:3f:d5: e3:70:49:3d:e1:c8:35:28:e1:18:a0:59:e7:c7:7d: e7:b8:4c:b7:61:27:1b:8a:54:4f:0c:52:cc:14:fd: 4d:16:6a:68:b6:46:1e:07:7e:e9:23:8c:ab:73:d0: d6:9a:a2:79:6f:15:29:f4:2c:49:4b:b9:13:b6:87: 22:87:8f:6c:0f:fd:a8:a1:98:91:8e:6e:5e:f0:78: 8b:31:ad:d8:ab:8b:a5:15:4e:63:ab:df:ff:7e:9e: 6c:1b:c3:ca:68:10:c9:7a:75:bd:6e:01:45:40:7b: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0C:03:3D:B5:02:B1:65:FD:FD:14:C9:09:E8:83:81:AE:CF:64:63 X509v3 Authority Key Identifier: keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:df:9a:33:60:10:5b:8a:64:93:f6:d1:9e:c6:ec:4a:6c:f9: 1d:b4:17:6f:19:8a:d3:b6:2a:6b:cc:2d:9f:de:95:40:c0:a5: 66:88:46:27:71:ba:92:c5:df:84:5f:22:d6:78:cb:c5:4e:2c: c4:3c:93:28:e6:a5:bb:fe:53:fd:ae:c2:fd:fd:43:c2:68:0d: af:10:28:0a:07:9a:7e:a0:28:ee:d6:ea:cd:72:fd:0d:1b:6a: c2:4f:15:7a:99:8b:ef:71:7f:ee:bf:b8:7b:07:28:25:8f:40: 0f:10:be:51:61:0d:93:8c:aa:a4:16:f4:e9:27:d2:13:08:03: 92:5f:fb:39:8b:a0:92:b7:b7:3d:37:23:7d:0b:88:5e:cd:8a: a1:8a:30:03:40:13:6e:35:40:4e:48:c4:53:3e:de:f7:fd:6f: 06:f1:e9:fa:88:62:3c:3d:e4:42:cc:e7:28:5b:bf:59:cb:d8: b3:fa:ff:a5:bb:c2:ae:a7:00:0e:85:81:6a:54:d3:3e:e3:76: 14:cc:92:c6:fd:30:17:8d:f9:fa:43:b5:cc:ca:62:84:36:44: 19:6c:ac:d1:40:72:7b:91:f7:ba:dd:64:9b:d9:3c:bb:8f:7f: cf:f3:0d:7c:e9:e8:62:eb:ae:72:95:76:cc:e3:2a:ec:63:d6: 55:b1:13:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6PbMF/mz/etyn+a47GsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTc3MjViMGE2MDVkNGRkY2M0NjRiNzBkY2IzYTE2MmE1 ZjA1NWIwHhcNMjUxMjE5MDAwMTA0WhcNMjUxMjIwMDAwMTA0WjAzMTEwLwYDVQQD EyhiZTBjMDMzZGI1MDJiMTY1ZmRmZDE0YzkwOWU4ODM4MWFlY2Y2NDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOoukGD99m9yGC45hTEjHxpW37KC 0Y7s3y6QRc5Gnj7fnOWwYLfvuGNRWO/t1wLhYd+m8irDw9SPwHPvOVVr7ypnVjr6 RqmXN+2g1zBRjcUdS7+NY4NaeALCRcdbH8l+8bsrXq3nE1CM5+/ymJLe5lGCAk0J fLKclbKQsSLCBtKwn53WVojJZo1cl51Ohq+5JJr/P9XjcEk94cg1KOEYoFnnx33n uEy3YScbilRPDFLMFP1NFmpotkYeB37pI4yrc9DWmqJ5bxUp9CxJS7kTtocih49s D/2ooZiRjm5e8HiLMa3Yq4ulFU5jq9//fp5sG8PKaBDJenW9bgFFQHvF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4MAz21ArFl/f0UyQnog4Guz2RjMB8GA1UdIwQY MBaAFEtXclsKYF1N3MRktw3LOhYqXwVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgt OGFmNTZlNzMzNjAwLzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgtOGFmNTZlNzMzNjAw LzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9+aM2AQ W4pkk/bRnsbsSmz5HbQXbxmK07Yqa8wtn96VQMClZohGJ3G6ksXfhF8i1njLxU4s xDyTKOalu/5T/a7C/f1DwmgNrxAoCgeafqAo7tbqzXL9DRtqwk8VepmL73F/7r+4 ewcoJY9ADxC+UWENk4yqpBb06SfSEwgDkl/7OYugkre3PTcjfQuIXs2KoYowA0AT bjVATkjEUz7e9/1vBvHp+ohiPD3kQsznKFu/WcvYs/r/pbvCrqcADoWBalTTPuN2 FMySxv0wF435+kO1zMpihDZEGWys0UBye5H3ut1km9k8u49/z/MNfOnoYuuucpV2 zOMq7GPWVbEThw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:48:45 2025 by rpki-client