This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json) Hash identifier: CIq48Q+PKe+cHCwvuTsvzpVs/QBoOjcTx7Z0UApgOdk= Subject key identifier: B3:49:DF:E8:3A:75:5A:E4:5F:88:3B:ED:40:50:99:71:D5:40:DE:11 Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea Certificate serial: 019B2287BA64417C9F71D35AF9FE09EE8577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 15:01:18 +0000 Manifest this update: Mon 15 Dec 2025 15:01:18 +0000 Manifest next update: Tue 16 Dec 2025 15:01:18 +0000 Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: 7YKhy4DTyal62lgqDPapXdbB7D1j05jjDedBAgsurHI=) 2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:ba:64:41:7c:9f:71:d3:5a:f9:fe:09:ee:85:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea Validity Not Before: Dec 15 15:01:18 2025 GMT Not After : Dec 16 15:01:18 2025 GMT Subject: CN=b349dfe83a755ae45f883bed40509971d540de11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:6a:51:01:5f:7c:9b:77:4d:e0:4d:74:1f: 29:dd:a5:dc:ff:30:be:9b:cb:07:33:84:ef:96:0c: f0:c4:e9:fb:20:bc:6a:8f:7b:f8:b8:98:3c:81:20: 59:e7:1a:98:0a:54:b9:43:72:c1:bf:42:84:fd:81: 88:bf:d0:06:3e:09:8a:19:38:9d:49:43:9f:b5:56: 13:1f:10:86:6e:bb:2a:4f:80:bf:cd:81:f4:cf:27: 2f:ca:ea:d4:00:e2:1e:eb:cf:26:49:eb:0d:db:b3: fe:a8:b7:19:b1:f7:ed:3a:21:04:76:19:db:16:88: 4d:60:c1:38:d5:1a:13:ff:54:25:22:d9:7d:d8:8e: 1e:66:a4:4d:7f:08:a5:4c:ed:6e:55:83:52:20:51: 52:99:f2:6f:ab:56:f0:38:7b:2f:a9:03:3e:05:b9: da:6a:fa:22:b3:bf:d3:b8:4d:4d:71:5a:00:64:f8: 97:bd:70:24:c2:69:bf:9a:61:f1:77:c0:b1:08:da: 9e:d8:4e:07:78:63:ed:88:02:64:7a:e6:f6:f6:3f: 56:9d:32:e2:80:6d:db:fb:05:ea:f7:6e:c1:80:c4: 97:50:db:2e:50:04:4b:0f:8a:e5:2a:35:81:b0:d0: 73:64:5d:1d:3e:72:c1:0c:ca:1c:f9:05:75:9f:b1: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:49:DF:E8:3A:75:5A:E4:5F:88:3B:ED:40:50:99:71:D5:40:DE:11 X509v3 Authority Key Identifier: keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:27:cc:44:fd:6d:20:45:e6:f4:44:ca:bd:fb:c5:a5:eb:f6: 32:9e:2d:c4:c0:58:a3:6e:9f:05:01:8d:96:20:93:d8:fa:57: 98:99:6d:61:ea:ac:2f:c8:49:02:7a:85:aa:93:3a:9d:fa:7e: b2:0e:64:7b:e3:d1:e2:6e:95:27:81:bc:7f:e6:0b:cb:d3:90: 1f:11:be:dc:1d:2f:b8:96:14:d0:18:1e:c9:33:08:2b:09:2b: ae:0f:78:35:16:5a:9b:6f:16:98:b8:57:94:d8:8d:7c:07:8d: 16:c5:4f:a0:0f:a6:44:26:ef:82:4e:d1:28:29:1a:af:de:3a: de:cb:64:14:c3:23:17:ab:69:8d:ec:94:52:29:f7:49:bc:df: 44:a0:20:e2:d8:f7:c6:ff:3c:13:63:3b:6b:ec:14:b3:c1:2d: 98:df:cb:e0:33:23:dc:df:be:87:dc:3b:65:57:a4:db:af:69: c7:8f:bd:36:5b:9c:78:91:73:f2:62:4a:ab:30:d1:28:52:35: 22:13:30:47:0c:e9:40:bd:8d:9b:51:cb:c8:d5:ee:c7:42:97: 96:61:22:a0:30:25:93:74:dd:c4:24:9f:bb:25:f0:a9:94:02: 35:3d:ba:b2:a1:6d:19:da:75:86:a7:b2:46:4e:df:f1:94:26: 57:98:93:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih7pkQXyfcdNa+f4J7oV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4 ODQ5ZWEwHhcNMjUxMjE1MTUwMTE4WhcNMjUxMjE2MTUwMTE4WjAzMTEwLwYDVQQD EyhiMzQ5ZGZlODNhNzU1YWU0NWY4ODNiZWQ0MDUwOTk3MWQ1NDBkZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjBqUQFffJt3TeBNdB8p3aXc/zC+ m8sHM4TvlgzwxOn7ILxqj3v4uJg8gSBZ5xqYClS5Q3LBv0KE/YGIv9AGPgmKGTid SUOftVYTHxCGbrsqT4C/zYH0zycvyurUAOIe688mSesN27P+qLcZsfftOiEEdhnb FohNYME41RoT/1QlItl92I4eZqRNfwilTO1uVYNSIFFSmfJvq1bwOHsvqQM+Bbna avois7/TuE1NcVoAZPiXvXAkwmm/mmHxd8CxCNqe2E4HeGPtiAJkeub29j9WnTLi gG3b+wXq927BgMSXUNsuUARLD4rlKjWBsNBzZF0dPnLBDMoc+QV1n7FRCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNJ3+g6dVrkX4g77UBQmXHVQN4RMB8GA1UdIwQY MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt Njk3MTFmZTgzZDIzLzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEifMRP1t IEXm9ETKvfvFpev2Mp4txMBYo26fBQGNliCT2PpXmJltYeqsL8hJAnqFqpM6nfp+ sg5ke+PR4m6VJ4G8f+YLy9OQHxG+3B0vuJYU0BgeyTMIKwkrrg94NRZam28WmLhX lNiNfAeNFsVPoA+mRCbvgk7RKCkar9463stkFMMjF6tpjeyUUin3SbzfRKAg4tj3 xv88E2M7a+wUs8EtmN/L4DMj3N++h9w7ZVek269px4+9NluceJFz8mJKqzDRKFI1 IhMwRwzpQL2Nm1HLyNXux0KXlmEioDAlk3TdxCSfuyXwqZQCNT26sqFtGdp1hqey Rk7f8ZQmV5iTAw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:44:08 2025 by rpki-client