This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json) Hash identifier: 3WyNSx5FcOeb9EPFdv+JhpWRNxB7Ihm5xVm1ErIxCgs= Subject key identifier: 22:DB:FF:14:12:B0:93:7E:54:5F:42:65:8B:71:B8:7A:41:41:59:C7 Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e Certificate serial: 019B341FF95CA87586E307981AEC90192102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft Manifest number: 1713 Signing time: Fri 19 Dec 2025 01:01:09 +0000 Manifest this update: Fri 19 Dec 2025 01:01:09 +0000 Manifest next update: Sat 20 Dec 2025 01:01:09 +0000 Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=) 2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: LCSmKBlGh9URQBlx7LqtrrR6oTXGPE0OyD/3vCFwp0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:f9:5c:a8:75:86:e3:07:98:1a:ec:90:19:21:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e Validity Not Before: Dec 19 01:01:09 2025 GMT Not After : Dec 20 01:01:09 2025 GMT Subject: CN=22dbff1412b0937e545f42658b71b87a414159c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:37:76:f7:ef:a5:de:85:e1:7e:a9:74:9d: de:b2:eb:2e:55:a9:1f:0e:5b:dc:45:f6:da:cb:df: b4:45:be:ad:c4:f2:1e:47:c3:d4:78:28:63:62:95: 6d:38:07:09:62:e5:6d:26:ed:6a:0c:da:d6:53:da: fd:5d:34:c4:df:8f:6d:e8:f5:9b:76:e9:c8:4d:19: bc:11:ea:bd:26:f7:4d:12:a2:60:26:3a:0b:e1:62: a2:7b:48:5f:a7:3e:37:c5:7a:dc:2f:10:8e:f1:c1: bf:ef:49:73:aa:c0:f7:f6:e4:d0:84:70:4d:de:11: ae:25:54:15:38:10:b5:fa:32:74:6c:00:19:4d:cc: 43:00:9a:cc:38:c7:a1:0e:c8:5c:d9:6d:ad:40:3b: ae:76:b2:4d:0b:0a:40:c0:fe:6f:a8:d7:31:77:9b: ea:8d:02:5a:a4:9e:04:51:e4:0e:0d:5a:92:b3:c8: b8:e9:53:ea:43:01:ef:75:e4:ac:a1:c1:63:df:33: 60:80:c9:7f:49:33:f7:a5:2f:ca:ff:82:90:58:59: 76:26:19:d0:0d:38:88:56:f7:3b:f4:4a:79:ae:2d: 37:2b:69:67:b4:ec:29:50:76:78:8d:fa:60:81:04: 4e:6a:d5:f6:b1:32:c4:9b:7f:26:44:d7:20:cc:48: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DB:FF:14:12:B0:93:7E:54:5F:42:65:8B:71:B8:7A:41:41:59:C7 X509v3 Authority Key Identifier: keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c0:0a:ac:12:c0:10:7f:d0:07:13:2f:f0:89:b1:17:64:88: 93:e4:1a:9e:41:f4:66:76:18:89:3a:b7:f7:e5:90:4c:0c:68: cd:94:7e:bd:09:5d:7f:62:c2:dc:24:c0:42:96:2c:c1:80:f3: b3:f8:7d:b1:f7:2d:58:c7:e3:8b:33:da:5d:b7:69:38:be:78: d4:2a:53:c9:1d:36:3c:51:f4:0a:f1:99:b1:b3:bc:d2:04:55: bb:a5:22:3d:e6:14:01:dd:ae:a0:b7:f1:38:5f:a3:dd:cb:63: 0d:ec:c3:ed:88:24:69:42:8f:db:18:b1:5f:74:0d:a9:97:cf: d2:28:cc:60:8f:14:c7:42:a8:78:09:89:82:38:c6:75:58:3c: e0:54:25:32:ca:75:b7:22:d1:47:3f:48:24:d0:c4:a2:7d:f4: 1a:98:59:2a:ea:af:7e:96:ed:77:26:bf:18:a0:3a:af:08:8f: 9d:9e:e5:ff:f5:b6:ca:a9:4d:9f:83:95:76:6b:34:02:82:ab: d8:70:50:5d:65:b1:5f:07:1f:26:07:00:93:f2:c3:e2:46:32: b6:7a:c5:23:ae:47:60:44:11:f0:fe:85:57:fe:5f:cf:c0:70: d8:0e:e2:e2:49:41:cf:69:5a:cd:00:05:ee:d9:5b:3b:3a:9b: 2e:0f:05:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H/lcqHWG4weYGuyQGSECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm NDgwMWUwHhcNMjUxMjE5MDEwMTA5WhcNMjUxMjIwMDEwMTA5WjAzMTEwLwYDVQQD EygyMmRiZmYxNDEyYjA5MzdlNTQ1ZjQyNjU4YjcxYjg3YTQxNDE1OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXA3dvfvpd6F4X6pdJ3esusuVakf DlvcRfbay9+0Rb6txPIeR8PUeChjYpVtOAcJYuVtJu1qDNrWU9r9XTTE349t6PWb dunITRm8Eeq9JvdNEqJgJjoL4WKie0hfpz43xXrcLxCO8cG/70lzqsD39uTQhHBN 3hGuJVQVOBC1+jJ0bAAZTcxDAJrMOMehDshc2W2tQDuudrJNCwpAwP5vqNcxd5vq jQJapJ4EUeQODVqSs8i46VPqQwHvdeSsocFj3zNggMl/STP3pS/K/4KQWFl2JhnQ DTiIVvc79Ep5ri03K2lntOwpUHZ4jfpggQROatX2sTLEm38mRNcgzEitSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLb/xQSsJN+VF9CZYtxuHpBQVnHMB8GA1UdIwQY MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt ZTJiNThmNWU0YWJiLzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsAKrBLA EH/QBxMv8ImxF2SIk+QankH0ZnYYiTq39+WQTAxozZR+vQldf2LC3CTAQpYswYDz s/h9sfctWMfjizPaXbdpOL541CpTyR02PFH0CvGZsbO80gRVu6UiPeYUAd2uoLfx OF+j3ctjDezD7YgkaUKP2xixX3QNqZfP0ijMYI8Ux0KoeAmJgjjGdVg84FQlMsp1 tyLRRz9IJNDEon30GphZKuqvfpbtdya/GKA6rwiPnZ7l//W2yqlNn4OVdms0AoKr 2HBQXWWxXwcfJgcAk/LD4kYytnrFI65HYEQR8P6FV/5fz8Bw2A7i4klBz2lazQAF 7tlbOzqbLg8FqA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:48:47 2025 by rpki-client