This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json) Hash identifier: bPFV9ZqiFKHEMhp4QcMwNY9egt0o14SrJrgvMKnNKNQ= Subject key identifier: 45:02:CA:6E:A8:D4:1F:7D:80:01:01:C2:4F:AF:63:6A:2E:88:A7:D5 Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a Certificate serial: 019B390EED11E1582103C8F423263FFA0AB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 00:00:38 +0000 Manifest this update: Sat 20 Dec 2025 00:00:38 +0000 Manifest next update: Sun 21 Dec 2025 00:00:38 +0000 Files and hashes: 1: 5dOeHmReGHpglp9CPLficnPxbRA.roa (hash: u/adm8/lzLOzXE337fHeCi8QttPIgGUNVZ/GPwCUh0o=) 2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: HXOm9VerORxyWcyBGJdFsEyalAmzsZ6n3oOecuo+fE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:ed:11:e1:58:21:03:c8:f4:23:26:3f:fa:0a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a Validity Not Before: Dec 20 00:00:38 2025 GMT Not After : Dec 21 00:00:38 2025 GMT Subject: CN=4502ca6ea8d41f7d800101c24faf636a2e88a7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:45:68:27:00:91:fe:ce:4a:3b:6c:46:88: d7:74:59:e9:bc:d6:de:97:6e:ba:e7:d4:77:2e:84: 8d:62:52:59:15:03:2c:cb:f4:92:20:35:cb:6a:2d: 11:ee:b3:c2:34:17:24:68:3d:39:7a:10:d5:17:05: 18:88:79:0e:88:71:c8:e8:f3:c3:33:ed:3b:bd:50: 45:86:89:90:26:0c:ae:6e:b3:0b:11:67:fb:30:45: a9:49:71:d5:92:45:47:89:2e:f5:c9:ac:fc:0d:23: 67:fd:39:87:af:f3:ba:e3:9d:51:e4:0b:55:64:8b: d0:4b:2e:50:83:83:69:e2:45:e8:9b:78:b6:57:c2: 58:78:cd:c1:0d:92:ae:06:9e:51:b4:2f:ab:16:60: 3e:1a:3c:c5:7c:5b:57:25:a9:86:2d:d6:d5:98:8f: f4:6d:c7:80:4a:e2:fc:ef:53:d0:a8:4f:35:dc:46: 89:4a:63:d1:ed:25:4f:23:c7:19:0e:9f:77:6c:87: d9:07:78:58:31:33:cf:5e:ea:42:34:7c:46:63:0e: 9a:72:99:30:d1:93:73:4d:cd:20:3d:ae:e9:68:c0: e6:d4:23:31:97:a6:05:e9:83:80:09:05:c3:a6:3a: ee:a5:e9:cd:ba:dd:14:47:c3:89:14:6a:e4:fd:a9: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:02:CA:6E:A8:D4:1F:7D:80:01:01:C2:4F:AF:63:6A:2E:88:A7:D5 X509v3 Authority Key Identifier: keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a0:7c:d0:2a:41:bd:3a:2e:e4:fd:bd:a0:5f:c7:d4:8c:3b: d9:5e:0f:09:14:72:a5:18:b9:48:1d:bf:1d:45:2f:fc:ec:79: cf:d0:9d:01:34:fc:95:e3:bf:a2:a9:ac:43:04:ee:f3:dc:96: ff:a9:f1:81:28:b9:7a:4e:6c:c3:cf:8a:e7:ff:58:a8:47:0e: 7c:ad:47:fb:8c:03:82:fe:d1:fc:30:54:9f:22:c1:65:a9:8b: ba:76:f9:a9:33:7f:e5:a2:11:d7:8e:99:cf:52:27:68:59:52: 8f:e7:15:b2:f1:69:5a:fb:22:0e:e8:0d:51:f8:a7:45:5e:48: 89:3b:6b:99:4f:a1:a0:4a:c1:c9:0d:53:c9:13:b2:37:ca:fa: 72:98:12:02:c4:88:32:40:af:7b:29:a1:54:53:b0:b9:97:f5: d6:96:0e:cc:e4:37:95:03:24:2e:a4:f3:06:25:7f:1a:76:12: 09:f8:5b:84:74:3a:05:2c:5f:a9:c9:44:2f:c2:4d:4e:54:13: 7f:9a:ae:5e:d9:d3:72:7b:9a:9c:d0:ee:a8:09:a6:13:a9:56: c9:06:df:68:bb:c7:d8:9e:fb:3b:46:64:63:ce:af:0c:3e:da: 95:20:14:9a:de:4e:26:e9:4e:4f:bf:bb:3a:ee:23:63:ec:60: 73:5b:3e:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Du0R4VghA8j0IyY/+gq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjFjYzhhMzY1Y2M0MDM4MmEzMWRhZDU0ZjZjYjcyM2Y1 ODc1OGEwHhcNMjUxMjIwMDAwMDM4WhcNMjUxMjIxMDAwMDM4WjAzMTEwLwYDVQQD Eyg0NTAyY2E2ZWE4ZDQxZjdkODAwMTAxYzI0ZmFmNjM2YTJlODhhN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbJFaCcAkf7OSjtsRojXdFnpvNbe l26659R3LoSNYlJZFQMsy/SSIDXLai0R7rPCNBckaD05ehDVFwUYiHkOiHHI6PPD M+07vVBFhomQJgyubrMLEWf7MEWpSXHVkkVHiS71yaz8DSNn/TmHr/O6451R5AtV ZIvQSy5Qg4Np4kXom3i2V8JYeM3BDZKuBp5RtC+rFmA+GjzFfFtXJamGLdbVmI/0 bceASuL871PQqE813EaJSmPR7SVPI8cZDp93bIfZB3hYMTPPXupCNHxGYw6acpkw 0ZNzTc0gPa7paMDm1CMxl6YF6YOACQXDpjrupenNut0UR8OJFGrk/ame9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUCym6o1B99gAEBwk+vY2ouiKfVMB8GA1UdIwQY MBaAFEthzIo2XMQDgqMdrVT2y3I/WHWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYt YzRmZDUzZWJlYjY3LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYtYzRmZDUzZWJlYjY3 LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaB80CpB vTou5P29oF/H1Iw72V4PCRRypRi5SB2/HUUv/Ox5z9CdATT8leO/oqmsQwTu89yW /6nxgSi5ek5sw8+K5/9YqEcOfK1H+4wDgv7R/DBUnyLBZamLunb5qTN/5aIR146Z z1InaFlSj+cVsvFpWvsiDugNUfinRV5IiTtrmU+hoErByQ1TyROyN8r6cpgSAsSI MkCveymhVFOwuZf11pYOzOQ3lQMkLqTzBiV/GnYSCfhbhHQ6BSxfqclEL8JNTlQT f5quXtnTcnuanNDuqAmmE6lWyQbfaLvH2J77O0ZkY86vDD7alSAUmt5OJulOT7+7 Ou4jY+xgc1s+0w== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:26 2025 by rpki-client