This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json) Hash identifier: 3qWa8nxJQudCPiyCAw1aTyV6nlR3o+PYj+oW3chFgoU= Subject key identifier: B3:5D:DC:74:B4:3F:A8:C9:E1:B7:99:86:8E:19:64:EB:BD:9C:5A:43 Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d Certificate serial: 019B1BA96A46F4BB9F7630A2BDAC8C322119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft Manifest number: 05D5 Signing time: Sun 14 Dec 2025 07:00:46 +0000 Manifest this update: Sun 14 Dec 2025 07:00:46 +0000 Manifest next update: Mon 15 Dec 2025 07:00:46 +0000 Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=) 2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: pvBTq2FpKRpaLYkt4D3ntrfjckQi4mXKBJZoR2EewOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:6a:46:f4:bb:9f:76:30:a2:bd:ac:8c:32:21:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d Validity Not Before: Dec 14 07:00:46 2025 GMT Not After : Dec 15 07:00:46 2025 GMT Subject: CN=b35ddc74b43fa8c9e1b799868e1964ebbd9c5a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:7d:0d:2e:89:a1:cc:44:9f:23:e4:b4:99: 2f:c2:a9:4b:e1:96:6a:03:d8:d2:69:4c:14:d0:b6: 7b:46:da:68:be:3a:b9:4a:a1:60:f2:b3:d2:31:36: aa:5a:3b:12:d2:8c:a0:9e:78:5b:59:d8:57:18:43: 44:1b:6e:1d:bb:89:53:1f:32:e7:5d:1c:69:ca:ec: 14:15:9f:af:31:5f:65:cd:2e:21:8d:2e:da:81:0c: 7e:da:1a:11:d4:4c:0e:a6:ee:c3:0c:6d:a0:31:96: f3:ec:b8:6e:81:1f:42:7e:2a:c4:a4:56:e3:d7:bd: 06:53:c0:ef:7b:ca:cf:c6:bd:30:59:f7:f5:46:d3: e3:c0:8d:fc:c6:29:44:31:69:14:c8:f6:3e:d8:52: 7e:03:e7:8f:46:6f:44:9b:5f:d1:92:b5:27:1e:8d: 9a:76:ee:f8:e6:5e:fe:b3:c8:f1:45:db:51:a3:af: ea:ee:50:6e:ad:f8:ab:9a:07:aa:6a:9f:cc:a2:fc: 92:16:60:61:21:d4:b1:ff:31:2f:0c:03:de:c1:37: bc:9c:96:6a:f2:97:09:dd:2f:63:b9:36:69:95:77: 1a:67:f0:fe:e2:bd:c1:f4:4e:6e:6d:42:9f:94:ac: b8:67:42:76:c5:d0:6b:44:11:dc:98:af:56:a4:aa: ce:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5D:DC:74:B4:3F:A8:C9:E1:B7:99:86:8E:19:64:EB:BD:9C:5A:43 X509v3 Authority Key Identifier: keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:45:f9:e2:2f:7d:82:4b:7d:1c:4f:3d:81:3b:b7:bc:05:dc: 4e:6f:d3:1f:3e:14:dc:6d:d5:fa:60:23:e6:74:d8:e0:0a:e0: d3:72:b4:95:3d:50:b8:92:0a:90:dc:67:07:aa:30:26:71:f1: 89:e8:94:ce:eb:a1:28:dd:5a:77:1e:29:b8:cf:70:6f:56:7b: eb:f4:e1:9c:a2:3c:e4:a1:20:79:4a:85:b2:0a:e5:a6:07:83: 2e:85:73:3a:ed:8a:fe:e8:a6:c1:40:d5:97:83:39:60:67:e3: 4c:29:64:1e:fd:1a:da:cb:0e:da:d0:23:68:76:f6:d5:ea:f2: db:1d:12:ae:7f:09:92:ae:82:13:80:7c:82:34:bf:6e:85:eb: 12:72:af:05:0d:fb:58:c0:f9:b9:ec:15:e5:f6:54:14:90:70: 14:b6:db:91:82:b8:de:cb:f8:0d:f6:70:0e:2e:9b:ed:40:0a: f4:44:0a:76:4a:df:88:d0:3c:dd:ae:8d:d0:cb:48:5a:47:3e: 66:32:b7:c3:9a:32:3a:6c:83:cf:ac:28:21:3e:4b:dc:43:ab: fa:b6:f1:a1:74:db:9e:f7:10:88:2a:1f:5f:ee:d4:ad:a0:1f: d7:07:6c:6e:ee:98:63:12:e9:0b:cb:01:20:d0:fd:08:c7:39: 45:e7:16:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqWpG9LufdjCivayMMiEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTkxOWE4NGUxYTIyOWY3ODlkOTM5ZDFhYWE3MTJhNGQz YzM5OWQwHhcNMjUxMjE0MDcwMDQ2WhcNMjUxMjE1MDcwMDQ2WjAzMTEwLwYDVQQD EyhiMzVkZGM3NGI0M2ZhOGM5ZTFiNzk5ODY4ZTE5NjRlYmJkOWM1YTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp99DS6JocxEnyPktJkvwqlL4ZZq A9jSaUwU0LZ7Rtpovjq5SqFg8rPSMTaqWjsS0oygnnhbWdhXGENEG24du4lTHzLn XRxpyuwUFZ+vMV9lzS4hjS7agQx+2hoR1EwOpu7DDG2gMZbz7LhugR9CfirEpFbj 170GU8Dve8rPxr0wWff1RtPjwI38xilEMWkUyPY+2FJ+A+ePRm9Em1/RkrUnHo2a du745l7+s8jxRdtRo6/q7lBurfirmgeqap/MovySFmBhIdSx/zEvDAPewTe8nJZq 8pcJ3S9juTZplXcaZ/D+4r3B9E5ubUKflKy4Z0J2xdBrRBHcmK9WpKrOfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNd3HS0P6jJ4beZho4ZZOu9nFpDMB8GA1UdIwQY MBaAFEvpGahOGiKfeJ2TnRqqcSpNPDmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMt MTE5NWZlMDUwZGUxLzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMtMTE5NWZlMDUwZGUx LzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUX54i99 gkt9HE89gTu3vAXcTm/THz4U3G3V+mAj5nTY4Arg03K0lT1QuJIKkNxnB6owJnHx ieiUzuuhKN1adx4puM9wb1Z76/ThnKI85KEgeUqFsgrlpgeDLoVzOu2K/uimwUDV l4M5YGfjTClkHv0a2ssO2tAjaHb21ery2x0Srn8Jkq6CE4B8gjS/boXrEnKvBQ37 WMD5uewV5fZUFJBwFLbbkYK43sv4DfZwDi6b7UAK9EQKdkrfiNA83a6N0MtIWkc+ ZjK3w5oyOmyDz6woIT5L3EOr+rbxoXTbnvcQiCofX+7UraAf1wdsbu6YYxLpC8sB IND9CMc5RecWsg== -----END CERTIFICATE-----Generated at Sun Dec 14 09:17:06 2025 by rpki-client