This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json) Hash identifier: KC2GzIJDqVCuWjeQc1VnjAG7yNbB4Xyl8DiVxTK4OOA= Subject key identifier: D5:C8:E2:EF:84:1B:73:CF:10:B8:BF:2F:EC:1D:BD:AB:7F:0C:B8:A9 Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7 Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7 Certificate serial: 019B5A88A1541016E9733A798255B12A67D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft Manifest number: 106E Signing time: Fri 26 Dec 2025 12:01:02 +0000 Manifest this update: Fri 26 Dec 2025 12:01:02 +0000 Manifest next update: Sat 27 Dec 2025 12:01:02 +0000 Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: qUcNkcYLWT4UslWA4wUiJMWf1U7nS//6Q3tGaw4Aprw=) 2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:a1:54:10:16:e9:73:3a:79:82:55:b1:2a:67:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7 Validity Not Before: Dec 26 12:01:02 2025 GMT Not After : Dec 27 12:01:02 2025 GMT Subject: CN=d5c8e2ef841b73cf10b8bf2fec1dbdab7f0cb8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:94:74:41:c1:b7:dc:2a:d1:d1:da:1d:26: 9c:74:db:b1:4e:d7:52:72:42:97:3e:df:51:49:1b: 05:c3:da:c0:36:2d:60:7d:e9:a1:03:ec:6e:4b:33: 54:34:5b:17:41:af:74:41:e3:37:2c:aa:fb:b0:45: 69:e9:b7:02:e9:fa:a0:28:38:79:75:6e:fe:44:3a: 65:5b:81:f5:f7:ea:6b:68:1c:d4:b5:e0:b4:6a:c1: 09:11:72:8d:d3:72:36:ec:64:17:b4:4d:88:a1:a7: 6b:55:52:4a:e3:3c:9b:03:e8:a1:56:2b:d6:d0:92: 50:37:75:a7:9b:b7:12:31:d0:8c:b8:9a:58:37:18: ab:ce:f1:3a:ed:4c:42:d2:30:0a:b0:b5:f3:a1:89: 55:3b:58:4d:44:89:5f:12:d5:51:c9:81:78:a4:57: 74:fa:6e:1d:50:bf:3e:53:bd:e8:70:ef:9e:b1:90: e6:82:72:9c:85:11:47:ff:57:ca:99:91:44:d0:c5: e8:7d:d4:77:2a:99:ff:0d:05:76:0e:d5:c5:d6:99: c5:92:81:a2:c9:c5:26:75:c9:b3:25:a5:0d:50:e3: cc:7a:6c:b2:70:98:42:8f:a7:52:65:7d:6e:57:5d: c2:ba:f6:10:3a:e3:03:94:0e:6e:be:24:d5:9a:58: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C8:E2:EF:84:1B:73:CF:10:B8:BF:2F:EC:1D:BD:AB:7F:0C:B8:A9 X509v3 Authority Key Identifier: keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a5:4f:aa:9c:3b:9f:3d:aa:35:92:1b:d2:fa:70:f3:a9:4d: af:ee:89:76:41:9a:e0:70:74:6b:e6:dc:33:b4:58:b4:28:81: 30:01:e4:da:f2:91:a6:f5:89:ca:a4:3e:27:44:0a:9d:e5:a1: 92:27:0a:d4:ec:09:6e:9e:c2:ab:d0:5b:d0:6c:b6:b3:7d:c4: 39:4c:43:2e:16:a3:3b:56:4c:6e:3c:cf:1b:ca:de:23:62:79: 11:f3:16:32:9a:c9:ab:5f:f1:df:b0:88:75:0b:8f:63:04:c6: 04:7c:e5:a3:04:0d:7d:05:90:d4:ff:08:c6:e6:2b:b5:eb:8c: b7:51:30:5e:ae:3a:91:82:4a:d8:68:d7:ba:65:bb:33:b9:dc: 96:7d:f6:9a:65:e6:87:2b:bb:4b:9f:20:ee:33:60:c7:b9:c2: 82:c2:2a:9b:16:bb:b7:c2:2c:e7:f6:5a:8a:4f:fb:61:63:85: f6:3a:ca:c5:a0:a2:4f:f5:4d:69:1b:63:92:53:cc:9f:0f:af: 02:0c:20:4c:26:f6:09:d4:27:ab:94:a3:2c:d1:8f:2c:91:3a: c9:6f:1e:45:58:af:b9:e8:96:13:53:3e:78:35:52:93:c1:0e: 91:83:dc:47:c4:e3:5c:80:a0:bc:ac:64:8f:22:a7:52:f6:57: 81:08:f0:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKFUEBbpczp5glWxKmfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYmJjMTA2OTc3NWE4MDQ4MDZiNTBiYWVkN2VjZTg0OGFi ZGU4YTcwHhcNMjUxMjI2MTIwMTAyWhcNMjUxMjI3MTIwMTAyWjAzMTEwLwYDVQQD EyhkNWM4ZTJlZjg0MWI3M2NmMTBiOGJmMmZlYzFkYmRhYjdmMGNiOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxyUdEHBt9wq0dHaHSacdNuxTtdS ckKXPt9RSRsFw9rANi1gfemhA+xuSzNUNFsXQa90QeM3LKr7sEVp6bcC6fqgKDh5 dW7+RDplW4H19+praBzUteC0asEJEXKN03I27GQXtE2IoadrVVJK4zybA+ihVivW 0JJQN3Wnm7cSMdCMuJpYNxirzvE67UxC0jAKsLXzoYlVO1hNRIlfEtVRyYF4pFd0 +m4dUL8+U73ocO+esZDmgnKchRFH/1fKmZFE0MXofdR3Kpn/DQV2DtXF1pnFkoGi ycUmdcmzJaUNUOPMemyycJhCj6dSZX1uV13CuvYQOuMDlA5uviTVmlg7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXI4u+EG3PPELi/L+wdvat/DLipMB8GA1UdIwQY MBaAFEu7wQaXdagEgGtQuu1+zoSKveinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQt OWNmZjg0OTZlMzM0LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQtOWNmZjg0OTZlMzM0 LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKVPqpw7 nz2qNZIb0vpw86lNr+6JdkGa4HB0a+bcM7RYtCiBMAHk2vKRpvWJyqQ+J0QKneWh kicK1OwJbp7Cq9Bb0Gy2s33EOUxDLhajO1ZMbjzPG8reI2J5EfMWMprJq1/x37CI dQuPYwTGBHzlowQNfQWQ1P8IxuYrteuMt1EwXq46kYJK2GjXumW7M7ncln32mmXm hyu7S58g7jNgx7nCgsIqmxa7t8Is5/Zaik/7YWOF9jrKxaCiT/VNaRtjklPMnw+v AgwgTCb2CdQnq5SjLNGPLJE6yW8eRVivueiWE1M+eDVSk8EOkYPcR8TjXICgvKxk jyKnUvZXgQjw2w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:57 2025 by rpki-client