This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json) Hash identifier: vn3S0AwUAsZ1D0HpORLNTtj/zgqFRwLWrdmgaB+SfRs= Subject key identifier: DF:BC:72:D2:6C:B4:E1:F5:26:AF:F7:F4:C8:37:9C:60:D9:FE:3B:C8 Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00 Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00 Certificate serial: 019AABA787163E0A9FA0E5C2956EC3274EB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft Manifest number: 1741 Signing time: Sat 22 Nov 2025 13:01:14 +0000 Manifest this update: Sat 22 Nov 2025 13:01:14 +0000 Manifest next update: Sun 23 Nov 2025 13:01:14 +0000 Files and hashes: 1: 3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa (hash: Qs6GoxmPBIC7HGNuig2kfn3Fl73wnKTFpil8h4rBNO4=) 2: 7NbESzXRMNmvEomT-Mf8me7h-5o.roa (hash: sP5JFPjYHopQ7eTPfJ05mH6EJsqFFPFigu0p8AF8Ees=) 3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: n8OIPT8rzKH4ShCdC74Qz3vd29HD8CVpy5/JBCqG8kc=) 4: _8kwQM-X6Z8iQPUFtkn5eqJVuxI.roa (hash: euBW9IpgTvtCum/UZd3emtTuwK2uZ78wnCtDCEVJf2A=) 5: c4bLrKnAkTRBkWnGAk0rUMNmNi0.roa (hash: MeURMVUFI1PNljAcbfvTNPtm4Rnq7dMhBu12jSOQpgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a7:87:16:3e:0a:9f:a0:e5:c2:95:6e:c3:27:4e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00 Validity Not Before: Nov 22 13:01:14 2025 GMT Not After : Nov 23 13:01:14 2025 GMT Subject: CN=dfbc72d26cb4e1f526aff7f4c8379c60d9fe3bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:8a:b1:81:88:99:ab:49:5b:86:61:cd:f2: 6b:61:27:43:b4:3b:c0:37:ae:25:a0:a7:e4:8e:16: 1f:f8:6d:13:b8:45:02:75:b8:55:7c:95:03:60:ec: 49:51:f1:84:f6:ad:01:4a:85:a0:da:1c:c4:63:e4: 29:7c:59:e4:cb:0e:b6:b9:59:a1:aa:d1:61:88:45: 3e:ca:60:ed:da:c0:88:7d:71:43:ca:c9:12:3e:37: 0c:ce:6e:f6:57:15:eb:c1:52:1d:79:fc:6a:14:01: 29:4e:dd:b6:7a:be:66:8b:22:a7:17:12:bb:6c:ec: 42:36:36:c7:b0:ae:0c:5f:45:af:c0:f4:ae:d1:76: c6:57:11:e6:0c:53:14:31:af:d8:f0:aa:81:48:0f: d5:1d:fd:9f:a9:69:1b:b0:10:f0:20:48:0b:12:59: 0e:ec:01:ad:97:0e:2d:d7:18:98:86:71:da:0f:df: 29:34:51:a3:2d:21:ed:18:87:d3:cc:a5:4a:8f:27: 1c:5a:80:d2:22:6f:99:7c:73:15:9d:43:ea:42:7a: ce:6e:cb:0a:35:42:f3:2e:f1:d3:75:55:7b:03:cf: 11:98:08:d2:7a:ec:65:5c:c6:de:a5:df:a4:66:21: a3:d7:43:b0:39:2f:62:91:ca:53:a1:11:e9:44:90: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BC:72:D2:6C:B4:E1:F5:26:AF:F7:F4:C8:37:9C:60:D9:FE:3B:C8 X509v3 Authority Key Identifier: keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:dd:4e:d8:0d:8e:4f:97:33:20:7d:3f:da:9f:76:3b:fb:58: 0b:2e:8b:f1:3b:7c:33:32:e0:a6:c3:3f:97:03:52:47:e8:e2: cf:e5:9b:c5:57:25:8c:ae:93:1d:de:40:e4:7d:d3:4a:2f:34: 26:95:3a:cf:a4:e5:79:9f:76:6e:96:f9:10:e8:15:8f:19:9c: 26:bc:7e:96:91:b6:cd:a6:3e:8e:84:4e:24:c4:2b:64:02:03: ea:34:66:17:b6:bb:af:8b:f0:6f:34:31:c3:86:73:21:0f:19: 01:a1:3b:78:87:a0:41:20:c0:42:51:7a:90:c8:1a:9c:18:93: 65:76:68:b0:90:59:b8:47:08:d1:4e:f6:21:33:11:f7:2f:8e: 80:8a:e0:93:71:6c:cc:9e:3d:f9:7b:77:6c:82:13:6c:9b:b8: bb:6e:29:ea:63:10:4d:06:82:68:9c:88:5b:cc:4c:86:07:2e: 5e:56:d3:f0:2e:b4:31:fa:8b:5e:53:af:9b:77:71:13:8c:ea: ad:03:f4:a6:d4:10:31:da:b1:e9:b9:7a:d9:a4:86:d5:86:0f: a4:67:17:22:c6:69:50:85:9e:a6:d8:bd:d3:96:7d:a5:ae:4d: 06:53:d3:0e:87:5b:20:80:d7:7f:6f:45:cd:de:0f:53:5d:7a: 20:0a:10:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrp4cWPgqfoOXClW7DJ06xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzk2ZjBiMzA1MWI1YmM4MTRiMmU4OWNiNDcwYTM4MjZi MmJmMDAwHhcNMjUxMTIyMTMwMTE0WhcNMjUxMTIzMTMwMTE0WjAzMTEwLwYDVQQD EyhkZmJjNzJkMjZjYjRlMWY1MjZhZmY3ZjRjODM3OWM2MGQ5ZmUzYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LGKsYGImatJW4ZhzfJrYSdDtDvA N64loKfkjhYf+G0TuEUCdbhVfJUDYOxJUfGE9q0BSoWg2hzEY+QpfFnkyw62uVmh qtFhiEU+ymDt2sCIfXFDyskSPjcMzm72VxXrwVIdefxqFAEpTt22er5miyKnFxK7 bOxCNjbHsK4MX0WvwPSu0XbGVxHmDFMUMa/Y8KqBSA/VHf2fqWkbsBDwIEgLElkO 7AGtlw4t1xiYhnHaD98pNFGjLSHtGIfTzKVKjyccWoDSIm+ZfHMVnUPqQnrObssK NULzLvHTdVV7A88RmAjSeuxlXMbepd+kZiGj10OwOS9ikcpToRHpRJDP0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+8ctJstOH1Jq/39Mg3nGDZ/jvIMB8GA1UdIwQY MBaAFEt5bwswUbW8gUsuictHCjgmsr8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNsdkN6QlJ0YnlCU3k2SnkwY0tPQ2F5dndBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iYjQ2ZjUtOWZmMi00MDU4LTkwNTAt ZmJkY2IxYTQxNDY3LzEvUzNsdkN6QlJ0YnlCU3k2SnkwY0tPQ2F5dndBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iYjQ2ZjUtOWZmMi00MDU4LTkwNTAtZmJkY2IxYTQxNDY3 LzEvUzNsdkN6QlJ0YnlCU3k2SnkwY0tPQ2F5dndBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEN1O2A2O T5czIH0/2p92O/tYCy6L8Tt8MzLgpsM/lwNSR+jiz+WbxVcljK6THd5A5H3TSi80 JpU6z6TleZ92bpb5EOgVjxmcJrx+lpG2zaY+joROJMQrZAID6jRmF7a7r4vwbzQx w4ZzIQ8ZAaE7eIegQSDAQlF6kMganBiTZXZosJBZuEcI0U72ITMR9y+OgIrgk3Fs zJ49+Xt3bIITbJu4u24p6mMQTQaCaJyIW8xMhgcuXlbT8C60MfqLXlOvm3dxE4zq rQP0ptQQMdqx6bl62aSG1YYPpGcXIsZpUIWepti905Z9pa5NBlPTDodbIIDXf29F zd4PU116IAoQAQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:36:17 2025 by rpki-client