This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json) Hash identifier: wqInew//9MSKcpFjbbIvOq2oRIPSE3D4cGrKlCD1UkQ= Subject key identifier: F7:1A:BD:D4:31:20:50:59:C7:CA:1A:DA:02:64:76:2E:83:0D:13:79 Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Certificate serial: 019B35331E34CFE9F11E57F97140BEBD6FE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft Manifest number: 096F Signing time: Fri 19 Dec 2025 06:01:40 +0000 Manifest this update: Fri 19 Dec 2025 06:01:40 +0000 Manifest next update: Sat 20 Dec 2025 06:01:40 +0000 Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: HhXMK/ZUzAzcH7h7MHm5Du9odsmmtX+1uMGJDMxCcXE=) 2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:1e:34:cf:e9:f1:1e:57:f9:71:40:be:bd:6f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Validity Not Before: Dec 19 06:01:40 2025 GMT Not After : Dec 20 06:01:40 2025 GMT Subject: CN=f71abdd431205059c7ca1ada0264762e830d1379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:85:90:1a:01:27:a3:06:67:0a:9c:c7:ac: 1f:55:0d:c5:a4:f0:39:dc:ee:77:11:8d:e0:1f:ff: 01:10:7c:8a:ce:84:7e:54:88:08:59:7b:bc:d5:a7: e5:a7:83:41:b6:f1:fd:8e:ee:bd:4a:d5:00:4c:71: 35:a8:2c:42:5d:7f:63:28:54:f6:fa:d5:5f:c8:d1: 79:07:6a:77:e7:32:31:ef:92:47:37:41:aa:f8:ec: 8d:a6:7c:8f:bb:55:0c:f0:f8:cb:9c:f9:6d:25:cd: d9:1d:c2:87:8a:a6:2a:48:76:45:ad:18:73:da:b4: 1a:4d:3b:4f:80:49:bd:92:47:1c:0e:f0:5c:78:6d: ed:1c:60:c3:b1:11:32:17:a7:df:7c:8e:df:7b:fc: 41:ae:73:46:d9:44:af:db:c0:3f:12:22:6d:52:d2: 74:5a:cc:be:51:07:85:77:5a:60:f0:b4:fe:da:2b: 3e:7d:b8:0e:c7:a6:94:44:09:95:97:ea:38:39:ca: 70:f6:af:cb:91:8f:8c:fe:10:a7:6a:c7:a9:46:20: fd:9c:ea:f8:e5:84:63:1a:d8:ef:d4:d0:e6:99:88: 23:de:ad:67:58:7c:5d:74:71:40:43:a2:de:15:fa: 00:4c:72:4c:6a:74:59:f9:ea:9c:bc:64:04:3f:27: 91:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1A:BD:D4:31:20:50:59:C7:CA:1A:DA:02:64:76:2E:83:0D:13:79 X509v3 Authority Key Identifier: keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d5:69:1b:a2:c5:42:6b:ba:cd:51:38:a7:b3:b0:b3:fb:47: 31:23:97:3b:22:bf:9b:d0:41:8a:19:8e:59:b7:00:c2:f0:e0: 0d:3d:37:9e:f4:0a:e3:01:12:dd:5a:3f:f4:cc:81:52:04:2a: d9:5c:fe:b9:45:24:72:93:d1:e1:b4:29:43:5d:86:cf:7d:24: b2:22:d3:57:bd:6c:34:91:78:24:fe:22:79:8d:1c:8d:81:fb: c4:9a:fd:a2:80:68:2a:61:93:d5:33:9c:d5:7a:b8:a7:c3:5d: 37:91:19:2f:79:1e:c5:57:6d:e5:08:9d:95:37:05:ad:bf:ba: c5:07:46:07:ae:88:fb:d1:54:88:ac:c9:a1:8d:84:fb:a8:ab: 1c:f3:1a:bd:e6:f1:92:7d:dd:0c:ab:70:30:71:c8:80:3a:7d: ff:79:4f:93:26:06:7a:6f:d8:2a:95:ec:79:44:53:d6:fa:8c: 93:73:47:ce:db:98:7f:06:ea:27:82:ae:ca:00:ef:da:5c:f5: 31:01:55:ce:89:d6:c0:ad:0a:b1:6d:99:5d:09:fa:2a:57:15: 01:22:5a:82:97:5f:25:0f:3d:62:62:06:cb:93:b3:08:ad:ab: 56:fb:28:62:2f:5b:22:a5:26:05:05:22:07:ff:43:9a:13:c4: ca:e1:02:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mx40z+nxHlf5cUC+vW/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz ODkxY2MwHhcNMjUxMjE5MDYwMTQwWhcNMjUxMjIwMDYwMTQwWjAzMTEwLwYDVQQD EyhmNzFhYmRkNDMxMjA1MDU5YzdjYTFhZGEwMjY0NzYyZTgzMGQxMzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbqFkBoBJ6MGZwqcx6wfVQ3FpPA5 3O53EY3gH/8BEHyKzoR+VIgIWXu81aflp4NBtvH9ju69StUATHE1qCxCXX9jKFT2 +tVfyNF5B2p35zIx75JHN0Gq+OyNpnyPu1UM8PjLnPltJc3ZHcKHiqYqSHZFrRhz 2rQaTTtPgEm9kkccDvBceG3tHGDDsREyF6fffI7fe/xBrnNG2USv28A/EiJtUtJ0 Wsy+UQeFd1pg8LT+2is+fbgOx6aURAmVl+o4Ocpw9q/LkY+M/hCnasepRiD9nOr4 5YRjGtjv1NDmmYgj3q1nWHxddHFAQ6LeFfoATHJManRZ+eqcvGQEPyeRhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcavdQxIFBZx8oa2gJkdi6DDRN5MB8GA1UdIwQY MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt YjcwNGVlMjdjNjVjLzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9VpG6LF Qmu6zVE4p7Ows/tHMSOXOyK/m9BBihmOWbcAwvDgDT03nvQK4wES3Vo/9MyBUgQq 2Vz+uUUkcpPR4bQpQ12Gz30ksiLTV71sNJF4JP4ieY0cjYH7xJr9ooBoKmGT1TOc 1Xq4p8NdN5EZL3kexVdt5QidlTcFrb+6xQdGB66I+9FUiKzJoY2E+6irHPMavebx kn3dDKtwMHHIgDp9/3lPkyYGem/YKpXseURT1vqMk3NHztuYfwbqJ4KuygDv2lz1 MQFVzonWwK0KsW2ZXQn6KlcVASJagpdfJQ89YmIGy5OzCK2rVvsoYi9bIqUmBQUi B/9DmhPEyuECkw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:05:19 2025 by rpki-client