This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json) Hash identifier: aASnR4PNf+gSrsQFQvhHr3McOaeGLEZyZ7P5csNRFKA= Subject key identifier: 73:BF:39:78:D2:91:7B:8E:62:28:06:50:DB:1E:3F:81:AE:FC:E8:66 Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5 Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5 Certificate serial: 019B3EA35D65ADA75E25FD1213F6CAD9A708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft Manifest number: 0E1D Signing time: Sun 21 Dec 2025 02:00:52 +0000 Manifest this update: Sun 21 Dec 2025 02:00:52 +0000 Manifest next update: Mon 22 Dec 2025 02:00:52 +0000 Files and hashes: 1: 6KASjwCz7ilKa_zbYR8rA5RUBrc.roa (hash: T4+QVQXXLI7KFzCBe08m6pD6fADi9vWJFsV+O2tzwnA=) 2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: tkNe4r/vFjdw5v1htmfXkr9YSrdvty0wBwvhzf4tmRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:5d:65:ad:a7:5e:25:fd:12:13:f6:ca:d9:a7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5 Validity Not Before: Dec 21 02:00:52 2025 GMT Not After : Dec 22 02:00:52 2025 GMT Subject: CN=73bf3978d2917b8e62280650db1e3f81aefce866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:67:8a:6c:50:9a:aa:e1:36:c2:2c:4d:2b: ce:c4:75:e0:59:48:ed:27:7a:9c:50:29:e5:00:48: 00:9b:d3:ab:0a:21:0d:06:66:ba:e6:bc:ba:c8:3a: 67:d8:82:7c:f9:d0:46:dc:f6:87:1e:d3:3f:1c:d5: e2:d7:5f:eb:04:37:22:b3:5b:31:ae:69:7c:79:f5: 1e:81:65:e5:88:6d:d3:d2:e1:f5:e4:63:78:fa:99: 76:84:3e:56:d4:b5:56:88:e3:5d:a0:bf:e9:41:09: 1a:f4:30:f1:6c:f4:87:fc:2b:02:99:3b:36:7b:f9: 4b:83:94:57:f0:14:e0:46:22:3d:98:db:4c:8c:65: c5:9c:1c:40:58:f7:93:b0:61:9e:3c:1e:63:c6:3d: ab:4c:c6:71:7a:7d:6c:93:90:5a:b3:12:87:b4:2d: f7:10:21:c1:c3:45:f0:52:43:be:37:f2:bd:86:06: 8d:8f:8d:63:c0:cd:b7:aa:31:d3:03:81:03:d2:e3: a7:c3:92:f1:0a:29:da:91:e0:2b:e9:40:41:89:6c: 4c:dd:7d:76:94:de:04:b4:e0:38:40:cb:29:a6:eb: ba:82:88:1b:0b:ac:bb:25:8c:5c:bb:9c:8d:73:14: 83:c5:6f:e0:6c:af:e7:96:ce:c3:fd:03:0b:b6:95: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BF:39:78:D2:91:7B:8E:62:28:06:50:DB:1E:3F:81:AE:FC:E8:66 X509v3 Authority Key Identifier: keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e5:36:a7:7c:d3:91:93:59:4c:c8:02:1c:01:e5:6c:f8:a1: 30:d2:2d:35:e4:b8:ca:fc:ad:cb:88:d6:cb:87:13:b8:84:74: ec:3e:d8:e5:8c:fc:63:f2:ec:c3:6c:87:32:09:29:eb:1d:a7: 5b:a8:18:43:ae:1b:11:7f:5e:30:fb:4d:8a:c2:04:3a:9c:c1: 40:fa:db:8f:38:e1:34:a8:c9:02:56:c8:52:4e:c5:61:c9:0c: 2c:ab:9a:7c:09:ab:da:09:9e:0c:e0:ee:1b:64:75:3d:70:ef: b5:46:0f:67:4e:a2:b8:ca:7a:f8:33:11:1d:f9:ec:8e:36:c3: f4:d2:a0:0c:e3:4a:42:9f:14:5a:49:30:d3:f4:15:4d:2f:16: b1:8c:8e:c7:84:b3:92:83:2d:8e:d0:de:9d:fc:01:9d:ac:91: 51:61:04:30:8d:6c:c4:bd:a9:af:2d:2a:c1:5a:1e:ad:73:cb: d4:3f:76:8a:15:20:73:6c:e8:e4:4b:85:ba:da:48:ae:a3:46: 3d:f7:22:97:37:15:72:e4:b0:b9:1c:05:e1:92:5a:b3:f7:6d: 50:49:2a:13:9b:2e:f3:36:eb:81:1c:52:87:62:c7:55:cb:67: d3:9f:3c:6a:9d:99:b6:0a:9f:54:1b:be:26:13:05:a4:aa:3a: 50:db:60:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o11lradeJf0SE/bK2acIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTg5NmE0MTk1Mzg1ZDRiOTRiNzI5NTk4OGNjZmJmYThh Yzk5YzUwHhcNMjUxMjIxMDIwMDUyWhcNMjUxMjIyMDIwMDUyWjAzMTEwLwYDVQQD Eyg3M2JmMzk3OGQyOTE3YjhlNjIyODA2NTBkYjFlM2Y4MWFlZmNlODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp5nimxQmqrhNsIsTSvOxHXgWUjt J3qcUCnlAEgAm9OrCiENBma65ry6yDpn2IJ8+dBG3PaHHtM/HNXi11/rBDcis1sx rml8efUegWXliG3T0uH15GN4+pl2hD5W1LVWiONdoL/pQQka9DDxbPSH/CsCmTs2 e/lLg5RX8BTgRiI9mNtMjGXFnBxAWPeTsGGePB5jxj2rTMZxen1sk5BasxKHtC33 ECHBw0XwUkO+N/K9hgaNj41jwM23qjHTA4ED0uOnw5LxCinakeAr6UBBiWxM3X12 lN4EtOA4QMsppuu6gogbC6y7JYxcu5yNcxSDxW/gbK/nls7D/QMLtpXxUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHO/OXjSkXuOYigGUNseP4Gu/OhmMB8GA1UdIwQY MBaAFEvolqQZU4XUuUtylZiMz7+orJnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAt NGIxNTgxZjA5ZDNiLzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAtNGIxNTgxZjA5ZDNi LzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeU2p3zT kZNZTMgCHAHlbPihMNItNeS4yvyty4jWy4cTuIR07D7Y5Yz8Y/Lsw2yHMgkp6x2n W6gYQ64bEX9eMPtNisIEOpzBQPrbjzjhNKjJAlbIUk7FYckMLKuafAmr2gmeDODu G2R1PXDvtUYPZ06iuMp6+DMRHfnsjjbD9NKgDONKQp8UWkkw0/QVTS8WsYyOx4Sz koMtjtDenfwBnayRUWEEMI1sxL2pry0qwVoerXPL1D92ihUgc2zo5EuFutpIrqNG PfcilzcVcuSwuRwF4ZJas/dtUEkqE5su8zbrgRxSh2LHVctn0588ap2ZtgqfVBu+ JhMFpKo6UNtgBA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:28 2025 by rpki-client