This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json) Hash identifier: b5AjpeYpVCjky4GtH/FJLbZG/hTg5K+TR2sxaqVETB0= Subject key identifier: 48:99:F2:D7:67:43:3F:19:30:5F:3D:B3:A8:27:53:B2:1B:39:DC:09 Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5 Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5 Certificate serial: 019B3CB4F9F4CDCBED0C747DB155C3CCC1B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft Manifest number: 0E1C Signing time: Sat 20 Dec 2025 17:00:51 +0000 Manifest this update: Sat 20 Dec 2025 17:00:51 +0000 Manifest next update: Sun 21 Dec 2025 17:00:51 +0000 Files and hashes: 1: 6KASjwCz7ilKa_zbYR8rA5RUBrc.roa (hash: T4+QVQXXLI7KFzCBe08m6pD6fADi9vWJFsV+O2tzwnA=) 2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: n8ZqzZobzPB3/oFQI7V1k22WD8f01VgVxeAxbNjXYFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f9:f4:cd:cb:ed:0c:74:7d:b1:55:c3:cc:c1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5 Validity Not Before: Dec 20 17:00:51 2025 GMT Not After : Dec 21 17:00:51 2025 GMT Subject: CN=4899f2d767433f19305f3db3a82753b21b39dc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:d1:70:3b:be:36:b2:0e:a8:37:29:56:67: 83:5c:4f:03:a6:23:b6:02:39:71:f2:ec:28:de:12: 27:86:9a:96:d5:f0:8d:b6:15:e2:45:81:30:80:d0: 9d:09:6f:99:32:fa:8b:87:6c:e0:33:a8:60:4b:ef: 5c:ad:1c:66:d4:11:91:eb:67:ef:eb:c2:91:71:e0: 67:f4:14:0f:b7:f5:1c:5b:a8:14:ec:46:7c:a1:61: a6:7b:26:58:61:f8:5e:05:0a:bd:b4:71:be:b9:83: f2:c8:63:4d:75:a4:ec:a8:31:4b:d7:f4:39:05:7b: 69:03:e6:2f:77:a3:fa:c5:e0:f0:c7:70:e4:b5:f2: ae:88:b9:c5:71:d5:a4:47:37:20:7b:88:cc:68:40: b7:ed:32:15:71:44:38:0b:54:54:c1:ad:ea:96:69: c4:f7:bd:0a:26:80:83:e8:01:21:6a:64:bb:44:22: 27:3f:09:96:b7:60:8b:23:5a:8d:5f:54:25:53:3b: 10:78:07:67:01:29:8b:11:c9:33:9a:1d:2f:24:63: 0d:0e:9e:cc:8c:b6:a9:0e:0c:c0:1d:f1:ea:5b:66: a4:13:79:3b:e3:a8:ce:0a:d3:f8:97:63:cd:77:26: 70:d2:46:98:a8:00:71:44:09:2f:63:29:16:91:9f: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:99:F2:D7:67:43:3F:19:30:5F:3D:B3:A8:27:53:B2:1B:39:DC:09 X509v3 Authority Key Identifier: keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:92:38:11:cc:82:53:7f:6a:7f:40:ea:00:35:bb:f6:0c:ba: 46:bd:65:0c:20:27:8c:7d:50:b7:1e:51:0f:5a:24:ba:84:6d: d6:18:42:f5:a8:19:d5:85:cf:6d:81:66:60:a0:67:48:f0:e6: bc:43:25:ed:5c:dc:a0:6f:80:08:c1:c6:21:ee:4e:22:99:27: 71:fc:30:d6:f1:b8:46:5a:90:78:eb:62:ad:09:aa:5a:a5:eb: 85:e4:d9:8a:77:6f:b7:51:82:e4:11:6a:f5:64:7e:c6:1a:0d: af:66:af:4b:fe:75:54:b3:46:ac:be:90:7d:2e:6e:d2:c6:fc: e5:30:94:0f:ae:5a:8c:a7:32:24:4d:96:6a:24:8b:dc:41:ac: c1:25:5d:0a:70:1d:00:8c:26:77:ca:a5:ff:d1:46:23:85:75: 7f:9a:1a:b0:92:9b:51:7f:ea:99:9f:ab:0c:92:a4:e9:2f:f6: b2:19:d6:ba:b3:df:69:cb:d2:6b:7e:05:1f:f3:c0:64:39:2b: 1a:7f:3b:5d:92:43:08:a7:33:53:68:cc:93:6a:b2:b0:6c:7b: c8:a9:cb:72:fb:ab:8e:0b:65:02:89:0e:22:39:79:0e:71:40: a7:b4:90:f7:dc:b5:76:da:e9:73:71:36:54:e9:5b:48:87:37: f5:33:68:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPn0zcvtDHR9sVXDzMG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTg5NmE0MTk1Mzg1ZDRiOTRiNzI5NTk4OGNjZmJmYThh Yzk5YzUwHhcNMjUxMjIwMTcwMDUxWhcNMjUxMjIxMTcwMDUxWjAzMTEwLwYDVQQD Eyg0ODk5ZjJkNzY3NDMzZjE5MzA1ZjNkYjNhODI3NTNiMjFiMzlkYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlPRcDu+NrIOqDcpVmeDXE8DpiO2 Ajlx8uwo3hInhpqW1fCNthXiRYEwgNCdCW+ZMvqLh2zgM6hgS+9crRxm1BGR62fv 68KRceBn9BQPt/UcW6gU7EZ8oWGmeyZYYfheBQq9tHG+uYPyyGNNdaTsqDFL1/Q5 BXtpA+Yvd6P6xeDwx3DktfKuiLnFcdWkRzcge4jMaEC37TIVcUQ4C1RUwa3qlmnE 970KJoCD6AEhamS7RCInPwmWt2CLI1qNX1QlUzsQeAdnASmLEckzmh0vJGMNDp7M jLapDgzAHfHqW2akE3k746jOCtP4l2PNdyZw0kaYqABxRAkvYykWkZ+SZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiZ8tdnQz8ZMF89s6gnU7IbOdwJMB8GA1UdIwQY MBaAFEvolqQZU4XUuUtylZiMz7+orJnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAt NGIxNTgxZjA5ZDNiLzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAtNGIxNTgxZjA5ZDNi LzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5I4EcyC U39qf0DqADW79gy6Rr1lDCAnjH1Qtx5RD1okuoRt1hhC9agZ1YXPbYFmYKBnSPDm vEMl7VzcoG+ACMHGIe5OIpkncfww1vG4RlqQeOtirQmqWqXrheTZindvt1GC5BFq 9WR+xhoNr2avS/51VLNGrL6QfS5u0sb85TCUD65ajKcyJE2WaiSL3EGswSVdCnAd AIwmd8ql/9FGI4V1f5oasJKbUX/qmZ+rDJKk6S/2shnWurPfacvSa34FH/PAZDkr Gn87XZJDCKczU2jMk2qysGx7yKnLcvurjgtlAokOIjl5DnFAp7SQ99y1dtrpc3E2 VOlbSIc39TNoeg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:08:54 2025 by rpki-client