This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json) Hash identifier: dIsFiJERp+b79hMc6eme6WHf3MP6k32aENwuKdQxscw= Subject key identifier: 0F:CE:A3:50:9D:CA:F7:BC:60:1F:83:E6:3F:A8:8A:F5:47:E6:3E:AC Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802 Certificate serial: 019B51F2EFEFDAD3CA66A8A2447FF942413F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft Manifest number: 14B6 Signing time: Wed 24 Dec 2025 20:00:34 +0000 Manifest this update: Wed 24 Dec 2025 20:00:34 +0000 Manifest next update: Thu 25 Dec 2025 20:00:34 +0000 Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: Dcdfx4eXOKIIZYy3ucbUfofdZagNPjeXOgdipdRoTqw=) 2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=) 3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f2:ef:ef:da:d3:ca:66:a8:a2:44:7f:f9:42:41:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8d822165e7f01f722c973967f7554605240802 Validity Not Before: Dec 24 20:00:34 2025 GMT Not After : Dec 25 20:00:34 2025 GMT Subject: CN=0fcea3509dcaf7bc601f83e63fa88af547e63eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:2d:70:72:38:ea:b2:6d:da:09:bb:cf:c4: 62:82:9d:e7:c0:e9:62:ee:7b:f9:f3:fa:20:f6:71: be:2a:31:52:fb:92:ed:e9:e8:23:c9:ec:85:25:52: 21:5e:54:1c:4b:e0:19:28:3d:a0:59:63:5e:f1:07: 7c:3c:01:c3:99:a6:da:42:59:1d:b1:69:50:67:e8: 2e:42:11:b3:af:ff:a2:e8:b0:80:6d:28:f6:af:5c: 91:57:73:f0:08:1b:d6:1a:b7:1c:6c:09:c7:dd:9f: 53:ce:82:13:1f:6c:cb:eb:d4:3d:78:11:8e:37:7b: 28:5f:1b:9f:9e:ec:51:82:58:d3:12:60:47:a3:29: 2c:80:59:81:a6:47:96:ad:75:43:47:f5:a9:00:00: 20:65:13:aa:55:72:b3:63:2c:21:d6:fd:ed:95:87: 1a:2a:89:d6:c3:43:f1:bc:7e:49:8a:32:a1:e3:14: 4c:24:87:5d:61:e6:ef:55:a1:a0:60:13:f1:34:7b: 49:66:3a:86:00:12:2c:53:8d:f9:36:67:0e:ef:0e: d3:2d:04:60:18:ff:a2:74:ad:c5:17:7a:c2:4b:f1: 7b:3c:2c:a7:da:be:25:0a:2f:41:cf:81:c7:30:90: b3:d9:85:06:bd:75:ec:14:9b:f7:9d:75:76:72:24: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CE:A3:50:9D:CA:F7:BC:60:1F:83:E6:3F:A8:8A:F5:47:E6:3E:AC X509v3 Authority Key Identifier: keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3d:3c:b8:c8:82:a7:67:f7:a3:d0:3c:57:f5:d1:7b:0c:b9: a5:3a:3d:e2:3d:f4:9b:27:39:ee:ac:34:b9:bd:28:44:cf:f7: 1a:81:cd:15:47:4c:61:b0:24:a6:88:db:40:66:16:58:f4:31: d8:fa:db:7b:d1:e7:a2:ad:56:aa:09:9e:a6:a8:a9:64:a0:84: 9b:48:d6:65:5c:a3:11:93:94:07:d5:33:44:38:fa:b4:cb:da: 70:3a:4d:8e:ba:ce:ae:e9:0e:2c:49:0d:30:b8:58:ee:17:d4: 40:b5:37:11:1a:3b:e7:ca:b9:cc:97:a5:62:37:5f:0c:a0:86: 4b:8e:57:f2:a3:95:a1:1c:82:74:66:49:b5:8e:b3:ed:af:17: f7:02:02:62:d4:b1:94:51:b0:6b:82:d1:b1:85:5b:e5:07:61: 4d:ca:0d:4d:ad:73:f3:fa:aa:24:49:8c:bb:f2:6a:f2:0b:8d: c3:c0:59:0d:92:87:f7:cd:6c:86:73:49:be:c6:29:ee:14:8d: 9b:69:0c:ac:24:b5:7a:74:49:e1:2e:f3:f9:cd:42:93:c9:1c: a4:59:5d:c8:19:5a:a9:95:50:04:70:fc:da:3f:12:cd:c5:33: 71:49:4a:f1:33:96:21:13:1a:1e:9d:cb:77:ae:c8:eb:f2:72: c6:2e:5c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8u/v2tPKZqiiRH/5QkE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy NDA4MDIwHhcNMjUxMjI0MjAwMDM0WhcNMjUxMjI1MjAwMDM0WjAzMTEwLwYDVQQD EygwZmNlYTM1MDlkY2FmN2JjNjAxZjgzZTYzZmE4OGFmNTQ3ZTYzZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPUtcHI46rJt2gm7z8Rigp3nwOli 7nv58/og9nG+KjFS+5Lt6egjyeyFJVIhXlQcS+AZKD2gWWNe8Qd8PAHDmabaQlkd sWlQZ+guQhGzr/+i6LCAbSj2r1yRV3PwCBvWGrccbAnH3Z9TzoITH2zL69Q9eBGO N3soXxufnuxRgljTEmBHoyksgFmBpkeWrXVDR/WpAAAgZROqVXKzYywh1v3tlYca KonWw0PxvH5JijKh4xRMJIddYebvVaGgYBPxNHtJZjqGABIsU435NmcO7w7TLQRg GP+idK3FF3rCS/F7PCyn2r4lCi9Bz4HHMJCz2YUGvXXsFJv3nXV2ciQNmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/Oo1Cdyve8YB+D5j+oivVH5j6sMB8GA1UdIwQY MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt NWFmOTU4Y2VhZjZlLzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz08uMiC p2f3o9A8V/XRewy5pTo94j30myc57qw0ub0oRM/3GoHNFUdMYbAkpojbQGYWWPQx 2Prbe9Hnoq1WqgmepqipZKCEm0jWZVyjEZOUB9UzRDj6tMvacDpNjrrOrukOLEkN MLhY7hfUQLU3ERo758q5zJelYjdfDKCGS45X8qOVoRyCdGZJtY6z7a8X9wICYtSx lFGwa4LRsYVb5QdhTcoNTa1z8/qqJEmMu/Jq8guNw8BZDZKH981shnNJvsYp7hSN m2kMrCS1enRJ4S7z+c1Ck8kcpFldyBlaqZVQBHD82j8SzcUzcUlK8TOWIRMaHp3L d67I6/Jyxi5caA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:49 2025 by rpki-client