This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json) Hash identifier: QFQpRgrQ3byBke+5vThBnzPBOVGcOlF2bfRpl7WG3ro= Subject key identifier: F5:99:C0:BB:D5:01:0C:61:AA:4E:D5:4C:CC:DB:89:D9:CE:57:75:14 Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d Certificate serial: 019B446EE89372DCA82607DDEAC0C801F305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 05:01:17 +0000 Manifest this update: Mon 22 Dec 2025 05:01:17 +0000 Manifest next update: Tue 23 Dec 2025 05:01:17 +0000 Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: RWiFR83HR6ZAt9mFwp1OBtq7ch1XiQuAReAMmp5LGcw=) 2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:e8:93:72:dc:a8:26:07:dd:ea:c0:c8:01:f3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d Validity Not Before: Dec 22 05:01:17 2025 GMT Not After : Dec 23 05:01:17 2025 GMT Subject: CN=f599c0bbd5010c61aa4ed54cccdb89d9ce577514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:85:01:6d:90:61:a3:36:86:09:76:2a:25: a1:6e:4e:0f:c3:9b:f0:e4:fa:11:54:20:95:ea:3f: 44:da:d3:e1:d2:e2:ba:4e:6a:74:b6:e2:b9:e0:be: 9c:08:f9:91:d6:6c:25:06:c6:6f:89:81:12:60:47: ae:2c:cf:3c:dc:2a:2d:5c:45:31:c6:9a:b9:e1:ef: 25:06:18:cf:5f:74:a8:18:ec:ce:86:bc:35:3a:f2: 60:df:a8:9b:69:1c:61:7a:ef:cb:f1:47:b3:f3:99: b2:44:c0:eb:be:56:0f:64:12:bd:25:fe:b8:19:88: 0f:5c:3f:7b:f6:e8:10:d0:9b:b1:08:62:e2:5c:58: 6a:f7:b1:25:ca:42:d4:2f:2e:78:17:b7:06:91:01: 38:b6:e1:2d:de:cc:20:19:f4:8e:9b:1f:76:67:10: 19:ce:3c:83:3b:57:32:db:06:ee:e7:e0:30:fe:a9: fc:03:bd:72:0a:49:03:58:bb:e0:14:25:3b:ab:cc: ec:9b:e4:cc:1c:61:01:43:f7:a8:4d:ac:60:f7:b0: 1c:52:bf:e4:0b:27:fc:36:3e:ef:6e:6f:49:a7:f4: 60:eb:59:c4:ac:9d:24:de:16:7d:5e:79:86:d7:85: 80:42:74:d0:ca:f1:8f:1b:31:63:8b:2e:6b:37:aa: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:C0:BB:D5:01:0C:61:AA:4E:D5:4C:CC:DB:89:D9:CE:57:75:14 X509v3 Authority Key Identifier: keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7b:b6:ec:53:6f:4b:69:c6:79:14:b5:f1:3b:09:c5:4f:15: 97:b1:f8:b6:b2:04:12:de:c4:ea:0a:1c:28:89:d3:48:3c:95: 64:ed:d6:34:d8:60:bd:d3:66:08:48:03:ab:f3:98:55:04:58: 6d:18:55:2e:3c:48:38:8e:73:d6:28:15:a0:11:93:be:5f:8c: ab:fa:2f:be:bf:c4:d7:04:4d:c1:29:7e:9e:cc:ff:60:91:5b: d7:b6:eb:a7:cd:5c:8b:91:c5:3c:d5:1b:94:b6:6e:18:ae:fb: 11:7f:a7:f6:ff:11:91:4e:eb:f3:b6:32:5c:e6:97:80:fc:d4: 2b:20:55:a2:b2:c5:44:7a:0b:69:90:39:39:65:d8:5c:c5:f4: 47:cf:9c:ca:57:10:dc:56:30:5e:cd:7e:ee:3c:e9:a4:b7:4f: 93:ae:9d:a1:8f:3f:2e:70:65:ed:3a:08:de:43:93:fb:f2:d4: c1:86:f3:07:8b:cb:5a:5a:9c:8f:82:2a:ec:6b:e6:6d:4c:bb: 61:9e:d4:d5:8e:b2:f1:4e:1f:46:fb:58:47:ad:f6:36:95:3d: ab:4c:8b:b8:1b:a4:43:bd:46:9a:96:2d:a3:cc:5c:b5:46:bc: 29:42:3a:02:82:e1:26:65:b3:74:0a:7b:8b:3b:1d:22:1f:b9: e2:eb:69:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbuiTctyoJgfd6sDIAfMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl ZDI2NmQwHhcNMjUxMjIyMDUwMTE3WhcNMjUxMjIzMDUwMTE3WjAzMTEwLwYDVQQD EyhmNTk5YzBiYmQ1MDEwYzYxYWE0ZWQ1NGNjY2RiODlkOWNlNTc3NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a6FAW2QYaM2hgl2KiWhbk4Pw5vw 5PoRVCCV6j9E2tPh0uK6Tmp0tuK54L6cCPmR1mwlBsZviYESYEeuLM883CotXEUx xpq54e8lBhjPX3SoGOzOhrw1OvJg36ibaRxheu/L8Uez85myRMDrvlYPZBK9Jf64 GYgPXD979ugQ0JuxCGLiXFhq97ElykLULy54F7cGkQE4tuEt3swgGfSOmx92ZxAZ zjyDO1cy2wbu5+Aw/qn8A71yCkkDWLvgFCU7q8zsm+TMHGEBQ/eoTaxg97AcUr/k Cyf8Nj7vbm9Jp/Rg61nErJ0k3hZ9XnmG14WAQnTQyvGPGzFjiy5rN6ojTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWZwLvVAQxhqk7VTMzbidnOV3UUMB8GA1UdIwQY MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt YmFjMjAwMjkzMmQ5LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5 LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3u27FNv S2nGeRS18TsJxU8Vl7H4trIEEt7E6gocKInTSDyVZO3WNNhgvdNmCEgDq/OYVQRY bRhVLjxIOI5z1igVoBGTvl+Mq/ovvr/E1wRNwSl+nsz/YJFb17brp81ci5HFPNUb lLZuGK77EX+n9v8RkU7r87YyXOaXgPzUKyBVorLFRHoLaZA5OWXYXMX0R8+cylcQ 3FYwXs1+7jzppLdPk66doY8/LnBl7ToI3kOT+/LUwYbzB4vLWlqcj4Iq7GvmbUy7 YZ7U1Y6y8U4fRvtYR632NpU9q0yLuBukQ71GmpYto8xctUa8KUI6AoLhJmWzdAp7 izsdIh+54utpaA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:59:15 2025 by rpki-client