This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft File: S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json) Hash identifier: CMzNIESDRHRvKhaSQAG6nDzPM/KGbjMMKQ0dFdD81WI= Subject key identifier: A9:9D:D7:B7:D0:93:EF:F4:15:59:B4:0B:FA:28:44:00:7D:65:51:33 Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35 Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35 Certificate serial: 019B247633F329F8AF610F4C97C227EE02C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft Manifest number: 0F13 Signing time: Tue 16 Dec 2025 00:01:24 +0000 Manifest this update: Tue 16 Dec 2025 00:01:24 +0000 Manifest next update: Wed 17 Dec 2025 00:01:24 +0000 Files and hashes: 1: AGFXaqT3BvJjfsfWKc-WZgyT260.roa (hash: otB7RONJ2iX79r/3n1UHcffodGPsIg2+hKNGewXNd5g=) 2: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: x/EmTdGAhs0C8uBrjraLfas1ARe2KqEiybCG+dJlVj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:33:f3:29:f8:af:61:0f:4c:97:c2:27:ee:02:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35 Validity Not Before: Dec 16 00:01:24 2025 GMT Not After : Dec 17 00:01:24 2025 GMT Subject: CN=a99dd7b7d093eff41559b40bfa2844007d655133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:df:98:97:80:b1:41:f4:5a:71:6c:40:b5: ec:e9:e5:39:ae:ef:b0:1e:7b:5a:d9:9b:22:82:7e: 37:e0:8f:ea:96:77:af:26:e3:12:02:08:c5:53:7f: 62:46:dd:32:ad:bb:f6:a1:df:b9:0a:ed:42:db:29: 41:1a:e7:e9:25:ff:ad:23:a2:4a:ef:9e:cc:5f:ce: e2:24:7b:3d:9b:d6:8d:83:cb:f3:d8:c7:6b:04:74: 72:f8:51:76:12:bc:53:37:b1:3e:17:a8:07:d9:18: 6b:f3:21:84:4a:e1:1d:d6:b1:41:63:ae:5f:e6:0b: d6:1f:83:13:b4:f7:f5:61:f2:d9:db:ba:db:4f:60: 08:fb:9a:a0:38:be:3f:73:2a:8f:79:fc:0f:e2:2b: 32:f1:aa:69:3c:32:07:de:9f:cd:9d:fd:6c:c6:93: 76:74:07:f0:6a:c0:d7:68:8a:db:8d:7f:6d:10:a4: c2:cc:5b:e6:fd:cf:a5:af:99:d7:2d:86:f8:55:85: 44:0a:3e:f3:38:d6:78:f7:5f:99:d3:ae:e7:f6:67: 2c:7a:3b:6a:10:e6:c3:8c:f6:f4:a0:0a:06:37:7d: 21:91:56:df:08:91:fd:26:c2:62:a0:42:32:55:79: 3d:23:05:c1:32:a8:f4:40:9d:39:2c:22:0b:80:77: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9D:D7:B7:D0:93:EF:F4:15:59:B4:0B:FA:28:44:00:7D:65:51:33 X509v3 Authority Key Identifier: keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cb:7f:1d:3d:f7:ed:90:5a:6c:39:b1:1b:15:e8:ca:86:bd: c8:ad:e8:35:8b:ab:00:b3:d8:a9:e5:9a:c3:33:f5:ca:c9:86: fd:11:52:a6:d9:9b:5c:53:af:a1:71:4f:19:22:36:fb:f2:01: 9e:20:cc:b1:8d:90:eb:61:b3:90:b6:ae:34:01:2a:9e:8d:e9: a8:fd:d3:38:a9:e9:66:ad:4e:92:b9:03:c1:40:ae:2a:05:d6: d0:8f:5c:f6:88:4d:e8:37:44:66:58:9e:dd:58:0e:c3:49:52: 5a:57:c6:5a:7e:72:01:9d:57:66:c1:f5:05:48:4f:1c:5f:d3: 61:b6:1d:56:53:2e:53:c8:0f:49:f1:02:08:68:00:d8:00:03: b5:58:4a:d6:b6:24:26:80:bc:5d:bb:e7:26:19:ee:1c:96:7a: dc:6d:03:ac:b2:fd:54:98:a3:a1:c9:3b:0f:d6:35:d4:df:9c: eb:fb:c6:8f:fe:c7:07:43:09:32:c2:84:21:9b:66:4b:fe:9c: d2:ba:e1:c3:7b:ad:16:f6:e6:02:66:b0:2b:c6:46:78:e4:3c: 24:07:e1:f5:f1:fd:49:79:c5:c5:35:bd:26:37:c8:f6:91:5b: 2c:46:84:86:5c:01:dc:0e:b6:70:44:53:2e:98:0a:68:6e:8b: 1a:c7:52:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdjPzKfivYQ9Ml8In7gLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOWEzYjllMTAyMzIwOTVjMThkMjY0NDQ0MGNlNWM1OGEx MzhiMzUwHhcNMjUxMjE2MDAwMTI0WhcNMjUxMjE3MDAwMTI0WjAzMTEwLwYDVQQD EyhhOTlkZDdiN2QwOTNlZmY0MTU1OWI0MGJmYTI4NDQwMDdkNjU1MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb3fmJeAsUH0WnFsQLXs6eU5ru+w Hnta2Zsign434I/qlnevJuMSAgjFU39iRt0yrbv2od+5Cu1C2ylBGufpJf+tI6JK 757MX87iJHs9m9aNg8vz2MdrBHRy+FF2ErxTN7E+F6gH2Rhr8yGESuEd1rFBY65f 5gvWH4MTtPf1YfLZ27rbT2AI+5qgOL4/cyqPefwP4isy8appPDIH3p/Nnf1sxpN2 dAfwasDXaIrbjX9tEKTCzFvm/c+lr5nXLYb4VYVECj7zONZ491+Z067n9mcsejtq EObDjPb0oAoGN30hkVbfCJH9JsJioEIyVXk9IwXBMqj0QJ05LCILgHcWwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmd17fQk+/0FVm0C/ooRAB9ZVEzMB8GA1UdIwQY MBaAFEuaO54QIyCVwY0mREQM5cWKE4s1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVvN25oQWpJSlhCalNaRVJBemx4WW9UaXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMjFlZTAtZDczMC00NWRiLTk3YmQt YzM0YmUwM2MxNWRiLzEvUzVvN25oQWpJSlhCalNaRVJBemx4WW9UaXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMjFlZTAtZDczMC00NWRiLTk3YmQtYzM0YmUwM2MxNWRi LzEvUzVvN25oQWpJSlhCalNaRVJBemx4WW9UaXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPst/HT33 7ZBabDmxGxXoyoa9yK3oNYurALPYqeWawzP1ysmG/RFSptmbXFOvoXFPGSI2+/IB niDMsY2Q62GzkLauNAEqno3pqP3TOKnpZq1OkrkDwUCuKgXW0I9c9ohN6DdEZlie 3VgOw0lSWlfGWn5yAZ1XZsH1BUhPHF/TYbYdVlMuU8gPSfECCGgA2AADtVhK1rYk JoC8XbvnJhnuHJZ63G0DrLL9VJijock7D9Y11N+c6/vGj/7HB0MJMsKEIZtmS/6c 0rrhw3utFvbmAmawK8ZGeOQ8JAfh9fH9SXnFxTW9JjfI9pFbLEaEhlwB3A62cERT LpgKaG6LGsdSlw== -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:03 2025 by rpki-client