This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft File: S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json) Hash identifier: M/Eiu0QyV1xK3pkxr1WyMxFNw6bcbE/touHvCyNqnJ0= Subject key identifier: 5F:23:4A:66:FF:51:B5:6A:EE:77:38:1C:17:A4:EA:06:64:7B:E0:B8 Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12 Certificate issuer: /CN=4ba7b24f87ea51446d519afd4fe60419198ec012 Certificate serial: 019B435BD06A5EFA03E0797E4F1C83A50CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 00:00:49 +0000 Manifest this update: Mon 22 Dec 2025 00:00:49 +0000 Manifest next update: Tue 23 Dec 2025 00:00:49 +0000 Files and hashes: 1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: 6oJJYtYlC6MkSWv7AVvkfljqI1Hq2cqapiUac6qDTrY=) 2: k-8joWHq0IXSAeF06EYlGj2AITA.roa (hash: OrXpbU3ZTRNxide1ly7PEoXo5UOkEqSaVuBCmUkwkxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:d0:6a:5e:fa:03:e0:79:7e:4f:1c:83:a5:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012 Validity Not Before: Dec 22 00:00:49 2025 GMT Not After : Dec 23 00:00:49 2025 GMT Subject: CN=5f234a66ff51b56aee77381c17a4ea06647be0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:66:bc:86:ce:f3:eb:f2:18:e1:3e:95:b1:09: 8a:a8:a8:5a:64:a9:e9:a7:f8:7f:36:aa:81:a0:3c: 6f:72:40:56:c6:c5:ef:ff:2a:b0:47:12:1c:fd:23: 83:39:62:f2:6a:75:66:2e:17:cf:6c:fb:f6:11:17: 01:78:e3:7f:82:29:10:22:1a:89:9f:6c:18:e0:2a: 5c:fa:ca:c6:30:63:c2:37:4a:9f:7f:47:2d:63:39: 01:db:d7:5b:73:4e:bf:ee:79:ce:ef:4d:6a:6e:67: 77:78:14:f4:b5:76:40:60:7d:61:9c:60:25:e1:99: 9f:28:fd:01:66:1d:c5:38:c3:39:95:8a:b4:bb:b4: 24:99:8b:bc:13:92:0a:a2:a8:97:3c:f5:10:28:c0: 41:2a:f4:77:09:a9:23:d3:1d:33:09:25:ac:fc:75: a5:db:24:02:4e:60:84:b6:a7:58:ac:46:10:f8:72: 08:8f:b7:b9:8f:d4:ad:58:94:7c:4f:47:3b:e1:cc: 9e:f7:17:74:74:dd:37:a8:9f:ca:6f:e4:92:96:70: 30:b5:60:72:a7:a3:a7:ca:08:cc:f7:1e:94:b5:57: 3c:4f:ed:b5:67:d8:5c:de:79:e4:10:b3:6f:09:b7: 75:22:df:91:79:2f:85:7a:86:1c:6f:a0:aa:7e:50: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:23:4A:66:FF:51:B5:6A:EE:77:38:1C:17:A4:EA:06:64:7B:E0:B8 X509v3 Authority Key Identifier: keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f2:67:6b:3c:a6:2f:00:14:ca:89:b2:48:7c:0a:9c:18:d1: bd:cf:2e:d5:14:53:9c:d5:45:b8:7c:5b:d4:85:5e:0c:cd:5a: f7:b3:c0:86:a7:81:e0:b2:78:7f:9f:48:4c:e3:9f:32:ab:a8: 23:37:ff:f1:ba:75:61:f1:62:fe:18:bd:ba:7b:f3:20:57:0b: 7d:8a:27:bc:ef:d3:e7:03:9e:fe:f6:68:2c:fc:5a:09:4c:65: 45:42:e9:5d:cb:ed:4f:0a:e5:38:19:a7:1c:50:e0:66:55:4a: 9b:04:5d:2a:dc:ab:d8:26:1f:4c:21:29:94:96:1c:2b:fb:91: a1:bf:6d:5e:ce:ff:76:1e:f9:19:c1:fa:25:7e:c3:02:cf:71: 92:59:75:8c:83:65:a7:0b:3e:51:1d:54:aa:2e:2c:b9:9d:b8: 55:97:58:21:d0:31:2a:7e:11:55:89:02:c6:68:d7:19:d8:2f: 41:90:a0:e0:44:3e:94:a1:2a:31:56:fe:b6:12:66:2e:e9:a6: e7:1b:18:09:8d:44:8d:84:e5:71:4a:d3:af:ee:90:37:5c:d1: c4:50:c6:a7:df:ae:1c:16:10:3d:77:48:54:dc:08:ef:88:f4: 7d:69:d6:db:b3:b6:21:be:e5:99:61:50:1b:0e:1f:ab:f9:61: dd:b4:67:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW9BqXvoD4Hl+TxyDpQzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYTdiMjRmODdlYTUxNDQ2ZDUxOWFmZDRmZTYwNDE5MTk4 ZWMwMTIwHhcNMjUxMjIyMDAwMDQ5WhcNMjUxMjIzMDAwMDQ5WjAzMTEwLwYDVQQD Eyg1ZjIzNGE2NmZmNTFiNTZhZWU3NzM4MWMxN2E0ZWEwNjY0N2JlMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWa8hs7z6/IY4T6VsQmKqKhaZKnp p/h/NqqBoDxvckBWxsXv/yqwRxIc/SODOWLyanVmLhfPbPv2ERcBeON/gikQIhqJ n2wY4Cpc+srGMGPCN0qff0ctYzkB29dbc06/7nnO701qbmd3eBT0tXZAYH1hnGAl 4ZmfKP0BZh3FOMM5lYq0u7QkmYu8E5IKoqiXPPUQKMBBKvR3Cakj0x0zCSWs/HWl 2yQCTmCEtqdYrEYQ+HIIj7e5j9StWJR8T0c74cye9xd0dN03qJ/Kb+SSlnAwtWBy p6OnygjM9x6UtVc8T+21Z9hc3nnkELNvCbd1It+ReS+FeoYcb6CqflDyQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8jSmb/UbVq7nc4HBek6gZke+C4MB8GA1UdIwQY MBaAFEunsk+H6lFEbVGa/U/mBBkZjsASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgt YTI2ODg5ZWUyMmMyLzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgtYTI2ODg5ZWUyMmMy LzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvJnazym LwAUyomySHwKnBjRvc8u1RRTnNVFuHxb1IVeDM1a97PAhqeB4LJ4f59ITOOfMquo Izf/8bp1YfFi/hi9unvzIFcLfYonvO/T5wOe/vZoLPxaCUxlRULpXcvtTwrlOBmn HFDgZlVKmwRdKtyr2CYfTCEplJYcK/uRob9tXs7/dh75GcH6JX7DAs9xkll1jINl pws+UR1Uqi4suZ24VZdYIdAxKn4RVYkCxmjXGdgvQZCg4EQ+lKEqMVb+thJmLumm 5xsYCY1EjYTlcUrTr+6QN1zRxFDGp9+uHBYQPXdIVNwI74j0fWnW27O2Ib7lmWFQ Gw4fq/lh3bRn7w== -----END CERTIFICATE-----Generated at Mon Dec 22 08:33:35 2025 by rpki-client