This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json) Hash identifier: iwI7QCT/DCpFj+7xf3FZi1y3DP4h5QAx5WvCc0EInnA= Subject key identifier: 91:CE:FA:F6:14:6B:E0:C9:DE:45:A1:DB:9A:86:15:FE:86:C8:C5:37 Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a Certificate serial: 019B32D6C53D5DC8E8C44104C7B673100816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft Manifest number: 1470 Signing time: Thu 18 Dec 2025 19:01:34 +0000 Manifest this update: Thu 18 Dec 2025 19:01:34 +0000 Manifest next update: Fri 19 Dec 2025 19:01:34 +0000 Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: R1S4Q9sDgFd6uW7CBIAPYgs/LEV/OCA+FNy9M3TWZNc=) 2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:c5:3d:5d:c8:e8:c4:41:04:c7:b6:73:10:08:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a Validity Not Before: Dec 18 19:01:34 2025 GMT Not After : Dec 19 19:01:34 2025 GMT Subject: CN=91cefaf6146be0c9de45a1db9a8615fe86c8c537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:0b:f8:35:8c:a1:aa:62:87:c9:b7:4d:b1: 9b:ca:ba:88:de:3e:cb:0b:f8:ba:16:cc:e4:13:34: 04:e5:00:58:45:70:7c:98:82:15:b1:82:b5:3d:b8: 04:86:48:58:d1:96:de:63:40:18:43:83:8e:03:f3: 60:c8:ef:52:0c:1e:fb:4f:6f:84:19:4a:f5:99:7c: d6:0d:4f:d5:28:4e:bc:2a:1e:19:b8:1e:22:fa:5d: 31:a3:e8:1f:58:ff:e2:d5:09:4e:3c:84:6d:7b:5d: 95:3d:dc:96:76:ac:75:8d:aa:f8:28:53:3b:e0:7d: 55:4b:f3:94:83:47:da:80:df:89:9b:c6:25:fc:41: e1:d3:83:ed:de:65:ef:a9:62:01:d6:1c:c1:97:fa: cb:3f:8f:32:07:b9:52:98:42:94:cc:4b:31:f6:5d: a8:27:fa:9f:e6:76:59:cc:65:55:d2:8e:de:1e:44: 5a:8c:0f:8a:f6:a5:db:38:5f:d3:66:40:65:8d:63: e4:c1:67:37:38:b1:2e:86:51:49:3c:d0:ff:b4:81: 18:97:5f:d5:b9:43:e8:35:83:7d:33:cb:59:29:9e: 91:3b:a3:ba:1e:d0:e2:df:84:49:09:e3:bb:89:34: b7:55:12:f6:ff:c9:1c:8c:61:bd:3e:66:eb:ce:d9: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:FA:F6:14:6B:E0:C9:DE:45:A1:DB:9A:86:15:FE:86:C8:C5:37 X509v3 Authority Key Identifier: keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4d:0c:17:a3:43:eb:98:a4:fd:47:a8:58:a0:13:17:fa:2e: e2:f1:10:f2:56:c4:12:66:73:c2:7a:2e:49:78:cd:96:0c:86: 81:9d:76:eb:b9:10:a2:5e:16:9e:57:d7:f2:c4:4c:2e:90:99: 78:89:21:44:4b:13:59:20:1f:97:17:2f:cc:81:5a:a2:83:0e: dd:45:cf:f8:5b:f5:b6:5d:a7:a4:6f:25:33:35:15:53:5e:de: 51:b1:e6:0f:6c:db:09:80:5c:ef:97:fc:53:f6:a4:2e:aa:e6: bd:5b:86:2f:83:59:a0:d5:8e:11:eb:19:63:05:56:fc:d5:c8: ac:41:1a:3c:2f:8e:0c:b0:92:a7:a6:c4:b6:a5:07:82:3a:f2: 3b:c2:35:fd:2a:c5:f9:97:01:eb:7e:5d:92:79:26:90:23:ae: d8:a9:58:fa:8d:f5:c8:8b:16:8e:a3:52:f9:1f:06:1c:b8:56: 1a:b6:d6:42:bc:41:6e:82:02:57:db:f2:9c:5c:82:32:b5:93: 99:0b:a5:16:f5:f0:47:a3:24:c1:8c:b4:c4:11:a2:bb:18:23: 1f:66:4f:63:8c:e5:41:77:49:3c:63:e7:06:e1:0b:da:12:be: 55:a1:9f:03:e6:fa:3b:b7:4b:ef:6d:ea:cb:68:a1:21:29:63: 4c:5e:8c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1sU9XcjoxEEEx7ZzEAgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNWM3ZDljNzQ0MGU1Y2I0YjBhNjc2MTU2M2MwZDg1MGYw ODExMWEwHhcNMjUxMjE4MTkwMTM0WhcNMjUxMjE5MTkwMTM0WjAzMTEwLwYDVQQD Eyg5MWNlZmFmNjE0NmJlMGM5ZGU0NWExZGI5YTg2MTVmZTg2YzhjNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncUL+DWMoapih8m3TbGbyrqI3j7L C/i6FszkEzQE5QBYRXB8mIIVsYK1PbgEhkhY0ZbeY0AYQ4OOA/NgyO9SDB77T2+E GUr1mXzWDU/VKE68Kh4ZuB4i+l0xo+gfWP/i1QlOPIRte12VPdyWdqx1jar4KFM7 4H1VS/OUg0fagN+Jm8Yl/EHh04Pt3mXvqWIB1hzBl/rLP48yB7lSmEKUzEsx9l2o J/qf5nZZzGVV0o7eHkRajA+K9qXbOF/TZkBljWPkwWc3OLEuhlFJPND/tIEYl1/V uUPoNYN9M8tZKZ6RO6O6HtDi34RJCeO7iTS3VRL2/8kcjGG9PmbrztlHzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHO+vYUa+DJ3kWh25qGFf6GyMU3MB8GA1UdIwQY MBaAFEtcfZx0QOXLSwpnYVY8DYUPCBEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzIt YTVlZWJkMjhkNDk2LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzItYTVlZWJkMjhkNDk2 LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi00MF6ND 65ik/UeoWKATF/ou4vEQ8lbEEmZzwnouSXjNlgyGgZ1267kQol4WnlfX8sRMLpCZ eIkhREsTWSAflxcvzIFaooMO3UXP+Fv1tl2npG8lMzUVU17eUbHmD2zbCYBc75f8 U/akLqrmvVuGL4NZoNWOEesZYwVW/NXIrEEaPC+ODLCSp6bEtqUHgjryO8I1/SrF +ZcB635dknkmkCOu2KlY+o31yIsWjqNS+R8GHLhWGrbWQrxBboICV9vynFyCMrWT mQulFvXwR6MkwYy0xBGiuxgjH2ZPY4zlQXdJPGPnBuEL2hK+VaGfA+b6O7dL723q y2ihISljTF6M6g== -----END CERTIFICATE-----Generated at Fri Dec 19 01:22:29 2025 by rpki-client