This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json) Hash identifier: LMSVZWz5rZZS++tOEBjVPQoONMbYx6hAu7ZJargssyA= Subject key identifier: 28:C3:B3:A1:B6:B2:AA:C8:C2:6D:41:D7:2D:41:75:B4:A8:88:6C:84 Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a Certificate serial: 019B4815C1B861091BD2EB0B6338333E1852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft Manifest number: 147B Signing time: Mon 22 Dec 2025 22:02:23 +0000 Manifest this update: Mon 22 Dec 2025 22:02:23 +0000 Manifest next update: Tue 23 Dec 2025 22:02:23 +0000 Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: zFm+CLLlZkg59TYVmCrNGp14dBWGXAHlhy01qnS5+fI=) 2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:c1:b8:61:09:1b:d2:eb:0b:63:38:33:3e:18:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a Validity Not Before: Dec 22 22:02:23 2025 GMT Not After : Dec 23 22:02:23 2025 GMT Subject: CN=28c3b3a1b6b2aac8c26d41d72d4175b4a8886c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:6e:53:2c:61:fa:b2:d3:51:0e:26:29:ec: e4:46:47:b5:ec:07:42:28:9e:1b:cd:f7:a5:73:4a: f6:b9:81:ad:64:67:02:6d:e6:89:b7:80:85:dd:a5: d0:6d:7b:45:8a:35:ba:5f:19:2e:04:55:b7:f8:88: 61:20:9c:f6:cf:18:b3:3e:20:cf:7d:e5:68:0f:3b: 57:e5:9d:34:38:15:62:14:85:6b:db:57:21:19:cc: 48:08:9d:28:75:c1:84:94:d6:9f:21:af:6f:71:e5: ca:4e:22:07:69:62:b2:d0:3d:b4:94:87:17:a3:33: 04:1b:11:a8:c8:ec:9c:37:57:10:97:99:01:b1:6c: d7:59:cc:59:10:4b:8f:b2:73:28:94:e1:e0:1f:31: d3:24:71:7b:ed:4b:0e:ea:3d:c8:68:28:76:5f:1b: a3:72:b0:99:48:b8:bf:d4:9b:e9:b1:dd:73:ff:e7: 47:6a:e2:ce:63:41:99:e0:28:e9:a3:01:b1:5a:3f: e5:91:6b:37:c2:80:9b:36:c9:e0:23:6c:dc:6f:e4: 3d:4a:67:03:fe:8c:4a:ee:47:d9:1a:cf:3b:59:17: 0c:1b:43:72:11:ca:03:d8:e3:43:c3:6a:19:b2:8e: 5d:81:61:90:c2:3f:45:83:d8:0f:c6:25:9d:7b:c1: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C3:B3:A1:B6:B2:AA:C8:C2:6D:41:D7:2D:41:75:B4:A8:88:6C:84 X509v3 Authority Key Identifier: keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ec:3d:07:e7:a9:80:e0:ed:9c:67:bc:13:24:e9:08:f9:66: c6:0d:08:ed:d2:17:fc:98:e5:8d:29:15:89:8b:d6:e5:33:bc: 8e:d5:93:14:95:11:fd:70:8a:5d:c2:57:23:fa:54:e3:6d:5d: 20:c2:32:5d:d4:47:26:f5:69:2b:7c:7d:8c:17:78:63:12:cd: e5:bb:6f:28:7d:c7:41:69:77:60:c9:cd:a2:f3:4a:c5:a6:93: cf:a8:7c:9d:3d:71:07:71:79:40:5c:bb:6e:45:c5:02:3e:3a: 35:17:e5:7c:cb:98:10:e2:0f:ab:51:35:c3:4a:cf:31:49:fc: 3c:0b:20:6d:a3:1c:7f:e1:d2:b8:6d:75:8f:a2:ff:00:61:8d: bd:05:e3:4f:1b:a3:4c:de:90:12:e3:54:b8:e4:e7:83:95:b0: c6:77:11:3e:bb:db:dd:00:75:5f:23:54:38:32:02:cc:bb:9e: 1c:a2:b8:1f:e2:4f:0c:6f:86:53:64:9b:78:7d:81:2e:a3:4d: d5:4f:cd:76:b2:8c:2b:33:82:e9:f0:e3:60:cf:90:b4:30:7a: f3:e9:42:45:e1:f9:7f:b0:5f:d0:cc:d5:23:22:40:03:d0:9c: 74:21:d7:f5:fa:77:67:7a:19:b4:d9:18:23:0f:2b:d0:15:fe: 10:11:27:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFcG4YQkb0usLYzgzPhhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNWM3ZDljNzQ0MGU1Y2I0YjBhNjc2MTU2M2MwZDg1MGYw ODExMWEwHhcNMjUxMjIyMjIwMjIzWhcNMjUxMjIzMjIwMjIzWjAzMTEwLwYDVQQD EygyOGMzYjNhMWI2YjJhYWM4YzI2ZDQxZDcyZDQxNzViNGE4ODg2Yzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsNuUyxh+rLTUQ4mKezkRke17AdC KJ4bzfelc0r2uYGtZGcCbeaJt4CF3aXQbXtFijW6XxkuBFW3+IhhIJz2zxizPiDP feVoDztX5Z00OBViFIVr21chGcxICJ0odcGElNafIa9vceXKTiIHaWKy0D20lIcX ozMEGxGoyOycN1cQl5kBsWzXWcxZEEuPsnMolOHgHzHTJHF77UsO6j3IaCh2Xxuj crCZSLi/1Jvpsd1z/+dHauLOY0GZ4CjpowGxWj/lkWs3woCbNsngI2zcb+Q9SmcD /oxK7kfZGs87WRcMG0NyEcoD2ONDw2oZso5dgWGQwj9Fg9gPxiWde8FtbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjDs6G2sqrIwm1B1y1BdbSoiGyEMB8GA1UdIwQY MBaAFEtcfZx0QOXLSwpnYVY8DYUPCBEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzIt YTVlZWJkMjhkNDk2LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzItYTVlZWJkMjhkNDk2 LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlew9B+ep gODtnGe8EyTpCPlmxg0I7dIX/JjljSkViYvW5TO8jtWTFJUR/XCKXcJXI/pU421d IMIyXdRHJvVpK3x9jBd4YxLN5btvKH3HQWl3YMnNovNKxaaTz6h8nT1xB3F5QFy7 bkXFAj46NRflfMuYEOIPq1E1w0rPMUn8PAsgbaMcf+HSuG11j6L/AGGNvQXjTxuj TN6QEuNUuOTng5WwxncRPrvb3QB1XyNUODICzLueHKK4H+JPDG+GU2SbeH2BLqNN 1U/NdrKMKzOC6fDjYM+QtDB68+lCReH5f7Bf0MzVIyJAA9CcdCHX9fp3Z3oZtNkY Iw8r0BX+EBEnMQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:51:18 2025 by rpki-client