This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json) Hash identifier: 49DPem5Or0O6DKpxZYXbsYrJ3yGJAFGzMBvU6juDK0A= Subject key identifier: F3:5A:FD:D0:96:1A:6D:F6:59:E5:EA:23:8F:16:10:8F:30:B3:1B:93 Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8 Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8 Certificate serial: 019B3BD91AF73D19C22336AE8E9001C460FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft Manifest number: 17A3 Signing time: Sat 20 Dec 2025 13:00:42 +0000 Manifest this update: Sat 20 Dec 2025 13:00:42 +0000 Manifest next update: Sun 21 Dec 2025 13:00:42 +0000 Files and hashes: 1: 0hP_n0pnEZN4K6poUlA-xqEv6yE.roa (hash: F/NswoqCQCtEeweJPN7XVnbp503CyUvfgOPod22wDEM=) 2: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=) 3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: jou6+pnFEBXtwO1ASWyUOxwAVNrgnYhlWwfM2s/xtPc=) 4: eiTWJKHAu5xriuE2QvW7x5YIzOU.roa (hash: s87ilBuA43+J3H8PQ6AAVQPStmwyHIxSZQ+1oBAYKOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:1a:f7:3d:19:c2:23:36:ae:8e:90:01:c4:60:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8 Validity Not Before: Dec 20 13:00:42 2025 GMT Not After : Dec 21 13:00:42 2025 GMT Subject: CN=f35afdd0961a6df659e5ea238f16108f30b31b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:6b:e0:de:c4:f7:6e:88:49:22:4e:9f:3d: ad:96:21:af:16:bb:97:e2:f1:e3:7c:28:cb:10:37: 78:8c:08:c3:8c:59:ec:a9:b2:0b:8a:56:ed:d0:50: a5:e9:cc:65:b4:c0:e8:c0:58:88:6e:f1:5e:a4:71: aa:2e:49:cc:b1:e7:12:fc:d0:1d:1b:8c:4a:ef:5f: 47:8c:8d:2a:a3:21:12:05:5f:06:85:e2:32:37:3a: 68:21:c3:ec:39:d7:f5:1a:e1:70:d1:43:4a:c6:1c: 43:b8:84:86:d2:b7:ff:c4:89:19:0b:c4:64:cc:e7: a9:ba:72:79:5a:17:7e:a8:d0:ba:ec:32:cf:f5:f5: 72:24:bb:e2:d8:5d:ea:dd:2e:2f:02:0d:6c:66:9b: 12:1c:d3:41:91:d9:19:3f:7a:74:ce:b5:f1:a9:e7: c1:75:b5:50:9f:23:56:16:13:4b:ee:78:36:b2:d3: 22:39:8f:ec:1d:12:40:2d:bf:eb:16:af:82:7f:bf: a1:93:26:31:4d:23:65:fc:c2:bb:99:f6:be:63:5b: 60:eb:be:73:eb:24:01:88:f1:d1:2e:53:a3:28:fc: eb:bf:9e:79:17:46:03:31:c0:09:5d:53:2a:c9:d9: 7f:5b:c8:4e:23:fa:f5:d4:42:01:83:75:64:14:25: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5A:FD:D0:96:1A:6D:F6:59:E5:EA:23:8F:16:10:8F:30:B3:1B:93 X509v3 Authority Key Identifier: keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8c:ae:70:e8:1b:f7:30:62:9d:7c:d2:6e:cd:8f:c8:19:c6: 6a:21:fb:67:7b:08:2c:f9:6d:73:fb:01:2b:e7:9a:e6:e3:71: b6:b1:81:0c:0b:a0:20:d6:08:8d:c8:55:a3:af:c9:94:b5:65: b5:ca:3f:3e:76:e0:20:f2:33:42:f8:ae:2b:30:da:ba:1d:fd: e4:28:b8:f6:b3:d6:cb:7e:15:7e:53:07:66:60:c8:8b:c4:bf: 6c:34:47:a5:40:f0:45:fa:46:fc:32:10:17:4b:86:19:f8:23: 3b:1c:f7:ee:87:d6:3c:09:be:3f:22:4a:11:0f:3a:29:c9:7c: 10:e4:8b:81:41:91:2d:1f:e6:73:8b:d4:1e:65:58:61:43:a1: bc:b2:04:7f:7b:c8:d0:78:95:24:a7:e6:44:88:98:9c:59:ad: ed:72:17:cc:fd:c2:c9:6b:95:a6:94:21:b4:aa:20:3d:ff:c3: 65:1c:66:fe:8d:ce:36:b6:f5:71:2a:e6:c1:1c:74:de:3e:5c: e2:5d:cd:4a:96:26:14:df:ca:1b:b9:6d:3d:a8:db:a0:f7:3b: 33:09:1c:b6:cc:09:96:17:e6:28:aa:95:9e:39:b0:c6:9a:1b: d9:2b:3d:a4:32:22:33:b6:61:e9:33:f9:f8:6a:7f:f4:1b:e5: f1:ae:68:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Rr3PRnCIzaujpABxGD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5 MzI5ZjgwHhcNMjUxMjIwMTMwMDQyWhcNMjUxMjIxMTMwMDQyWjAzMTEwLwYDVQQD EyhmMzVhZmRkMDk2MWE2ZGY2NTllNWVhMjM4ZjE2MTA4ZjMwYjMxYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX1r4N7E926ISSJOnz2tliGvFruX 4vHjfCjLEDd4jAjDjFnsqbILilbt0FCl6cxltMDowFiIbvFepHGqLknMsecS/NAd G4xK719HjI0qoyESBV8GheIyNzpoIcPsOdf1GuFw0UNKxhxDuISG0rf/xIkZC8Rk zOepunJ5Whd+qNC67DLP9fVyJLvi2F3q3S4vAg1sZpsSHNNBkdkZP3p0zrXxqefB dbVQnyNWFhNL7ng2stMiOY/sHRJALb/rFq+Cf7+hkyYxTSNl/MK7mfa+Y1tg675z 6yQBiPHRLlOjKPzrv555F0YDMcAJXVMqydl/W8hOI/r11EIBg3VkFCVb9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNa/dCWGm32WeXqI48WEI8wsxuTMB8GA1UdIwQY MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt NjRhNmEwNWI5OTA1LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1 LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4yucOgb 9zBinXzSbs2PyBnGaiH7Z3sILPltc/sBK+ea5uNxtrGBDAugINYIjchVo6/JlLVl tco/PnbgIPIzQviuKzDauh395Ci49rPWy34VflMHZmDIi8S/bDRHpUDwRfpG/DIQ F0uGGfgjOxz37ofWPAm+PyJKEQ86Kcl8EOSLgUGRLR/mc4vUHmVYYUOhvLIEf3vI 0HiVJKfmRIiYnFmt7XIXzP3CyWuVppQhtKogPf/DZRxm/o3ONrb1cSrmwRx03j5c 4l3NSpYmFN/KG7ltPajboPc7MwkctswJlhfmKKqVnjmwxpob2Ss9pDIiM7Zh6TP5 +Gp/9Bvl8a5oCg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:06 2025 by rpki-client