This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json) Hash identifier: GndBQgMKGRImZvYAdt2FjnNYENTz0wNSWO8zmD5qSaY= Subject key identifier: 56:A0:9D:68:BC:9E:E6:C7:96:BD:0E:CF:A3:C8:74:63:29:84:03:7C Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4 Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4 Certificate serial: 019B6EEA898B69E0C6FCD545E1303B37FE06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft Manifest number: 1758 Signing time: Tue 30 Dec 2025 11:00:22 +0000 Manifest this update: Tue 30 Dec 2025 11:00:22 +0000 Manifest next update: Wed 31 Dec 2025 11:00:22 +0000 Files and hashes: 1: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: hHbwhKSeJKHv7Spv5wHOqIxpVCD2dm22NZzRMXoCOH4=) 2: zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa (hash: KQ8uWDK74BxQd55e4CkD8HOGjkQGRjBDcA3U74QNwgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:ea:89:8b:69:e0:c6:fc:d5:45:e1:30:3b:37:fe:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4 Validity Not Before: Dec 30 11:00:22 2025 GMT Not After : Dec 31 11:00:22 2025 GMT Subject: CN=56a09d68bc9ee6c796bd0ecfa3c874632984037c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:1c:17:d8:c4:19:74:79:fe:0a:a1:e9:20: 33:a7:ca:da:0a:ec:b1:43:e6:53:0a:1b:cd:14:ef: 12:01:1f:1f:ab:33:f8:36:25:6c:3b:03:a1:9e:1a: eb:7f:fb:43:09:a7:c5:39:14:6b:80:8c:3c:f4:1f: d0:09:5f:f7:5f:a8:50:2b:4e:2b:a8:02:12:59:ae: ae:4d:84:77:f7:8e:e3:25:15:4b:49:b8:d9:11:91: ef:a6:d6:b8:dd:33:84:cd:9d:4c:ea:91:79:c9:cc: 36:a0:75:98:b2:85:bd:b5:f7:5d:be:1c:78:b5:52: aa:e4:a0:5a:23:05:7a:19:0e:3b:b5:cd:3d:24:49: 6c:7b:b0:bf:1b:56:df:ba:b8:f4:48:67:02:f4:c4: 1d:0d:38:c0:34:e9:54:c9:2f:fd:c6:89:a8:6b:f8: d3:2a:b7:db:9e:6f:06:3e:d8:cf:2f:70:33:ac:7a: c4:14:20:8b:00:7f:6c:48:7f:55:a5:ca:5d:9c:5f: 25:1d:ff:e1:6b:c5:d3:1e:e3:95:85:61:1a:ba:30: f2:64:0f:b6:fc:87:dd:d1:61:cc:98:a7:7d:6c:32: 88:0c:40:22:3b:3a:43:d7:f4:b9:ed:12:19:48:69: 7f:57:c7:bf:9f:1c:00:55:61:5e:9d:0e:ca:4d:05: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A0:9D:68:BC:9E:E6:C7:96:BD:0E:CF:A3:C8:74:63:29:84:03:7C X509v3 Authority Key Identifier: keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:bf:b6:ef:ef:24:02:47:c2:66:31:8c:89:58:cb:85:c5: 8b:56:f3:79:b8:ec:bd:7d:6c:17:67:d9:18:75:68:27:a3:70: 9e:4a:47:be:38:7c:a7:cd:be:95:12:9a:72:8d:26:e8:8c:8b: a1:9d:ea:a5:ac:34:f5:5d:a2:0c:7b:6f:b3:12:0c:36:48:cb: 2d:bd:0d:c9:fd:02:70:af:d6:75:4f:e9:98:b9:82:a9:08:3f: bb:3d:94:07:b3:a5:e3:f1:5f:b9:6b:ea:33:0d:85:7d:ae:e7: b3:41:f7:cf:9e:fe:0c:59:db:06:62:c2:81:64:2d:28:48:05: af:9a:4c:8b:96:b6:f6:37:46:06:4f:b2:76:fc:60:c0:39:a6: 6a:c8:d5:9f:b7:5f:c6:92:e7:09:83:94:e6:18:02:d3:4e:ef: 8b:6e:b5:d1:6b:96:6d:88:4a:22:16:79:57:ab:36:a0:cc:4a: 96:f7:48:c8:0d:3a:ce:d3:44:cb:42:34:86:37:5c:a3:85:90: b5:33:41:64:79:60:62:fe:69:47:64:9d:5c:d9:86:9e:f4:1a: d4:34:b7:89:0a:0e:eb:d0:ae:f4:80:66:cd:b6:e9:de:4e:50: 53:55:72:b7:f8:e8:3c:ff:91:9b:f5:ad:63:be:54:5f:8c:6d: b0:fd:c5:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtu6omLaeDG/NVF4TA7N/4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjNkMTgzMzY2NDJiNmE5YWM4YWVkZmZiZjdhZWU2ZTVl NjI5ZjQwHhcNMjUxMjMwMTEwMDIyWhcNMjUxMjMxMTEwMDIyWjAzMTEwLwYDVQQD Eyg1NmEwOWQ2OGJjOWVlNmM3OTZiZDBlY2ZhM2M4NzQ2MzI5ODQwMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJAcF9jEGXR5/gqh6SAzp8raCuyx Q+ZTChvNFO8SAR8fqzP4NiVsOwOhnhrrf/tDCafFORRrgIw89B/QCV/3X6hQK04r qAISWa6uTYR3947jJRVLSbjZEZHvpta43TOEzZ1M6pF5ycw2oHWYsoW9tfddvhx4 tVKq5KBaIwV6GQ47tc09JElse7C/G1bfurj0SGcC9MQdDTjANOlUyS/9xomoa/jT Krfbnm8GPtjPL3AzrHrEFCCLAH9sSH9VpcpdnF8lHf/ha8XTHuOVhWEaujDyZA+2 /Ifd0WHMmKd9bDKIDEAiOzpD1/S57RIZSGl/V8e/nxwAVWFenQ7KTQXdAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFagnWi8nubHlr0Oz6PIdGMphAN8MB8GA1UdIwQY MBaAFEvz0YM2ZCtqmsiu3/v3rubl5in0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NDI4OTctNTMwZS00NjEzLWFmODQt MGRhMzAwYzdjNjNkLzEvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NDI4OTctNTMwZS00NjEzLWFmODQtMGRhMzAwYzdjNjNk LzEvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYey/tu/v JAJHwmYxjIlYy4XFi1bzebjsvX1sF2fZGHVoJ6NwnkpHvjh8p82+lRKaco0m6IyL oZ3qpaw09V2iDHtvsxIMNkjLLb0Nyf0CcK/WdU/pmLmCqQg/uz2UB7Ol4/FfuWvq Mw2Ffa7ns0H3z57+DFnbBmLCgWQtKEgFr5pMi5a29jdGBk+ydvxgwDmmasjVn7df xpLnCYOU5hgC007vi2610WuWbYhKIhZ5V6s2oMxKlvdIyA06ztNEy0I0hjdco4WQ tTNBZHlgYv5pR2SdXNmGnvQa1DS3iQoO69Cu9IBmzbbp3k5QU1Vyt/joPP+Rm/Wt Y75UX4xtsP3FRg== -----END CERTIFICATE-----Generated at Tue Dec 30 14:58:11 2025 by rpki-client