This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json) Hash identifier: PWAjApNMKGgbZAtOb0mkZEqeB/nXvb3mbQxcGWz5M+o= Subject key identifier: 1B:D9:B8:D8:10:76:D0:36:BD:61:EC:A1:5D:E3:49:4D:50:1A:9E:2E Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f Certificate serial: 019B2C9D5C958A248BF48A80F17F4CC9BC5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft Manifest number: 141A Signing time: Wed 17 Dec 2025 14:01:08 +0000 Manifest this update: Wed 17 Dec 2025 14:01:08 +0000 Manifest next update: Thu 18 Dec 2025 14:01:08 +0000 Files and hashes: 1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=) 2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: s+AF75g4qdkqYrta8G1XfUXrdEFiJA+5j3wceRtopIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:5c:95:8a:24:8b:f4:8a:80:f1:7f:4c:c9:bc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f Validity Not Before: Dec 17 14:01:08 2025 GMT Not After : Dec 18 14:01:08 2025 GMT Subject: CN=1bd9b8d81076d036bd61eca15de3494d501a9e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:66:3f:87:20:08:b5:83:cd:70:96:7d:66: 80:3d:db:da:36:d5:e0:27:3d:a2:20:25:7f:f4:72: 26:2d:25:01:a0:0a:42:f3:16:85:4a:dc:9b:41:72: bd:f7:61:72:36:ea:ef:fe:0d:c6:fe:56:a0:00:55: f0:84:54:6f:9d:54:47:59:ef:a7:8c:e6:e7:0b:b4: 24:b7:9b:9a:19:67:99:21:3c:b4:a4:35:64:fa:4a: b3:18:e9:86:21:b6:d1:2f:76:d9:0a:44:78:c0:34: 9f:93:82:b8:2e:ad:93:7a:14:6b:70:7e:b1:c4:af: d7:ec:1e:f0:3b:36:03:02:0f:c5:8f:0b:0a:ff:b0: 13:6a:1d:15:b8:17:7f:bd:e6:b5:d0:6b:da:21:94: a7:a1:ad:e0:de:4a:91:e4:07:1b:43:41:fc:c6:57: 92:f7:cd:64:bc:d8:8c:52:84:81:b5:63:ea:8a:86: 31:65:25:ed:42:1e:03:00:fe:c5:5c:d6:1b:10:22: 23:1c:86:98:6f:70:60:3b:1f:37:e3:64:59:fd:30: 1a:b6:c6:3f:8e:03:61:b8:fd:b4:6a:fd:22:e2:2c: c5:54:79:9d:43:8e:86:12:da:e4:77:51:a9:75:e9: 18:83:d6:ae:a2:52:a1:4a:b0:12:04:51:c3:34:9f: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:B8:D8:10:76:D0:36:BD:61:EC:A1:5D:E3:49:4D:50:1A:9E:2E X509v3 Authority Key Identifier: keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bc:be:5c:26:42:5d:0a:3a:b0:74:d1:a0:4e:39:2a:ce:5a: 21:b9:73:49:ae:08:ce:c3:b1:ea:49:70:e0:39:95:27:ea:82: 14:2e:b3:ff:16:71:19:42:51:89:5c:24:69:3f:44:72:79:84: 25:a9:f4:c1:52:51:89:c8:d0:c0:a3:30:78:18:3d:c3:6c:81: 88:98:38:5e:a9:3a:85:51:53:04:76:3f:6a:a3:00:4f:c8:93: 23:0f:da:d3:91:00:e7:3a:76:77:36:cc:88:cb:20:22:5f:ee: bb:c7:6e:0c:38:24:5a:7d:77:f6:95:36:43:86:e8:84:eb:b4: 1c:ae:1c:5f:25:78:9c:e3:b1:ef:c2:91:90:69:f9:58:76:d6: 31:2b:7e:8b:cd:0a:39:2c:54:ce:2f:fc:58:8b:8d:02:c6:bc: 9e:d3:83:77:ce:ab:46:64:ff:63:c5:b1:3a:7a:27:a0:b1:30: 2c:f0:42:2e:71:8c:0e:aa:2d:c3:c5:15:a8:8a:97:f9:80:ef: 20:86:b8:1e:97:d3:a9:30:6f:fe:c4:1f:11:0a:d2:47:87:f5: b7:55:19:3e:ee:4b:27:9c:00:bd:8e:d3:b9:70:1f:0f:f8:e5: 92:c5:ae:4f:5d:f3:d8:0b:3d:af:a0:ca:8d:29:22:c1:17:f2: f9:42:9f:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnVyViiSL9IqA8X9MybxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzIwNjZkN2U2Y2E4YWQyZmZhNjJhNjliMDY3OTIzYTQy ZGY5NmYwHhcNMjUxMjE3MTQwMTA4WhcNMjUxMjE4MTQwMTA4WjAzMTEwLwYDVQQD EygxYmQ5YjhkODEwNzZkMDM2YmQ2MWVjYTE1ZGUzNDk0ZDUwMWE5ZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zVmP4cgCLWDzXCWfWaAPdvaNtXg Jz2iICV/9HImLSUBoApC8xaFStybQXK992FyNurv/g3G/lagAFXwhFRvnVRHWe+n jObnC7Qkt5uaGWeZITy0pDVk+kqzGOmGIbbRL3bZCkR4wDSfk4K4Lq2TehRrcH6x xK/X7B7wOzYDAg/FjwsK/7ATah0VuBd/vea10GvaIZSnoa3g3kqR5AcbQ0H8xleS 981kvNiMUoSBtWPqioYxZSXtQh4DAP7FXNYbECIjHIaYb3BgOx8342RZ/TAatsY/ jgNhuP20av0i4izFVHmdQ46GEtrkd1GpdekYg9auolKhSrASBFHDNJ/t9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvZuNgQdtA2vWHsoV3jSU1QGp4uMB8GA1UdIwQY MBaAFEtyBm1+bKitL/pippsGeSOkLflvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hNjRiMDktNjRkZi00NzBjLWE2NGQt MWY2OTkxODc3YjI2LzEvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hNjRiMDktNjRkZi00NzBjLWE2NGQtMWY2OTkxODc3YjI2 LzEvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfby+XCZC XQo6sHTRoE45Ks5aIblzSa4IzsOx6klw4DmVJ+qCFC6z/xZxGUJRiVwkaT9EcnmE Jan0wVJRicjQwKMweBg9w2yBiJg4Xqk6hVFTBHY/aqMAT8iTIw/a05EA5zp2dzbM iMsgIl/uu8duDDgkWn139pU2Q4bohOu0HK4cXyV4nOOx78KRkGn5WHbWMSt+i80K OSxUzi/8WIuNAsa8ntODd86rRmT/Y8WxOnonoLEwLPBCLnGMDqotw8UVqIqX+YDv IIa4HpfTqTBv/sQfEQrSR4f1t1UZPu5LJ5wAvY7TuXAfD/jlksWuT13z2As9r6DK jSkiwRfy+UKfGw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:48:26 2025 by rpki-client