This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json) Hash identifier: WMZ326OM/imQHWqSMCRm8NkuPgXXh4SIV87uFi8p1xg= Subject key identifier: DB:64:B8:36:55:09:22:73:BF:AE:45:70:C8:2F:A0:AB:63:2B:C4:4A Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Certificate serial: 019B3D59FCC3A0D120D8C55B996C91400078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft Manifest number: 1799 Signing time: Sat 20 Dec 2025 20:01:06 +0000 Manifest this update: Sat 20 Dec 2025 20:01:06 +0000 Manifest next update: Sun 21 Dec 2025 20:01:06 +0000 Files and hashes: 1: 1-zGnEYhHEJZbGiVDDJ7lMa4jVco.roa (hash: Gx3FxUVxBxJq4qnDLAiEnjFJGIMtyJzB9V760MVraNU=) 2: VUHc1KjtIfYjmNEdSGPUlUJ4fi4.roa (hash: 8qyyorbzGiXmM0ae0euzHEycmczWxq6A21gLOn7zqfM=) 3: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=) 4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: fVHPdbWq3PKLYWPDGiauNznfUSpZbJj+03EM6FdIxyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:fc:c3:a0:d1:20:d8:c5:5b:99:6c:91:40:00:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Validity Not Before: Dec 20 20:01:06 2025 GMT Not After : Dec 21 20:01:06 2025 GMT Subject: CN=db64b83655092273bfae4570c82fa0ab632bc44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ea:94:b6:51:b9:2f:9e:cb:c2:b0:51:28:35: cb:32:a4:ed:59:73:ce:a2:05:12:e1:90:0c:d3:af: 60:25:b3:a6:be:b5:0d:c7:49:e2:79:85:ce:15:b3: c6:38:58:bc:c8:58:60:67:1a:75:cf:b0:10:d8:b1: 3c:87:79:f2:d1:61:6a:63:39:a9:fe:43:14:18:27: 4c:1a:d2:e3:2b:80:92:75:f7:11:be:5a:fd:81:bb: 2c:5d:b6:32:ed:8e:dc:39:de:ed:68:7f:14:42:f3: 79:f6:39:e9:2c:c5:40:ea:da:dc:b9:49:95:25:07: c0:4a:6e:65:16:8a:a5:bc:54:85:27:c3:37:9f:2d: c6:72:ab:9a:f8:e1:68:61:df:7f:ee:e6:9b:28:13: 62:37:93:54:b3:9f:8c:3f:6a:99:a2:3d:e8:7e:27: 28:70:99:a5:e3:13:37:96:13:a6:e0:4d:83:15:0e: 05:1d:37:5c:34:ac:87:fa:26:f7:5f:9e:bb:c3:56: 7a:3d:4f:d0:5c:f5:05:20:34:44:23:d1:94:f2:02: 4c:f3:c8:a1:82:d3:2e:84:b1:2c:fd:05:73:89:2d: 05:bf:29:f7:f9:7a:65:35:bc:a1:fa:7d:bc:9f:d9: 2b:e0:fd:ad:16:5b:4b:28:eb:09:f0:1f:58:df:d4: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:64:B8:36:55:09:22:73:BF:AE:45:70:C8:2F:A0:AB:63:2B:C4:4A X509v3 Authority Key Identifier: keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e6:d6:fb:f0:e1:0b:ea:be:6b:10:f0:d1:bc:54:ae:b1:dd: b9:3b:53:46:1e:e6:23:3e:ce:c8:fa:f2:1b:ab:f0:bc:9b:7d: 20:bc:53:7a:42:54:29:f6:42:3e:e1:fd:fc:ee:7c:ac:d6:9c: 81:ed:ec:a6:8e:cc:74:c8:a1:71:a1:65:7f:c6:60:22:d2:d4: 6c:56:c5:7d:18:79:fb:8e:d9:88:15:0c:dd:fb:54:ea:e5:ec: 39:d8:45:6d:42:f8:82:0c:4b:ae:94:08:c1:47:70:e7:c9:d1: 8c:f1:9e:80:03:80:3b:ae:cb:b9:c3:f9:90:47:16:83:1b:e9: 06:fd:da:eb:4e:c2:9d:d5:fa:48:d9:b0:75:47:d2:e6:ba:9b: e2:83:ce:3c:97:a6:ae:4c:1c:a1:65:a0:3a:3e:87:86:f7:e2: 00:d3:0b:29:d2:30:d6:e2:4a:d5:73:f5:65:45:b5:4a:34:02: ad:7a:e7:7e:67:25:70:39:fb:68:0a:6a:49:a1:19:40:ed:c4: 66:02:e0:e5:1a:eb:a0:af:7e:0a:77:5a:b4:0d:05:c3:75:71: ee:6d:3d:29:e0:64:6b:53:ff:df:5f:53:88:6e:a1:ee:fd:ea: 83:62:5b:e7:73:b3:4b:66:69:c8:21:7c:81:64:ce:92:94:16: ea:f3:c0:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfzDoNEg2MVbmWyRQAB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw OWU1MGQwHhcNMjUxMjIwMjAwMTA2WhcNMjUxMjIxMjAwMTA2WjAzMTEwLwYDVQQD EyhkYjY0YjgzNjU1MDkyMjczYmZhZTQ1NzBjODJmYTBhYjYzMmJjNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eqUtlG5L57LwrBRKDXLMqTtWXPO ogUS4ZAM069gJbOmvrUNx0nieYXOFbPGOFi8yFhgZxp1z7AQ2LE8h3ny0WFqYzmp /kMUGCdMGtLjK4CSdfcRvlr9gbssXbYy7Y7cOd7taH8UQvN59jnpLMVA6trcuUmV JQfASm5lFoqlvFSFJ8M3ny3Gcqua+OFoYd9/7uabKBNiN5NUs5+MP2qZoj3ofico cJml4xM3lhOm4E2DFQ4FHTdcNKyH+ib3X567w1Z6PU/QXPUFIDREI9GU8gJM88ih gtMuhLEs/QVziS0Fvyn3+XplNbyh+n28n9kr4P2tFltLKOsJ8B9Y39RCUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtkuDZVCSJzv65FcMgvoKtjK8RKMB8GA1UdIwQY MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt MmIxMDUwNTFiYTU5LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5 LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASObW+/Dh C+q+axDw0bxUrrHduTtTRh7mIz7OyPryG6vwvJt9ILxTekJUKfZCPuH9/O58rNac ge3spo7MdMihcaFlf8ZgItLUbFbFfRh5+47ZiBUM3ftU6uXsOdhFbUL4ggxLrpQI wUdw58nRjPGegAOAO67LucP5kEcWgxvpBv3a607CndX6SNmwdUfS5rqb4oPOPJem rkwcoWWgOj6HhvfiANMLKdIw1uJK1XP1ZUW1SjQCrXrnfmclcDn7aApqSaEZQO3E ZgLg5RrroK9+CndatA0Fw3Vx7m09KeBka1P/319TiG6h7v3qg2Jb53OzS2ZpyCF8 gWTOkpQW6vPAWA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:00:50 2025 by rpki-client