This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json) Hash identifier: 9suHYCidJhMAcRUq5K2K0183CfawLV1NHLkwCNbrKfE= Subject key identifier: 5F:40:DF:D9:AA:59:6D:30:0E:7A:F2:52:A6:1B:D4:81:56:26:69:E9 Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7 Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7 Certificate serial: 019B4E4DA151CB8AA2168D5FC0378011393E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 03:01:08 +0000 Manifest this update: Wed 24 Dec 2025 03:01:08 +0000 Manifest next update: Thu 25 Dec 2025 03:01:08 +0000 Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=) 2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: qCRwbdQxEwHQwjYAdDTS52ybhjvORkupgpDEWlKwJoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:a1:51:cb:8a:a2:16:8d:5f:c0:37:80:11:39:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7 Validity Not Before: Dec 24 03:01:08 2025 GMT Not After : Dec 25 03:01:08 2025 GMT Subject: CN=5f40dfd9aa596d300e7af252a61bd481562669e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d3:3a:6d:10:90:9f:87:f7:cd:b3:9b:e8:6f: 8e:04:5d:25:1c:99:ab:02:d7:e4:e7:5e:2a:22:c0: a3:d4:12:8e:ba:bd:fe:99:4d:ce:92:60:1e:db:53: 8b:3b:e4:cb:9c:c8:3c:e3:b5:90:79:5f:7a:b0:cb: 29:f9:3b:63:25:60:4c:57:c6:91:86:de:2a:10:3d: 30:2f:0a:ae:23:c8:43:0c:eb:e8:0a:1f:23:a2:fc: e7:d2:00:3c:8f:aa:d8:0a:12:69:77:a7:dd:5f:bc: f9:d1:5a:1c:d1:0e:1e:86:01:e5:96:b6:64:2c:1f: f2:ab:bf:5d:df:9e:56:0f:e8:cb:7f:1e:5b:d1:c5: ed:0d:f8:da:47:ae:e7:db:3e:e4:25:32:5e:cd:09: 84:a7:40:92:af:19:b1:0d:78:3e:58:99:6d:96:27: b5:76:b4:05:8f:f5:ca:66:f9:57:72:da:24:42:91: c3:bf:3a:f1:bc:cd:ce:50:f8:0a:18:c8:d2:f8:9a: 58:c4:35:56:31:aa:bf:cc:e0:37:59:dc:d2:79:52: fa:39:54:f1:13:a1:fc:0e:9d:4e:8b:25:e2:bc:1e: a6:8e:df:d2:68:d7:eb:a8:75:87:78:25:90:eb:96: ae:b6:5f:c7:f4:2f:24:0e:c2:52:f0:67:46:fa:8c: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:40:DF:D9:AA:59:6D:30:0E:7A:F2:52:A6:1B:D4:81:56:26:69:E9 X509v3 Authority Key Identifier: keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a9:c9:2f:d3:a3:4e:db:fd:be:61:c6:80:27:a3:2f:55:64: b4:1c:5e:40:c9:bb:85:fb:20:a4:54:b3:7a:2a:91:dc:82:db: 3b:d9:58:ae:38:27:2a:d3:3b:48:2f:35:d5:61:64:ea:b5:09: 0f:c2:8d:0a:18:2f:e3:e1:52:83:b5:45:66:bc:1d:ae:41:bb: 7d:d0:8f:74:37:75:9c:1c:09:5c:37:fa:b8:bb:b8:55:c5:88: 07:a9:39:51:8f:81:d4:7d:dd:74:a7:fe:57:d1:1b:dd:b9:c9: 43:d8:8f:24:bc:cb:7c:ea:cf:76:98:3d:d2:9a:1c:30:a4:f1: dd:11:ea:a9:ec:3c:c3:e1:33:95:d1:a5:82:47:c0:ff:f0:14: 65:f8:39:21:6d:1c:82:8d:00:20:12:ed:4e:a0:27:7b:4f:c3: 62:70:78:e9:a9:6a:c6:f1:b0:5d:71:39:9f:96:e7:a6:a6:fa: 0b:86:e4:9d:f8:8c:a9:8c:e3:17:1b:39:1d:a2:a2:02:5d:bf: 49:70:b5:37:20:bf:65:89:3f:7e:47:88:d1:26:0e:ef:3d:44: 03:ed:74:7a:81:61:05:17:89:ab:cc:a4:90:40:1d:14:07:38: b9:e2:37:b1:dd:8f:d6:3c:59:c5:2f:6c:43:70:3e:b0:6f:66: 0d:6c:f3:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTaFRy4qiFo1fwDeAETk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM3YmQwYzQ0ODZiYTA3M2NlMmRlNTNiYTA3NGQ3MGU0 NWI1ZTcwHhcNMjUxMjI0MDMwMTA4WhcNMjUxMjI1MDMwMTA4WjAzMTEwLwYDVQQD Eyg1ZjQwZGZkOWFhNTk2ZDMwMGU3YWYyNTJhNjFiZDQ4MTU2MjY2OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69M6bRCQn4f3zbOb6G+OBF0lHJmr Atfk514qIsCj1BKOur3+mU3OkmAe21OLO+TLnMg847WQeV96sMsp+TtjJWBMV8aR ht4qED0wLwquI8hDDOvoCh8jovzn0gA8j6rYChJpd6fdX7z50Voc0Q4ehgHllrZk LB/yq79d355WD+jLfx5b0cXtDfjaR67n2z7kJTJezQmEp0CSrxmxDXg+WJltlie1 drQFj/XKZvlXctokQpHDvzrxvM3OUPgKGMjS+JpYxDVWMaq/zOA3WdzSeVL6OVTx E6H8Dp1OiyXivB6mjt/SaNfrqHWHeCWQ65autl/H9C8kDsJS8GdG+oz1FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9A39mqWW0wDnryUqYb1IFWJmnpMB8GA1UdIwQY MBaAFEuMe9DESGugc84t5TugdNcORbXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgt MDI0MGU3NDQ3NmE3LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgtMDI0MGU3NDQ3NmE3 LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqnJL9Oj Ttv9vmHGgCejL1VktBxeQMm7hfsgpFSzeiqR3ILbO9lYrjgnKtM7SC811WFk6rUJ D8KNChgv4+FSg7VFZrwdrkG7fdCPdDd1nBwJXDf6uLu4VcWIB6k5UY+B1H3ddKf+ V9Eb3bnJQ9iPJLzLfOrPdpg90pocMKTx3RHqqew8w+EzldGlgkfA//AUZfg5IW0c go0AIBLtTqAne0/DYnB46alqxvGwXXE5n5bnpqb6C4bknfiMqYzjFxs5HaKiAl2/ SXC1NyC/ZYk/fkeI0SYO7z1EA+10eoFhBReJq8ykkEAdFAc4ueI3sd2P1jxZxS9s Q3A+sG9mDWzzMA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:10 2025 by rpki-client