This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json) Hash identifier: f+d9MPlPA+Uk043CihH+ihJXB+P2gSgC355qlcs75NE= Subject key identifier: 64:85:EA:7D:20:54:76:55:2B:DF:DA:88:52:49:23:20:25:9C:F3:82 Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae Certificate serial: 019B69C4C34B4988F5E386CF9F0F8C604BFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 11:01:01 +0000 Manifest this update: Mon 29 Dec 2025 11:01:01 +0000 Manifest next update: Tue 30 Dec 2025 11:01:01 +0000 Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: InWnJjZYTa0B9oYzRs0XtFTsSZF80Mw3NkkDkkgDGgM=) 2: f3uE1VDv54J39oNndZpR1jGOB3k.roa (hash: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=) 3: oVwWnlXDmkKEJPwq_QTywUic6pg.asa (hash: vXDqor38fMbrJg0yNnP/TrAYe/tgp8ecmN/4akEFjw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:c3:4b:49:88:f5:e3:86:cf:9f:0f:8c:60:4b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae Validity Not Before: Dec 29 11:01:01 2025 GMT Not After : Dec 30 11:01:01 2025 GMT Subject: CN=6485ea7d205476552bdfda8852492320259cf382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:e3:39:d9:93:f7:ed:b1:eb:6e:a1:8c:50: 29:8a:b3:ef:e1:6e:54:f0:e4:8d:c1:cf:57:fc:85: 9b:53:b7:f6:6c:15:ea:41:6e:3f:71:3d:83:69:ef: 2f:9d:46:f7:3d:3d:9f:86:23:65:1a:af:ef:aa:73: e6:61:71:2d:cf:3f:a9:41:a3:49:bc:91:02:27:cb: 0f:7f:0b:fe:50:43:6c:e8:dd:8a:5f:2a:46:6e:7a: 72:ed:ee:46:a7:17:79:c6:79:1a:1b:f2:a5:ee:a8: b8:2b:29:d4:62:76:3c:e5:0e:80:91:83:82:80:d6: 46:0d:36:e1:44:85:07:e2:9d:39:59:bc:18:7e:7c: f2:04:87:ab:7d:74:54:e9:76:7b:79:ec:aa:26:c0: 77:37:0c:7c:ef:db:fb:dd:ff:2a:e5:aa:a5:97:e7: 82:e5:88:8e:da:c0:54:36:3b:6f:ad:1d:cf:44:17: 84:25:21:15:33:e9:3d:50:48:5f:bb:2d:f6:81:48: e2:f1:aa:ab:30:ef:3a:fa:bc:8e:b4:96:00:be:ef: 4c:cc:ab:f9:7b:ba:fc:a9:a6:ff:22:45:9c:8a:0f: 92:18:3b:d0:29:6d:6b:51:1e:28:f0:c8:0a:2c:54: c7:83:3f:70:ff:fc:5a:36:0e:0b:ff:8b:ab:96:fb: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:85:EA:7D:20:54:76:55:2B:DF:DA:88:52:49:23:20:25:9C:F3:82 X509v3 Authority Key Identifier: keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b4:fb:85:05:01:88:92:1a:a2:80:34:db:72:5c:87:ec:6f: 16:45:3b:9a:92:7e:a2:ee:8b:e4:8a:06:d4:22:fc:7e:fa:c2: 41:5d:00:9b:77:f2:68:0a:7b:30:c0:d7:99:b3:99:31:cf:86: b9:74:2c:8c:71:54:fa:bc:bd:98:4b:b0:00:ea:a7:a1:80:36: 74:d9:16:52:73:5c:c0:ce:82:c3:30:7f:f0:28:e3:d8:0f:fa: e2:c1:b1:e8:0f:c8:dd:e7:a9:8d:4b:c1:f9:14:61:ed:2c:75: 60:61:19:ce:f2:74:78:9d:a6:6e:46:09:bb:eb:ff:4f:40:f5: 47:37:c9:6d:78:1c:82:23:aa:1b:a1:f6:c3:a0:2b:43:e8:d6: 86:bd:08:cd:2d:8a:33:00:a6:78:25:33:cf:55:3b:6c:55:a4: f0:f6:17:70:05:1e:d3:d5:18:2b:d9:af:06:63:ad:c0:04:59: cc:b2:c9:26:4b:73:02:84:f0:58:7e:e0:b1:c5:2b:34:eb:53: df:d3:39:7c:06:27:66:a5:ca:d2:aa:d8:c7:e0:4d:7b:40:84: 44:5b:14:48:7b:f9:a7:40:f1:c3:c6:db:83:b8:a5:ca:60:e2: 56:d2:84:91:a3:7b:61:70:3a:5b:f7:00:34:92:22:e7:6d:eb: 23:50:b3:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxMNLSYj144bPnw+MYEv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYWM5ZDI2ZjdhMDViNGQ5MjUyNDk4MDU3YTM4MTRhY2Fm N2QxYWUwHhcNMjUxMjI5MTEwMTAxWhcNMjUxMjMwMTEwMTAxWjAzMTEwLwYDVQQD Eyg2NDg1ZWE3ZDIwNTQ3NjU1MmJkZmRhODg1MjQ5MjMyMDI1OWNmMzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I3jOdmT9+2x626hjFApirPv4W5U 8OSNwc9X/IWbU7f2bBXqQW4/cT2Dae8vnUb3PT2fhiNlGq/vqnPmYXEtzz+pQaNJ vJECJ8sPfwv+UENs6N2KXypGbnpy7e5Gpxd5xnkaG/Kl7qi4KynUYnY85Q6AkYOC gNZGDTbhRIUH4p05WbwYfnzyBIerfXRU6XZ7eeyqJsB3Nwx879v73f8q5aqll+eC 5YiO2sBUNjtvrR3PRBeEJSEVM+k9UEhfuy32gUji8aqrMO86+ryOtJYAvu9MzKv5 e7r8qab/IkWcig+SGDvQKW1rUR4o8MgKLFTHgz9w//xaNg4L/4urlvvSNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSF6n0gVHZVK9/aiFJJIyAlnPOCMB8GA1UdIwQY MBaAFEusnSb3oFtNklJJgFejgUrK99GuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMDhkN2UtMTlhNS00MmI5LTgwOGMt YmRiNjQ5Mjk5ODNmLzEvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8wMDhkN2UtMTlhNS00MmI5LTgwOGMtYmRiNjQ5Mjk5ODNm LzEvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7T7hQUB iJIaooA023Jch+xvFkU7mpJ+ou6L5IoG1CL8fvrCQV0Am3fyaAp7MMDXmbOZMc+G uXQsjHFU+ry9mEuwAOqnoYA2dNkWUnNcwM6CwzB/8Cjj2A/64sGx6A/I3eepjUvB +RRh7Sx1YGEZzvJ0eJ2mbkYJu+v/T0D1RzfJbXgcgiOqG6H2w6ArQ+jWhr0IzS2K MwCmeCUzz1U7bFWk8PYXcAUe09UYK9mvBmOtwARZzLLJJktzAoTwWH7gscUrNOtT 39M5fAYnZqXK0qrYx+BNe0CERFsUSHv5p0Dxw8bbg7ilymDiVtKEkaN7YXA6W/cA NJIi523rI1CzRw== -----END CERTIFICATE-----Generated at Mon Dec 29 20:59:40 2025 by rpki-client