This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft File: S5nNYSQguFk0kdhobOTEr4W5CtU.mft (raw, json) Hash identifier: 7pDFS1fosBN1Gz4OlYomvwINRHIIm4mDQM7XH/zyVhg= Subject key identifier: B3:5C:13:E7:DD:6A:47:6C:5A:B1:64:86:FF:96:85:4A:AC:04:11:42 Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5 Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5 Certificate serial: 019B3FB63B5C49C7671D8857C431EEBC78AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft Manifest number: 01BA Signing time: Sun 21 Dec 2025 07:01:05 +0000 Manifest this update: Sun 21 Dec 2025 07:01:05 +0000 Manifest next update: Mon 22 Dec 2025 07:01:05 +0000 Files and hashes: 1: 4qD1Oc9Rkwf3nkPKdA3PqgFhBVg.roa (hash: FAYdaSueDZBgvCYn8/TIySq6P0JIfXLy0IlKcRVzUNU=) 2: S5nNYSQguFk0kdhobOTEr4W5CtU.crl (hash: LdwIxBfMI9cN0W8LdpF1O4h7TygJFS+mgSnUf+ovgRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:3b:5c:49:c7:67:1d:88:57:c4:31:ee:bc:78:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5 Validity Not Before: Dec 21 07:01:05 2025 GMT Not After : Dec 22 07:01:05 2025 GMT Subject: CN=b35c13e7dd6a476c5ab16486ff96854aac041142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:c4:f0:3a:6a:2b:19:09:6c:2d:28:48:05: 0b:1f:ad:51:62:bb:3c:bf:f1:a8:c4:d6:b3:81:c5: 8f:dc:ec:03:9b:2f:aa:45:e3:c0:fd:86:0c:81:15: 2b:2e:ce:c2:10:d2:0d:be:ef:26:79:5d:c4:b4:bb: 1c:9f:87:54:97:b7:48:9f:56:cd:a2:ed:32:c4:3c: 98:f2:3d:01:fe:f0:8e:f4:8a:42:94:70:05:da:0c: 46:dc:7b:bf:df:c9:6e:69:9e:43:95:ce:46:a6:48: 4c:d4:50:21:a8:61:2b:d7:c2:a0:4d:15:c3:dd:67: a4:9e:4d:6a:c8:10:90:1f:bc:c2:45:40:ea:9f:3a: 06:cf:48:cf:38:9a:bf:54:7e:74:d4:e9:ee:5d:29: 82:af:5f:cc:a4:98:82:4c:52:03:d2:fd:73:18:e2: c4:97:d9:4a:98:ec:71:16:79:c8:99:f9:9b:d6:a4: 44:e3:f3:aa:93:a2:2e:10:98:a6:4b:9a:da:8d:d7: 90:88:dc:22:b3:50:f0:a7:1c:ef:29:b3:61:80:28: 1d:f8:3a:46:c7:28:be:12:0a:0f:21:be:63:f8:fd: a5:00:b5:a8:88:b5:32:fb:c5:cb:48:f6:47:a2:c6: 1d:67:db:f9:25:f1:25:56:1a:85:6a:57:8e:6a:93: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5C:13:E7:DD:6A:47:6C:5A:B1:64:86:FF:96:85:4A:AC:04:11:42 X509v3 Authority Key Identifier: keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:91:a4:94:ec:e9:69:6b:19:c9:e8:46:2f:f7:5b:12:ae:5d: 39:fb:44:11:25:85:fc:cf:f9:4a:bb:10:c7:b1:bd:71:21:7c: 79:d1:68:a9:3a:36:70:a3:e7:25:b5:4b:de:ee:cf:00:0c:71: 12:4a:d5:43:06:cb:41:e5:fd:dd:3e:46:c3:d5:47:de:bb:4f: 36:0b:e4:a8:eb:95:f1:5e:d1:2a:ed:9f:1b:df:ad:21:8a:1e: 54:93:c9:7e:67:3b:80:85:08:df:3c:49:05:90:60:14:4e:19: c3:d2:f7:f5:db:2a:c2:22:ec:3b:88:cb:ce:82:9c:8b:fb:1f: f4:3b:23:6f:d3:52:0c:be:28:70:12:36:68:af:08:90:60:d9: 7c:eb:de:d1:89:e2:cd:e0:c6:ae:7c:67:65:83:ac:50:bf:a7: 69:ab:22:63:fe:25:f9:2b:07:91:08:ce:46:a1:61:5e:46:65: fe:ac:eb:a5:f5:b6:52:dd:5b:04:00:a7:cc:36:70:38:a8:9f: 96:fa:55:f9:d8:40:bf:54:46:0e:5c:c9:b4:c0:3f:68:bb:15: 2a:bd:19:a4:21:cc:03:f6:bb:f8:f1:fd:f7:41:ba:df:b8:26: f5:d1:73:bc:46:09:ce:6f:f8:6c:7a:38:0e:cb:00:be:6b:a7: 9f:2e:37:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tjtcScdnHYhXxDHuvHitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTljZDYxMjQyMGI4NTkzNDkxZDg2ODZjZTRjNGFmODVi OTBhZDUwHhcNMjUxMjIxMDcwMTA1WhcNMjUxMjIyMDcwMTA1WjAzMTEwLwYDVQQD EyhiMzVjMTNlN2RkNmE0NzZjNWFiMTY0ODZmZjk2ODU0YWFjMDQxMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dHE8DpqKxkJbC0oSAULH61RYrs8 v/GoxNazgcWP3OwDmy+qRePA/YYMgRUrLs7CENINvu8meV3EtLscn4dUl7dIn1bN ou0yxDyY8j0B/vCO9IpClHAF2gxG3Hu/38luaZ5Dlc5GpkhM1FAhqGEr18KgTRXD 3Weknk1qyBCQH7zCRUDqnzoGz0jPOJq/VH501OnuXSmCr1/MpJiCTFID0v1zGOLE l9lKmOxxFnnImfmb1qRE4/Oqk6IuEJimS5rajdeQiNwis1DwpxzvKbNhgCgd+DpG xyi+EgoPIb5j+P2lALWoiLUy+8XLSPZHosYdZ9v5JfElVhqFaleOapN97QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNcE+fdakdsWrFkhv+WhUqsBBFCMB8GA1UdIwQY MBaAFEuZzWEkILhZNJHYaGzkxK+FuQrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTct OTc0NzIwODg5ZmZhLzEvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTctOTc0NzIwODg5ZmZh LzEvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpGklOzp aWsZyehGL/dbEq5dOftEESWF/M/5SrsQx7G9cSF8edFoqTo2cKPnJbVL3u7PAAxx EkrVQwbLQeX93T5Gw9VH3rtPNgvkqOuV8V7RKu2fG9+tIYoeVJPJfmc7gIUI3zxJ BZBgFE4Zw9L39dsqwiLsO4jLzoKci/sf9Dsjb9NSDL4ocBI2aK8IkGDZfOve0Yni zeDGrnxnZYOsUL+naasiY/4l+SsHkQjORqFhXkZl/qzrpfW2Ut1bBACnzDZwOKif lvpV+dhAv1RGDlzJtMA/aLsVKr0ZpCHMA/a7+PH990G637gm9dFzvEYJzm/4bHo4 DssAvmunny43Pw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:21 2025 by rpki-client