This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json) Hash identifier: Bqr+eUWZAFM5ioK4iUesrOS4MJ7cIvTv8Af4Kl+/nxU= Subject key identifier: C5:FF:A6:73:D6:20:DC:A1:7A:2E:73:92:D9:04:4F:7D:0C:BB:DC:A2 Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af Certificate serial: 019B3F48ABF0EDE6FE6127C94945D932BB5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 05:01:25 +0000 Manifest this update: Sun 21 Dec 2025 05:01:25 +0000 Manifest next update: Mon 22 Dec 2025 05:01:25 +0000 Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=) 2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: K5DhIYYzRaxNE5PS8t6DleTsadrhJWuQgxadSIYxdjw=) 3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:ab:f0:ed:e6:fe:61:27:c9:49:45:d9:32:bb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af Validity Not Before: Dec 21 05:01:25 2025 GMT Not After : Dec 22 05:01:25 2025 GMT Subject: CN=c5ffa673d620dca17a2e7392d9044f7d0cbbdca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:68:d4:00:03:0c:e4:08:2c:52:c6:a7:79:12: 45:63:67:64:36:52:e7:8c:a7:ae:66:4a:d9:b0:f2: e0:a3:27:84:94:42:8f:c7:34:58:91:c5:74:dc:98: 3e:0b:13:94:f0:1b:dd:f0:c4:e7:72:e0:f3:65:00: 05:2a:d5:e6:9e:df:98:f3:b6:25:cc:3b:7e:7e:c3: 94:ae:01:41:84:31:7f:98:cf:a3:bc:54:71:04:04: 69:6d:fb:57:6a:54:d4:8f:71:c9:83:04:fa:54:7e: 99:7d:03:84:e7:0c:8d:c0:80:30:b0:fc:29:8c:7e: 38:79:8e:70:6d:23:e0:16:7b:d9:3f:bd:9b:cb:86: e4:a1:f4:93:4f:e8:f2:05:75:0e:29:5f:1c:d8:19: 9f:cb:0f:c7:c9:4d:69:fd:cc:dc:1e:3d:37:17:84: c8:f8:b3:2b:13:54:62:81:13:04:5d:bc:9f:0d:c1: af:05:fe:19:c4:ff:e9:b1:11:51:ba:5e:6f:a9:9d: c6:85:a4:f9:c7:d6:d0:2c:bb:54:65:b2:e3:64:7a: c6:66:6d:8f:86:b5:b9:26:69:09:e6:90:60:83:f1: 0c:f2:b1:40:f0:66:6f:2c:32:ad:e1:06:8e:90:2a: af:2e:ca:f4:0b:00:59:03:ae:74:4d:82:8e:e7:e2: 19:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FF:A6:73:D6:20:DC:A1:7A:2E:73:92:D9:04:4F:7D:0C:BB:DC:A2 X509v3 Authority Key Identifier: keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3a:90:4d:35:8e:fd:62:7b:61:65:77:c6:33:1b:8c:2f:ee: 39:21:69:b1:39:9c:ed:0a:2a:8f:c7:6b:7a:67:c1:4b:7f:70: 45:8e:36:e7:0b:4e:e4:55:5a:9f:c5:90:25:2a:9e:81:6f:89: 05:16:44:1b:fc:80:64:8f:4a:e7:97:1e:cc:0f:61:93:6f:c9: a5:07:9e:53:21:ee:35:e2:2b:7d:78:f0:ac:3e:cf:f1:b4:07: a8:f3:83:0a:63:8f:34:60:fa:7f:d6:25:42:38:43:b6:27:05: 21:7d:e5:04:13:2a:4b:27:0b:4f:3b:60:31:16:b3:49:5c:d5: d0:69:3b:fc:69:c2:d9:83:ab:3d:a5:95:51:3f:58:fb:6e:b3: c6:ce:86:89:ef:9e:cc:1d:02:b3:b0:66:e8:37:8e:0e:63:23: 76:36:3b:07:d7:c1:88:d0:d8:15:ee:d4:66:41:d2:e9:28:8b: 88:62:90:1d:24:a4:38:b7:0f:02:e7:58:c4:7d:32:9a:ec:b0: 37:07:bd:2c:69:80:7f:6b:ed:a4:8b:5a:80:df:5d:68:5d:43: 99:4d:77:b8:19:67:00:a0:53:74:f6:95:a5:07:f6:10:1b:2d: 91:64:da:db:93:5a:50:5b:93:ce:eb:9d:53:b1:e5:67:fe:63: ed:66:2e:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKvw7eb+YSfJSUXZMrtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOWYzMWU3MzUyYTg3MDdiOThjNmQyNzM0OGU4YmM0OTNk MWE5YWYwHhcNMjUxMjIxMDUwMTI1WhcNMjUxMjIyMDUwMTI1WjAzMTEwLwYDVQQD EyhjNWZmYTY3M2Q2MjBkY2ExN2EyZTczOTJkOTA0NGY3ZDBjYmJkY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2jUAAMM5AgsUsaneRJFY2dkNlLn jKeuZkrZsPLgoyeElEKPxzRYkcV03Jg+CxOU8Bvd8MTncuDzZQAFKtXmnt+Y87Yl zDt+fsOUrgFBhDF/mM+jvFRxBARpbftXalTUj3HJgwT6VH6ZfQOE5wyNwIAwsPwp jH44eY5wbSPgFnvZP72by4bkofSTT+jyBXUOKV8c2Bmfyw/HyU1p/czcHj03F4TI +LMrE1RigRMEXbyfDcGvBf4ZxP/psRFRul5vqZ3GhaT5x9bQLLtUZbLjZHrGZm2P hrW5JmkJ5pBgg/EM8rFA8GZvLDKt4QaOkCqvLsr0CwBZA650TYKO5+IZawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX/pnPWINyhei5zktkET30Mu9yiMB8GA1UdIwQY MBaAFEufMec1KocHuYxtJzSOi8ST0amvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjct MzY1MWU0MGYxNDM2LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjctMzY1MWU0MGYxNDM2 LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDqQTTWO /WJ7YWV3xjMbjC/uOSFpsTmc7Qoqj8dremfBS39wRY425wtO5FVan8WQJSqegW+J BRZEG/yAZI9K55cezA9hk2/JpQeeUyHuNeIrfXjwrD7P8bQHqPODCmOPNGD6f9Yl QjhDticFIX3lBBMqSycLTztgMRazSVzV0Gk7/GnC2YOrPaWVUT9Y+26zxs6Gie+e zB0Cs7Bm6DeODmMjdjY7B9fBiNDYFe7UZkHS6SiLiGKQHSSkOLcPAudYxH0ymuyw Nwe9LGmAf2vtpItagN9daF1DmU13uBlnAKBTdPaVpQf2EBstkWTa25NaUFuTzuud U7HlZ/5j7WYu9w== -----END CERTIFICATE-----Generated at Sun Dec 21 10:37:58 2025 by rpki-client