This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json) Hash identifier: uoro0irwPp5InRVRWC8FVIISz63R1AGqbPPFSjxdJPY= Subject key identifier: CF:93:88:80:C6:7C:74:1D:F7:70:05:72:82:56:43:72:E2:12:F5:37 Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b Certificate serial: 019B62425D55F986C1B98F6F3D851217AC6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft Manifest number: 17A8 Signing time: Sun 28 Dec 2025 00:01:14 +0000 Manifest this update: Sun 28 Dec 2025 00:01:14 +0000 Manifest next update: Mon 29 Dec 2025 00:01:14 +0000 Files and hashes: 1: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: /X8VF4i06xOlcNd0fD/3WKi8gfvS1P6uhzBtqDSv2lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:5d:55:f9:86:c1:b9:8f:6f:3d:85:12:17:ac:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b Validity Not Before: Dec 28 00:01:14 2025 GMT Not After : Dec 29 00:01:14 2025 GMT Subject: CN=cf938880c67c741df770057282564372e212f537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:d7:7f:33:8d:ae:41:89:0e:1a:d8:5d:33: 63:26:89:30:74:5a:83:86:cb:b7:0a:50:ce:33:d2: 8d:88:e8:cb:58:86:82:f3:12:f6:00:b8:4f:7b:3f: cf:6d:91:c2:b9:b2:58:18:08:01:09:3c:45:97:72: 1f:15:5a:89:0e:62:41:16:83:74:9e:6b:58:b1:8f: b8:bc:8e:51:3b:c2:8b:a0:49:d0:99:cd:d4:a7:66: 09:65:f6:e5:37:bc:cb:1d:6d:01:13:66:45:df:9c: cc:38:9b:0a:98:4e:53:a8:30:cf:3a:8b:58:b7:b7: 2e:45:be:8d:b1:93:f9:0c:73:8e:09:32:85:63:6d: f2:98:00:fd:25:f9:65:23:d2:f2:be:af:92:c9:b9: ac:ff:66:55:85:b7:49:11:29:e1:ca:48:a0:88:b3: cd:0a:25:06:85:58:54:96:01:e6:d5:91:97:15:b4: aa:d1:97:a4:44:42:a6:44:17:fe:9a:e9:8b:fc:10: fc:98:d6:be:38:f6:0d:f8:29:18:bd:c9:62:79:fb: ef:93:b6:e8:1c:02:6c:78:9a:5c:fa:f2:7b:4a:57: d6:7e:01:23:09:2b:cb:0a:d2:e6:fe:c0:fe:50:6b: 9d:5e:a1:06:bc:26:9a:64:80:73:27:f6:0e:20:55: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:93:88:80:C6:7C:74:1D:F7:70:05:72:82:56:43:72:E2:12:F5:37 X509v3 Authority Key Identifier: keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fc:b3:96:82:92:aa:b6:f8:eb:a1:11:f8:5d:85:50:ea:7f: 9d:5f:85:e8:b9:59:50:4e:43:ce:d1:ba:c0:bc:9a:bd:eb:7c: 5b:e2:e1:bc:71:ab:86:94:64:34:25:d9:ad:1c:4d:68:8d:b6: 66:ea:07:0e:1c:09:f6:44:32:ee:79:d2:66:37:3b:ff:8c:02: 51:c3:e3:cc:ae:af:33:c3:43:46:80:0d:0e:33:b3:ea:78:0b: ba:04:08:66:87:4b:6b:d8:9e:73:2e:61:f4:3d:29:b3:83:d6: 93:b7:8c:92:f0:c1:23:fe:87:5c:81:3e:21:4d:3d:f6:70:e4: ef:d1:db:b5:f4:b4:0f:92:d4:a7:aa:ce:9d:fb:9f:51:ec:fb: f2:75:61:e0:aa:78:2e:44:11:b8:70:c2:f3:b5:34:4d:ff:f5: 77:ba:ac:f2:ed:50:4f:dc:a4:14:1d:f9:bd:8e:00:2b:dc:e8: 19:f0:16:f3:cb:c5:96:0d:2e:52:be:16:ed:91:42:84:4a:4b: 84:7b:6b:59:2a:f6:cd:36:d5:2b:54:64:26:f3:56:c7:92:82: 2c:8c:96:ad:68:af:0e:1f:69:7d:c7:5c:0c:c7:aa:e8:88:7d: 8c:32:72:8a:c7:b1:85:c4:6a:8d:d3:b7:5b:d2:ed:71:c1:c5: 61:82:68:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQl1V+YbBuY9vPYUSF6xtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTc3MjViMGE2MDVkNGRkY2M0NjRiNzBkY2IzYTE2MmE1 ZjA1NWIwHhcNMjUxMjI4MDAwMTE0WhcNMjUxMjI5MDAwMTE0WjAzMTEwLwYDVQQD EyhjZjkzODg4MGM2N2M3NDFkZjc3MDA1NzI4MjU2NDM3MmUyMTJmNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi33XfzONrkGJDhrYXTNjJokwdFqD hsu3ClDOM9KNiOjLWIaC8xL2ALhPez/PbZHCubJYGAgBCTxFl3IfFVqJDmJBFoN0 nmtYsY+4vI5RO8KLoEnQmc3Up2YJZfblN7zLHW0BE2ZF35zMOJsKmE5TqDDPOotY t7cuRb6NsZP5DHOOCTKFY23ymAD9JfllI9Lyvq+Sybms/2ZVhbdJESnhykigiLPN CiUGhVhUlgHm1ZGXFbSq0ZekREKmRBf+mumL/BD8mNa+OPYN+CkYvcliefvvk7bo HAJseJpc+vJ7SlfWfgEjCSvLCtLm/sD+UGudXqEGvCaaZIBzJ/YOIFV/NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+TiIDGfHQd93AFcoJWQ3LiEvU3MB8GA1UdIwQY MBaAFEtXclsKYF1N3MRktw3LOhYqXwVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgt OGFmNTZlNzMzNjAwLzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgtOGFmNTZlNzMzNjAw LzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/yzloKS qrb466ER+F2FUOp/nV+F6LlZUE5DztG6wLyavet8W+LhvHGrhpRkNCXZrRxNaI22 ZuoHDhwJ9kQy7nnSZjc7/4wCUcPjzK6vM8NDRoANDjOz6ngLugQIZodLa9iecy5h 9D0ps4PWk7eMkvDBI/6HXIE+IU099nDk79HbtfS0D5LUp6rOnfufUez78nVh4Kp4 LkQRuHDC87U0Tf/1d7qs8u1QT9ykFB35vY4AK9zoGfAW88vFlg0uUr4W7ZFChEpL hHtrWSr2zTbVK1RkJvNWx5KCLIyWrWivDh9pfcdcDMeq6Ih9jDJyisexhcRqjdO3 W9LtccHFYYJoqg== -----END CERTIFICATE-----Generated at Sun Dec 28 09:06:27 2025 by rpki-client