This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json) Hash identifier: ioN0a5ABkJWcuYBdaBWKpWJ+pA++eKn7Wj8qxjdYIHg= Subject key identifier: A9:46:F2:81:C3:25:D1:19:F7:7C:CE:24:67:22:9A:4C:5A:92:18:E1 Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea Certificate serial: 019B3D90E6CCB7215ED95BECE0CC52E1D6FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 21:01:04 +0000 Manifest this update: Sat 20 Dec 2025 21:01:04 +0000 Manifest next update: Sun 21 Dec 2025 21:01:04 +0000 Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: A4Bw+pGC9lRnY51ZmFOA4EPFHPCAk1vCSDeFyaQvR8M=) 2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e6:cc:b7:21:5e:d9:5b:ec:e0:cc:52:e1:d6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea Validity Not Before: Dec 20 21:01:04 2025 GMT Not After : Dec 21 21:01:04 2025 GMT Subject: CN=a946f281c325d119f77cce2467229a4c5a9218e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:53:c5:26:20:3c:50:5c:ba:f9:73:6a:99: 1c:d8:bc:2f:54:ff:d0:dc:fe:be:a9:6b:4f:c5:0c: a1:2a:d1:17:94:fb:1d:d5:e0:a3:36:0f:77:cc:5c: 1a:58:82:f0:dc:25:e7:6e:40:5d:7c:91:c3:a0:02: ad:2b:c3:fc:c5:df:d5:f4:9b:88:d8:7d:e7:4c:61: 3f:57:8d:d2:cc:60:9d:c6:a2:d5:81:05:27:60:81: 36:40:a5:50:e2:47:13:af:be:c8:18:e7:9d:b5:be: d0:72:ce:78:4f:60:e3:18:7f:03:d3:de:8c:b6:36: c7:35:1d:cd:4d:e7:32:7b:48:6b:b3:e5:54:ab:a1: 5b:ca:0d:4d:f2:f3:21:b6:24:b9:5e:a6:52:e9:22: b3:29:93:99:98:13:c5:21:5e:74:0f:2c:5f:48:07: 48:bf:92:82:e1:f8:d9:14:56:70:03:21:bf:ea:bf: 4f:13:ac:55:8c:c5:37:19:f9:58:98:bd:70:84:52: 17:1f:f2:b4:16:25:47:16:a2:74:72:65:d3:5c:3f: 98:73:35:43:8e:c3:21:d6:4f:f6:57:e0:a4:49:4c: d3:14:c2:32:b5:85:84:93:f0:af:a3:5e:36:44:f4: 72:08:5b:14:d4:9a:fc:18:d9:8a:e8:04:bc:b1:06: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:46:F2:81:C3:25:D1:19:F7:7C:CE:24:67:22:9A:4C:5A:92:18:E1 X509v3 Authority Key Identifier: keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:07:34:da:ed:7e:27:22:f9:be:f1:5e:d9:bf:12:ab:70:61: cf:a5:a8:ed:81:a7:58:44:cb:16:c2:7c:ae:03:25:df:83:2f: c3:d2:aa:17:f0:9a:9b:0d:37:79:30:92:10:e5:92:03:9c:28: 1f:8f:8b:1e:98:80:e8:d5:f8:46:dd:ab:80:95:43:7a:e9:54: be:4a:3c:57:99:0e:66:d2:ef:2d:8a:3d:40:52:44:a8:68:2a: 26:3c:a0:4e:b2:80:40:bd:8d:39:22:42:96:bf:57:ac:0d:79: a3:33:6f:96:91:a3:05:f2:3e:e3:36:eb:07:99:65:ac:fa:41: 0d:4f:86:25:39:50:35:2b:42:4a:5d:fb:e3:f4:a5:4b:32:bb: e5:c9:dd:7e:66:ac:44:76:0b:b1:87:fe:1a:22:d8:1f:d4:b4: 64:77:d2:24:53:85:9c:90:46:7b:a0:7e:d7:a1:90:3e:07:fd: 7d:90:44:bf:22:b0:d6:59:90:a8:13:a4:21:fc:30:5d:0a:17: 4a:f0:96:81:3b:03:58:45:e6:c5:ab:f1:ac:4e:3b:98:59:ef: c5:9b:38:bc:9c:cf:f5:8d:69:5c:64:81:8e:0d:66:3e:14:95: a7:32:95:33:cb:fe:17:14:fa:78:a0:e4:66:24:b1:0e:a1:96: c6:71:b3:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kObMtyFe2Vvs4MxS4db9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4 ODQ5ZWEwHhcNMjUxMjIwMjEwMTA0WhcNMjUxMjIxMjEwMTA0WjAzMTEwLwYDVQQD EyhhOTQ2ZjI4MWMzMjVkMTE5Zjc3Y2NlMjQ2NzIyOWE0YzVhOTIxOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr79TxSYgPFBcuvlzapkc2LwvVP/Q 3P6+qWtPxQyhKtEXlPsd1eCjNg93zFwaWILw3CXnbkBdfJHDoAKtK8P8xd/V9JuI 2H3nTGE/V43SzGCdxqLVgQUnYIE2QKVQ4kcTr77IGOedtb7Qcs54T2DjGH8D096M tjbHNR3NTecye0hrs+VUq6Fbyg1N8vMhtiS5XqZS6SKzKZOZmBPFIV50DyxfSAdI v5KC4fjZFFZwAyG/6r9PE6xVjMU3GflYmL1whFIXH/K0FiVHFqJ0cmXTXD+YczVD jsMh1k/2V+CkSUzTFMIytYWEk/Cvo142RPRyCFsU1Jr8GNmK6AS8sQatSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlG8oHDJdEZ93zOJGcimkxakhjhMB8GA1UdIwQY MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt Njk3MTFmZTgzZDIzLzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQc02u1+ JyL5vvFe2b8Sq3Bhz6Wo7YGnWETLFsJ8rgMl34Mvw9KqF/Camw03eTCSEOWSA5wo H4+LHpiA6NX4Rt2rgJVDeulUvko8V5kOZtLvLYo9QFJEqGgqJjygTrKAQL2NOSJC lr9XrA15ozNvlpGjBfI+4zbrB5llrPpBDU+GJTlQNStCSl374/SlSzK75cndfmas RHYLsYf+GiLYH9S0ZHfSJFOFnJBGe6B+16GQPgf9fZBEvyKw1lmQqBOkIfwwXQoX SvCWgTsDWEXmxavxrE47mFnvxZs4vJzP9Y1pXGSBjg1mPhSVpzKVM8v+FxT6eKDk ZiSxDqGWxnGzVQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:16 2025 by rpki-client