This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json) Hash identifier: 4tVQJSPwkr0a3ReK2/n45OmaQNMk2UTDs1h9Imtrlcc= Subject key identifier: 79:4F:23:24:D5:76:2C:3E:6A:F6:7A:86:77:7C:85:82:51:D8:29:36 Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d Certificate serial: 019B51BC4146BEDE06E7C7370208367E4F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft Manifest number: 05F1 Signing time: Wed 24 Dec 2025 19:00:50 +0000 Manifest this update: Wed 24 Dec 2025 19:00:50 +0000 Manifest next update: Thu 25 Dec 2025 19:00:50 +0000 Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=) 2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: jJxPkToILPLgT0VgYFl3SBQE4WipIYYChv9JNtowudM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:41:46:be:de:06:e7:c7:37:02:08:36:7e:4f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d Validity Not Before: Dec 24 19:00:50 2025 GMT Not After : Dec 25 19:00:50 2025 GMT Subject: CN=794f2324d5762c3e6af67a86777c858251d82936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:8c:05:8f:d4:08:e0:8c:f8:a2:f3:cc:df: 97:8b:18:14:75:f8:36:a8:6b:1c:3e:04:f5:9d:52: f1:b2:b8:b7:66:38:5f:fc:3f:68:22:37:31:e2:f2: 41:b7:33:cc:5d:8b:78:21:8d:1e:6d:d1:cb:20:9a: c6:5b:cc:54:e8:82:4e:d6:d9:10:c3:1e:cd:27:4f: 1d:be:48:4e:97:cd:18:fc:67:ea:fa:2d:36:1b:93: 68:9a:02:51:59:c9:0b:89:71:b2:30:a9:e5:63:7d: 30:d0:02:65:87:e7:8a:94:c9:78:1c:77:ea:29:61: 42:d6:28:49:34:32:78:8c:15:ff:da:82:ff:1b:10: f2:24:b3:c5:e6:39:f6:95:8a:29:0d:ae:a6:35:fc: 5a:3f:93:0f:48:f6:78:bc:66:93:9f:81:7c:eb:e5: e8:18:74:9d:e7:01:8d:a2:b2:e6:6a:25:6c:06:b3: 70:b9:0c:98:84:5d:71:c5:44:ad:b2:f2:92:2e:ea: 08:36:9d:4e:3b:8a:7f:09:07:11:ad:c6:fb:a7:58: ab:49:dd:f9:6f:f0:11:58:be:25:70:fd:87:2b:68: e0:61:a7:f0:7e:14:fc:4b:e3:c8:a0:66:50:14:58: 71:86:a9:69:03:32:e7:30:9c:f0:32:d1:86:4e:e0: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:23:24:D5:76:2C:3E:6A:F6:7A:86:77:7C:85:82:51:D8:29:36 X509v3 Authority Key Identifier: keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:75:1e:b6:1a:19:a6:9d:bb:2d:41:f4:83:eb:55:2b:03:bb: 24:52:0d:37:77:52:7b:fd:8a:6f:fe:55:94:b2:79:19:dd:a5: 93:2b:aa:b6:ff:d6:ac:a4:45:28:a3:c7:11:73:25:76:8c:b9: 34:4e:b0:37:04:48:9d:fa:1c:f0:29:bb:00:23:0e:18:0e:39: 86:15:26:7c:5f:a7:e4:7a:a4:62:e1:b8:67:2d:d9:59:df:c6: 53:57:60:78:36:ca:99:e0:96:43:8c:be:91:a2:cc:2c:01:56: 2b:4c:13:dd:e5:c7:12:3f:62:30:79:e7:c1:27:67:18:13:d6: 44:05:e5:18:e9:06:b2:79:92:9a:ba:96:4d:8c:34:99:e0:55: de:aa:89:47:d5:05:29:a5:f9:42:d2:b1:c5:b6:8a:21:85:d2: fd:bd:7e:23:7b:fe:52:c9:7c:d5:b3:89:01:42:7e:bf:2f:c3: 06:ac:61:14:a2:92:26:e3:08:fe:e8:c7:e1:c9:b0:19:dd:7f: 67:25:00:7e:4b:59:d4:6c:68:1c:c8:1e:5e:fa:9a:2c:e8:f4: 2d:8d:f5:2e:69:6f:9e:a4:9e:85:4f:dd:76:ed:b2:d8:62:6d: 68:3f:2d:7f:b7:0b:67:bc:be:d5:2e:e7:ae:1c:70:43:35:ad: 4e:e4:ba:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvEFGvt4G58c3Agg2fk9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTkxOWE4NGUxYTIyOWY3ODlkOTM5ZDFhYWE3MTJhNGQz YzM5OWQwHhcNMjUxMjI0MTkwMDUwWhcNMjUxMjI1MTkwMDUwWjAzMTEwLwYDVQQD Eyg3OTRmMjMyNGQ1NzYyYzNlNmFmNjdhODY3NzdjODU4MjUxZDgyOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq72MBY/UCOCM+KLzzN+XixgUdfg2 qGscPgT1nVLxsri3Zjhf/D9oIjcx4vJBtzPMXYt4IY0ebdHLIJrGW8xU6IJO1tkQ wx7NJ08dvkhOl80Y/Gfq+i02G5NomgJRWckLiXGyMKnlY30w0AJlh+eKlMl4HHfq KWFC1ihJNDJ4jBX/2oL/GxDyJLPF5jn2lYopDa6mNfxaP5MPSPZ4vGaTn4F86+Xo GHSd5wGNorLmaiVsBrNwuQyYhF1xxUStsvKSLuoINp1OO4p/CQcRrcb7p1irSd35 b/ARWL4lcP2HK2jgYafwfhT8S+PIoGZQFFhxhqlpAzLnMJzwMtGGTuBLwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlPIyTVdiw+avZ6hnd8hYJR2Ck2MB8GA1UdIwQY MBaAFEvpGahOGiKfeJ2TnRqqcSpNPDmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMt MTE5NWZlMDUwZGUxLzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMtMTE5NWZlMDUwZGUx LzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHUethoZ pp27LUH0g+tVKwO7JFINN3dSe/2Kb/5VlLJ5Gd2lkyuqtv/WrKRFKKPHEXMldoy5 NE6wNwRInfoc8Cm7ACMOGA45hhUmfF+n5HqkYuG4Zy3ZWd/GU1dgeDbKmeCWQ4y+ kaLMLAFWK0wT3eXHEj9iMHnnwSdnGBPWRAXlGOkGsnmSmrqWTYw0meBV3qqJR9UF KaX5QtKxxbaKIYXS/b1+I3v+Usl81bOJAUJ+vy/DBqxhFKKSJuMI/ujH4cmwGd1/ ZyUAfktZ1GxoHMgeXvqaLOj0LY31LmlvnqSehU/ddu2y2GJtaD8tf7cLZ7y+1S7n rhxwQzWtTuS62A== -----END CERTIFICATE-----Generated at Thu Dec 25 05:17:28 2025 by rpki-client