This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft File: S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json) Hash identifier: 88EB8CJt2R/4lABOpdPEUZFHihnFZYQHZfJJtTJ4V0I= Subject key identifier: C1:38:B6:48:1C:BC:97:6C:27:A9:31:73:75:FC:51:A9:05:5E:67:B8 Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55 Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255 Certificate serial: 019B2E8B477DD6FB44CC471209430801A5F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft Manifest number: 179E Signing time: Wed 17 Dec 2025 23:00:38 +0000 Manifest this update: Wed 17 Dec 2025 23:00:38 +0000 Manifest next update: Thu 18 Dec 2025 23:00:38 +0000 Files and hashes: 1: 1-dpFpZ66BUopKTWddAy3aYd5Q58.roa (hash: a/nFyI+oVdi7douUuLnGlPqM2YOH9iXTA2Ltk7+EQUM=) 2: DL1hBwC058Ly5gbOYmTudqMnhLY.roa (hash: ZP95RnK2lnoKaBDaVLfKRWdtbqYZIJodq0FZ93fqmj4=) 3: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: ZWyF1T/3XOnxi2db6b9hRAlQ98lUx4dAGWWRbzdaTsc=) 4: TSdQZeiJv87sxq_OJ-PJSQE8GTQ.roa (hash: zeHI0YzPke/O83NDkRPiKpR8/sA4EMZWB7tgWAf8HNc=) 5: YG4GH2kbor4nZ_HdlU4bXsM_ISU.roa (hash: orPHPnq001m59xqGhWWhOTcNNv+UhgU5D7ZAydlYwJ0=) 6: _YciLAUMll_l6Ad-S-3jEr-WUP0.roa (hash: YLNVgwBOiutPhe7HbfVw0eYS7E9cfJJEs9zT8+FOZFI=) 7: ct-_W27EwoC0fOGDJoYPaUOCh1k.roa (hash: Ry7d3ypfHQ+1XBY6nTPep5IZIfXf1osPEMavue76/1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:47:7d:d6:fb:44:cc:47:12:09:43:08:01:a5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255 Validity Not Before: Dec 17 23:00:38 2025 GMT Not After : Dec 18 23:00:38 2025 GMT Subject: CN=c138b6481cbc976c27a9317375fc51a9055e67b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:53:25:ac:29:b6:69:e4:d4:42:02:01:4f: 3f:f4:c1:fa:53:bf:3d:6d:1c:d8:a5:ae:b1:0e:b2: 3d:96:70:95:e7:39:fe:63:1f:dc:42:f9:74:90:17: f4:6e:97:ae:3b:a6:a0:14:ab:bc:86:aa:41:27:eb: 86:81:25:23:b9:ff:94:87:85:03:0b:82:72:1d:bf: 18:5f:bd:b4:59:6b:b2:3e:9e:97:19:1c:6b:15:d8: 70:17:da:ef:85:7f:d4:af:eb:43:d4:50:ac:f6:16: 44:05:53:3c:54:c6:2e:ec:51:9d:77:21:7d:9e:aa: 94:29:eb:54:76:7a:57:0b:b9:5f:34:81:64:98:a9: 9f:cf:33:eb:04:7d:f8:1a:a3:17:c8:d7:10:59:be: 26:30:04:fc:5c:de:f3:2a:9a:70:40:b2:02:bd:0f: b8:05:1b:33:2d:2f:3b:de:ad:55:69:82:c1:05:f6: 53:d7:50:26:1f:c7:61:be:ec:17:f4:d9:16:a1:d8: 97:33:63:23:b4:de:31:2f:9c:b9:a1:5c:99:c1:2a: 9d:60:8c:20:64:d1:69:82:c6:1f:39:b6:0e:13:0f: 61:db:fd:6a:bb:4b:77:10:e2:77:03:fb:60:16:42: 2c:25:29:e1:90:ba:cc:e8:ac:99:b2:ed:d8:64:5f: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:38:B6:48:1C:BC:97:6C:27:A9:31:73:75:FC:51:A9:05:5E:67:B8 X509v3 Authority Key Identifier: keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ee:10:4e:d6:98:c1:56:23:a6:ec:34:0b:2e:a7:05:e2:23: e7:c4:d7:6d:c4:6d:c5:64:ac:dd:f9:8e:50:07:ec:12:5b:d3: eb:ec:af:3a:5f:27:71:d2:39:e4:9e:b5:68:91:2a:c5:fe:1d: 36:65:2a:1f:94:12:74:6b:96:21:34:ed:13:60:04:3f:2f:c0: e5:8e:9b:ca:e2:91:42:15:85:ca:df:0b:b2:61:f4:30:2d:ee: a3:bc:73:08:b7:79:39:8c:e3:70:a2:8e:dd:3a:40:57:30:e6: ce:d7:3d:7b:c4:b6:7f:ad:ef:35:1d:a6:28:34:d9:e8:0b:e0: 94:70:26:13:e2:19:0c:82:71:0b:a8:f5:98:32:b2:2b:77:93: da:82:f0:dc:f2:24:57:70:dd:66:81:07:34:69:b6:e7:2f:fd: de:0d:0e:bf:1b:e1:7f:4f:e9:8a:de:65:d2:d5:9d:d3:4b:0c: 23:1a:0c:44:1e:b3:73:3b:44:00:a4:75:9a:30:70:5d:e5:4a: 9b:89:0e:23:7f:eb:31:df:69:24:40:f5:0d:55:43:af:7f:d2: ec:56:f1:d5:4b:96:5b:bf:d4:97:11:24:63:9a:f2:c9:58:ff: e7:a1:2a:b1:c3:0e:74:1b:df:60:44:b5:56:e7:72:9b:23:44: 96:18:62:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui0d91vtEzEcSCUMIAaXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj NDkyNTUwHhcNMjUxMjE3MjMwMDM4WhcNMjUxMjE4MjMwMDM4WjAzMTEwLwYDVQQD EyhjMTM4YjY0ODFjYmM5NzZjMjdhOTMxNzM3NWZjNTFhOTA1NWU2N2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskhTJawptmnk1EICAU8/9MH6U789 bRzYpa6xDrI9lnCV5zn+Yx/cQvl0kBf0bpeuO6agFKu8hqpBJ+uGgSUjuf+Uh4UD C4JyHb8YX720WWuyPp6XGRxrFdhwF9rvhX/Ur+tD1FCs9hZEBVM8VMYu7FGddyF9 nqqUKetUdnpXC7lfNIFkmKmfzzPrBH34GqMXyNcQWb4mMAT8XN7zKppwQLICvQ+4 BRszLS873q1VaYLBBfZT11AmH8dhvuwX9NkWodiXM2MjtN4xL5y5oVyZwSqdYIwg ZNFpgsYfObYOEw9h2/1qu0t3EOJ3A/tgFkIsJSnhkLrM6KyZsu3YZF+GkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFME4tkgcvJdsJ6kxc3X8UakFXme4MB8GA1UdIwQY MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct MzZhZTc2ZWU5ODNlLzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+4QTtaY wVYjpuw0Cy6nBeIj58TXbcRtxWSs3fmOUAfsElvT6+yvOl8ncdI55J61aJEqxf4d NmUqH5QSdGuWITTtE2AEPy/A5Y6byuKRQhWFyt8LsmH0MC3uo7xzCLd5OYzjcKKO 3TpAVzDmztc9e8S2f63vNR2mKDTZ6AvglHAmE+IZDIJxC6j1mDKyK3eT2oLw3PIk V3DdZoEHNGm25y/93g0Ovxvhf0/pit5l0tWd00sMIxoMRB6zcztEAKR1mjBwXeVK m4kOI3/rMd9pJED1DVVDr3/S7Fbx1UuWW7/UlxEkY5ryyVj/56EqscMOdBvfYES1 VudymyNElhhiag== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:22 2025 by rpki-client