This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json) Hash identifier: hWeEWrgsJyR5dDgRKtFUrrCpgajuIS1M7gCYgwjaM+0= Subject key identifier: 68:6E:6A:FF:EB:D2:9A:27:E5:99:13:CA:DE:1B:76:53:24:33:9B:70 Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a Certificate serial: 019B5261617A42D88F0FAD34700A7A8DE172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft Manifest number: 0B26 Signing time: Wed 24 Dec 2025 22:01:12 +0000 Manifest this update: Wed 24 Dec 2025 22:01:12 +0000 Manifest next update: Thu 25 Dec 2025 22:01:12 +0000 Files and hashes: 1: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (hash: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=) 2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: PkTyxOFU9Yo24WZ+VotxLjMiu/+jx5cU5Q788u8Bu0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:61:7a:42:d8:8f:0f:ad:34:70:0a:7a:8d:e1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a Validity Not Before: Dec 24 22:01:12 2025 GMT Not After : Dec 25 22:01:12 2025 GMT Subject: CN=686e6affebd29a27e59913cade1b765324339b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:08:99:11:13:9d:12:df:63:6b:96:2f:99: b9:be:1a:2b:a7:90:77:c6:09:e5:2c:f7:f3:26:60: 86:6d:f2:cf:cb:97:74:13:91:d2:cb:26:54:e6:1f: 3c:49:c4:8b:d9:87:5c:64:07:31:07:15:6f:21:32: 31:94:63:99:06:4f:03:69:db:10:48:19:61:c1:ab: 1c:16:c9:f7:38:ee:ca:69:c3:ad:35:cf:69:99:26: 2f:bc:34:53:b0:e2:91:b7:b9:7a:6e:45:60:41:4b: 3c:0e:0f:f8:6f:46:f8:c1:48:38:fb:55:b4:50:dc: 43:ef:49:c9:bf:dd:a1:2a:04:f0:0a:e3:f2:a1:db: b0:a4:51:74:86:76:66:75:e5:e7:d5:6d:ee:5b:39: 90:34:66:e8:42:20:f1:45:4e:bc:27:50:85:a7:29: ab:17:8e:ae:00:42:57:97:83:bb:d5:3c:97:17:1d: b6:86:46:f5:86:43:73:82:36:2e:c0:24:46:c4:aa: 3c:08:c3:74:a0:9b:c5:0e:e4:63:99:44:79:c9:18: de:44:02:b0:7a:c6:53:ae:d2:73:52:70:7c:c9:a4: 2e:8a:21:ed:be:d9:b9:32:7d:97:20:f0:a4:b3:7a: 23:6e:44:99:65:ba:f9:92:ca:ce:d8:fe:f0:f3:ce: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6E:6A:FF:EB:D2:9A:27:E5:99:13:CA:DE:1B:76:53:24:33:9B:70 X509v3 Authority Key Identifier: keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2e:43:5c:e1:a1:f2:70:e2:87:16:d5:2d:2c:ff:08:d6:35: f3:bd:6a:f3:c8:4d:40:27:b9:88:c1:bf:23:f8:29:40:a6:78: 4b:05:b2:d6:72:d2:85:11:72:5e:5c:b2:95:07:da:c0:da:4a: d8:4b:88:d3:dc:f2:e7:9c:a9:05:d8:45:96:ae:7f:a4:ec:fc: 49:1d:4f:48:ff:5a:9f:dd:f3:f6:b0:62:de:e6:f0:a8:d6:7d: 2f:5b:79:20:2d:2d:5b:81:7c:45:94:65:b4:48:83:ed:c7:c2: bd:e5:92:9c:89:49:63:b7:91:24:be:aa:2e:ad:8d:b5:d0:31: 85:90:9c:04:7d:b2:30:6e:e5:87:11:06:e0:9e:f0:67:62:fb: 2b:e9:e0:44:b6:6c:eb:c0:ac:05:50:b2:b9:e7:67:43:10:e1: dc:0b:7f:1f:18:2f:d4:29:a4:9c:26:b9:e4:da:cb:4e:07:ad: 6f:33:d4:67:51:17:c4:63:cc:c9:53:e3:ff:7a:db:90:59:d6: b6:82:a4:f2:07:3a:85:29:89:d0:9c:5e:f7:a2:5d:a5:34:81: ac:07:db:c9:4e:db:e5:2c:6d:cc:89:0e:e5:91:d8:fb:98:7a: a5:c6:5c:64:ef:0f:1b:18:74:7d:3e:50:4b:87:7b:a2:30:e0: fa:b9:bd:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYWF6QtiPD600cAp6jeFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTNmOTU2N2Y2ZDZhZDg5NDEyYzA1MTVmNzQ2NDc2MTJk Y2UwNGEwHhcNMjUxMjI0MjIwMTEyWhcNMjUxMjI1MjIwMTEyWjAzMTEwLwYDVQQD Eyg2ODZlNmFmZmViZDI5YTI3ZTU5OTEzY2FkZTFiNzY1MzI0MzM5YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/oImRETnRLfY2uWL5m5vhorp5B3 xgnlLPfzJmCGbfLPy5d0E5HSyyZU5h88ScSL2YdcZAcxBxVvITIxlGOZBk8DadsQ SBlhwascFsn3OO7KacOtNc9pmSYvvDRTsOKRt7l6bkVgQUs8Dg/4b0b4wUg4+1W0 UNxD70nJv92hKgTwCuPyoduwpFF0hnZmdeXn1W3uWzmQNGboQiDxRU68J1CFpymr F46uAEJXl4O71TyXFx22hkb1hkNzgjYuwCRGxKo8CMN0oJvFDuRjmUR5yRjeRAKw esZTrtJzUnB8yaQuiiHtvtm5Mn2XIPCks3ojbkSZZbr5ksrO2P7w8872WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhuav/r0pon5ZkTyt4bdlMkM5twMB8GA1UdIwQY MBaAFEtT+VZ/bWrYlBLAUV90ZHYS3OBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFQNVZuOXRhdGlVRXNCUlgzUmtkaExjNEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82ZTk4MDQtOGEwNy00MjM4LWI5ZDEt MWZhNTIyYTA1Nzk1LzEvUzFQNVZuOXRhdGlVRXNCUlgzUmtkaExjNEVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82ZTk4MDQtOGEwNy00MjM4LWI5ZDEtMWZhNTIyYTA1Nzk1 LzEvUzFQNVZuOXRhdGlVRXNCUlgzUmtkaExjNEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS5DXOGh 8nDihxbVLSz/CNY1871q88hNQCe5iMG/I/gpQKZ4SwWy1nLShRFyXlyylQfawNpK 2EuI09zy55ypBdhFlq5/pOz8SR1PSP9an93z9rBi3ubwqNZ9L1t5IC0tW4F8RZRl tEiD7cfCveWSnIlJY7eRJL6qLq2NtdAxhZCcBH2yMG7lhxEG4J7wZ2L7K+ngRLZs 68CsBVCyuednQxDh3At/Hxgv1CmknCa55NrLTgetbzPUZ1EXxGPMyVPj/3rbkFnW toKk8gc6hSmJ0Jxe96JdpTSBrAfbyU7b5SxtzIkO5ZHY+5h6pcZcZO8PGxh0fT5Q S4d7ojDg+rm9DQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:42:58 2025 by rpki-client