This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json) Hash identifier: F8q24FAejpTyhQ/5WaiY0hni/r8yCOaVe5jExftMKQ8= Subject key identifier: A0:12:39:69:BD:2C:85:A4:CE:0A:62:1B:05:A0:C0:7A:E8:68:97:F0 Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53 Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53 Certificate serial: 019B70347BE220BFBA32FC892C5754682790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 17:00:46 +0000 Manifest this update: Tue 30 Dec 2025 17:00:46 +0000 Manifest next update: Wed 31 Dec 2025 17:00:46 +0000 Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=) 2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: Dj4/mv7UyONYiaYdtvHhikhkXL7gldUcdg9Pji9UeSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:7b:e2:20:bf:ba:32:fc:89:2c:57:54:68:27:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53 Validity Not Before: Dec 30 17:00:46 2025 GMT Not After : Dec 31 17:00:46 2025 GMT Subject: CN=a0123969bd2c85a4ce0a621b05a0c07ae86897f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:e7:1f:2d:05:12:39:b5:23:b7:3b:20:37: df:8c:49:fd:ff:e0:20:a1:7f:c1:3d:77:d1:1a:d0: 54:15:72:58:bb:0f:60:7f:06:c6:b5:03:b2:ad:1c: e8:13:6e:29:ba:71:9b:d3:87:21:6b:de:56:74:a3: a4:05:7d:83:f8:40:0f:f9:8e:0e:6a:78:0e:e9:45: 76:da:e0:87:75:ad:da:af:05:3c:dd:6d:b0:c6:69: 98:13:c9:51:84:55:c2:78:61:49:39:d7:21:ce:b1: 47:a4:0c:ee:17:1f:2f:90:15:13:70:b4:c0:16:0f: 74:f1:2f:52:28:20:79:ae:b7:81:1d:fe:52:8f:f6: bc:1e:55:a0:b7:6f:6b:33:b4:85:b7:d9:b8:c1:7b: b9:54:6c:6c:5b:3a:d7:56:01:36:a0:89:0c:a1:f9: 6e:4c:4d:8d:f6:f2:78:81:71:0b:88:db:6b:e0:da: e8:0a:aa:36:8e:f6:ee:e2:5a:04:5d:83:e1:49:70: bb:8f:d2:61:3d:b5:53:f0:1e:c0:17:4c:1a:c8:ab: 6a:39:44:3d:e5:74:1a:0e:f4:05:64:f6:b8:6f:81: ca:3c:4c:7c:42:70:35:5e:7b:2a:a1:c3:d6:27:66: ab:80:1e:74:d4:88:f0:c4:9b:40:f6:54:51:27:1e: 68:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:12:39:69:BD:2C:85:A4:CE:0A:62:1B:05:A0:C0:7A:E8:68:97:F0 X509v3 Authority Key Identifier: keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8f:5a:50:ab:75:ba:cf:04:4c:3f:80:cd:34:57:26:ef:6e: c7:e9:80:9c:14:1b:d0:ac:03:dc:da:54:75:4d:b5:70:7b:be: c8:4a:7b:74:68:a1:44:d9:c9:8e:6d:30:e6:ed:3f:89:ef:b2: 7b:c0:06:60:9d:0f:9d:dc:99:93:49:b5:80:9b:09:50:37:70: e9:ab:7d:4d:3b:71:f3:9e:65:d5:e2:08:2e:58:90:a0:80:80: dc:08:91:e9:f2:04:b6:e8:ba:56:98:80:ae:18:b8:1e:94:1a: 6f:82:3f:d7:e5:1a:37:6c:c1:cf:84:85:14:cd:0e:f6:14:76: 9c:82:bd:09:7d:ed:82:03:13:13:f0:ff:10:1f:1d:f1:eb:78: d2:77:23:77:78:d4:5d:61:76:bc:d9:e0:9d:e4:7b:00:db:7a: ba:e6:9d:22:20:21:57:9a:e9:91:ee:50:b0:91:d2:f8:ee:18: dc:0a:72:16:54:81:0d:52:9f:89:61:ab:b4:4e:43:98:08:b1: 83:4c:27:34:30:f9:a4:9e:3c:92:43:85:7c:d7:3c:48:84:74: a1:bc:1f:ec:64:84:89:a8:82:6e:0b:8d:cc:fd:34:06:41:bb: 0b:a1:d7:29:61:1e:5d:f4:7c:a6:cc:73:28:cb:4c:74:b9:30: 6d:49:f9:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNHviIL+6MvyJLFdUaCeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGIyNWFkN2M5NjU4OWU0YThjYWE1ZmE0ODkyY2M0ZGZj YzdiNTMwHhcNMjUxMjMwMTcwMDQ2WhcNMjUxMjMxMTcwMDQ2WjAzMTEwLwYDVQQD EyhhMDEyMzk2OWJkMmM4NWE0Y2UwYTYyMWIwNWEwYzA3YWU4Njg5N2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVjnHy0FEjm1I7c7IDffjEn9/+Ag oX/BPXfRGtBUFXJYuw9gfwbGtQOyrRzoE24punGb04cha95WdKOkBX2D+EAP+Y4O angO6UV22uCHda3arwU83W2wxmmYE8lRhFXCeGFJOdchzrFHpAzuFx8vkBUTcLTA Fg908S9SKCB5rreBHf5Sj/a8HlWgt29rM7SFt9m4wXu5VGxsWzrXVgE2oIkMoflu TE2N9vJ4gXELiNtr4NroCqo2jvbu4loEXYPhSXC7j9JhPbVT8B7AF0wayKtqOUQ9 5XQaDvQFZPa4b4HKPEx8QnA1XnsqocPWJ2argB501IjwxJtA9lRRJx5o6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKASOWm9LIWkzgpiGwWgwHroaJfwMB8GA1UdIwQY MBaAFLOLJa18llieSoyqX6SJLMTfzHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTct M2Y0MDU0N2U1MmQxLzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTctM2Y0MDU0N2U1MmQx LzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAno9aUKt1 us8ETD+AzTRXJu9ux+mAnBQb0KwD3NpUdU21cHu+yEp7dGihRNnJjm0w5u0/ie+y e8AGYJ0PndyZk0m1gJsJUDdw6at9TTtx855l1eIILliQoICA3AiR6fIEtui6VpiA rhi4HpQab4I/1+UaN2zBz4SFFM0O9hR2nIK9CX3tggMTE/D/EB8d8et40ncjd3jU XWF2vNngneR7ANt6uuadIiAhV5rpke5QsJHS+O4Y3ApyFlSBDVKfiWGrtE5DmAix g0wnNDD5pJ48kkOFfNc8SIR0obwf7GSEiaiCbguNzP00BkG7C6HXKWEeXfR8psxz KMtMdLkwbUn5pQ== -----END CERTIFICATE-----Generated at Wed Dec 31 02:25:33 2025 by rpki-client