This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json) Hash identifier: NZmO/mEC/jzrQf2H9IpP6s8B8gfvxw5MwXcJPuzeugs= Subject key identifier: 55:8F:0D:ED:1D:8D:1C:A1:B9:7E:90:05:01:9D:46:79:97:30:3F:B0 Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7 Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7 Certificate serial: 019B50E09A93A4BAEEE7A98769A37FB9F3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft Manifest number: 1069 Signing time: Wed 24 Dec 2025 15:00:55 +0000 Manifest this update: Wed 24 Dec 2025 15:00:55 +0000 Manifest next update: Thu 25 Dec 2025 15:00:55 +0000 Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: Lj3DgOQE7CdrD6qf8i6ZAW8p/83ImM+dH01OEdRDZG4=) 2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:9a:93:a4:ba:ee:e7:a9:87:69:a3:7f:b9:f3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7 Validity Not Before: Dec 24 15:00:55 2025 GMT Not After : Dec 25 15:00:55 2025 GMT Subject: CN=558f0ded1d8d1ca1b97e9005019d467997303fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:7b:18:62:25:30:0a:86:53:e9:f4:74:70: f2:d4:31:71:b6:79:c4:eb:b1:18:f0:e5:77:db:60: 12:37:62:38:9f:ea:79:c4:63:b0:d7:9e:6c:ca:8b: e5:5d:b4:74:d0:58:b5:3b:4b:6d:68:a7:60:0d:35: e8:93:62:f4:b0:b7:6a:d0:59:15:5d:34:f9:94:05: 16:d8:aa:3b:d9:4a:4f:88:ea:38:43:df:81:ee:b4: b5:03:1a:f7:8e:d2:b5:e4:09:b2:9a:45:4b:68:e0: 0d:01:5c:b9:b9:c6:c2:eb:b3:e2:66:69:5e:f9:9a: ba:98:b4:f7:32:cd:4a:c6:f2:66:bf:46:5c:98:5c: 17:86:7c:92:e8:10:0b:fe:88:59:22:e7:a0:20:3f: a8:2f:11:0b:6d:c4:0f:59:2d:b8:ca:c3:1c:97:3e: 64:12:c4:ea:91:14:5d:1a:93:4b:18:1f:d2:03:8f: 57:65:02:ef:54:49:46:47:08:7e:d4:7f:3f:2e:63: 43:14:93:17:ed:7c:c4:d0:80:02:a3:bf:7e:b8:ab: f8:34:05:27:35:e1:f6:a6:4c:4c:2c:53:df:7f:f5: d3:c8:36:ae:2a:4d:78:d5:f0:5c:6e:76:0b:fa:51: c8:4a:bd:97:fe:03:3d:09:07:80:be:f0:ac:ee:bb: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8F:0D:ED:1D:8D:1C:A1:B9:7E:90:05:01:9D:46:79:97:30:3F:B0 X509v3 Authority Key Identifier: keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:b2:b3:6c:2a:59:6c:88:b8:25:27:c2:36:44:d2:e9:08:2a: 52:08:e0:1b:a0:4d:3f:42:fc:67:7f:9b:53:43:54:05:f0:47: 90:61:f1:ef:6f:c9:38:06:90:f3:8b:35:49:3d:10:29:bb:44: 4d:25:aa:ae:6e:81:86:fb:6b:5c:34:39:44:53:05:66:f5:34: fc:ba:cd:5c:07:e2:db:d6:83:93:6e:10:19:ff:76:49:95:f2: 09:55:18:c0:48:ac:7d:4e:42:dc:da:0d:a2:12:6f:67:05:2e: 84:8b:d9:05:38:79:d0:99:9e:7f:81:eb:2f:03:f4:8b:ed:1b: 7d:ed:b9:d0:b8:0c:81:28:72:42:89:5c:e8:60:1f:15:f2:32: 32:98:71:02:5a:54:02:79:0b:3e:14:eb:86:20:9f:2b:12:2a: 55:5a:25:b7:da:76:c8:68:41:34:f8:82:4c:83:a3:87:e3:f8: c2:53:fc:14:6a:0c:46:36:45:e9:04:41:8e:a3:6f:51:2d:a7: f9:b6:a8:1a:6c:a2:42:36:ff:a1:d0:44:8d:65:66:e1:91:3c: 8c:ce:5d:c0:58:62:35:df:7b:8a:0d:9e:42:b4:c5:96:f7:5e: bf:21:4a:64:26:19:f4:22:c2:a3:98:5c:ce:dd:d4:f1:a6:eb: e2:5c:a4:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4JqTpLru56mHaaN/ufO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYmJjMTA2OTc3NWE4MDQ4MDZiNTBiYWVkN2VjZTg0OGFi ZGU4YTcwHhcNMjUxMjI0MTUwMDU1WhcNMjUxMjI1MTUwMDU1WjAzMTEwLwYDVQQD Eyg1NThmMGRlZDFkOGQxY2ExYjk3ZTkwMDUwMTlkNDY3OTk3MzAzZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtZ7GGIlMAqGU+n0dHDy1DFxtnnE 67EY8OV322ASN2I4n+p5xGOw155syovlXbR00Fi1O0ttaKdgDTXok2L0sLdq0FkV XTT5lAUW2Ko72UpPiOo4Q9+B7rS1Axr3jtK15AmymkVLaOANAVy5ucbC67PiZmle +Zq6mLT3Ms1KxvJmv0ZcmFwXhnyS6BAL/ohZIuegID+oLxELbcQPWS24ysMclz5k EsTqkRRdGpNLGB/SA49XZQLvVElGRwh+1H8/LmNDFJMX7XzE0IACo79+uKv4NAUn NeH2pkxMLFPff/XTyDauKk141fBcbnYL+lHISr2X/gM9CQeAvvCs7rsZYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWPDe0djRyhuX6QBQGdRnmXMD+wMB8GA1UdIwQY MBaAFEu7wQaXdagEgGtQuu1+zoSKveinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQt OWNmZjg0OTZlMzM0LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQtOWNmZjg0OTZlMzM0 LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1LKzbCpZ bIi4JSfCNkTS6QgqUgjgG6BNP0L8Z3+bU0NUBfBHkGHx72/JOAaQ84s1ST0QKbtE TSWqrm6BhvtrXDQ5RFMFZvU0/LrNXAfi29aDk24QGf92SZXyCVUYwEisfU5C3NoN ohJvZwUuhIvZBTh50Jmef4HrLwP0i+0bfe250LgMgShyQolc6GAfFfIyMphxAlpU AnkLPhTrhiCfKxIqVVolt9p2yGhBNPiCTIOjh+P4wlP8FGoMRjZF6QRBjqNvUS2n +baoGmyiQjb/odBEjWVm4ZE8jM5dwFhiNd97ig2eQrTFlvdevyFKZCYZ9CLCo5hc zt3U8abr4lyk6w== -----END CERTIFICATE-----Generated at Wed Dec 24 20:31:58 2025 by rpki-client