This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json) Hash identifier: Y14xZmKINzhtzMF0usWH7LTNhijYSruQLxoOX18GBr4= Subject key identifier: CC:7D:37:10:9C:FA:0A:FB:1E:B0:57:EE:09:35:53:1E:66:DE:FC:02 Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca Certificate serial: 019B3C7DE2372A39A590433920293F7C4BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft Manifest number: 034D Signing time: Sat 20 Dec 2025 16:00:41 +0000 Manifest this update: Sat 20 Dec 2025 16:00:41 +0000 Manifest next update: Sun 21 Dec 2025 16:00:41 +0000 Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: Nh7b9OA0EEvmUE2WKYKI3eMSiHfVe8SDqKGowT5mgE8=) 2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e2:37:2a:39:a5:90:43:39:20:29:3f:7c:4b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca Validity Not Before: Dec 20 16:00:41 2025 GMT Not After : Dec 21 16:00:41 2025 GMT Subject: CN=cc7d37109cfa0afb1eb057ee0935531e66defc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:16:67:56:e0:a9:3f:1c:85:7b:b7:42:ed: db:9b:59:ae:b5:1e:52:c1:ca:db:b8:ad:c6:98:87: 4a:7c:58:71:34:e6:d5:5f:4c:1d:64:e6:cf:23:8f: 6c:94:25:69:7b:2f:8c:36:0e:2e:3e:5d:3e:af:bf: ea:6f:ac:1f:c9:10:11:a0:30:e8:8f:22:79:be:b9: 61:19:69:26:c5:ce:88:c7:7d:f0:1d:13:6b:ea:09: f8:8b:22:33:3b:7f:84:ec:33:02:6f:d2:e3:ec:ef: 9b:e6:db:fe:af:9f:97:a8:3f:fd:21:45:c1:6f:1f: 5e:ff:85:f8:4d:0a:1b:7d:c7:bb:0a:01:56:34:80: bf:d9:48:99:a9:d1:82:a7:68:0b:7a:69:86:c5:20: d8:41:f4:02:6d:99:d2:69:ef:84:aa:f6:ae:f0:da: 1d:dc:6a:44:1b:41:f9:e4:d2:91:10:c1:bd:a7:27: 84:83:e5:3a:58:3b:67:76:51:e8:02:1b:a9:21:37: dc:7b:22:aa:b9:32:20:94:a6:5f:cb:16:d0:3b:84: 90:7c:37:0f:92:ed:9e:ae:39:d9:92:52:ef:c2:a1: 6e:25:f9:b0:9f:3c:10:45:28:cf:fc:b8:58:b3:ed: 9c:48:c6:39:e1:04:70:2a:c2:32:f1:67:2e:54:c5: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7D:37:10:9C:FA:0A:FB:1E:B0:57:EE:09:35:53:1E:66:DE:FC:02 X509v3 Authority Key Identifier: keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b8:1f:7b:59:1b:ed:b0:d8:20:a4:71:e1:ef:77:a6:97:fa: f4:67:b7:1b:cd:d3:04:2a:e9:55:94:bc:63:04:cd:1a:a3:d7: b8:9a:b6:4e:b3:17:4c:d9:8c:38:27:22:7a:81:04:ad:18:0a: 19:b3:01:ce:44:19:d6:84:79:b7:66:63:c7:6c:a6:6f:52:ad: 9d:ec:54:d3:2c:75:6c:9c:aa:97:23:6f:a5:4a:92:83:b9:e6: 94:2a:e3:d0:73:bd:cc:71:0d:76:7b:e7:9c:d8:52:35:b1:05: 57:1b:4e:5b:6c:67:66:03:9d:7a:c6:1c:05:5a:f5:27:39:d5: a2:b8:fa:df:f6:b7:f0:51:df:82:8e:6d:95:8f:b4:ae:77:dc: 30:57:01:69:2b:b5:f2:b1:9a:2b:51:43:1f:f0:b9:62:6b:3a: f7:c3:04:ef:99:be:b4:23:98:42:9a:81:3d:f5:1d:74:83:6c: fd:a3:6c:39:21:4f:d1:7d:59:31:04:1d:4b:ff:2e:9a:d3:53: 2a:85:2b:90:c2:10:fa:7c:6d:95:ee:ce:53:59:51:7a:5d:2e: 1e:f5:a1:25:d3:81:73:3f:3c:dd:7c:fe:7b:59:09:8c:82:7b: 66:36:74:bf:60:f2:5e:d2:f9:ef:2d:43:b2:b8:d2:87:0b:cd: 27:ad:bb:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feI3KjmlkEM5ICk/fEuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTdhMzlkYjVjN2FhMzZiZTgyY2Q3NTFlNTBjYjkwMjMw MzNkY2EwHhcNMjUxMjIwMTYwMDQxWhcNMjUxMjIxMTYwMDQxWjAzMTEwLwYDVQQD EyhjYzdkMzcxMDljZmEwYWZiMWViMDU3ZWUwOTM1NTMxZTY2ZGVmYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNIWZ1bgqT8chXu3Qu3bm1mutR5S wcrbuK3GmIdKfFhxNObVX0wdZObPI49slCVpey+MNg4uPl0+r7/qb6wfyRARoDDo jyJ5vrlhGWkmxc6Ix33wHRNr6gn4iyIzO3+E7DMCb9Lj7O+b5tv+r5+XqD/9IUXB bx9e/4X4TQobfce7CgFWNIC/2UiZqdGCp2gLemmGxSDYQfQCbZnSae+Eqvau8Nod 3GpEG0H55NKREMG9pyeEg+U6WDtndlHoAhupITfceyKquTIglKZfyxbQO4SQfDcP ku2erjnZklLvwqFuJfmwnzwQRSjP/LhYs+2cSMY54QRwKsIy8WcuVMWe5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMx9NxCc+gr7HrBX7gk1Ux5m3vwCMB8GA1UdIwQY MBaAFEtXo521x6o2voLNdR5Qy5AjAz3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmIt YjNkMTg5NmYzNjlmLzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmItYjNkMTg5NmYzNjlm LzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7gfe1kb 7bDYIKRx4e93ppf69Ge3G83TBCrpVZS8YwTNGqPXuJq2TrMXTNmMOCcieoEErRgK GbMBzkQZ1oR5t2Zjx2ymb1KtnexU0yx1bJyqlyNvpUqSg7nmlCrj0HO9zHENdnvn nNhSNbEFVxtOW2xnZgOdesYcBVr1JznVorj63/a38FHfgo5tlY+0rnfcMFcBaSu1 8rGaK1FDH/C5Yms698ME75m+tCOYQpqBPfUddINs/aNsOSFP0X1ZMQQdS/8umtNT KoUrkMIQ+nxtle7OU1lRel0uHvWhJdOBcz883Xz+e1kJjIJ7ZjZ0v2DyXtL57y1D srjShwvNJ627gQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:05:58 2025 by rpki-client