This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json) Hash identifier: EXeGCV9MehrV3kXb3KbwSFIr39tY52MT7ro/xvQqHg8= Subject key identifier: 81:03:90:08:FF:70:30:DF:53:9A:F6:69:36:6A:D1:A9:A1:DC:6F:60 Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Certificate serial: 019B4E4DD230661076ACC4BBC66DC410C7A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft Manifest number: 097C Signing time: Wed 24 Dec 2025 03:01:21 +0000 Manifest this update: Wed 24 Dec 2025 03:01:21 +0000 Manifest next update: Thu 25 Dec 2025 03:01:21 +0000 Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: CB0sy3mDx0snj+YEHgSii/BSVBA6j9amW4HebGEGlSU=) 2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:d2:30:66:10:76:ac:c4:bb:c6:6d:c4:10:c7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Validity Not Before: Dec 24 03:01:21 2025 GMT Not After : Dec 25 03:01:21 2025 GMT Subject: CN=81039008ff7030df539af669366ad1a9a1dc6f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cd:ba:4d:fb:ea:29:14:7f:9e:a3:fc:80:36: 5f:47:01:2c:fa:f9:7f:41:c0:08:1d:5a:2a:1c:fe: 10:1f:70:8b:c7:a2:cb:05:c7:ee:61:7d:f8:65:5e: c2:a0:d1:cf:c0:8e:65:88:04:0d:ab:45:73:f3:be: 2c:06:7b:6d:12:bf:79:ea:85:87:cc:3f:fe:2a:73: 85:7e:7b:7d:ea:44:c4:7c:a0:52:be:3d:2e:52:0a: c7:8b:35:30:a9:76:be:e3:b3:af:52:4c:37:58:1d: 16:35:be:d3:d3:03:ae:36:0b:df:5a:67:0c:da:1b: 4e:96:b8:2f:14:5a:19:59:b0:1c:e7:9a:56:42:0d: 72:ad:ca:86:77:ea:48:3e:48:d9:74:58:c4:05:b1: 21:70:3b:b4:29:d8:a5:72:de:f9:60:36:5d:d6:59: 01:1d:c3:da:cd:ff:3b:14:d5:df:91:29:f8:f1:bf: 53:6c:c7:74:67:26:6c:ad:d5:f1:fe:cb:c5:c7:c7: 8d:0c:b9:5f:13:da:de:7a:28:46:c0:c2:1d:b8:a7: 94:ff:3e:34:56:d4:08:9f:9f:41:61:b5:9c:f7:7a: e5:b4:91:ab:5c:b4:a2:ea:50:8b:43:88:3c:5c:02: 4d:dd:b3:d8:ad:87:b7:04:cb:81:11:90:f7:91:ca: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:03:90:08:FF:70:30:DF:53:9A:F6:69:36:6A:D1:A9:A1:DC:6F:60 X509v3 Authority Key Identifier: keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:db:d9:79:9c:b2:a4:b8:0a:0a:d9:90:00:fc:96:1e:ac:a3: 09:aa:7b:d2:64:22:e1:e1:60:02:b6:ea:94:13:5f:7d:91:4c: 96:8d:74:04:ba:10:ac:09:30:93:fd:38:72:9c:19:dd:49:56: 09:85:42:40:d3:48:f8:2d:3e:51:1e:8c:2b:75:fc:1e:73:19: 9a:7e:6e:30:1d:37:b7:c3:6b:a8:a2:e0:40:03:f5:2b:18:0c: 4d:e0:dc:2e:03:6f:1d:e5:bf:0e:c4:65:51:dc:d0:55:26:02: 5a:1e:cb:da:d6:4b:87:2e:c3:f9:a0:28:67:f0:08:41:7a:fc: 2f:97:a2:03:59:52:b3:4d:16:28:f9:36:98:50:c3:90:b3:d3: ad:4c:d0:86:d5:39:0c:12:bd:c3:15:98:cb:8e:96:66:ce:ef: 2d:34:4c:80:03:ab:cb:3f:ae:6e:bf:03:4b:c9:35:a0:b7:aa: 70:be:59:dc:37:82:cc:2a:a5:30:63:ad:5d:8d:72:e8:e6:0a: a5:79:ee:5d:03:dd:e8:bc:bf:3f:83:a6:38:f7:b8:7d:50:1b: af:c6:ba:e2:f1:8b:f4:00:8e:ec:f6:cf:d8:91:e0:08:45:a0: 69:d4:83:86:5e:9c:11:b6:ba:65:35:f9:df:65:22:dc:5c:b7: 2a:9a:97:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTdIwZhB2rMS7xm3EEMelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz ODkxY2MwHhcNMjUxMjI0MDMwMTIxWhcNMjUxMjI1MDMwMTIxWjAzMTEwLwYDVQQD Eyg4MTAzOTAwOGZmNzAzMGRmNTM5YWY2NjkzNjZhZDFhOWExZGM2ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M26TfvqKRR/nqP8gDZfRwEs+vl/ QcAIHVoqHP4QH3CLx6LLBcfuYX34ZV7CoNHPwI5liAQNq0Vz874sBnttEr956oWH zD/+KnOFfnt96kTEfKBSvj0uUgrHizUwqXa+47OvUkw3WB0WNb7T0wOuNgvfWmcM 2htOlrgvFFoZWbAc55pWQg1yrcqGd+pIPkjZdFjEBbEhcDu0Kdilct75YDZd1lkB HcPazf87FNXfkSn48b9TbMd0ZyZsrdXx/svFx8eNDLlfE9reeihGwMIduKeU/z40 VtQIn59BYbWc93rltJGrXLSi6lCLQ4g8XAJN3bPYrYe3BMuBEZD3kcqAWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEDkAj/cDDfU5r2aTZq0amh3G9gMB8GA1UdIwQY MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt YjcwNGVlMjdjNjVjLzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtvZeZyy pLgKCtmQAPyWHqyjCap70mQi4eFgArbqlBNffZFMlo10BLoQrAkwk/04cpwZ3UlW CYVCQNNI+C0+UR6MK3X8HnMZmn5uMB03t8NrqKLgQAP1KxgMTeDcLgNvHeW/DsRl UdzQVSYCWh7L2tZLhy7D+aAoZ/AIQXr8L5eiA1lSs00WKPk2mFDDkLPTrUzQhtU5 DBK9wxWYy46WZs7vLTRMgAOryz+ubr8DS8k1oLeqcL5Z3DeCzCqlMGOtXY1y6OYK pXnuXQPd6Ly/P4OmOPe4fVAbr8a64vGL9ACO7PbP2JHgCEWgadSDhl6cEba6ZTX5 32Ui3Fy3KpqX9A== -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:22 2025 by rpki-client