This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json) Hash identifier: vY05QmOX3M3wzo4zBgO/j8Jl9zW79+ISO5ijjHmoEdA= Subject key identifier: 0D:CC:26:C3:0B:7E:75:41:32:F5:8A:CC:C5:D5:40:0C:C1:F4:CA:C1 Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Certificate serial: 019B5418E7F345B5E680F03EEC2A6C8445C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft Manifest number: 097F Signing time: Thu 25 Dec 2025 06:01:16 +0000 Manifest this update: Thu 25 Dec 2025 06:01:16 +0000 Manifest next update: Fri 26 Dec 2025 06:01:16 +0000 Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: V12zpx1Be5fzhrE678e9sjHTPa7fyeONuM27PIvrjtU=) 2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:e7:f3:45:b5:e6:80:f0:3e:ec:2a:6c:84:45:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Validity Not Before: Dec 25 06:01:16 2025 GMT Not After : Dec 26 06:01:16 2025 GMT Subject: CN=0dcc26c30b7e754132f58accc5d5400cc1f4cac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:71:52:f8:79:14:53:cf:2c:af:b6:df:eb: 9c:92:59:e8:d7:01:e6:da:c1:ec:1d:85:b1:03:8a: b9:19:c7:51:bd:45:a7:a9:aa:89:e8:74:79:06:38: 17:74:31:47:9e:3b:60:09:75:9a:e6:08:d9:34:44: f4:fa:70:27:18:3f:2f:0d:58:8a:d1:b4:ee:cc:2c: 4b:bd:63:c8:1b:2d:50:4f:06:c5:68:5c:db:24:88: ff:ce:05:20:fd:6d:ba:8b:d2:95:a9:ee:21:12:6d: 09:ce:f8:9b:a1:c3:82:6e:17:c0:9d:aa:c2:0a:30: c2:61:60:28:1e:1b:b1:d1:38:75:6a:96:bd:50:dd: 72:ce:ca:44:a2:14:2a:e6:98:6a:8e:f2:01:7a:f1: 6f:83:29:02:db:ff:bb:c0:28:c5:11:99:d2:77:85: a8:cf:3f:16:68:67:65:be:01:35:0b:1b:60:db:62: 82:b4:b4:3a:cc:68:cb:48:19:00:eb:76:55:16:b4: 74:80:84:75:5e:37:0d:48:24:e2:5b:8b:74:19:33: 40:b8:a6:13:22:e3:72:98:f5:ad:4e:62:6b:01:90: 7f:fb:a3:83:6f:f9:c9:19:00:42:d4:ef:a2:dc:57: df:0a:d5:47:e9:c3:99:be:6b:12:a3:43:ef:40:0e: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CC:26:C3:0B:7E:75:41:32:F5:8A:CC:C5:D5:40:0C:C1:F4:CA:C1 X509v3 Authority Key Identifier: keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:72:13:75:e7:07:b6:94:9f:cb:8b:20:38:34:e5:31:63:ae: 5d:38:a0:89:0b:30:b7:b5:14:65:b2:85:59:79:8f:a0:0f:8a: 82:95:21:bd:14:6f:42:d2:be:c8:b0:c7:62:1d:b5:4b:66:02: a6:07:c3:e3:22:78:9b:95:a5:d6:e4:ba:20:40:ff:51:78:64: 39:1a:bd:1f:24:0b:f8:af:74:24:04:b7:55:47:55:f4:80:01: 74:73:67:8c:af:50:c2:73:c9:74:30:7d:4c:e9:88:24:8b:ae: 6d:9a:94:b5:c1:44:e2:b1:f3:c3:a6:ea:d6:04:14:05:0e:4c: 36:e5:04:83:d2:89:26:13:73:6e:78:8c:64:0d:bd:ca:eb:b7: b5:e8:ed:10:52:6c:06:2f:87:fc:5c:9e:36:1f:be:08:f1:9c: 98:d9:20:6b:b5:c9:5a:7e:79:f1:78:e0:74:00:3c:bc:a6:62: 12:e9:8d:21:a0:2c:52:3d:e6:a3:d8:af:40:64:8e:43:2a:d9: 54:69:64:56:8e:ef:3a:7e:e7:a9:92:25:88:66:cf:04:12:3b: bc:0e:38:60:4e:6c:ca:cb:e9:a4:79:88:11:44:30:30:6c:de: e4:86:4e:79:5c:d3:d0:54:fd:6e:e7:ec:df:b4:0e:ca:5d:39: bb:62:61:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGOfzRbXmgPA+7CpshEXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz ODkxY2MwHhcNMjUxMjI1MDYwMTE2WhcNMjUxMjI2MDYwMTE2WjAzMTEwLwYDVQQD EygwZGNjMjZjMzBiN2U3NTQxMzJmNThhY2NjNWQ1NDAwY2MxZjRjYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZpxUvh5FFPPLK+23+ucklno1wHm 2sHsHYWxA4q5GcdRvUWnqaqJ6HR5BjgXdDFHnjtgCXWa5gjZNET0+nAnGD8vDViK 0bTuzCxLvWPIGy1QTwbFaFzbJIj/zgUg/W26i9KVqe4hEm0JzvibocOCbhfAnarC CjDCYWAoHhux0Th1apa9UN1yzspEohQq5phqjvIBevFvgykC2/+7wCjFEZnSd4Wo zz8WaGdlvgE1Cxtg22KCtLQ6zGjLSBkA63ZVFrR0gIR1XjcNSCTiW4t0GTNAuKYT IuNymPWtTmJrAZB/+6ODb/nJGQBC1O+i3FffCtVH6cOZvmsSo0PvQA4BXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3MJsMLfnVBMvWKzMXVQAzB9MrBMB8GA1UdIwQY MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt YjcwNGVlMjdjNjVjLzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3ITdecH tpSfy4sgODTlMWOuXTigiQswt7UUZbKFWXmPoA+KgpUhvRRvQtK+yLDHYh21S2YC pgfD4yJ4m5Wl1uS6IED/UXhkORq9HyQL+K90JAS3VUdV9IABdHNnjK9QwnPJdDB9 TOmIJIuubZqUtcFE4rHzw6bq1gQUBQ5MNuUEg9KJJhNzbniMZA29yuu3tejtEFJs Bi+H/FyeNh++CPGcmNkga7XJWn558XjgdAA8vKZiEumNIaAsUj3mo9ivQGSOQyrZ VGlkVo7vOn7nqZIliGbPBBI7vA44YE5sysvppHmIEUQwMGze5IZOeVzT0FT9bufs 37QOyl05u2JhnQ== -----END CERTIFICATE-----Generated at Thu Dec 25 11:17:10 2025 by rpki-client