This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json) Hash identifier: e51Cdghr3y3BVJdraeD76huWu2QjlLpgES6i4D7Ybew= Subject key identifier: F4:93:C4:A6:AE:0F:6C:CE:AB:AE:F4:DC:C3:65:F7:3A:8E:41:34:46 Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Certificate serial: 019B32313868DA4E25B84DB3774D500B2B51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft Manifest number: 05E9 Signing time: Thu 18 Dec 2025 16:00:44 +0000 Manifest this update: Thu 18 Dec 2025 16:00:44 +0000 Manifest next update: Fri 19 Dec 2025 16:00:44 +0000 Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=) 2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: LysqilU1n1gpYK1CME6GI4oK+i4WrMlFLQhUE2juoiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:38:68:da:4e:25:b8:4d:b3:77:4d:50:0b:2b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Validity Not Before: Dec 18 16:00:44 2025 GMT Not After : Dec 19 16:00:44 2025 GMT Subject: CN=f493c4a6ae0f6cceabaef4dcc365f73a8e413446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:aa:ec:a8:5e:cc:68:51:b3:13:2c:c1:b7: ba:e9:d9:24:f6:34:fe:10:12:e2:25:1f:1c:2a:c0: 4a:dc:a7:70:6e:d0:3a:0b:53:ee:62:22:11:1a:5e: ac:02:c9:bd:dd:40:e5:f2:b2:6f:99:4c:43:fe:62: af:cd:21:a2:ce:dd:ef:f6:a9:70:04:0d:cd:79:77: 5a:53:74:37:58:00:dd:ab:1b:70:d4:22:ed:f1:e7: 50:b0:c4:61:06:a0:9a:b4:bd:a2:f3:b8:96:ec:09: 87:69:51:4a:c8:ed:c7:44:9a:b2:b8:e6:a3:04:ac: e6:c7:08:99:b4:e4:63:37:88:f1:27:43:cb:fd:e9: 33:b0:b0:ca:13:d5:4d:f4:14:33:22:00:b8:92:01: 57:f0:8b:c4:28:65:45:ed:73:0e:31:71:9e:af:b0: aa:c4:76:3e:e5:d6:64:0d:cd:ab:39:b9:46:bd:66: ec:34:08:13:d4:44:80:78:ef:92:43:50:04:61:3a: aa:6e:89:26:f2:98:6f:76:71:7a:2d:eb:2d:75:b3: 75:dc:2b:4f:06:e6:31:e7:1a:1c:5e:33:6e:ef:25: c3:9b:ef:37:8b:49:a6:89:60:ce:eb:d0:9e:57:09: be:1b:3e:2b:2b:98:ca:3a:17:ce:86:55:57:f3:c4: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:93:C4:A6:AE:0F:6C:CE:AB:AE:F4:DC:C3:65:F7:3A:8E:41:34:46 X509v3 Authority Key Identifier: keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:65:87:8c:f9:78:86:2b:07:67:05:da:ee:ab:f3:6d:cc:2c: 52:e0:d0:7d:45:3d:2f:22:43:eb:bc:29:19:43:42:10:8f:73: fe:f2:de:04:2b:61:e6:e6:7c:76:e9:ba:57:b8:bd:b3:7e:4a: 69:60:93:70:65:53:b2:c0:e8:9f:22:91:c3:e1:12:c7:f7:b1: c3:f0:69:db:41:6a:34:ff:a3:71:8e:00:32:bd:09:cf:64:5b: 9d:7f:39:c6:ce:bb:64:20:c7:7e:a4:c8:fe:1b:ab:b9:98:b1: f2:7a:3b:22:c8:57:57:59:af:db:2a:fe:3a:2c:26:f6:c5:00: ab:39:c6:3f:8a:a2:3c:4c:0b:01:7b:2c:bd:70:54:cf:97:33: 4b:73:b1:96:8c:70:50:d3:1d:8a:48:cc:09:c1:40:cd:4b:a0: 24:f3:0a:4a:cc:af:38:5a:00:a8:ff:eb:a7:e9:b5:f1:fd:4d: cf:1b:61:d4:1d:9f:ba:a9:d5:66:e0:ca:25:94:0e:4f:b2:56: 3a:5b:89:7d:ee:da:07:f6:25:d3:b0:84:30:49:36:ed:fb:21: 53:f9:f3:92:ed:0c:fe:12:bd:55:af:35:66:60:f9:e7:2e:36: 84:42:ba:96:03:a0:e3:58:4e:c6:e3:44:2b:96:1c:20:13:44: b7:ff:dd:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMTho2k4luE2zd01QCytRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj ZjZjZWQwHhcNMjUxMjE4MTYwMDQ0WhcNMjUxMjE5MTYwMDQ0WjAzMTEwLwYDVQQD EyhmNDkzYzRhNmFlMGY2Y2NlYWJhZWY0ZGNjMzY1ZjczYThlNDEzNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVKq7KhezGhRsxMswbe66dkk9jT+ EBLiJR8cKsBK3KdwbtA6C1PuYiIRGl6sAsm93UDl8rJvmUxD/mKvzSGizt3v9qlw BA3NeXdaU3Q3WADdqxtw1CLt8edQsMRhBqCatL2i87iW7AmHaVFKyO3HRJqyuOaj BKzmxwiZtORjN4jxJ0PL/ekzsLDKE9VN9BQzIgC4kgFX8IvEKGVF7XMOMXGer7Cq xHY+5dZkDc2rOblGvWbsNAgT1ESAeO+SQ1AEYTqqbokm8phvdnF6LestdbN13CtP BuYx5xocXjNu7yXDm+83i0mmiWDO69CeVwm+Gz4rK5jKOhfOhlVX88QKFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSTxKauD2zOq6703MNl9zqOQTRGMB8GA1UdIwQY MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt MDE5YTA1Y2U1ZTdhLzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWWHjPl4 hisHZwXa7qvzbcwsUuDQfUU9LyJD67wpGUNCEI9z/vLeBCth5uZ8dum6V7i9s35K aWCTcGVTssDonyKRw+ESx/exw/Bp20FqNP+jcY4AMr0Jz2RbnX85xs67ZCDHfqTI /huruZix8no7IshXV1mv2yr+Oiwm9sUAqznGP4qiPEwLAXssvXBUz5czS3Oxloxw UNMdikjMCcFAzUugJPMKSsyvOFoAqP/rp+m18f1Nzxth1B2fuqnVZuDKJZQOT7JW OluJfe7aB/Yl07CEMEk27fshU/nzku0M/hK9Va81ZmD55y42hEK6lgOg41hOxuNE K5YcIBNEt//dmw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:37:17 2025 by rpki-client