This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json) Hash identifier: MMkzj97wfPomy+3rwNqvsVu40HxdkXcUegcmP1JOOJQ= Subject key identifier: 8C:2D:EC:ED:8F:D8:03:03:4F:05:62:E4:B0:A4:BB:6C:09:24:B2:1F Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Certificate serial: 019B5CADAE8728C7540B18763D3BA18240E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft Manifest number: 05FF Signing time: Fri 26 Dec 2025 22:00:44 +0000 Manifest this update: Fri 26 Dec 2025 22:00:44 +0000 Manifest next update: Sat 27 Dec 2025 22:00:44 +0000 Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=) 2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: BQPCaTzZTblIXB2RS7bDmnuM+LmzDO/QbZ5TpT2VNQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:ae:87:28:c7:54:0b:18:76:3d:3b:a1:82:40:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Validity Not Before: Dec 26 22:00:44 2025 GMT Not After : Dec 27 22:00:44 2025 GMT Subject: CN=8c2deced8fd803034f0562e4b0a4bb6c0924b21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:84:9f:82:90:e2:89:3b:4f:19:01:dd:3c: 2c:b6:38:23:83:8e:11:0a:e0:dd:8e:94:6c:4f:88: be:c3:f7:04:6d:59:79:3a:20:73:5f:3a:38:8e:9a: 44:bc:e5:27:91:c1:94:cf:7d:92:a3:c4:bf:ff:7b: c1:5d:bd:64:7f:22:ba:eb:76:b6:d7:4f:d2:9a:04: 3e:ba:b6:6a:88:f0:36:8f:02:5b:ba:d8:ea:93:c9: cb:6c:cd:bd:9e:1f:de:cd:76:67:b9:cd:dd:61:13: d7:8b:29:07:18:8c:30:7e:f2:cb:ef:21:6c:7d:bd: 6c:77:f2:1f:f2:2a:7f:c6:5d:94:df:d6:a0:1c:ce: a0:09:96:b7:a9:b2:5f:73:da:a1:84:f8:fd:0a:00: e0:15:06:47:64:6b:25:42:33:0d:b3:22:5c:1e:8f: 47:c1:bb:cc:9f:b1:cc:75:05:82:3e:fc:43:31:4a: 3f:95:4f:84:6e:57:a2:6b:2b:6e:b5:f7:92:c4:b0: 73:06:6c:9e:98:e9:5d:03:67:9c:14:de:1f:b7:fc: 01:8c:6e:b7:b0:fd:6c:0b:5d:21:e9:d4:81:6d:8c: 4f:b7:eb:58:6f:dc:21:71:5b:ae:0f:79:d5:ee:6b: fd:53:51:4f:a2:c9:68:69:e7:d0:b4:d9:bc:44:ee: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2D:EC:ED:8F:D8:03:03:4F:05:62:E4:B0:A4:BB:6C:09:24:B2:1F X509v3 Authority Key Identifier: keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7e:fd:98:a5:12:d6:94:2f:28:3e:de:03:e7:78:2a:d7:38: 62:c6:93:11:c2:24:16:78:1a:2a:8f:fb:77:3d:c3:f9:2f:1f: 56:43:6c:df:6a:4a:30:a2:e7:d1:04:b3:66:8a:00:3f:9d:98: 37:42:2b:bf:4a:1f:70:da:4c:62:4a:c5:c0:13:71:f9:08:ed: de:6c:f0:64:3b:55:93:2e:0f:d9:fd:fb:79:57:63:bf:ec:df: ba:0d:bf:8f:ee:dd:56:62:90:05:e0:8a:e9:3e:a5:58:96:85: e9:a6:16:6d:e1:d0:b4:95:5c:18:17:f6:11:6f:4c:c2:54:92: 61:6f:0f:21:7b:e7:03:99:a1:1f:20:cf:76:9d:c4:54:99:5a: b2:8e:c5:a5:d1:a4:78:31:f7:36:bd:0a:9c:0d:bb:89:ac:51: 30:4c:47:cd:c8:81:3a:75:23:c5:0d:38:e1:cf:35:73:8b:59: 6c:69:3c:e8:77:0e:2d:4a:7c:aa:b7:67:96:3b:ea:3a:ed:d9: 76:d1:45:26:75:99:42:83:45:c5:58:54:84:93:bb:c8:27:21: a3:1e:00:c0:eb:ab:b8:82:a1:02:3c:71:36:74:7d:23:89:01: 40:a6:78:3e:4f:c5:6e:a2:5d:d6:f9:f9:50:c2:1c:bf:c1:7c: 10:7b:cd:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcra6HKMdUCxh2PTuhgkDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj ZjZjZWQwHhcNMjUxMjI2MjIwMDQ0WhcNMjUxMjI3MjIwMDQ0WjAzMTEwLwYDVQQD Eyg4YzJkZWNlZDhmZDgwMzAzNGYwNTYyZTRiMGE0YmI2YzA5MjRiMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNqEn4KQ4ok7TxkB3Twstjgjg44R CuDdjpRsT4i+w/cEbVl5OiBzXzo4jppEvOUnkcGUz32So8S//3vBXb1kfyK663a2 10/SmgQ+urZqiPA2jwJbutjqk8nLbM29nh/ezXZnuc3dYRPXiykHGIwwfvLL7yFs fb1sd/If8ip/xl2U39agHM6gCZa3qbJfc9qhhPj9CgDgFQZHZGslQjMNsyJcHo9H wbvMn7HMdQWCPvxDMUo/lU+EbleiaytutfeSxLBzBmyemOldA2ecFN4ft/wBjG63 sP1sC10h6dSBbYxPt+tYb9whcVuuD3nV7mv9U1FPosloaefQtNm8RO4EJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwt7O2P2AMDTwVi5LCku2wJJLIfMB8GA1UdIwQY MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt MDE5YTA1Y2U1ZTdhLzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArH79mKUS 1pQvKD7eA+d4Ktc4YsaTEcIkFngaKo/7dz3D+S8fVkNs32pKMKLn0QSzZooAP52Y N0Irv0ofcNpMYkrFwBNx+Qjt3mzwZDtVky4P2f37eVdjv+zfug2/j+7dVmKQBeCK 6T6lWJaF6aYWbeHQtJVcGBf2EW9MwlSSYW8PIXvnA5mhHyDPdp3EVJlaso7FpdGk eDH3Nr0KnA27iaxRMExHzciBOnUjxQ044c81c4tZbGk86HcOLUp8qrdnljvqOu3Z dtFFJnWZQoNFxVhUhJO7yCchox4AwOuruIKhAjxxNnR9I4kBQKZ4Pk/FbqJd1vn5 UMIcv8F8EHvNjw== -----END CERTIFICATE-----Generated at Sat Dec 27 01:04:10 2025 by rpki-client