This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json) Hash identifier: gu8p17/V/v5eQj2BxOitoAWjqr/gt7846e3d5TNAAJ0= Subject key identifier: 78:7C:5B:D6:2D:E0:15:6E:9C:87:3E:DB:DB:98:F6:F3:AE:28:48:83 Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87 Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587 Certificate serial: 019B3E6D719CFD21FC9E509A60A64E71BB9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft Manifest number: 08B4 Signing time: Sun 21 Dec 2025 01:01:58 +0000 Manifest this update: Sun 21 Dec 2025 01:01:58 +0000 Manifest next update: Mon 22 Dec 2025 01:01:58 +0000 Files and hashes: 1: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: bKPEraCp3g1iLYncbb+JA7meRWBLR5l+LpepnAATTe4=) 2: kT2WLss-xy9pF9s9GarSzQrBM-Q.roa (hash: hYz5jWo4oKQmaTX9l+ApaBrMbMbO4PX2dWQbOQeh4ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:71:9c:fd:21:fc:9e:50:9a:60:a6:4e:71:bb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587 Validity Not Before: Dec 21 01:01:58 2025 GMT Not After : Dec 22 01:01:58 2025 GMT Subject: CN=787c5bd62de0156e9c873edbdb98f6f3ae284883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:0e:68:93:1f:f3:69:4e:a3:ef:2c:0b:92: 09:81:36:b5:52:32:cd:28:31:70:92:f9:3f:4a:5b: 2c:9a:07:dc:d3:6d:9e:cf:de:05:84:1b:05:01:63: b8:15:8b:5b:75:91:bb:9c:1d:5f:35:53:92:50:f9: db:2a:88:1b:bc:0d:36:e1:3c:d6:6a:09:15:ba:96: 21:3f:d1:33:a9:8e:c0:34:bc:44:14:5a:f7:96:9e: 8e:98:b3:5b:f0:ff:a1:0e:84:5b:6b:75:d9:0b:97: dc:59:cb:9e:84:84:46:f0:ab:72:6d:3c:ba:25:4c: 55:89:79:c6:20:c4:00:a9:00:b5:7b:39:02:d7:0b: 72:2b:92:f6:0d:e8:7b:a4:26:ab:02:0a:ca:90:9a: f0:46:77:7d:4e:4d:c1:65:91:98:26:6e:30:3a:f6: bc:33:62:b6:98:90:57:a6:ff:a5:0c:13:8c:d1:e8: 25:ea:68:ab:ea:b3:c5:fc:49:7e:33:74:6a:0f:cb: 8e:45:59:ae:54:32:e6:26:6c:42:50:b8:b0:88:27: 69:d2:14:c2:23:fe:1e:23:78:a8:8b:03:b3:97:ce: d1:84:4e:da:c4:78:ed:f0:80:25:4d:6b:ae:b0:0a: c7:0a:40:b4:b7:ce:aa:52:4b:54:ac:45:49:f9:31: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7C:5B:D6:2D:E0:15:6E:9C:87:3E:DB:DB:98:F6:F3:AE:28:48:83 X509v3 Authority Key Identifier: keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5d:cc:ce:15:d5:f3:6c:88:bc:69:73:56:78:ff:1f:d7:7b: 39:29:94:a4:49:74:9d:29:be:e7:7e:7c:c6:61:62:c3:4d:4d: 7a:f1:03:07:ff:53:b6:15:e4:85:d2:e2:88:82:e3:68:76:27: 0e:77:6a:ef:92:c9:43:5e:f5:ff:3b:a9:f4:e1:a9:b9:54:b8: 79:c7:30:60:ed:d6:6b:6a:73:f7:a8:be:14:c8:77:58:f5:d2: a4:da:ad:73:7d:f9:b1:a2:56:34:f1:d1:92:a2:28:96:47:8c: 2e:eb:44:f5:f5:85:95:a5:a0:8e:28:d0:5a:73:af:39:21:b4: 5a:2f:d5:6c:8e:8e:7f:20:0b:e6:18:7f:11:75:a1:86:07:f3: 7f:15:fd:82:53:31:ec:69:e6:a3:39:0c:03:b7:8c:76:36:88: b6:82:e8:28:19:57:a7:e0:db:d2:fc:c3:7d:48:1b:64:e0:db: 4d:4a:74:7d:75:4a:35:8d:a4:eb:ee:bb:3c:54:3d:58:7a:c4: d4:67:7a:a4:f4:70:d7:17:74:16:40:27:ca:71:23:a5:c3:2e: 96:25:05:64:60:45:96:1b:86:45:74:93:36:18:ed:8b:d5:a0: 9f:5c:59:34:f8:33:a3:a2:e5:0a:a8:dc:f5:40:29:fb:a2:cb: f3:74:3c:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bXGc/SH8nlCaYKZOcbuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjRmOGMwZTFiMzlkOGE4ZWY4ZThjOGI1YTBmZmVlMmI1 M2I1ODcwHhcNMjUxMjIxMDEwMTU4WhcNMjUxMjIyMDEwMTU4WjAzMTEwLwYDVQQD Eyg3ODdjNWJkNjJkZTAxNTZlOWM4NzNlZGJkYjk4ZjZmM2FlMjg0ODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU0OaJMf82lOo+8sC5IJgTa1UjLN KDFwkvk/Slssmgfc022ez94FhBsFAWO4FYtbdZG7nB1fNVOSUPnbKogbvA024TzW agkVupYhP9EzqY7ANLxEFFr3lp6OmLNb8P+hDoRba3XZC5fcWcuehIRG8KtybTy6 JUxViXnGIMQAqQC1ezkC1wtyK5L2Deh7pCarAgrKkJrwRnd9Tk3BZZGYJm4wOva8 M2K2mJBXpv+lDBOM0egl6mir6rPF/El+M3RqD8uORVmuVDLmJmxCULiwiCdp0hTC I/4eI3ioiwOzl87RhE7axHjt8IAlTWuusArHCkC0t86qUktUrEVJ+TGigwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh8W9Yt4BVunIc+29uY9vOuKEiDMB8GA1UdIwQY MBaAFEtk+MDhs52KjvjoyLWg/+4rU7WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUt OTVkNWUxNmNkZGVmLzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUtOTVkNWUxNmNkZGVm LzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV3MzhXV 82yIvGlzVnj/H9d7OSmUpEl0nSm+5358xmFiw01NevEDB/9TthXkhdLiiILjaHYn Dndq75LJQ171/zup9OGpuVS4eccwYO3Wa2pz96i+FMh3WPXSpNqtc335saJWNPHR kqIolkeMLutE9fWFlaWgjijQWnOvOSG0Wi/VbI6OfyAL5hh/EXWhhgfzfxX9glMx 7GnmozkMA7eMdjaItoLoKBlXp+Db0vzDfUgbZODbTUp0fXVKNY2k6+67PFQ9WHrE 1Gd6pPRw1xd0FkAnynEjpcMuliUFZGBFlhuGRXSTNhjti9Wgn1xZNPgzo6LlCqjc 9UAp+6LL83Q8nA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:19 2025 by rpki-client