This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json) Hash identifier: uxIOBk9Ye3+4QswOfCXz9qnfBsz+244T7h9/nWIDonA= Subject key identifier: 07:BE:A3:15:B0:AC:46:17:66:34:65:4D:FA:9C:12:B2:AF:17:5B:C1 Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0 Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0 Certificate serial: 019B52CEA9CFA8F5CC3726D4CD6CD322D9E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 00:00:34 +0000 Manifest this update: Thu 25 Dec 2025 00:00:34 +0000 Manifest next update: Fri 26 Dec 2025 00:00:34 +0000 Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=) 2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: XIxkCwsrQwWXgkWrjI53Unq1EH1OkswGTTWk31FWWC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:a9:cf:a8:f5:cc:37:26:d4:cd:6c:d3:22:d9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0 Validity Not Before: Dec 25 00:00:34 2025 GMT Not After : Dec 26 00:00:34 2025 GMT Subject: CN=07bea315b0ac46176634654dfa9c12b2af175bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:7a:80:9c:d1:61:30:46:a9:0a:a4:34:44: a5:88:27:06:13:1b:3b:42:e1:0c:ec:62:cb:9f:ff: d7:c2:a8:d7:4e:5d:aa:9a:1d:b5:86:67:2f:de:b9: 7c:42:4c:2c:7b:ff:b2:8c:20:c6:41:4e:83:92:fb: 40:eb:19:89:3d:39:33:03:87:2a:b2:7d:a1:a5:ba: c0:d5:27:f1:30:7c:a2:f6:42:82:db:45:ea:d4:a9: 35:ba:91:39:4b:74:29:46:ad:f3:9c:37:be:a1:07: 5e:0e:fe:ec:95:aa:2e:01:cd:e3:7b:84:5b:77:d4: cd:af:3b:33:55:54:41:2b:fd:c7:38:5f:1a:e5:08: 9b:49:e8:0d:41:58:39:3c:20:f5:4d:f6:1b:8e:0d: e6:6b:1a:c1:76:81:09:dc:e6:da:0b:75:ce:80:a2: 53:96:ac:ed:5a:63:7b:99:19:40:0d:6e:20:bd:33: c3:d4:96:50:99:11:7b:6f:da:b2:e6:df:3b:35:2c: 4e:78:72:4c:0e:f8:50:5e:d8:5b:a6:d8:7b:d6:6a: 5d:99:8b:ac:08:d6:65:c3:29:e4:af:50:57:78:61: c2:84:90:d2:b4:50:b1:40:bc:79:b2:5a:03:3b:9f: 98:7f:db:a4:a7:38:c5:39:56:3c:ec:42:83:ac:57: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BE:A3:15:B0:AC:46:17:66:34:65:4D:FA:9C:12:B2:AF:17:5B:C1 X509v3 Authority Key Identifier: keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:22:07:dd:3d:27:95:59:cb:c0:3e:a4:5f:58:46:20:4a:2b: 5b:57:e5:5e:7a:b2:93:3f:2c:78:78:b8:e6:c2:24:f6:a9:1f: 83:ec:ca:6f:e5:20:b7:32:ec:c2:ed:3b:8f:8a:27:01:c6:6a: ae:c9:db:ff:c7:33:75:03:47:ea:33:db:b8:a8:13:48:e1:3d: 1d:7c:97:0a:56:05:22:63:bb:28:89:73:ff:6f:0b:01:a8:9c: 1c:66:a6:0b:51:15:ef:b9:d1:ae:ee:97:11:2e:93:a4:d0:66: c6:5f:03:4d:0b:95:2f:f3:a4:bb:c8:aa:15:e4:f9:ec:5c:ef: 06:88:a5:dc:6d:7c:23:77:7e:04:db:f2:42:99:c0:a4:2a:2b: 32:54:b7:6c:42:2e:19:c7:fb:eb:40:ac:e0:ff:01:50:85:d8: 42:44:11:5d:e2:0e:96:ea:13:d6:54:44:e1:f2:97:55:bf:d2: da:cb:56:66:65:b1:d8:4a:b3:73:9a:81:47:85:0e:6f:2e:5e: c3:fd:14:82:0b:93:26:5d:68:89:a7:64:cc:c3:d6:99:bc:cc: a2:a9:8f:de:86:22:03:af:c1:9b:45:04:e9:86:9d:b9:67:47: e5:11:f8:b1:63:16:58:1c:86:05:fc:f7:69:f5:49:01:b7:25: 0c:8f:a3:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzqnPqPXMNybUzWzTItnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNGUyY2YwMDJkNDVmZjlhZGUyYWI4NjQzYWRiZmUwODNj YTEyZDAwHhcNMjUxMjI1MDAwMDM0WhcNMjUxMjI2MDAwMDM0WjAzMTEwLwYDVQQD EygwN2JlYTMxNWIwYWM0NjE3NjYzNDY1NGRmYTljMTJiMmFmMTc1YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBx6gJzRYTBGqQqkNESliCcGExs7 QuEM7GLLn//XwqjXTl2qmh21hmcv3rl8Qkwse/+yjCDGQU6DkvtA6xmJPTkzA4cq sn2hpbrA1SfxMHyi9kKC20Xq1Kk1upE5S3QpRq3znDe+oQdeDv7slaouAc3je4Rb d9TNrzszVVRBK/3HOF8a5QibSegNQVg5PCD1TfYbjg3maxrBdoEJ3ObaC3XOgKJT lqztWmN7mRlADW4gvTPD1JZQmRF7b9qy5t87NSxOeHJMDvhQXthbpth71mpdmYus CNZlwynkr1BXeGHChJDStFCxQLx5sloDO5+Yf9ukpzjFOVY87EKDrFc5jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAe+oxWwrEYXZjRlTfqcErKvF1vBMB8GA1UdIwQY MBaAFEpOLPAC1F/5reKrhkOtv+CDyhLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYt OWFjODFlZjQ1OTJjLzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYtOWFjODFlZjQ1OTJj LzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiIH3T0n lVnLwD6kX1hGIEorW1flXnqykz8seHi45sIk9qkfg+zKb+UgtzLswu07j4onAcZq rsnb/8czdQNH6jPbuKgTSOE9HXyXClYFImO7KIlz/28LAaicHGamC1EV77nRru6X ES6TpNBmxl8DTQuVL/Oku8iqFeT57FzvBoil3G18I3d+BNvyQpnApCorMlS3bEIu Gcf760Cs4P8BUIXYQkQRXeIOluoT1lRE4fKXVb/S2stWZmWx2Eqzc5qBR4UOby5e w/0UgguTJl1oiadkzMPWmbzMoqmP3oYiA6/Bm0UE6YaduWdH5RH4sWMWWByGBfz3 afVJAbclDI+jIg== -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:19 2025 by rpki-client