This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft File: S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json) Hash identifier: almpGd7ujnFTKdpDFinfuSR2rDRLZYZ7oc5mN33Z29E= Subject key identifier: 7C:2E:2D:60:48:93:3F:BD:79:98:EB:E1:EA:77:38:E0:6D:9D:AF:A5 Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b Certificate serial: 019B70D966F5117F3B37A7A6A562C1DA931A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft Manifest number: 0328 Signing time: Tue 30 Dec 2025 20:00:54 +0000 Manifest this update: Tue 30 Dec 2025 20:00:54 +0000 Manifest next update: Wed 31 Dec 2025 20:00:54 +0000 Files and hashes: 1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: E8wGnvtJkTyG1nAENdRIwjnKNjkNEK5iMwwrY0cZII8=) 2: nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa (hash: 9j/+zG1+gdxJdHggAHxvXOVulCvMT9Y+f9TRZ3Vf7+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:66:f5:11:7f:3b:37:a7:a6:a5:62:c1:da:93:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b Validity Not Before: Dec 30 20:00:54 2025 GMT Not After : Dec 31 20:00:54 2025 GMT Subject: CN=7c2e2d6048933fbd7998ebe1ea7738e06d9dafa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:ac:33:f9:60:bf:da:74:80:27:dd:cb:f2: 38:84:77:3d:a3:bd:ab:62:fa:c7:1c:db:0c:65:14: a1:6e:61:47:65:fb:30:d7:48:c4:e4:09:27:38:8d: 5d:e1:ec:42:b0:d8:be:44:01:7c:a0:fb:fe:9a:23: 84:2f:43:85:a1:f7:c3:e6:0f:72:6f:d9:aa:42:cf: fb:df:62:12:98:56:11:8d:9c:14:9b:3b:14:72:ed: 2d:72:9b:f8:18:8b:ff:92:4e:6a:ed:1b:5c:24:fd: 16:21:29:ef:8f:ff:65:f5:9b:b8:1b:91:19:06:4b: 40:27:82:b7:62:5f:4a:e8:16:37:67:a9:82:af:66: 1c:bf:1a:8c:8d:29:1d:02:3e:b7:b7:80:6d:35:1d: 88:94:6a:e4:02:e8:cf:27:6a:98:97:ce:32:fc:33: 71:c9:69:34:76:cf:ce:40:32:f8:e6:b0:36:5a:a4: e8:02:b3:ef:be:76:e5:7a:78:03:27:fe:10:37:5e: f8:d4:fb:9c:8b:68:97:c9:f3:dc:59:10:27:1f:d9: 30:68:75:2c:e5:84:17:02:23:5d:a5:fd:07:ec:ba: 05:a8:e5:36:3f:ac:ac:d4:56:7d:db:06:5e:44:59: 80:94:7d:99:42:05:72:29:14:e3:d2:55:b6:cb:75: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2E:2D:60:48:93:3F:BD:79:98:EB:E1:EA:77:38:E0:6D:9D:AF:A5 X509v3 Authority Key Identifier: keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:52:27:c5:34:1c:8b:cd:82:32:61:a6:78:21:75:b2:c2:22: 40:f1:ec:c2:d2:e2:9e:92:75:c9:62:a3:d6:60:6b:70:c8:35: 4e:8b:b7:92:b4:dd:2c:de:73:92:0e:a7:d3:a7:2b:ea:94:66: 6d:66:66:66:e1:08:74:a8:20:df:9f:0d:fb:c3:62:de:93:99: 62:a1:79:d1:aa:54:1c:99:88:d0:94:4c:f1:a8:d6:83:ba:e3: ed:1a:17:b7:4e:cd:fc:df:b9:51:20:93:57:18:c3:a6:8c:ce: 93:07:99:0c:09:5a:e8:00:b4:2d:8d:3e:7f:f9:82:96:7d:a5: d4:04:43:d6:1d:4b:a7:8e:60:66:45:29:1d:d1:b4:7d:22:8a: 74:81:39:23:5e:1b:51:c8:c2:e3:02:f8:c8:fb:1b:d1:2d:8f: 23:58:20:67:94:a4:03:b4:5c:e5:60:d7:ee:e6:a9:71:ec:a8: 7e:07:e8:fd:a1:e2:80:ec:37:03:04:8d:9a:4f:53:e2:3e:08: f1:41:2b:7a:40:7f:f0:db:8c:a5:15:c8:2a:f0:7c:4a:d3:a1: 5e:50:96:1b:ec:23:e1:cb:2f:44:c7:54:1d:91:5c:70:c6:2a: 84:62:cf:48:9d:c0:47:f6:83:da:2e:fc:53:bc:e4:cb:aa:52: 3a:f7:9a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2Wb1EX87N6empWLB2pMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZmQ5YzE0MDZjOGNhMTJmZjUwMGIxZmQ0YzgwMDQxNDZh MmRhNGIwHhcNMjUxMjMwMjAwMDU0WhcNMjUxMjMxMjAwMDU0WjAzMTEwLwYDVQQD Eyg3YzJlMmQ2MDQ4OTMzZmJkNzk5OGViZTFlYTc3MzhlMDZkOWRhZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg2sM/lgv9p0gCfdy/I4hHc9o72r YvrHHNsMZRShbmFHZfsw10jE5AknOI1d4exCsNi+RAF8oPv+miOEL0OFoffD5g9y b9mqQs/732ISmFYRjZwUmzsUcu0tcpv4GIv/kk5q7RtcJP0WISnvj/9l9Zu4G5EZ BktAJ4K3Yl9K6BY3Z6mCr2YcvxqMjSkdAj63t4BtNR2IlGrkAujPJ2qYl84y/DNx yWk0ds/OQDL45rA2WqToArPvvnblengDJ/4QN1741Puci2iXyfPcWRAnH9kwaHUs 5YQXAiNdpf0H7LoFqOU2P6ys1FZ92wZeRFmAlH2ZQgVyKRTj0lW2y3WfFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwuLWBIkz+9eZjr4ep3OOBtna+lMB8GA1UdIwQY MBaAFEv9nBQGyMoS/1ALH9TIAEFGotpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQt NDgzNDY1YjBjOGY1LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQtNDgzNDY1YjBjOGY1 LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVInxTQc i82CMmGmeCF1ssIiQPHswtLinpJ1yWKj1mBrcMg1Tou3krTdLN5zkg6n06cr6pRm bWZmZuEIdKgg358N+8Ni3pOZYqF50apUHJmI0JRM8ajWg7rj7RoXt07N/N+5USCT VxjDpozOkweZDAla6AC0LY0+f/mCln2l1ARD1h1Lp45gZkUpHdG0fSKKdIE5I14b UcjC4wL4yPsb0S2PI1ggZ5SkA7Rc5WDX7uapceyofgfo/aHigOw3AwSNmk9T4j4I 8UErekB/8NuMpRXIKvB8StOhXlCWG+wj4csvRMdUHZFccMYqhGLPSJ3AR/aD2i78 U7zky6pSOveaKw== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:10 2025 by rpki-client