This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json) Hash identifier: nd1bWaDipHHct3FKroIY6nu9Ji67nmIg0QKQ38PQVX0= Subject key identifier: 7D:5A:80:A6:79:FC:51:B2:C7:23:46:25:02:96:83:9C:69:D9:D8:03 Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81 Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81 Certificate serial: 019B2B53D5025FA9DB2C4B0CF0792A8CF489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft Manifest number: 0B08 Signing time: Wed 17 Dec 2025 08:01:12 +0000 Manifest this update: Wed 17 Dec 2025 08:01:12 +0000 Manifest next update: Thu 18 Dec 2025 08:01:12 +0000 Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=) 2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: CArdEN3lpgeO9+p9IGACaVflK95OENhWoGDbQ0TeAhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:d5:02:5f:a9:db:2c:4b:0c:f0:79:2a:8c:f4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81 Validity Not Before: Dec 17 08:01:12 2025 GMT Not After : Dec 18 08:01:12 2025 GMT Subject: CN=7d5a80a679fc51b2c72346250296839c69d9d803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:75:5c:8f:cb:61:f4:25:86:ba:8e:fb:51: a4:dc:76:8d:a3:88:71:3f:1e:e9:1a:2d:05:f4:00: a6:59:f6:21:f4:45:88:9b:41:d6:e3:8d:f1:d8:1c: 1a:20:6b:82:ab:a4:99:fb:8e:be:cb:98:6c:c0:a5: 7c:35:de:eb:96:4a:af:83:58:3e:d8:83:ea:58:64: a4:2c:be:63:4d:20:ea:be:92:45:3c:57:d1:80:fe: bc:17:60:2b:0b:37:1a:f6:47:36:dc:b5:7d:fd:5c: 22:90:2f:7a:10:66:90:88:68:b1:c8:45:99:32:db: 87:0c:fe:8b:42:6f:0c:76:9e:df:ca:38:4c:40:dc: 1a:85:11:76:53:1f:ad:d7:16:0a:33:b5:86:12:33: fe:01:61:f8:67:9c:5e:f6:0f:45:74:ec:94:6c:ca: 69:d9:8d:fd:0f:e6:71:3d:45:8e:70:4e:5a:71:22: dc:3f:69:58:7c:3e:b0:2a:a0:51:0f:d9:89:35:1f: 8a:63:b4:d5:62:d3:67:9c:ed:bb:f2:40:24:68:d1: 69:c6:83:5b:41:a6:81:1a:0d:89:aa:19:11:fd:c1: 72:3c:6c:1f:e5:b2:9a:49:84:bd:12:e2:99:df:5a: ad:0f:0d:43:c9:ee:8d:98:ba:0c:2b:ab:a7:8d:ba: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5A:80:A6:79:FC:51:B2:C7:23:46:25:02:96:83:9C:69:D9:D8:03 X509v3 Authority Key Identifier: keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b0:84:02:7a:e0:0a:53:ba:24:73:bf:b9:30:33:41:d3:a4: 2f:66:4a:40:70:91:d1:e2:92:fb:aa:d2:24:01:be:c9:f2:9c: bc:e6:7e:6f:24:25:ec:32:49:cb:de:d0:4a:65:09:a4:6c:42: 43:5b:74:da:19:e9:7a:4c:16:6f:e7:b3:50:96:9e:8e:36:8d: 60:cc:cc:56:22:0d:dd:4d:b0:00:14:cc:f5:47:9b:3c:40:9f: 9a:68:de:47:d7:e7:58:8d:e4:98:bf:fd:94:c4:36:8f:88:be: c7:59:81:5c:5c:1c:4b:aa:81:b7:60:ac:c3:c7:f8:c7:68:bd: b7:10:58:e4:74:51:09:90:e9:c9:48:b8:26:fc:9f:b1:63:22: 55:69:07:b4:a4:c5:62:a3:c8:07:24:33:92:4c:9d:6f:61:b0: 5a:df:0c:19:c5:4d:b0:50:9e:37:d3:c2:55:21:f8:09:4a:1e: ee:c3:e8:c7:0d:a1:79:d3:b9:77:0e:ba:a6:62:74:14:3b:95: 4a:89:85:e2:d1:c1:4d:54:05:dd:12:b1:23:d4:d6:ef:eb:4c: 4b:02:f7:cc:03:0b:e6:dc:ce:35:96:fd:3b:01:b9:18:d3:c3: da:e0:5c:1a:6b:ee:dd:46:ad:eb:50:e0:92:47:58:43:9e:7d: b6:2b:5d:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU9UCX6nbLEsM8HkqjPSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzODU5NDE0NjIwMmUyZjZjMzQ1NmIwNjk2ZmYxODU2MmYx YjlmODEwHhcNMjUxMjE3MDgwMTEyWhcNMjUxMjE4MDgwMTEyWjAzMTEwLwYDVQQD Eyg3ZDVhODBhNjc5ZmM1MWIyYzcyMzQ2MjUwMjk2ODM5YzY5ZDlkODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHV1XI/LYfQlhrqO+1Gk3HaNo4hx Px7pGi0F9ACmWfYh9EWIm0HW443x2BwaIGuCq6SZ+46+y5hswKV8Nd7rlkqvg1g+ 2IPqWGSkLL5jTSDqvpJFPFfRgP68F2ArCzca9kc23LV9/VwikC96EGaQiGixyEWZ MtuHDP6LQm8Mdp7fyjhMQNwahRF2Ux+t1xYKM7WGEjP+AWH4Z5xe9g9FdOyUbMpp 2Y39D+ZxPUWOcE5acSLcP2lYfD6wKqBRD9mJNR+KY7TVYtNnnO278kAkaNFpxoNb QaaBGg2JqhkR/cFyPGwf5bKaSYS9EuKZ31qtDw1Dye6NmLoMK6unjboumwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1agKZ5/FGyxyNGJQKWg5xp2dgDMB8GA1UdIwQY MBaAFLOFlBRiAuL2w0VrBpb/GFYvG5+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kMmU4MjYtNWFjYi00N2Q2LTkyYTQt NDNiYjE5ZjJlNTNiLzEvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kMmU4MjYtNWFjYi00N2Q2LTkyYTQtNDNiYjE5ZjJlNTNi LzEvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbCEAnrg ClO6JHO/uTAzQdOkL2ZKQHCR0eKS+6rSJAG+yfKcvOZ+byQl7DJJy97QSmUJpGxC Q1t02hnpekwWb+ezUJaejjaNYMzMViIN3U2wABTM9UebPECfmmjeR9fnWI3kmL/9 lMQ2j4i+x1mBXFwcS6qBt2Csw8f4x2i9txBY5HRRCZDpyUi4JvyfsWMiVWkHtKTF YqPIByQzkkydb2GwWt8MGcVNsFCeN9PCVSH4CUoe7sPoxw2hedO5dw66pmJ0FDuV SomF4tHBTVQF3RKxI9TW7+tMSwL3zAML5tzONZb9OwG5GNPD2uBcGmvu3Uat61Dg kkdYQ559titdSA== -----END CERTIFICATE-----Generated at Wed Dec 17 11:19:52 2025 by rpki-client