This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json) Hash identifier: aNa1iXBPZiKH0LeI9YmdNmhLErUmrhm5WDLRj+6X5gM= Subject key identifier: FA:F3:FE:4B:82:83:C7:25:E7:71:7F:91:9D:85:F7:4F:EC:88:30:D8 Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Certificate serial: 019B3D2378030E7E50A518B7471E648B3552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 19:01:32 +0000 Manifest this update: Sat 20 Dec 2025 19:01:32 +0000 Manifest next update: Sun 21 Dec 2025 19:01:32 +0000 Files and hashes: 1: 5WxXf6dS__Evv8ybNdjAs3Nto-g.roa (hash: y6JQKN1GUMZnwd9TH2DZ03UU+crYCRvw3vTZfmRAIuw=) 2: 8keuoYHRmEN7a8dM4R3KAZIUMn8.roa (hash: cqhsmkY13XgBA/8McBrRobM59idSx8HxeP3LI73UX3s=) 3: _g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa (hash: lCKjV64dwqXs6VagiwwJOVKqACy5VCGM5CrdkZRYvvY=) 4: fMI-jCDaaLsxpmL0Z0hMaMI0pwA.roa (hash: Ft2AV1Fb/Osk91o2uc7E3/mf/b9LB0/k5lu+soQUSmI=) 5: o0jeoBjm6A2tZp_sdpXJQxSFq9g.roa (hash: 0tJFYrvs37c2RcoKNsABjGXFSJGBQds9qdtyJiQGJI4=) 6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: Aqi42VEIv0F7CLREeR7UWwdsQ0xxFq2L92VerJGDIZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:78:03:0e:7e:50:a5:18:b7:47:1e:64:8b:35:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Validity Not Before: Dec 20 19:01:32 2025 GMT Not After : Dec 21 19:01:32 2025 GMT Subject: CN=faf3fe4b8283c725e7717f919d85f74fec8830d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:9c:3f:60:40:9c:12:0e:f9:c0:86:78:d1: c9:57:2a:90:af:b1:0f:20:84:1b:97:da:c6:3c:c2: 56:02:63:a3:72:12:11:6f:66:fd:7a:40:49:d6:ea: b6:8c:e4:85:b2:56:73:01:97:f5:f4:df:8c:cd:1e: e3:56:30:dd:61:9b:dd:0b:9c:02:a1:c6:f8:76:c1: a1:68:6c:da:f1:55:5e:bf:86:c6:80:13:03:14:b3: 52:2c:0e:78:a8:30:0c:5b:47:3d:96:22:19:73:d4: 52:94:17:04:54:aa:28:78:a1:32:dc:26:c3:bb:5f: 5f:01:5e:e2:c0:c5:15:79:e6:fd:ae:46:0f:02:31: 78:92:e0:89:9b:cb:39:d7:e1:f9:95:f8:18:0e:92: f5:7c:60:bc:9b:88:29:32:31:fc:bb:f2:1d:31:17: 85:d0:3c:09:fe:2b:d3:8a:a1:9c:73:9f:2c:9a:cc: de:f5:5c:fb:64:fa:96:b7:7b:ca:b0:ed:6c:47:bf: 93:38:c6:ad:66:97:82:8c:22:7b:e8:2d:82:ae:5e: bc:ee:a5:cb:f9:5e:b9:e2:b7:e4:27:94:b9:1f:07: 38:5d:76:b4:d5:5d:89:88:f3:9f:bc:1c:55:ae:0a: 3e:0b:e5:b3:89:4f:f5:79:b7:aa:6b:ee:27:a8:87: 05:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:FE:4B:82:83:C7:25:E7:71:7F:91:9D:85:F7:4F:EC:88:30:D8 X509v3 Authority Key Identifier: keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:bd:2d:57:42:e9:c7:be:c3:5d:73:17:01:75:16:d7:bf:9e: fc:a6:94:15:89:b8:c7:21:5e:16:fd:7a:43:56:84:00:2d:4d: 2d:7d:93:cf:0b:4b:b9:8f:37:4c:67:4e:40:14:ce:7a:c0:85: 9b:ad:e7:15:e0:a8:2c:d8:71:27:1d:e4:d3:b7:1f:29:19:87: 75:d1:81:80:28:77:c5:7f:48:91:4f:5e:fa:52:d7:78:36:85: 49:81:1f:9c:13:b8:bb:46:1f:f9:d7:09:71:92:d8:da:c1:a8: 3a:04:cc:bd:67:2e:02:dc:b9:6e:b2:c5:61:2e:92:3b:2e:53: 34:e3:45:0f:f7:f5:1f:f8:48:dd:f9:ce:52:7f:1e:f5:01:a8: 46:79:12:5e:52:3f:15:13:5e:80:45:5c:6f:31:d5:f7:c3:4c: 2f:ab:0f:d6:16:c9:a8:06:10:f7:2f:c1:b3:8c:2c:51:26:98: 1d:50:dd:ed:4a:27:7d:ee:33:4f:a4:d8:86:f1:2b:b0:64:6c: 7d:a2:41:3f:fe:b4:f8:db:0f:a6:4b:ac:dd:32:72:0c:71:52: 6f:fc:46:da:e4:b1:d0:e8:47:55:2c:9f:ba:6a:3f:c9:8c:b1: 56:24:09:2e:03:58:a1:13:0e:7a:82:6c:a2:61:45:2e:30:96: 46:a3:5f:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I3gDDn5QpRi3Rx5kizVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3 NzdmMDYwHhcNMjUxMjIwMTkwMTMyWhcNMjUxMjIxMTkwMTMyWjAzMTEwLwYDVQQD EyhmYWYzZmU0YjgyODNjNzI1ZTc3MTdmOTE5ZDg1Zjc0ZmVjODgzMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws6cP2BAnBIO+cCGeNHJVyqQr7EP IIQbl9rGPMJWAmOjchIRb2b9ekBJ1uq2jOSFslZzAZf19N+MzR7jVjDdYZvdC5wC ocb4dsGhaGza8VVev4bGgBMDFLNSLA54qDAMW0c9liIZc9RSlBcEVKooeKEy3CbD u19fAV7iwMUVeeb9rkYPAjF4kuCJm8s51+H5lfgYDpL1fGC8m4gpMjH8u/IdMReF 0DwJ/ivTiqGcc58smsze9Vz7ZPqWt3vKsO1sR7+TOMatZpeCjCJ76C2Crl687qXL +V654rfkJ5S5Hwc4XXa01V2JiPOfvBxVrgo+C+WziU/1ebeqa+4nqIcFUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrz/kuCg8cl53F/kZ2F90/siDDYMB8GA1UdIwQY MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt MDYwNWMwODlmYzM4LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4 LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZL0tV0Lp x77DXXMXAXUW17+e/KaUFYm4xyFeFv16Q1aEAC1NLX2TzwtLuY83TGdOQBTOesCF m63nFeCoLNhxJx3k07cfKRmHddGBgCh3xX9IkU9e+lLXeDaFSYEfnBO4u0Yf+dcJ cZLY2sGoOgTMvWcuAty5brLFYS6SOy5TNONFD/f1H/hI3fnOUn8e9QGoRnkSXlI/ FRNegEVcbzHV98NML6sP1hbJqAYQ9y/Bs4wsUSaYHVDd7Uonfe4zT6TYhvErsGRs faJBP/60+NsPpkus3TJyDHFSb/xG2uSx0OhHVSyfumo/yYyxViQJLgNYoRMOeoJs omFFLjCWRqNfMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:53 2025 by rpki-client