This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json) Hash identifier: 0cO51O4IjErJQ+tqvdg8Fe/VjZT53XquHnw5Q7+YnR4= Subject key identifier: 98:7F:18:CF:D6:D4:22:CB:1E:70:1D:E6:FC:6A:A2:71:D3:76:3A:7B Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Certificate serial: 019B42EEC5C4D179413AA99D2AFD02A60E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 22:01:43 +0000 Manifest this update: Sun 21 Dec 2025 22:01:43 +0000 Manifest next update: Mon 22 Dec 2025 22:01:43 +0000 Files and hashes: 1: 5WxXf6dS__Evv8ybNdjAs3Nto-g.roa (hash: y6JQKN1GUMZnwd9TH2DZ03UU+crYCRvw3vTZfmRAIuw=) 2: 8keuoYHRmEN7a8dM4R3KAZIUMn8.roa (hash: cqhsmkY13XgBA/8McBrRobM59idSx8HxeP3LI73UX3s=) 3: _g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa (hash: lCKjV64dwqXs6VagiwwJOVKqACy5VCGM5CrdkZRYvvY=) 4: fMI-jCDaaLsxpmL0Z0hMaMI0pwA.roa (hash: Ft2AV1Fb/Osk91o2uc7E3/mf/b9LB0/k5lu+soQUSmI=) 5: o0jeoBjm6A2tZp_sdpXJQxSFq9g.roa (hash: 0tJFYrvs37c2RcoKNsABjGXFSJGBQds9qdtyJiQGJI4=) 6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: O0TF6c6Ba7/hWa3TOwDflpSa1IHs08mWzxdZ7mdnVZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:c5:c4:d1:79:41:3a:a9:9d:2a:fd:02:a6:0e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Validity Not Before: Dec 21 22:01:43 2025 GMT Not After : Dec 22 22:01:43 2025 GMT Subject: CN=987f18cfd6d422cb1e701de6fc6aa271d3763a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:91:80:95:97:3d:9d:e0:25:d9:a7:42:cc: 95:e9:ee:0a:c6:b2:42:1c:56:45:9e:14:7f:91:dc: c5:f0:2f:54:fa:e1:5a:4b:ff:40:c4:bb:dd:0b:19: 6d:3a:ae:81:bb:26:a5:02:0e:d4:ad:7e:f5:fa:36: 36:d2:b2:dd:24:5e:7d:14:8d:86:09:79:da:48:c7: 59:39:99:c6:7a:6f:57:8b:67:5f:21:6b:2c:42:32: db:2c:20:c3:4f:96:8d:1b:97:7c:e7:05:04:b7:a2: a0:06:9f:b1:44:ac:de:d6:95:ce:1b:96:f6:b7:b4: 16:06:de:42:ae:33:95:12:f7:30:b5:ba:ea:4a:2e: 69:6f:b6:98:52:a0:d2:44:dc:2b:a0:5b:bb:94:c0: 11:5a:d2:60:1b:32:7b:7e:31:89:31:f1:c6:0e:98: ad:59:19:cd:39:23:05:21:64:ee:c8:43:8a:c2:db: 36:0b:5d:55:c4:94:fc:20:66:22:12:f1:70:4d:be: 0f:a7:4f:07:ce:b6:79:29:9c:62:50:9f:c1:c9:f4: f8:d2:e7:4e:a8:3c:02:71:f8:1b:ef:81:05:4f:36: a4:9a:8c:0a:79:ce:f8:51:a3:3b:7a:22:a4:84:1e: db:2b:37:28:fd:0c:fc:68:e0:19:f1:e5:37:02:3d: 9a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7F:18:CF:D6:D4:22:CB:1E:70:1D:E6:FC:6A:A2:71:D3:76:3A:7B X509v3 Authority Key Identifier: keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:89:64:e9:fd:0e:c3:ca:11:a4:e6:fa:01:cf:07:b4:b4:06: c0:08:ef:55:a6:56:1a:1d:37:4c:14:99:1b:71:4f:f1:66:ce: 0b:74:1d:10:68:4a:4a:59:cf:e5:36:0f:60:d7:9d:eb:39:67: 3d:b8:88:32:a8:68:5e:14:b4:5a:77:b1:19:cd:87:7f:00:d5: f7:6c:cc:bd:25:6b:50:33:4e:56:1b:e3:2e:77:44:2b:59:7b: 7b:eb:a6:c3:08:d7:a2:1e:24:e1:b0:8b:0c:b8:18:99:78:0c: ce:e6:64:b5:bd:73:45:d0:24:61:12:6b:54:90:06:d6:95:f9: 89:9a:b6:c0:19:43:52:de:db:81:28:a9:f3:30:5e:6c:37:8b: 3f:8b:05:fe:49:1e:92:d3:3f:9e:80:74:16:60:a4:23:af:1a: 9c:32:35:a8:b0:81:05:72:33:88:65:9e:17:00:38:70:61:ab: ec:b2:e7:06:d9:86:9a:53:56:48:1a:25:d7:ce:d4:dd:bf:a1: cb:18:52:b0:76:04:55:23:d9:a9:38:68:2f:95:f7:84:3a:12: 8a:29:46:a2:d6:53:36:b2:b0:00:19:53:52:8d:1c:b4:53:5d: 30:96:0b:5b:03:a8:a0:7a:2d:5b:ef:19:df:e7:c6:d0:7f:8d: 1f:34:bf:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7sXE0XlBOqmdKv0Cpg45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3 NzdmMDYwHhcNMjUxMjIxMjIwMTQzWhcNMjUxMjIyMjIwMTQzWjAzMTEwLwYDVQQD Eyg5ODdmMThjZmQ2ZDQyMmNiMWU3MDFkZTZmYzZhYTI3MWQzNzYzYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUCRgJWXPZ3gJdmnQsyV6e4KxrJC HFZFnhR/kdzF8C9U+uFaS/9AxLvdCxltOq6BuyalAg7UrX71+jY20rLdJF59FI2G CXnaSMdZOZnGem9Xi2dfIWssQjLbLCDDT5aNG5d85wUEt6KgBp+xRKze1pXOG5b2 t7QWBt5CrjOVEvcwtbrqSi5pb7aYUqDSRNwroFu7lMARWtJgGzJ7fjGJMfHGDpit WRnNOSMFIWTuyEOKwts2C11VxJT8IGYiEvFwTb4Pp08HzrZ5KZxiUJ/ByfT40udO qDwCcfgb74EFTzakmowKec74UaM7eiKkhB7bKzco/Qz8aOAZ8eU3Aj2aLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh/GM/W1CLLHnAd5vxqonHTdjp7MB8GA1UdIwQY MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt MDYwNWMwODlmYzM4LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4 LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYlk6f0O w8oRpOb6Ac8HtLQGwAjvVaZWGh03TBSZG3FP8WbOC3QdEGhKSlnP5TYPYNed6zln PbiIMqhoXhS0WnexGc2HfwDV92zMvSVrUDNOVhvjLndEK1l7e+umwwjXoh4k4bCL DLgYmXgMzuZktb1zRdAkYRJrVJAG1pX5iZq2wBlDUt7bgSip8zBebDeLP4sF/kke ktM/noB0FmCkI68anDI1qLCBBXIziGWeFwA4cGGr7LLnBtmGmlNWSBol187U3b+h yxhSsHYEVSPZqThoL5X3hDoSiilGotZTNrKwABlTUo0ctFNdMJYLWwOooHotW+8Z 3+fG0H+NHzS/EA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:29 2025 by rpki-client