This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json) Hash identifier: rRuWkawCjcjYWS1pa2xqw0fvO+9g5y0naC0gUVTtOwI= Subject key identifier: 89:5D:24:44:B5:CE:49:5F:FA:AB:63:4A:B6:10:48:90:76:1F:34:04 Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79 Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79 Certificate serial: 019B435BF7C4E9FA83459556315775A6223B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft Manifest number: 0F3E Signing time: Mon 22 Dec 2025 00:00:59 +0000 Manifest this update: Mon 22 Dec 2025 00:00:59 +0000 Manifest next update: Tue 23 Dec 2025 00:00:59 +0000 Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: Oev9YODvwquTkoC2n006NcxEhmz4brd2gN0R/ixdjPc=) 2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:f7:c4:e9:fa:83:45:95:56:31:57:75:a6:22:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79 Validity Not Before: Dec 22 00:00:59 2025 GMT Not After : Dec 23 00:00:59 2025 GMT Subject: CN=895d2444b5ce495ffaab634ab6104890761f3404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:8f:0b:8e:d6:23:15:ae:78:1b:ac:2b:0b: a1:e8:66:19:46:3b:06:59:8a:1f:38:a6:b7:ec:6b: e3:8c:ff:f0:2f:50:2a:c5:90:16:18:48:68:1d:68: d9:d6:a1:83:e0:73:b2:1e:8c:91:ec:c6:57:0e:b0: b2:60:5f:9f:c6:8c:3f:de:63:76:ae:73:8a:c1:18: 5e:90:f6:4e:c8:f9:9e:4e:1e:ef:bc:34:70:b6:02: e7:36:3e:3b:f9:36:4f:bc:d4:56:d4:38:86:65:38: 97:48:fd:67:ec:f7:61:d0:b5:6d:2b:f3:e6:80:6a: 78:3c:f4:dd:22:fe:1b:f4:c2:43:62:8a:d7:c5:83: 47:11:a2:ed:01:97:8e:2a:f1:54:8a:2c:15:56:b1: e4:64:9d:35:cc:40:65:ba:d5:6e:b2:87:cd:f7:1f: fd:1d:d2:83:68:fa:ef:bc:49:ae:32:61:ec:4c:5c: 7e:bd:7d:93:ad:b5:ad:3a:93:cd:ea:38:ad:14:40: 38:2a:de:99:82:02:a7:f5:a9:17:2f:13:2c:2b:1a: 8e:2c:01:d4:48:25:ba:b2:86:38:65:a4:82:4c:5c: d9:84:33:cd:b5:af:4e:15:7e:26:2c:91:27:38:50: 2d:6c:46:6c:16:b9:c7:26:d3:3e:e3:23:4d:0b:01: ff:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5D:24:44:B5:CE:49:5F:FA:AB:63:4A:B6:10:48:90:76:1F:34:04 X509v3 Authority Key Identifier: keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8e:57:d3:e0:e2:ff:46:41:66:e1:34:bf:e6:91:ef:b4:13: 2d:9d:42:bd:54:e7:a9:b4:ab:9f:c1:e0:ef:24:e5:c2:22:ba: 7a:5f:fe:d0:f6:05:75:a8:48:3e:ed:5f:b2:4b:4e:ce:6c:a9: d9:a2:a9:2d:d3:52:e5:8a:52:14:3b:62:0b:3c:2f:2c:f5:f2: 30:ad:0e:55:54:c7:a3:fd:1c:3a:6d:e4:2d:4c:8d:35:e5:6b: 35:0f:11:7b:f0:47:f0:aa:81:91:2e:3c:9c:f8:63:e3:fb:d8: 49:09:b1:96:e4:d4:91:78:d6:b7:a6:81:1e:bf:bd:5f:11:af: ac:8c:2d:31:99:48:61:04:9d:19:a9:4f:2c:63:11:1e:cb:71: d2:d1:7c:56:a7:f0:ad:0b:c8:8f:09:76:ca:bf:4e:ee:ec:25: 9f:6a:6b:8d:1f:77:4a:2a:29:cd:6a:99:13:a2:4f:8a:8b:6e: 42:a8:92:69:af:85:18:d0:1d:d7:f6:87:e0:8a:0c:88:bc:51: dc:0d:d1:63:56:55:ab:fa:20:fa:e3:c1:f4:12:8a:55:2c:a5: e8:09:63:90:1b:eb:10:a9:74:85:23:b3:73:72:9c:ab:38:d6: b6:f9:49:82:08:6a:a1:dd:8c:bb:c6:13:87:38:e2:3b:24:e4: 0a:6d:bf:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW/fE6fqDRZVWMVd1piI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZmM1YTI5NDEwZjFmZmNmNGRlMmE1YTcwNThmNTE2MjBi MzBiNzkwHhcNMjUxMjIyMDAwMDU5WhcNMjUxMjIzMDAwMDU5WjAzMTEwLwYDVQQD Eyg4OTVkMjQ0NGI1Y2U0OTVmZmFhYjYzNGFiNjEwNDg5MDc2MWYzNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGePC47WIxWueBusKwuh6GYZRjsG WYofOKa37GvjjP/wL1AqxZAWGEhoHWjZ1qGD4HOyHoyR7MZXDrCyYF+fxow/3mN2 rnOKwRhekPZOyPmeTh7vvDRwtgLnNj47+TZPvNRW1DiGZTiXSP1n7Pdh0LVtK/Pm gGp4PPTdIv4b9MJDYorXxYNHEaLtAZeOKvFUiiwVVrHkZJ01zEBlutVusofN9x/9 HdKDaPrvvEmuMmHsTFx+vX2TrbWtOpPN6jitFEA4Kt6ZggKn9akXLxMsKxqOLAHU SCW6soY4ZaSCTFzZhDPNta9OFX4mLJEnOFAtbEZsFrnHJtM+4yNNCwH/tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIldJES1zklf+qtjSrYQSJB2HzQEMB8GA1UdIwQY MBaAFEv8WilBDx/89N4qWnBY9RYgswt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2Yt MTM2MjU3ZTMwNzZlLzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2YtMTM2MjU3ZTMwNzZl LzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApo5X0+Di /0ZBZuE0v+aR77QTLZ1CvVTnqbSrn8Hg7yTlwiK6el/+0PYFdahIPu1fsktOzmyp 2aKpLdNS5YpSFDtiCzwvLPXyMK0OVVTHo/0cOm3kLUyNNeVrNQ8Re/BH8KqBkS48 nPhj4/vYSQmxluTUkXjWt6aBHr+9XxGvrIwtMZlIYQSdGalPLGMRHstx0tF8Vqfw rQvIjwl2yr9O7uwln2prjR93SiopzWqZE6JPiotuQqiSaa+FGNAd1/aH4IoMiLxR 3A3RY1ZVq/og+uPB9BKKVSyl6AljkBvrEKl0hSOzc3KcqzjWtvlJgghqod2Mu8YT hzjiOyTkCm2//w== -----END CERTIFICATE-----Generated at Mon Dec 22 07:52:34 2025 by rpki-client