This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json) Hash identifier: FxKL9KmwuStM7Rt6n3Cp+0wH1GImKdVIo8dpyoRQ2dk= Subject key identifier: FF:A7:6E:AA:D4:31:4B:06:F4:1B:E5:D8:DA:97:2B:97:09:95:A0:64 Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0 Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0 Certificate serial: 019B53739999142771A0F3035F0842D83469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft Manifest number: 072F Signing time: Thu 25 Dec 2025 03:00:43 +0000 Manifest this update: Thu 25 Dec 2025 03:00:43 +0000 Manifest next update: Fri 26 Dec 2025 03:00:43 +0000 Files and hashes: 1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: 4YEOzB2ns0uKU9oQmsp5rS4mxcFXeUu2x0DLNqso1pk=) 2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:73:99:99:14:27:71:a0:f3:03:5f:08:42:d8:34:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0 Validity Not Before: Dec 25 03:00:43 2025 GMT Not After : Dec 26 03:00:43 2025 GMT Subject: CN=ffa76eaad4314b06f41be5d8da972b970995a064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:53:c9:6b:73:0b:4a:a0:84:f2:47:22:ae: 89:a8:ba:cf:4b:50:1c:6f:4d:f1:02:67:02:f4:06: 07:b7:34:c3:cb:85:e5:9b:5b:4e:83:af:87:c7:16: 2d:fd:0b:d4:2c:af:58:11:5c:47:32:f1:aa:18:cf: d3:70:b3:19:2a:ff:28:10:67:1c:ba:2d:bf:17:6d: b0:ee:49:d5:24:72:00:c3:a1:56:fa:31:0e:58:fd: b6:f4:c3:46:f6:eb:22:2f:ef:a2:7c:a5:b6:32:3b: 23:a4:ee:a8:5a:4e:a0:2c:69:ff:ac:3e:e3:31:4d: de:05:64:5b:13:82:9f:e5:50:c8:c4:c9:c0:f2:06: 80:fc:47:90:26:f5:6a:da:e3:56:7c:43:d8:af:2c: 3f:d2:29:81:a5:fa:9f:d2:5b:12:eb:cf:c7:f9:7c: 11:cd:f2:68:3e:e5:4f:f4:aa:71:ff:56:e5:bf:34: a6:d7:f7:e3:71:c9:38:25:83:ba:70:10:34:4e:02: b6:99:a5:9c:bd:3a:29:1e:39:e2:4e:40:14:50:ba: 61:c5:58:a0:20:78:47:40:4f:d3:14:a4:d5:a5:0e: 28:9d:23:45:18:29:7e:30:27:e3:6d:c1:83:3e:fd: fd:53:de:72:45:c3:34:9e:a5:6b:2c:59:39:5a:b4: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A7:6E:AA:D4:31:4B:06:F4:1B:E5:D8:DA:97:2B:97:09:95:A0:64 X509v3 Authority Key Identifier: keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:83:63:80:2f:da:fa:43:c3:92:1a:c6:89:d5:a0:48:9d:89: 4c:01:23:1b:85:7f:cb:a2:67:e1:d2:3a:50:ba:89:de:4d:41: 2e:b2:e8:93:5b:c5:65:24:cc:34:7a:d3:39:05:6d:38:96:67: 9e:bf:47:5c:fa:a2:b6:e0:cc:79:1c:fd:18:65:50:20:c6:19: 69:d0:5a:14:bc:9e:a4:b7:99:92:d1:16:2a:c6:ce:23:d8:e6: e1:eb:ba:00:95:b9:92:46:c3:33:80:83:b1:a9:a1:3f:65:45: fa:32:76:c4:a1:8f:99:01:45:ee:27:16:60:e3:bb:bf:47:c1: 4f:a0:a0:3a:4b:c1:a5:55:48:1e:be:27:9b:0e:10:bf:d0:e2: a4:b7:2d:b8:5a:e5:c6:42:f0:e4:65:ea:08:f5:92:0f:3b:cd: 9b:ef:f6:21:49:3a:0e:dc:35:e5:1d:de:b7:9d:09:4a:59:1a: 9c:4b:a1:ff:76:da:3f:50:52:c3:9b:d0:aa:cb:2a:ea:d2:8a: a5:7a:67:d1:51:41:7c:3a:80:00:bb:b0:e1:d1:41:24:c8:9a: ad:8d:48:f2:d9:e3:93:51:f9:c0:e1:cc:1a:ae:41:c9:83:04: fd:ff:66:b6:fc:91:3e:fa:0d:fd:09:96:b7:17:29:f7:d8:75: dc:3e:f0:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTc5mZFCdxoPMDXwhC2DRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWYzMDYyNDIxMGMwMGQzYTg2ZGZkNmM4MDEwNjEyYmIx YjEyYTAwHhcNMjUxMjI1MDMwMDQzWhcNMjUxMjI2MDMwMDQzWjAzMTEwLwYDVQQD EyhmZmE3NmVhYWQ0MzE0YjA2ZjQxYmU1ZDhkYTk3MmI5NzA5OTVhMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiJTyWtzC0qghPJHIq6JqLrPS1Ac b03xAmcC9AYHtzTDy4Xlm1tOg6+HxxYt/QvULK9YEVxHMvGqGM/TcLMZKv8oEGcc ui2/F22w7knVJHIAw6FW+jEOWP229MNG9usiL++ifKW2MjsjpO6oWk6gLGn/rD7j MU3eBWRbE4Kf5VDIxMnA8gaA/EeQJvVq2uNWfEPYryw/0imBpfqf0lsS68/H+XwR zfJoPuVP9Kpx/1blvzSm1/fjcck4JYO6cBA0TgK2maWcvTopHjniTkAUULphxVig IHhHQE/TFKTVpQ4onSNFGCl+MCfjbcGDPv39U95yRcM0nqVrLFk5WrRU+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+nbqrUMUsG9Bvl2NqXK5cJlaBkMB8GA1UdIwQY MBaAFEvvMGJCEMANOobf1sgBBhK7GxKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2Qt Nzg5MjdmYzc4ZTdkLzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2QtNzg5MjdmYzc4ZTdk LzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYNjgC/a +kPDkhrGidWgSJ2JTAEjG4V/y6Jn4dI6ULqJ3k1BLrLok1vFZSTMNHrTOQVtOJZn nr9HXPqituDMeRz9GGVQIMYZadBaFLyepLeZktEWKsbOI9jm4eu6AJW5kkbDM4CD samhP2VF+jJ2xKGPmQFF7icWYOO7v0fBT6CgOkvBpVVIHr4nmw4Qv9DipLctuFrl xkLw5GXqCPWSDzvNm+/2IUk6Dtw15R3et50JSlkanEuh/3baP1BSw5vQqssq6tKK pXpn0VFBfDqAALuw4dFBJMiarY1I8tnjk1H5wOHMGq5ByYME/f9mtvyRPvoN/QmW txcp99h13D7wEw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:28:20 2025 by rpki-client