This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json) Hash identifier: 9ADgt0BkrZHSOa0kx6cui1FxoygKTMSi4wbbeKIKk44= Subject key identifier: C7:1E:B7:4C:34:BC:9C:FE:60:08:68:01:BB:C5:92:AC:2C:1E:C2:8B Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Certificate serial: 019B2E54C38715659523536824E2C52802FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft Manifest number: 05E7 Signing time: Wed 17 Dec 2025 22:01:05 +0000 Manifest this update: Wed 17 Dec 2025 22:01:05 +0000 Manifest next update: Thu 18 Dec 2025 22:01:05 +0000 Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=) 2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: Kepeglh3tX1DUTbxRNJTzn6cCXXykZJVXDSiYguInDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:c3:87:15:65:95:23:53:68:24:e2:c5:28:02:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Validity Not Before: Dec 17 22:01:05 2025 GMT Not After : Dec 18 22:01:05 2025 GMT Subject: CN=c71eb74c34bc9cfe60086801bbc592ac2c1ec28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:ed:02:f3:18:a3:8c:57:94:ed:82:ae:24: 13:6e:87:3e:fa:af:44:ca:f9:eb:42:9f:ee:62:98: 8e:4a:f9:6f:db:df:26:50:3d:27:99:e0:68:87:09: bd:8b:86:25:5c:f6:a5:eb:c6:6b:a4:fb:6b:31:0f: f6:33:1e:63:28:9f:51:3f:f1:00:73:d6:90:5c:92: 3b:ec:9c:00:1d:70:c9:fe:57:90:24:ba:22:66:24: c1:a8:05:ef:51:6f:6b:bb:dd:c3:22:24:89:49:65: 48:10:83:41:5f:9b:32:d4:07:a0:f6:c7:3a:f1:87: 84:cc:0b:7f:6b:6a:ad:1f:f9:cb:db:ef:2b:1d:d9: 09:44:55:1d:b8:1c:63:0b:ac:32:52:f8:f5:55:9d: 56:21:12:bf:fe:0d:69:58:2a:29:72:3d:75:ab:75: a4:36:3d:61:d2:42:4e:e3:65:3e:f5:76:e4:88:51: d3:2d:9b:93:8f:a3:79:9a:64:16:51:05:1e:30:bf: 49:f9:0b:8e:ca:25:7a:69:96:b9:13:0b:56:51:bd: c9:4d:c6:6c:7a:93:ee:ba:d1:67:67:4d:ba:eb:0a: 80:42:61:ea:ef:1f:e3:f3:cd:9f:4c:9f:d7:7b:c9: 24:0a:fc:6a:c7:b8:94:86:f4:72:30:a4:c6:51:16: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1E:B7:4C:34:BC:9C:FE:60:08:68:01:BB:C5:92:AC:2C:1E:C2:8B X509v3 Authority Key Identifier: keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0b:5a:f2:10:f2:32:21:15:c2:a7:86:c2:03:28:3e:61:bd: a5:44:95:d1:3c:57:cc:6f:24:00:92:4b:98:21:84:47:38:c2: 08:bd:ca:f8:aa:b7:60:9f:13:63:e5:73:d0:23:0a:28:b4:1a: 86:b0:41:f3:d0:64:41:5f:ab:40:86:2c:b8:5a:75:5a:1e:c9: b6:61:cb:d9:15:4f:c1:5f:17:d1:65:2a:d2:05:a9:db:41:2c: 71:a8:90:1f:fb:99:29:21:f4:27:d6:ca:b0:f8:8b:af:9d:07: f1:e4:6c:bd:89:db:b2:f2:ad:2b:59:05:a2:32:fd:55:ae:3b: 2a:32:9c:8a:f1:54:76:f9:28:47:af:ee:08:b0:82:6d:98:26: b3:a7:01:b5:c9:83:cd:e0:e8:20:40:93:46:2f:4b:9f:59:21: be:87:9a:1b:ee:7d:3f:fc:e7:a9:10:20:0a:9e:f4:e2:68:12: 91:03:fd:42:6b:12:f3:35:1b:31:a3:5a:be:5e:72:49:84:7a: b6:fd:14:9d:7a:1f:cb:f5:cd:d9:74:67:e7:1a:1a:14:b3:7b: 50:dd:69:af:78:4d:8e:f1:20:12:41:20:83:d5:3c:07:b2:9b: 7f:40:dd:ff:44:ad:29:72:39:5e:93:ba:66:3f:6d:08:35:e7: 5c:df:b0:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVMOHFWWVI1NoJOLFKAL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj ZjZjZWQwHhcNMjUxMjE3MjIwMTA1WhcNMjUxMjE4MjIwMTA1WjAzMTEwLwYDVQQD EyhjNzFlYjc0YzM0YmM5Y2ZlNjAwODY4MDFiYmM1OTJhYzJjMWVjMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8vtAvMYo4xXlO2CriQTboc++q9E yvnrQp/uYpiOSvlv298mUD0nmeBohwm9i4YlXPal68ZrpPtrMQ/2Mx5jKJ9RP/EA c9aQXJI77JwAHXDJ/leQJLoiZiTBqAXvUW9ru93DIiSJSWVIEINBX5sy1Aeg9sc6 8YeEzAt/a2qtH/nL2+8rHdkJRFUduBxjC6wyUvj1VZ1WIRK//g1pWCopcj11q3Wk Nj1h0kJO42U+9XbkiFHTLZuTj6N5mmQWUQUeML9J+QuOyiV6aZa5EwtWUb3JTcZs epPuutFnZ0266wqAQmHq7x/j882fTJ/Xe8kkCvxqx7iUhvRyMKTGURakIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcet0w0vJz+YAhoAbvFkqwsHsKLMB8GA1UdIwQY MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt MDE5YTA1Y2U1ZTdhLzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAta8hDy MiEVwqeGwgMoPmG9pUSV0TxXzG8kAJJLmCGERzjCCL3K+Kq3YJ8TY+Vz0CMKKLQa hrBB89BkQV+rQIYsuFp1Wh7JtmHL2RVPwV8X0WUq0gWp20EscaiQH/uZKSH0J9bK sPiLr50H8eRsvYnbsvKtK1kFojL9Va47KjKcivFUdvkoR6/uCLCCbZgms6cBtcmD zeDoIECTRi9Ln1khvoeaG+59P/znqRAgCp704mgSkQP9QmsS8zUbMaNavl5ySYR6 tv0UnXofy/XN2XRn5xoaFLN7UN1pr3hNjvEgEkEgg9U8B7Kbf0Dd/0StKXI5XpO6 Zj9tCDXnXN+w5g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:26:10 2025 by rpki-client