This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json) Hash identifier: UR5pTsFJ7Hhco2wdZIGRP9nRnPyjHIyTCPbb6gJZHJo= Subject key identifier: 6F:EE:E6:9E:F4:40:E4:A5:A1:13:A7:98:C6:9C:81:E7:C5:CC:0E:1A Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Certificate serial: 019B39EA963C826E56562CD5B8F325C73286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft Manifest number: 05ED Signing time: Sat 20 Dec 2025 04:00:33 +0000 Manifest this update: Sat 20 Dec 2025 04:00:33 +0000 Manifest next update: Sun 21 Dec 2025 04:00:33 +0000 Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=) 2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: BwQiKSwoqbBt++T5tcR6LKSCt9ogFnkmFn2tp27wPBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:96:3c:82:6e:56:56:2c:d5:b8:f3:25:c7:32:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Validity Not Before: Dec 20 04:00:33 2025 GMT Not After : Dec 21 04:00:33 2025 GMT Subject: CN=6feee69ef440e4a5a113a798c69c81e7c5cc0e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:8b:10:e9:11:b4:50:31:7b:94:aa:b5:3e: b9:02:74:c9:07:09:bb:5e:ad:ed:53:b3:1d:89:b0: 88:ea:eb:ae:65:cc:c1:85:8a:de:60:47:89:2f:9e: f9:95:30:19:72:4a:77:6a:7e:d6:9f:3e:de:c4:2c: 03:dc:91:c1:f2:d7:21:44:62:9c:44:95:58:f0:b8: 36:7c:da:e4:7b:b4:ed:05:c4:59:16:6d:28:bc:16: 4b:d3:fa:d3:ba:a0:d9:03:79:2d:ce:38:89:5c:49: f6:e4:1b:3a:b8:79:69:5d:44:ea:cf:1b:9e:83:66: 15:5d:5c:41:b6:69:ba:61:e5:d5:e3:6b:3d:00:12: 00:20:7a:60:f9:17:5b:ec:48:04:9d:46:6b:ec:53: d7:a8:0d:f8:4f:95:f5:28:4a:22:03:be:39:a3:5b: c2:38:fa:27:60:75:64:ba:a6:a6:10:f0:4e:d7:29: 45:42:3d:64:d7:db:2b:17:b1:59:a9:21:f6:fc:23: 99:ed:3c:c8:ba:6d:52:23:dd:9c:3d:23:61:fa:2c: 57:06:a3:47:af:09:9e:11:6e:13:7b:77:0e:4d:be: 47:cc:4a:88:c0:97:0d:9f:6d:18:b5:ca:41:2c:9d: 2b:27:97:9e:31:fb:bb:61:51:12:73:70:ee:c6:99: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:E6:9E:F4:40:E4:A5:A1:13:A7:98:C6:9C:81:E7:C5:CC:0E:1A X509v3 Authority Key Identifier: keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3a:77:c8:94:ac:09:26:ee:2f:db:8e:02:fa:29:3f:a5:28: 59:01:ff:1b:ad:92:9b:6b:2a:12:7c:3b:87:07:46:6b:c0:6f: 88:7c:83:c8:0d:d4:d2:72:73:45:10:ea:a5:17:97:18:f3:d8: fa:39:38:08:bd:6f:b2:6d:77:91:d5:7d:5a:a0:84:df:54:29: 0d:ab:ba:06:a8:a3:b3:5f:4e:da:90:a7:65:27:6f:7d:02:e3: 34:30:5b:c5:e8:33:db:f8:a8:c7:00:6a:63:b8:08:cf:f8:57: f3:15:a5:3e:de:11:aa:5d:79:fb:5a:a3:16:01:c3:18:e3:fb: 90:60:25:2f:eb:e0:3a:aa:f1:20:a9:cb:e9:2d:80:ea:3e:cd: 1c:03:d5:d6:8f:60:39:2c:e8:83:54:7d:16:71:2e:bf:d8:41: 15:28:21:ab:b3:7f:22:f3:2b:76:b9:57:60:da:18:4f:b7:0e: f0:e7:d2:d8:dd:50:f8:64:15:da:72:ff:b4:36:e5:ba:8a:66: c2:3c:f2:50:5d:8a:06:b0:b8:dc:e2:d0:ce:1e:d1:e4:7e:7a: 5f:05:86:8e:27:5b:4a:7e:dc:ac:96:ec:b5:96:13:2e:d2:96: ce:7b:84:c0:40:bd:82:18:75:a8:6b:1d:7b:71:da:88:64:fa: f7:91:28:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56pY8gm5WVizVuPMlxzKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj ZjZjZWQwHhcNMjUxMjIwMDQwMDMzWhcNMjUxMjIxMDQwMDMzWjAzMTEwLwYDVQQD Eyg2ZmVlZTY5ZWY0NDBlNGE1YTExM2E3OThjNjljODFlN2M1Y2MwZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurOLEOkRtFAxe5SqtT65AnTJBwm7 Xq3tU7MdibCI6uuuZczBhYreYEeJL575lTAZckp3an7Wnz7exCwD3JHB8tchRGKc RJVY8Lg2fNrke7TtBcRZFm0ovBZL0/rTuqDZA3ktzjiJXEn25Bs6uHlpXUTqzxue g2YVXVxBtmm6YeXV42s9ABIAIHpg+Rdb7EgEnUZr7FPXqA34T5X1KEoiA745o1vC OPonYHVkuqamEPBO1ylFQj1k19srF7FZqSH2/COZ7TzIum1SI92cPSNh+ixXBqNH rwmeEW4Te3cOTb5HzEqIwJcNn20YtcpBLJ0rJ5eeMfu7YVESc3DuxpnO5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/u5p70QOSloROnmMacgefFzA4aMB8GA1UdIwQY MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt MDE5YTA1Y2U1ZTdhLzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTp3yJSs CSbuL9uOAvopP6UoWQH/G62Sm2sqEnw7hwdGa8BviHyDyA3U0nJzRRDqpReXGPPY +jk4CL1vsm13kdV9WqCE31QpDau6Bqijs19O2pCnZSdvfQLjNDBbxegz2/ioxwBq Y7gIz/hX8xWlPt4Rql15+1qjFgHDGOP7kGAlL+vgOqrxIKnL6S2A6j7NHAPV1o9g OSzog1R9FnEuv9hBFSghq7N/IvMrdrlXYNoYT7cO8OfS2N1Q+GQV2nL/tDbluopm wjzyUF2KBrC43OLQzh7R5H56XwWGjidbSn7crJbstZYTLtKWznuEwEC9ghh1qGsd e3HaiGT695Eouw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:06:03 2025 by rpki-client