This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json) Hash identifier: PlK4sp1vDjcMm4nFH9MMK23DRfBYNIyh+cJSM3ndl+s= Subject key identifier: C9:66:15:3B:11:4C:49:0B:CE:75:81:42:B6:2A:22:10:7A:6A:4A:32 Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0 Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0 Certificate serial: 019AF42E34408500FF06F077BB1E09C87CF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 15:00:59 +0000 Manifest this update: Sat 06 Dec 2025 15:00:59 +0000 Manifest next update: Sun 07 Dec 2025 15:00:59 +0000 Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=) 2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: 50oSMBqoLze2onij9KVipXTlZghB8IQ2D9T2qK9KyQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:34:40:85:00:ff:06:f0:77:bb:1e:09:c8:7c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0 Validity Not Before: Dec 6 15:00:59 2025 GMT Not After : Dec 7 15:00:59 2025 GMT Subject: CN=c966153b114c490bce758142b62a22107a6a4a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:62:93:cc:bd:75:47:59:99:1e:69:04:d8: 09:a3:d7:f5:36:b0:ed:8b:e8:dd:b7:41:16:0f:ed: 00:8d:a9:cb:85:06:7e:3d:6a:b5:67:8a:ce:5f:49: 44:dc:07:bb:df:c2:0e:c3:c3:7e:ce:b7:15:58:c9: 05:6d:7b:03:a6:9e:ce:52:9f:25:3d:77:e2:12:ff: 9d:e1:2f:0a:ca:c2:15:d9:44:cf:60:44:3a:1d:42: 75:90:7a:87:7e:23:fa:5e:89:8f:f2:9b:78:2d:03: 96:a8:0e:f2:95:8e:da:28:d3:f8:20:a9:f8:96:85: 85:31:62:5d:98:30:c1:be:73:1a:9b:7d:ad:14:54: f1:8a:14:a6:e8:70:b0:0e:00:e2:d0:7b:a5:ff:09: d0:99:f9:53:8d:07:fc:ff:36:df:20:75:47:b3:b9: 11:25:a3:fc:34:73:78:ad:e0:ce:02:15:f0:b5:ed: c2:d6:9f:1f:bc:61:7a:62:2c:9f:f8:49:db:7e:6b: 90:5e:6c:71:22:20:ac:03:02:d0:e8:5e:59:45:46: 66:ad:37:06:42:0e:69:2c:9f:42:20:2e:41:71:2a: e6:d1:2c:94:6b:9e:b1:d6:12:3a:5a:e4:ca:31:16: 93:6c:bd:85:09:8a:ef:1b:87:28:4e:87:4d:49:d3: 40:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:66:15:3B:11:4C:49:0B:CE:75:81:42:B6:2A:22:10:7A:6A:4A:32 X509v3 Authority Key Identifier: keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ed:81:30:47:80:12:c4:54:ad:34:bb:76:1f:00:13:f9:3f: 9d:8d:34:61:f3:3d:81:c8:19:7e:ae:e4:9c:8e:86:54:df:30: d7:a5:a5:b9:e9:c8:4f:47:49:62:8d:3d:a1:9a:7b:09:f4:05: a5:e0:0e:be:88:88:7e:6d:bb:df:4f:d7:5f:be:5c:ab:24:d3: 2d:7c:b7:c6:b3:f8:da:91:1c:79:2d:2c:69:28:a6:78:0f:7f: 38:49:f6:67:46:4b:ef:26:8f:4e:e4:e8:18:eb:f1:c7:5a:ab: a3:02:0f:7a:af:74:bf:b0:d5:d8:a2:f2:4f:87:60:a8:c0:2b: 54:07:0d:0f:80:65:78:9f:80:64:cf:e3:0f:20:31:6a:b3:1a: 9e:cc:86:59:3a:e4:01:2c:cc:3f:d9:7d:e8:cd:24:b1:06:f0: 96:80:2c:05:ac:94:6b:cd:b0:cd:f8:6c:ad:48:16:30:6d:94: f9:b3:3a:f0:30:18:64:39:5a:22:22:68:f4:a0:ff:17:bd:f1: f6:b8:ac:92:b5:41:81:87:c2:4f:77:2f:0d:6d:91:78:f2:2c: cc:60:7c:1f:af:e3:ec:4a:6c:46:90:e9:20:26:ca:01:34:eb: f8:a6:9c:bf:85:91:25:f3:bb:b6:ab:25:77:fd:99:a8:43:c5: f2:5a:4f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjRAhQD/BvB3ux4JyHzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNGUyY2YwMDJkNDVmZjlhZGUyYWI4NjQzYWRiZmUwODNj YTEyZDAwHhcNMjUxMjA2MTUwMDU5WhcNMjUxMjA3MTUwMDU5WjAzMTEwLwYDVQQD EyhjOTY2MTUzYjExNGM0OTBiY2U3NTgxNDJiNjJhMjIxMDdhNmE0YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJNik8y9dUdZmR5pBNgJo9f1NrDt i+jdt0EWD+0AjanLhQZ+PWq1Z4rOX0lE3Ae738IOw8N+zrcVWMkFbXsDpp7OUp8l PXfiEv+d4S8KysIV2UTPYEQ6HUJ1kHqHfiP6XomP8pt4LQOWqA7ylY7aKNP4IKn4 loWFMWJdmDDBvnMam32tFFTxihSm6HCwDgDi0Hul/wnQmflTjQf8/zbfIHVHs7kR JaP8NHN4reDOAhXwte3C1p8fvGF6Yiyf+EnbfmuQXmxxIiCsAwLQ6F5ZRUZmrTcG Qg5pLJ9CIC5BcSrm0SyUa56x1hI6WuTKMRaTbL2FCYrvG4coTodNSdNAZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlmFTsRTEkLznWBQrYqIhB6akoyMB8GA1UdIwQY MBaAFEpOLPAC1F/5reKrhkOtv+CDyhLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYt OWFjODFlZjQ1OTJjLzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYtOWFjODFlZjQ1OTJj LzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPO2BMEeA EsRUrTS7dh8AE/k/nY00YfM9gcgZfq7knI6GVN8w16WluenIT0dJYo09oZp7CfQF peAOvoiIfm2730/XX75cqyTTLXy3xrP42pEceS0saSimeA9/OEn2Z0ZL7yaPTuTo GOvxx1qrowIPeq90v7DV2KLyT4dgqMArVAcND4BleJ+AZM/jDyAxarMansyGWTrk ASzMP9l96M0ksQbwloAsBayUa82wzfhsrUgWMG2U+bM68DAYZDlaIiJo9KD/F73x 9riskrVBgYfCT3cvDW2RePIszGB8H6/j7EpsRpDpICbKATTr+Kacv4WRJfO7tqsl d/2ZqEPF8lpPcw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:39 2025 by rpki-client