This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json) Hash identifier: dGpKXw0Tywp0uf6Udq6htt/yWZ+KdZ6TohpNwLiCEs8= Subject key identifier: 84:D9:D0:CA:2E:1A:93:2B:2C:86:98:2F:5F:A6:1A:37:92:1C:CA:CE Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0 Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0 Certificate serial: 019B2C2F2BFDF61914C01C059E3720C86B9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 12:00:47 +0000 Manifest this update: Wed 17 Dec 2025 12:00:47 +0000 Manifest next update: Thu 18 Dec 2025 12:00:47 +0000 Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=) 2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: geX4XtBkdMGxodxNTGk8TLIycUmS01/l51z+wd/01BE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:2b:fd:f6:19:14:c0:1c:05:9e:37:20:c8:6b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0 Validity Not Before: Dec 17 12:00:47 2025 GMT Not After : Dec 18 12:00:47 2025 GMT Subject: CN=84d9d0ca2e1a932b2c86982f5fa61a37921ccace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:45:f3:5b:08:6b:fa:63:53:60:dd:1b:74: f0:a9:dc:cd:30:d2:a0:96:92:4a:4c:9f:2d:6c:9e: 37:cc:31:b3:f0:5e:c2:f3:2a:04:d6:e5:67:df:24: a8:4b:69:8e:f8:d7:96:01:f9:ad:59:f5:d6:99:d4: 38:95:f5:c8:64:9d:6f:c1:74:ca:63:0c:72:92:a9: 5b:a2:03:85:48:d8:50:85:f1:2a:59:00:66:01:f5: 5f:fb:2f:b1:c0:92:81:ab:22:d3:41:07:3e:b4:ea: 30:52:09:0e:23:ae:6f:7f:73:06:a7:f6:9a:0e:c2: 98:ae:21:45:a4:71:d5:06:1b:f4:53:8e:f5:c4:5c: 71:38:50:b4:17:87:6a:6c:43:76:b1:21:be:39:e0: c9:d3:32:a3:1c:57:2f:04:47:6d:a0:48:ce:d9:b8: 81:7a:88:55:f7:70:05:74:65:3e:ed:21:78:0f:cb: 9a:c2:09:9d:35:fb:26:a1:06:51:b0:7b:c7:57:de: 2c:94:31:c6:08:38:ad:03:54:5b:23:e7:b9:ae:da: c1:c0:c3:9a:74:cc:16:d0:fe:09:41:0c:f2:b9:d9: b4:67:7f:4e:b3:05:79:d5:77:7f:ac:be:eb:54:d9: 41:59:fe:8f:f2:6d:ac:43:62:7a:98:f5:f3:0a:7c: f9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D9:D0:CA:2E:1A:93:2B:2C:86:98:2F:5F:A6:1A:37:92:1C:CA:CE X509v3 Authority Key Identifier: keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5b:e1:c2:f8:3f:af:c7:a6:60:fb:b7:2d:99:c7:a4:ea:b2: ee:4d:23:5e:a6:25:6b:b1:09:2e:23:0a:3b:1a:97:60:00:cd: d1:6a:78:52:b1:88:fe:cd:22:b7:e4:c6:3d:b0:2f:8f:09:15: 1e:b0:d4:6c:aa:0c:12:16:7b:1b:aa:44:4d:d0:6f:5f:e8:e4: 35:b8:17:ec:cf:f2:6a:5f:96:6e:dc:46:c2:a7:6b:14:19:4f: 4f:9e:aa:40:94:6d:78:fd:51:02:23:61:98:93:f1:87:e0:be: 1c:99:70:02:c3:e2:f3:d3:cb:dc:79:ed:8e:9a:6d:91:44:02: ce:19:61:3c:a6:d0:3d:2a:55:92:fd:06:73:76:f7:18:d1:02: 9f:13:78:cb:b0:83:d5:c9:9d:2b:85:e6:23:cf:2e:ab:66:6b: eb:09:5b:d8:5f:7b:c9:76:6e:7a:ab:27:f9:01:c6:b8:cb:a4: a7:1f:6a:be:52:20:55:1c:db:fd:4d:dc:9b:1e:59:fc:60:e9: c1:85:b0:64:2d:e5:2b:3d:b6:f6:50:10:08:5e:7a:63:ae:8f: 34:d1:dc:74:80:38:7d:fa:f8:82:d2:be:11:a5:e2:b8:66:24: 5d:eb:a7:88:5b:c3:e6:b7:1a:cb:34:fa:ab:34:90:29:9d:6a: 74:97:1a:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLyv99hkUwBwFnjcgyGudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNGUyY2YwMDJkNDVmZjlhZGUyYWI4NjQzYWRiZmUwODNj YTEyZDAwHhcNMjUxMjE3MTIwMDQ3WhcNMjUxMjE4MTIwMDQ3WjAzMTEwLwYDVQQD Eyg4NGQ5ZDBjYTJlMWE5MzJiMmM4Njk4MmY1ZmE2MWEzNzkyMWNjYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpdF81sIa/pjU2DdG3TwqdzNMNKg lpJKTJ8tbJ43zDGz8F7C8yoE1uVn3ySoS2mO+NeWAfmtWfXWmdQ4lfXIZJ1vwXTK YwxykqlbogOFSNhQhfEqWQBmAfVf+y+xwJKBqyLTQQc+tOowUgkOI65vf3MGp/aa DsKYriFFpHHVBhv0U471xFxxOFC0F4dqbEN2sSG+OeDJ0zKjHFcvBEdtoEjO2biB eohV93AFdGU+7SF4D8uawgmdNfsmoQZRsHvHV94slDHGCDitA1RbI+e5rtrBwMOa dMwW0P4JQQzyudm0Z39OswV51Xd/rL7rVNlBWf6P8m2sQ2J6mPXzCnz5kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITZ0MouGpMrLIaYL1+mGjeSHMrOMB8GA1UdIwQY MBaAFEpOLPAC1F/5reKrhkOtv+CDyhLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYt OWFjODFlZjQ1OTJjLzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYtOWFjODFlZjQ1OTJj LzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVvhwvg/ r8emYPu3LZnHpOqy7k0jXqYla7EJLiMKOxqXYADN0Wp4UrGI/s0it+TGPbAvjwkV HrDUbKoMEhZ7G6pETdBvX+jkNbgX7M/yal+WbtxGwqdrFBlPT56qQJRteP1RAiNh mJPxh+C+HJlwAsPi89PL3HntjpptkUQCzhlhPKbQPSpVkv0Gc3b3GNECnxN4y7CD 1cmdK4XmI88uq2Zr6wlb2F97yXZueqsn+QHGuMukpx9qvlIgVRzb/U3cmx5Z/GDp wYWwZC3lKz229lAQCF56Y66PNNHcdIA4ffr4gtK+EaXiuGYkXeuniFvD5rcayzT6 qzSQKZ1qdJcaBA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:41 2025 by rpki-client