This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft File: S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json) Hash identifier: Sf/iWO08VV5BOE9E56+bCI68KXvatR6kND7LaLw7dmo= Subject key identifier: 28:60:65:35:7F:9A:16:D7:D2:7D:56:00:9D:CD:C4:CD:38:BF:A7:D9 Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b Certificate serial: 019AF163EEB429946B9E75232CB87BB69974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft Manifest number: 02E6 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: JgPZ6tPqUpyrX7p/At+SF9pE3cjoNVEh/FZ0L8Znm8Y=) 2: nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa (hash: 9j/+zG1+gdxJdHggAHxvXOVulCvMT9Y+f9TRZ3Vf7+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ee:b4:29:94:6b:9e:75:23:2c:b8:7b:b6:99:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=286065357f9a16d7d27d56009dcdc4cd38bfa7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:d1:fe:65:d8:6e:8a:45:37:28:04:30:b5: dd:5a:3c:4b:85:8d:e6:ea:a0:4c:10:2c:80:89:9e: c4:01:61:a0:5a:ea:fe:85:35:b5:02:e4:31:fc:22: b3:5c:39:d9:4a:34:22:fa:6a:ce:d6:fb:9f:83:f0: a5:a2:b8:ec:a3:6e:db:54:ce:79:db:3d:0b:8d:ca: 82:e3:11:d6:9d:c0:1b:93:b2:bb:40:ee:3a:ab:94: 2c:a1:d6:f9:7e:4b:b8:b9:8f:73:fb:e9:3a:e2:d5: 72:d9:d5:4c:3e:e2:b2:0b:0b:74:bc:e4:d0:1c:7b: 2d:96:25:79:0a:df:c1:4a:40:58:86:0c:34:f4:3e: 1b:25:b3:f9:88:27:bf:af:35:e6:d5:fa:d6:11:82: 8d:af:35:12:46:7b:42:4e:2e:60:07:da:5a:67:31: 7f:71:66:fd:6d:27:3b:22:90:ee:6d:62:48:d8:f7: a9:e7:96:c7:40:fb:ae:9b:d8:99:1c:38:51:53:22: 44:c6:8d:5f:6a:50:23:31:4d:92:d1:24:47:ac:5c: 48:6e:47:35:d6:a4:eb:03:f0:fa:9f:d1:22:6d:12: c5:34:75:0d:c8:91:d6:81:7f:4f:fd:03:a4:f1:e9: 27:57:64:e4:dd:ab:ee:d0:28:45:a9:10:f3:97:6e: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:65:35:7F:9A:16:D7:D2:7D:56:00:9D:CD:C4:CD:38:BF:A7:D9 X509v3 Authority Key Identifier: keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f3:b8:4f:0d:14:dc:a6:6b:97:77:98:2c:ef:a4:49:bd:8d: 43:4a:89:a6:53:b7:ca:dd:3e:8a:60:b3:45:6d:41:bb:4b:48: e6:d2:d8:8f:b3:36:a7:96:d4:57:08:2f:21:2a:a4:1b:54:c6: f1:54:48:68:ea:08:81:0e:f9:35:ce:3f:cc:c2:30:d6:ba:5e: b0:39:c9:f6:7a:bf:dd:db:69:5e:87:fd:20:84:75:d5:20:3b: 0b:fb:31:9c:e9:b1:b5:ba:13:77:04:5e:fb:8d:22:3c:e5:3c: ef:32:1c:cc:c6:9b:b7:ce:34:23:29:93:45:a5:33:53:f9:eb: c1:53:13:69:90:09:e2:66:38:70:bf:94:7c:4c:5a:ff:0d:3e: a8:83:42:98:e9:ef:bc:c4:cd:94:7d:09:ae:7b:75:d7:22:80: b2:5c:e8:e6:31:54:c3:2a:4a:e7:e8:97:8c:1f:df:81:c8:a7: 18:30:f5:f3:d6:b4:b3:ce:8f:b5:0c:8e:dc:76:9d:1a:52:e5: f6:9d:9b:64:a0:ce:f3:1f:cd:da:36:c4:10:a1:c8:72:e7:10: 04:e5:d4:c3:34:c2:01:f5:34:3c:42:29:b7:db:b9:e3:5e:0a: 2d:73:40:4a:c3:aa:d6:76:28:af:88:87:eb:e8:4b:ae:ff:9a: 94:78:0a:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+60KZRrnnUjLLh7tpl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZmQ5YzE0MDZjOGNhMTJmZjUwMGIxZmQ0YzgwMDQxNDZh MmRhNGIwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EygyODYwNjUzNTdmOWExNmQ3ZDI3ZDU2MDA5ZGNkYzRjZDM4YmZhN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PTR/mXYbopFNygEMLXdWjxLhY3m 6qBMECyAiZ7EAWGgWur+hTW1AuQx/CKzXDnZSjQi+mrO1vufg/Clorjso27bVM55 2z0LjcqC4xHWncAbk7K7QO46q5Qsodb5fku4uY9z++k64tVy2dVMPuKyCwt0vOTQ HHstliV5Ct/BSkBYhgw09D4bJbP5iCe/rzXm1frWEYKNrzUSRntCTi5gB9paZzF/ cWb9bSc7IpDubWJI2Pep55bHQPuum9iZHDhRUyJExo1falAjMU2S0SRHrFxIbkc1 1qTrA/D6n9EibRLFNHUNyJHWgX9P/QOk8eknV2Tk3avu0ChFqRDzl263hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChgZTV/mhbX0n1WAJ3NxM04v6fZMB8GA1UdIwQY MBaAFEv9nBQGyMoS/1ALH9TIAEFGotpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQt NDgzNDY1YjBjOGY1LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQtNDgzNDY1YjBjOGY1 LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/O4Tw0U 3KZrl3eYLO+kSb2NQ0qJplO3yt0+imCzRW1Bu0tI5tLYj7M2p5bUVwgvISqkG1TG 8VRIaOoIgQ75Nc4/zMIw1rpesDnJ9nq/3dtpXof9IIR11SA7C/sxnOmxtboTdwRe +40iPOU87zIczMabt840IymTRaUzU/nrwVMTaZAJ4mY4cL+UfExa/w0+qINCmOnv vMTNlH0Jrnt11yKAslzo5jFUwypK5+iXjB/fgcinGDD189a0s86PtQyO3HadGlLl 9p2bZKDO8x/N2jbEEKHIcucQBOXUwzTCAfU0PEIpt9u5414KLXNASsOq1nYor4iH 6+hLrv+alHgKyA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:56 2025 by rpki-client