This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft File: S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json) Hash identifier: tpY1lvgkgWrQmcG/WQSIjUCJnIKBFonmrdPlaZuaTpI= Subject key identifier: 85:A3:EB:73:A3:BA:9D:06:86:59:DA:2D:E6:BB:51:25:D5:A7:99:1E Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b Certificate serial: 019B2F301A361A029100133B811CA1A31E70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft Manifest number: 0306 Signing time: Thu 18 Dec 2025 02:00:40 +0000 Manifest this update: Thu 18 Dec 2025 02:00:40 +0000 Manifest next update: Fri 19 Dec 2025 02:00:40 +0000 Files and hashes: 1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: 6PQq1yDQ7L/Krh2NyUFR43UDUYipalH4TKnD7qEJPbY=) 2: nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa (hash: 9j/+zG1+gdxJdHggAHxvXOVulCvMT9Y+f9TRZ3Vf7+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:1a:36:1a:02:91:00:13:3b:81:1c:a1:a3:1e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b Validity Not Before: Dec 18 02:00:40 2025 GMT Not After : Dec 19 02:00:40 2025 GMT Subject: CN=85a3eb73a3ba9d068659da2de6bb5125d5a7991e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:e5:34:dc:f6:39:b3:2a:68:71:8b:ba:c0: 62:b0:a4:4b:1f:9e:e7:7e:a3:29:14:b6:22:cf:6a: eb:5b:6a:c5:66:20:e3:c3:1f:7d:91:87:e8:80:0c: 77:44:b3:39:ba:c0:40:70:ae:02:07:5d:74:f6:9e: 5b:d2:ee:48:3e:c1:af:14:50:96:7d:6e:da:1a:db: 1b:fa:be:b3:6b:ab:cd:b2:c5:94:0f:67:67:19:27: 2d:5c:f3:be:e3:0c:17:26:e8:b8:f3:21:4d:a9:4e: 43:92:6b:6e:27:50:af:d2:47:d7:74:46:71:de:ea: c5:ea:52:31:a1:5c:57:79:5b:14:c5:ef:8a:33:58: f7:eb:9b:67:65:6a:4c:70:38:72:b8:c4:00:6b:42: c9:ed:65:fa:c1:99:9b:6e:65:33:0d:4a:1b:49:f9: e6:64:65:67:20:12:c9:ab:d6:0b:29:84:87:05:ba: 1b:1c:a1:21:6f:3c:ba:08:9e:41:09:8d:17:21:ef: dc:e6:2d:ce:e5:8b:67:e0:c5:83:97:44:71:c9:3e: 55:e4:09:19:67:4d:2f:46:35:3f:e6:e8:f5:4d:69: 19:1f:27:28:3a:4d:db:1c:35:9e:9f:20:75:1e:d6: f7:2d:28:75:6b:96:50:83:7e:eb:8b:63:21:19:e2: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:EB:73:A3:BA:9D:06:86:59:DA:2D:E6:BB:51:25:D5:A7:99:1E X509v3 Authority Key Identifier: keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3f:31:bb:85:1b:b2:11:31:a0:54:c7:41:75:6e:02:89:a1: 65:9c:05:7c:48:1b:21:02:2f:55:04:79:02:4a:8d:93:49:ea: 82:35:4d:ae:77:d6:79:2b:d0:90:98:c4:6a:d9:31:6e:78:d2: cb:1e:45:f2:aa:c5:ff:41:f2:48:fc:95:32:f2:8d:e2:93:e8: 9c:91:19:90:13:4a:9d:32:33:a2:99:ad:60:2d:1d:e2:91:4c: b5:9c:b2:a1:7d:f4:f9:1f:b1:e1:00:48:b5:7b:b1:b6:b6:fe: 39:9f:b8:85:a3:5e:c2:28:d6:77:b4:80:46:72:e4:6b:97:d2: b6:78:38:36:cc:7b:72:6a:ac:c2:68:4c:09:8c:81:9f:ca:05: 16:bb:10:4f:f6:a0:98:78:9d:b3:bc:86:42:41:c8:b0:49:d8: b6:ef:1c:e7:c7:e2:f9:30:db:77:8e:ac:5c:51:e8:e9:dd:de: 39:68:5c:e0:5a:28:35:63:3b:b1:ba:bb:b8:f9:aa:3b:b4:d5: f7:dd:29:3c:83:51:df:22:b9:20:8a:4f:15:ae:00:ad:24:31: 6e:59:c9:97:f1:f7:a1:c2:0b:e9:fc:1c:6c:d0:8a:86:8f:15: fe:d0:c6:df:d6:4e:05:be:46:e1:b3:25:4b:25:87:36:a7:e7: 0b:5e:6c:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMBo2GgKRABM7gRyhox5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZmQ5YzE0MDZjOGNhMTJmZjUwMGIxZmQ0YzgwMDQxNDZh MmRhNGIwHhcNMjUxMjE4MDIwMDQwWhcNMjUxMjE5MDIwMDQwWjAzMTEwLwYDVQQD Eyg4NWEzZWI3M2EzYmE5ZDA2ODY1OWRhMmRlNmJiNTEyNWQ1YTc5OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs43lNNz2ObMqaHGLusBisKRLH57n fqMpFLYiz2rrW2rFZiDjwx99kYfogAx3RLM5usBAcK4CB1109p5b0u5IPsGvFFCW fW7aGtsb+r6za6vNssWUD2dnGSctXPO+4wwXJui48yFNqU5DkmtuJ1Cv0kfXdEZx 3urF6lIxoVxXeVsUxe+KM1j365tnZWpMcDhyuMQAa0LJ7WX6wZmbbmUzDUobSfnm ZGVnIBLJq9YLKYSHBbobHKEhbzy6CJ5BCY0XIe/c5i3O5Ytn4MWDl0RxyT5V5AkZ Z00vRjU/5uj1TWkZHycoOk3bHDWenyB1Htb3LSh1a5ZQg37ri2MhGeIb5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWj63Ojup0GhlnaLea7USXVp5keMB8GA1UdIwQY MBaAFEv9nBQGyMoS/1ALH9TIAEFGotpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQt NDgzNDY1YjBjOGY1LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQtNDgzNDY1YjBjOGY1 LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArD8xu4Ub shExoFTHQXVuAomhZZwFfEgbIQIvVQR5AkqNk0nqgjVNrnfWeSvQkJjEatkxbnjS yx5F8qrF/0HySPyVMvKN4pPonJEZkBNKnTIzopmtYC0d4pFMtZyyoX30+R+x4QBI tXuxtrb+OZ+4haNewijWd7SARnLka5fStng4Nsx7cmqswmhMCYyBn8oFFrsQT/ag mHids7yGQkHIsEnYtu8c58fi+TDbd46sXFHo6d3eOWhc4FooNWM7sbq7uPmqO7TV 990pPINR3yK5IIpPFa4ArSQxblnJl/H3ocIL6fwcbNCKho8V/tDG39ZOBb5G4bMl SyWHNqfnC15s0A== -----END CERTIFICATE-----Generated at Thu Dec 18 05:47:36 2025 by rpki-client