This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json) Hash identifier: FiHi8eXGyx7PyBT2inEEcrmzfNNlyU5LWVSXMXW8His= Subject key identifier: 7A:44:5E:0A:38:78:5D:06:B5:D6:9C:9F:BB:FA:78:3C:05:3F:1E:CB Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81 Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81 Certificate serial: 019AF35282CB5EF18F5D1FE3F923AA534429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft Manifest number: 0AEB Signing time: Sat 06 Dec 2025 11:01:02 +0000 Manifest this update: Sat 06 Dec 2025 11:01:02 +0000 Manifest next update: Sun 07 Dec 2025 11:01:02 +0000 Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=) 2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: b3lljYWCWDSt0wiDqqVs3Ens1H/aXZC7MwXbTyvtLgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:82:cb:5e:f1:8f:5d:1f:e3:f9:23:aa:53:44:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81 Validity Not Before: Dec 6 11:01:02 2025 GMT Not After : Dec 7 11:01:02 2025 GMT Subject: CN=7a445e0a38785d06b5d69c9fbbfa783c053f1ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:80:a7:89:61:7d:b4:a8:f0:a5:68:fb:01: 58:fe:2a:c5:e8:e9:e3:92:a6:d0:4b:bb:08:9e:25: de:e4:a1:ca:af:11:c9:5e:3b:99:e4:ab:90:c4:d1: 9f:d9:67:0b:60:65:37:c7:9e:92:df:d7:bf:08:0f: df:fb:8c:32:48:fa:1c:cf:a2:73:4f:bb:78:16:20: 74:62:ba:05:9b:c3:94:af:4f:14:75:76:93:b7:84: c1:1a:23:03:a3:be:b3:11:00:9d:f7:04:c6:a5:1c: 55:5c:70:6e:78:17:5c:ea:35:9e:13:68:9e:e0:7b: 42:ef:d2:a8:60:da:23:94:f1:17:a6:23:06:b2:79: 91:fb:87:4b:80:17:55:bd:a1:a5:91:e0:19:83:e6: ff:bc:a5:0f:a5:9f:2c:78:b5:eb:97:d0:53:1f:2b: ee:98:0f:f9:5a:5f:4d:1e:f1:66:e5:14:24:1f:45: b5:78:00:0d:cd:83:cb:d3:b5:86:ac:48:af:5d:e7: 31:e0:2e:68:4c:29:63:db:a1:1e:86:30:f4:08:c1: cd:f6:be:13:a0:e7:c0:04:9c:e8:32:96:02:ea:d0: c7:0d:96:e2:95:08:aa:a2:e1:26:60:60:f2:f6:bb: 28:98:77:16:49:43:35:c0:aa:1b:94:80:43:34:ee: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:44:5E:0A:38:78:5D:06:B5:D6:9C:9F:BB:FA:78:3C:05:3F:1E:CB X509v3 Authority Key Identifier: keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fc:47:5f:20:d3:08:4c:e2:d2:8b:c8:cb:f7:52:77:23:c9: 9b:47:ba:0b:80:d9:59:cc:61:ce:c7:fe:a6:62:d8:2f:30:e3: f2:45:9c:bf:26:0e:6b:7d:e5:3a:21:9d:9f:f7:5a:02:4c:f3: 6f:ed:b4:1f:e7:98:78:c8:aa:53:5e:61:77:c8:25:ff:b1:41: 9b:48:65:2c:98:73:55:91:29:1d:14:f2:1d:f5:4b:7c:b7:7f: 1c:54:fc:5d:c3:3f:dc:c6:00:70:20:89:0b:fa:16:10:97:8d: 49:57:4b:ad:ca:08:f7:30:af:5c:ce:74:59:26:f7:14:18:2d: ca:c3:0a:0b:c1:96:50:73:05:89:73:f1:60:83:5d:28:ba:88: 73:47:9a:2f:72:49:2b:9a:22:11:d9:52:64:19:1d:44:86:fb: ec:48:64:19:78:7d:13:7d:3e:22:b8:b6:fe:7d:86:13:7f:7e: 1e:b3:09:76:a9:5e:57:98:25:28:eb:e5:b5:d0:96:59:0e:9a: bd:96:44:a7:6a:42:b3:de:23:5f:c9:cc:a3:93:fe:3f:a1:57: a1:ea:39:74:e8:77:5c:a2:d6:14:40:bd:29:40:9d:56:39:b6: 6e:3a:3d:d3:02:50:d5:b9:63:d0:61:29:9b:bf:1c:eb:b2:5a: 5a:d6:4c:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoLLXvGPXR/j+SOqU0QpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzODU5NDE0NjIwMmUyZjZjMzQ1NmIwNjk2ZmYxODU2MmYx YjlmODEwHhcNMjUxMjA2MTEwMTAyWhcNMjUxMjA3MTEwMTAyWjAzMTEwLwYDVQQD Eyg3YTQ0NWUwYTM4Nzg1ZDA2YjVkNjljOWZiYmZhNzgzYzA1M2YxZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdCAp4lhfbSo8KVo+wFY/irF6Onj kqbQS7sIniXe5KHKrxHJXjuZ5KuQxNGf2WcLYGU3x56S39e/CA/f+4wySPocz6Jz T7t4FiB0YroFm8OUr08UdXaTt4TBGiMDo76zEQCd9wTGpRxVXHBueBdc6jWeE2ie 4HtC79KoYNojlPEXpiMGsnmR+4dLgBdVvaGlkeAZg+b/vKUPpZ8seLXrl9BTHyvu mA/5Wl9NHvFm5RQkH0W1eAANzYPL07WGrEivXecx4C5oTClj26EehjD0CMHN9r4T oOfABJzoMpYC6tDHDZbilQiqouEmYGDy9rsomHcWSUM1wKoblIBDNO4P+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpEXgo4eF0Gtdacn7v6eDwFPx7LMB8GA1UdIwQY MBaAFLOFlBRiAuL2w0VrBpb/GFYvG5+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kMmU4MjYtNWFjYi00N2Q2LTkyYTQt NDNiYjE5ZjJlNTNiLzEvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kMmU4MjYtNWFjYi00N2Q2LTkyYTQtNDNiYjE5ZjJlNTNi LzEvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/xHXyDT CEzi0ovIy/dSdyPJm0e6C4DZWcxhzsf+pmLYLzDj8kWcvyYOa33lOiGdn/daAkzz b+20H+eYeMiqU15hd8gl/7FBm0hlLJhzVZEpHRTyHfVLfLd/HFT8XcM/3MYAcCCJ C/oWEJeNSVdLrcoI9zCvXM50WSb3FBgtysMKC8GWUHMFiXPxYINdKLqIc0eaL3JJ K5oiEdlSZBkdRIb77EhkGXh9E30+Iri2/n2GE39+HrMJdqleV5glKOvltdCWWQ6a vZZEp2pCs94jX8nMo5P+P6FXoeo5dOh3XKLWFEC9KUCdVjm2bjo90wJQ1blj0GEp m78c67JaWtZMIw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:40 2025 by rpki-client