This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json) Hash identifier: IawwOo8kcYOgTECdryMP0wLEZh/ffiPXhJor8+UMfj0= Subject key identifier: 74:2D:5F:36:71:0C:A2:9A:A9:01:20:3B:34:4A:43:8B:CD:D9:C8:76 Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Certificate serial: 019AF1D1E5BE3E76A8F259F68C3632D518C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 5WxXf6dS__Evv8ybNdjAs3Nto-g.roa (hash: y6JQKN1GUMZnwd9TH2DZ03UU+crYCRvw3vTZfmRAIuw=) 2: 8keuoYHRmEN7a8dM4R3KAZIUMn8.roa (hash: cqhsmkY13XgBA/8McBrRobM59idSx8HxeP3LI73UX3s=) 3: _g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa (hash: lCKjV64dwqXs6VagiwwJOVKqACy5VCGM5CrdkZRYvvY=) 4: fMI-jCDaaLsxpmL0Z0hMaMI0pwA.roa (hash: Ft2AV1Fb/Osk91o2uc7E3/mf/b9LB0/k5lu+soQUSmI=) 5: o0jeoBjm6A2tZp_sdpXJQxSFq9g.roa (hash: 0tJFYrvs37c2RcoKNsABjGXFSJGBQds9qdtyJiQGJI4=) 6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: pk0J6JszGPcNqlS+cSqCr3DBgVXEYT+LCeXzOVIAWdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e5:be:3e:76:a8:f2:59:f6:8c:36:32:d5:18:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=742d5f36710ca29aa901203b344a438bcdd9c876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:39:f6:ba:1c:0e:8e:d4:ab:54:a7:be:0f: 4d:ca:7d:02:7b:34:c7:b3:c7:dc:d3:0b:44:3c:74: 2d:c9:df:8b:b0:08:90:31:fb:a6:d0:cf:a0:3f:70: 77:f6:77:26:2a:dd:17:ba:b9:07:4d:e9:46:29:b7: 40:ef:93:89:72:92:b6:47:24:46:7f:e3:0a:9a:7c: f1:ac:ea:66:c9:59:37:7c:de:2a:b3:89:b8:7b:b7: c9:d6:61:50:d0:6c:81:66:4e:fd:47:4c:18:fc:0a: 60:f1:e4:8a:d8:f5:33:f3:b6:0c:01:93:59:fc:7e: 4d:3f:8c:ee:1e:62:ba:a6:09:4d:33:26:5d:f2:b7: 3a:cd:19:20:38:0a:64:fd:1e:81:0d:3c:1d:61:66: c8:de:97:f1:a8:9c:61:2f:78:14:36:9c:2a:a5:c8: 2c:2e:31:e8:a5:df:ee:e6:d8:a4:6f:6f:fb:4b:f4: 25:9e:57:ba:49:77:a5:71:d6:8c:f7:c0:b4:26:6f: 1e:bc:3e:f4:d2:41:11:d0:d6:f6:ea:a2:a1:b2:e7: 5e:bb:9d:ed:c2:51:b2:16:a5:4b:6b:9d:80:32:4d: e4:8f:4a:3f:51:2b:41:02:08:24:a2:f9:d9:00:92: bc:47:37:9f:dd:d0:a9:89:11:0a:da:81:8a:5c:e5: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2D:5F:36:71:0C:A2:9A:A9:01:20:3B:34:4A:43:8B:CD:D9:C8:76 X509v3 Authority Key Identifier: keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f4:15:c2:ce:7d:85:01:30:f0:cb:b1:a8:a3:5f:85:a5:db: 8c:f7:72:02:e7:db:dc:b8:b7:dc:e5:ac:a5:43:bf:2a:57:95: cd:cc:87:47:90:c6:95:38:94:d3:3b:2f:e0:39:8a:14:fa:5f: ca:d4:4f:cc:11:e3:16:7a:2c:b4:0d:20:4d:3c:b9:af:c1:87: 25:36:bf:c1:b7:f9:4a:7d:4a:e2:51:37:4b:1f:b5:02:98:1b: 66:d6:c4:bd:5a:c8:2e:bf:fc:52:97:72:27:e8:9a:8a:80:d3: 66:b4:3c:b4:67:00:82:de:8c:76:d3:a3:32:41:15:1c:fd:5c: 0a:96:07:71:d2:ea:0a:21:f7:d9:cb:9b:88:2f:12:85:3b:a8: 0a:26:39:5a:4a:75:01:23:39:23:67:ee:f2:74:c3:04:37:bd: 63:a3:37:ed:27:7e:cf:33:92:ed:69:8e:3f:d0:bb:0b:b3:1c: 93:4d:f0:a4:a2:09:53:f2:da:c0:94:4e:56:ac:33:04:0b:a6: 39:e2:4b:9c:ac:3b:5e:ea:3b:90:1d:bc:f8:e5:8e:13:0e:e1: 34:ec:d1:66:dc:25:80:f9:7d:11:87:b0:6a:fd:43:2b:69:5e: 22:80:96:4a:a5:8a:14:13:9f:02:2b:a4:ed:9f:25:ab:3b:3c: fd:ee:e5:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eW+Pnao8ln2jDYy1RjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3 NzdmMDYwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD Eyg3NDJkNWYzNjcxMGNhMjlhYTkwMTIwM2IzNDRhNDM4YmNkZDljODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysU59rocDo7Uq1Snvg9Nyn0CezTH s8fc0wtEPHQtyd+LsAiQMfum0M+gP3B39ncmKt0XurkHTelGKbdA75OJcpK2RyRG f+MKmnzxrOpmyVk3fN4qs4m4e7fJ1mFQ0GyBZk79R0wY/Apg8eSK2PUz87YMAZNZ /H5NP4zuHmK6pglNMyZd8rc6zRkgOApk/R6BDTwdYWbI3pfxqJxhL3gUNpwqpcgs LjHopd/u5tikb2/7S/Qlnle6SXelcdaM98C0Jm8evD700kER0Nb26qKhsudeu53t wlGyFqVLa52AMk3kj0o/UStBAggkovnZAJK8Rzef3dCpiREK2oGKXOVVKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQtXzZxDKKaqQEgOzRKQ4vN2ch2MB8GA1UdIwQY MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt MDYwNWMwODlmYzM4LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4 LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvQVws59 hQEw8MuxqKNfhaXbjPdyAufb3Li33OWspUO/KleVzcyHR5DGlTiU0zsv4DmKFPpf ytRPzBHjFnostA0gTTy5r8GHJTa/wbf5Sn1K4lE3Sx+1ApgbZtbEvVrILr/8Updy J+iaioDTZrQ8tGcAgt6MdtOjMkEVHP1cCpYHcdLqCiH32cubiC8ShTuoCiY5Wkp1 ASM5I2fu8nTDBDe9Y6M37Sd+zzOS7WmOP9C7C7Mck03wpKIJU/LawJROVqwzBAum OeJLnKw7Xuo7kB28+OWOEw7hNOzRZtwlgPl9EYewav1DK2leIoCWSqWKFBOfAiuk 7Z8lqzs8/e7lEA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:05 2025 by rpki-client