This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json) Hash identifier: NcjXHCya43y36jbgsqSJSKI1osqGx8Z6weDyVguN6gg= Subject key identifier: DE:69:BD:B8:9D:EB:BE:DD:67:54:34:BE:4F:45:D8:48:88:E0:08:EB Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c Certificate serial: 019AF276BAC1A7BE4FD43456E6D5093EC516 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft Manifest number: 0974 Signing time: Sat 06 Dec 2025 07:00:58 +0000 Manifest this update: Sat 06 Dec 2025 07:00:58 +0000 Manifest next update: Sun 07 Dec 2025 07:00:58 +0000 Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: QTM25EUkLeDdKJ1SExzNT1Hb2S7q+zuLcyWyWvcdakI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ba:c1:a7:be:4f:d4:34:56:e6:d5:09:3e:c5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c Validity Not Before: Dec 6 07:00:58 2025 GMT Not After : Dec 7 07:00:58 2025 GMT Subject: CN=de69bdb89debbedd675434be4f45d84888e008eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:36:f6:b1:f6:7d:62:2b:e8:bf:3f:ce:8d: a6:36:18:5c:7d:29:a1:b8:c8:ac:a3:36:96:5c:37: 83:e0:c5:21:28:39:e0:e6:2b:db:6c:ff:5a:43:11: 82:89:23:5b:fe:21:b0:a3:64:1a:e3:0d:9c:95:44: 50:ef:31:d4:0f:a9:10:be:ab:50:fc:96:93:2a:63: 3a:75:9e:7f:00:85:81:8b:0d:f8:43:24:3e:37:0e: 6c:62:c9:58:d0:ec:b0:bc:10:33:99:fa:22:c8:dc: 93:68:38:57:ec:8b:33:f7:cf:67:a6:96:a3:54:bb: f6:cd:cb:bb:81:6f:ee:5c:5b:cc:c8:31:70:81:a4: 9d:78:c5:d7:7a:a8:91:78:78:1a:07:72:eb:2a:a1: a9:58:07:1e:09:9d:e9:3f:a3:2d:b6:dc:d4:99:1e: 42:1c:3f:23:89:a5:a4:f8:f7:b0:f8:30:45:3c:b9: a4:fa:a1:6f:8f:31:03:76:d9:46:fc:0c:5f:22:4f: d7:9d:04:a5:bf:72:fa:bf:c9:ff:b1:31:b7:9d:be: 65:1f:ae:eb:93:33:5f:0b:98:af:51:ce:ca:ad:a5: 4e:f7:d1:4e:e3:fa:dc:8a:97:8f:9e:d0:c8:8c:23: 07:a5:a0:0b:6a:2f:6b:e0:71:4a:0d:81:74:09:0d: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:69:BD:B8:9D:EB:BE:DD:67:54:34:BE:4F:45:D8:48:88:E0:08:EB X509v3 Authority Key Identifier: keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9a:b4:41:5a:5d:d9:35:b1:ec:0a:21:fa:89:1f:9a:6f:6c: 20:a4:2e:ed:6f:62:02:61:4a:73:67:ef:f5:a5:9f:17:2e:b8: 43:18:6d:4b:74:df:e3:b5:82:b7:26:a6:e7:14:14:de:97:e2: 86:d6:48:1b:c2:c3:c0:18:30:5d:ea:5b:3d:47:2b:60:4f:4e: 0e:5b:8a:87:72:5e:ed:93:6b:1a:ec:65:14:79:d0:b9:62:d3: de:bc:73:63:e3:76:1d:d6:5f:4f:37:e5:e1:35:e7:fc:80:f3: c9:14:53:e0:90:42:4a:44:6b:c4:f2:8c:05:c3:0f:5f:8c:07: dc:88:09:a6:79:3d:44:ca:d5:cf:d3:a9:3b:1b:c7:52:14:e7: db:39:c2:de:60:f1:bf:cd:08:8a:b3:28:eb:89:00:99:31:fc: bd:04:72:9a:6b:cd:69:4c:45:92:b8:f8:63:42:a1:5b:8c:aa: 98:77:2b:7e:b9:9f:d0:9e:63:d7:7f:1e:35:80:2f:c2:42:db: 58:af:e1:5d:05:05:38:c4:fb:31:9f:22:f7:68:b2:ea:7a:68: d1:b2:dd:9a:a1:88:f8:bd:a8:93:ba:e9:fd:51:bf:48:98:35: b5:95:7e:d5:8c:86:fa:de:51:0e:47:4c:3a:bb:25:c8:b7:e6: db:2d:a2:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrrBp75P1DRW5tUJPsUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiY2NkMGRiNTJmMGVkNGY3M2E2ODFlM2QzNmFiNmMyMzAy NzdkM2MwHhcNMjUxMjA2MDcwMDU4WhcNMjUxMjA3MDcwMDU4WjAzMTEwLwYDVQQD EyhkZTY5YmRiODlkZWJiZWRkNjc1NDM0YmU0ZjQ1ZDg0ODg4ZTAwOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bU29rH2fWIr6L8/zo2mNhhcfSmh uMisozaWXDeD4MUhKDng5ivbbP9aQxGCiSNb/iGwo2Qa4w2clURQ7zHUD6kQvqtQ /JaTKmM6dZ5/AIWBiw34QyQ+Nw5sYslY0OywvBAzmfoiyNyTaDhX7Isz989nppaj VLv2zcu7gW/uXFvMyDFwgaSdeMXXeqiReHgaB3LrKqGpWAceCZ3pP6MtttzUmR5C HD8jiaWk+Pew+DBFPLmk+qFvjzEDdtlG/AxfIk/XnQSlv3L6v8n/sTG3nb5lH67r kzNfC5ivUc7KraVO99FO4/rcipePntDIjCMHpaALai9r4HFKDYF0CQ11cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5pvbid677dZ1Q0vk9F2EiI4AjrMB8GA1UdIwQY MBaAFEvM0NtS8O1Pc6aB49NqtsIwJ308MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMt ZjNmMTViMTI2NWJiLzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMtZjNmMTViMTI2NWJi LzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZq0QVpd 2TWx7Aoh+okfmm9sIKQu7W9iAmFKc2fv9aWfFy64QxhtS3Tf47WCtyam5xQU3pfi htZIG8LDwBgwXepbPUcrYE9ODluKh3Je7ZNrGuxlFHnQuWLT3rxzY+N2HdZfTzfl 4TXn/IDzyRRT4JBCSkRrxPKMBcMPX4wH3IgJpnk9RMrVz9OpOxvHUhTn2znC3mDx v80IirMo64kAmTH8vQRymmvNaUxFkrj4Y0KhW4yqmHcrfrmf0J5j138eNYAvwkLb WK/hXQUFOMT7MZ8i92iy6npo0bLdmqGI+L2ok7rp/VG/SJg1tZV+1YyG+t5RDkdM OrslyLfm2y2i1g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:59 2025 by rpki-client