This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json) Hash identifier: B3RckJ6//dbrKuHJPeox5y5wWYJhnYeTxMDqV3FCmLA= Subject key identifier: A7:F6:11:14:7B:79:B2:D8:EF:56:E5:59:9A:29:C7:97:51:47:59:EE Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79 Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79 Certificate serial: 019AF240080418DCB98DD2738B56C1C6C371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft Manifest number: 0F14 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: rSoJjZSFyErudmyFpxuSUQwSS1t4k8CMdxGJhf19X/Y=) 2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:08:04:18:dc:b9:8d:d2:73:8b:56:c1:c6:c3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=a7f611147b79b2d8ef56e5599a29c797514759ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fa:1a:9f:fb:5d:db:4c:ac:eb:4f:30:fc:28: 0a:61:67:ff:58:62:1e:1c:46:ae:cf:aa:98:77:e7: 85:09:38:50:62:79:1c:99:4b:ad:01:c3:97:dd:0b: 29:c9:69:98:c0:aa:83:25:57:e4:c4:a3:1b:48:52: 05:88:71:fe:e9:ed:9f:9c:06:9f:c1:6f:15:10:9b: 2c:dd:11:ec:8e:fb:a5:bb:a8:4d:cc:3b:f6:79:e5: b7:eb:7a:8a:60:89:31:d1:0a:7e:9b:97:c6:76:97: d7:71:f9:1e:fb:a9:23:ca:d8:27:d1:51:e5:8c:43: b3:92:e4:3c:5c:87:97:d2:f4:ae:fc:89:14:0a:37: 60:23:9c:45:7e:d0:06:15:f0:a5:e3:32:2c:60:f7: 2f:fc:5e:93:3e:aa:84:f0:3d:cd:7a:52:7b:88:4f: 1b:e4:68:d6:c0:6d:60:21:22:cd:11:4d:a9:c3:6a: 45:64:9f:93:bc:d5:45:eb:53:ae:b7:cc:a6:e9:43: 4d:8e:5b:bb:62:77:aa:8f:86:76:df:a1:5e:1a:cd: 34:55:27:3b:ac:fd:46:ee:88:12:aa:00:51:4a:00: 23:29:6a:ab:2d:62:b9:53:50:d5:4b:3a:ba:e4:ac: f6:31:dc:6a:49:59:66:d9:91:9c:80:c9:37:48:19: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F6:11:14:7B:79:B2:D8:EF:56:E5:59:9A:29:C7:97:51:47:59:EE X509v3 Authority Key Identifier: keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ba:ac:3e:e3:cd:ab:2a:9f:ba:b7:b0:af:ed:66:67:84:c4: 47:46:64:88:77:ed:0e:51:16:a9:83:0c:d8:5a:b4:6b:bb:9d: a5:bf:e0:2d:d9:a3:29:1e:1d:78:33:88:51:56:2d:8c:14:f9: 62:51:64:c0:80:2d:9a:e1:68:c5:7b:12:5e:33:e2:97:fb:c9: 39:49:3a:97:15:dd:7e:cb:0d:bd:fb:7c:6d:dc:fc:79:af:2a: 93:a7:25:95:b5:26:05:7d:5e:68:b0:78:e2:eb:33:55:00:86: 95:92:ad:17:9e:b6:ff:95:f2:4a:72:e6:78:29:ae:af:7c:62: b6:fe:ee:40:25:81:ed:28:8a:6e:4c:9a:11:29:dc:62:c9:0d: a3:6e:5a:82:7d:12:6d:a6:89:30:dc:49:17:11:92:51:c2:be: 31:fd:01:14:19:45:bc:13:eb:0f:54:a4:c8:85:da:2a:4e:c5: 25:ce:ba:83:49:c1:85:06:86:d6:74:13:95:3e:ac:29:28:f9: c5:87:8f:82:e9:e0:a8:ae:cc:ca:7f:cc:4b:bd:fd:91:32:e6: 4d:97:7b:b8:de:4c:e0:23:1a:16:a3:9c:2a:c2:fd:f5:19:ec: c3:a5:32:b3:bd:94:2f:cf:ce:cf:f3:d6:1e:94:fd:fe:c1:42: 3f:66:d0:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAgEGNy5jdJzi1bBxsNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZmM1YTI5NDEwZjFmZmNmNGRlMmE1YTcwNThmNTE2MjBi MzBiNzkwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhhN2Y2MTExNDdiNzliMmQ4ZWY1NmU1NTk5YTI5Yzc5NzUxNDc1OWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1voan/td20ys608w/CgKYWf/WGIe HEauz6qYd+eFCThQYnkcmUutAcOX3QspyWmYwKqDJVfkxKMbSFIFiHH+6e2fnAaf wW8VEJss3RHsjvulu6hNzDv2eeW363qKYIkx0Qp+m5fGdpfXcfke+6kjytgn0VHl jEOzkuQ8XIeX0vSu/IkUCjdgI5xFftAGFfCl4zIsYPcv/F6TPqqE8D3NelJ7iE8b 5GjWwG1gISLNEU2pw2pFZJ+TvNVF61Out8ym6UNNjlu7Yneqj4Z236FeGs00VSc7 rP1G7ogSqgBRSgAjKWqrLWK5U1DVSzq65Kz2MdxqSVlm2ZGcgMk3SBmh8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf2ERR7ebLY71blWZopx5dRR1nuMB8GA1UdIwQY MBaAFEv8WilBDx/89N4qWnBY9RYgswt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2Yt MTM2MjU3ZTMwNzZlLzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2YtMTM2MjU3ZTMwNzZl LzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrqsPuPN qyqfurewr+1mZ4TER0ZkiHftDlEWqYMM2Fq0a7udpb/gLdmjKR4deDOIUVYtjBT5 YlFkwIAtmuFoxXsSXjPil/vJOUk6lxXdfssNvft8bdz8ea8qk6cllbUmBX1eaLB4 4uszVQCGlZKtF562/5XySnLmeCmur3xitv7uQCWB7SiKbkyaESncYskNo25agn0S baaJMNxJFxGSUcK+Mf0BFBlFvBPrD1SkyIXaKk7FJc66g0nBhQaG1nQTlT6sKSj5 xYePgungqK7Myn/MS739kTLmTZd7uN5M4CMaFqOcKsL99Rnsw6Uys72UL8/Oz/PW HpT9/sFCP2bQvw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:32 2025 by rpki-client