This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json) Hash identifier: zVKHdnBOz2/hpNrzbAv75LJPCoC9rNyAjNF7H3GIlR0= Subject key identifier: 4C:06:4F:13:36:77:C1:9A:C7:89:49:F8:90:44:31:F1:AB:4A:26:7F Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0 Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0 Certificate serial: 019AF2E443A8465D45B43D3CD07C5C9E3CEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft Manifest number: 06FD Signing time: Sat 06 Dec 2025 09:00:37 +0000 Manifest this update: Sat 06 Dec 2025 09:00:37 +0000 Manifest next update: Sun 07 Dec 2025 09:00:37 +0000 Files and hashes: 1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: ZCr/dVlIOqeN0SDkbl0TgDoHm+Q3d4vRRW1FE4dhGGQ=) 2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:43:a8:46:5d:45:b4:3d:3c:d0:7c:5c:9e:3c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0 Validity Not Before: Dec 6 09:00:37 2025 GMT Not After : Dec 7 09:00:37 2025 GMT Subject: CN=4c064f133677c19ac78949f8904431f1ab4a267f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:b7:ef:33:09:c2:20:ab:50:1c:a9:f9:f7: ea:82:e9:9d:55:67:84:fc:92:3e:93:16:77:71:14: bb:f9:c9:61:46:82:a1:a9:b9:51:66:5b:6e:3e:66: 82:09:fc:3a:73:c5:f0:b8:af:86:2f:a4:0d:d6:2f: 86:6e:35:7d:41:bf:b2:8f:56:5b:4c:f0:08:25:cc: ea:5a:fc:6c:0d:7d:e8:0f:76:f5:00:ca:37:f5:57: 3d:dc:2b:cf:01:81:56:99:86:f4:73:73:85:26:db: 81:79:a5:7d:35:d6:dc:5d:94:e8:13:a4:85:0f:81: 57:7f:76:b6:14:81:b9:af:38:b4:d4:c9:b7:76:1e: 95:07:64:64:c4:fb:9c:10:e0:c7:c7:fb:65:27:d5: 0e:da:f5:68:c5:1c:5f:5e:59:23:e7:42:74:96:54: d0:0e:fb:3d:e3:6c:81:11:bf:3f:0a:0b:1b:d4:bf: 66:96:49:14:bc:e9:65:e1:66:b9:0d:f1:0f:44:43: 26:1b:b6:59:e6:47:d2:6c:84:4a:3e:62:72:82:73: 79:b7:b3:70:68:6b:62:80:cb:d5:f5:d2:06:df:03: 91:36:83:5c:fa:15:6d:db:ed:14:ef:2a:8a:6f:39: 9f:a0:df:8e:e3:b9:89:b0:6c:4c:97:2d:d8:25:0a: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:06:4F:13:36:77:C1:9A:C7:89:49:F8:90:44:31:F1:AB:4A:26:7F X509v3 Authority Key Identifier: keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2e:46:36:a1:41:4a:5d:d0:3e:e8:30:f4:ff:42:c5:20:27: d0:6f:69:7a:f4:ab:b0:1a:21:06:1b:e0:ab:9c:e4:2a:75:bf: dd:1d:68:dc:fc:de:32:b3:a6:b2:67:af:d8:04:c5:59:50:b3: 4d:f4:7c:98:f0:1a:f1:05:f6:03:d3:49:28:f9:28:33:3e:25: b2:48:5a:d2:98:a0:da:ab:12:9a:05:7f:16:e1:25:6e:dd:aa: 6c:ab:13:a6:2a:dc:b8:50:45:81:c3:e6:1d:a8:9c:f0:a4:3a: 20:5a:2d:32:86:5b:b3:ed:9d:14:90:f5:10:ff:d8:3b:0b:8a: 47:0a:95:01:8f:15:a3:18:eb:58:17:a8:fd:73:4c:7d:cf:1f: e2:dc:cf:6c:9c:59:cf:3a:f7:06:d1:62:ec:2a:81:5a:ec:ce: 96:af:4b:3e:25:b1:73:f4:e1:dd:c4:1e:ae:d0:e6:c2:61:4e: d5:42:72:9e:1f:e9:cf:b9:c8:76:9a:89:c7:af:b6:bd:67:d1: f3:37:66:34:95:10:51:19:37:d4:29:52:a2:7b:30:c2:ef:9e: ed:d0:02:2f:26:9f:22:94:12:77:da:7b:18:3a:66:b5:6e:ef: 65:82:bb:03:b9:62:98:a7:95:1a:84:02:a7:44:6b:c7:7c:de: 48:18:2a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EOoRl1FtD080HxcnjzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWYzMDYyNDIxMGMwMGQzYTg2ZGZkNmM4MDEwNjEyYmIx YjEyYTAwHhcNMjUxMjA2MDkwMDM3WhcNMjUxMjA3MDkwMDM3WjAzMTEwLwYDVQQD Eyg0YzA2NGYxMzM2NzdjMTlhYzc4OTQ5Zjg5MDQ0MzFmMWFiNGEyNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8237zMJwiCrUByp+ffqgumdVWeE /JI+kxZ3cRS7+clhRoKhqblRZltuPmaCCfw6c8XwuK+GL6QN1i+GbjV9Qb+yj1Zb TPAIJczqWvxsDX3oD3b1AMo39Vc93CvPAYFWmYb0c3OFJtuBeaV9NdbcXZToE6SF D4FXf3a2FIG5rzi01Mm3dh6VB2RkxPucEODHx/tlJ9UO2vVoxRxfXlkj50J0llTQ Dvs942yBEb8/Cgsb1L9mlkkUvOll4Wa5DfEPREMmG7ZZ5kfSbIRKPmJygnN5t7Nw aGtigMvV9dIG3wORNoNc+hVt2+0U7yqKbzmfoN+O47mJsGxMly3YJQrjnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwGTxM2d8Gax4lJ+JBEMfGrSiZ/MB8GA1UdIwQY MBaAFEvvMGJCEMANOobf1sgBBhK7GxKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2Qt Nzg5MjdmYzc4ZTdkLzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2QtNzg5MjdmYzc4ZTdk LzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIi5GNqFB Sl3QPugw9P9CxSAn0G9pevSrsBohBhvgq5zkKnW/3R1o3PzeMrOmsmev2ATFWVCz TfR8mPAa8QX2A9NJKPkoMz4lskha0pig2qsSmgV/FuElbt2qbKsTpircuFBFgcPm Haic8KQ6IFotMoZbs+2dFJD1EP/YOwuKRwqVAY8VoxjrWBeo/XNMfc8f4tzPbJxZ zzr3BtFi7CqBWuzOlq9LPiWxc/Th3cQertDmwmFO1UJynh/pz7nIdpqJx6+2vWfR 8zdmNJUQURk31ClSonswwu+e7dACLyafIpQSd9p7GDpmtW7vZYK7A7limKeVGoQC p0Rrx3zeSBgqMw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:54 2025 by rpki-client