This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft File: S8K4kvLb729UtFNg_rD4QUpahQQ.mft (raw, json) Hash identifier: OZWyXRq1Vx0VkG1trb1aV9hqcNs5jhij5s3fTyaXPXQ= Subject key identifier: 96:B9:30:79:B3:69:7C:A9:B8:B7:2C:5F:C2:4C:34:0A:14:9E:B3:75 Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04 Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504 Certificate serial: 019AF19AAE8BAA694668E06D7674DCB0D184 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: 8XxbJK1GWPrtjat_Lpe2HKly_9k.roa (hash: 1REGOqOGYIsLrmhSt5pZG4EmBpaR7Cf++uPRynahll8=) 2: S8K4kvLb729UtFNg_rD4QUpahQQ.crl (hash: EYZkNQKiqMWb5i863oYG17MfVNP5oynJSx00d3TZZxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ae:8b:aa:69:46:68:e0:6d:76:74:dc:b0:d1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=96b93079b3697ca9b8b72c5fc24c340a149eb375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:e8:68:e8:60:02:fb:eb:cf:a7:81:63:3f: ee:20:69:6d:d0:ca:c7:8f:5b:7c:78:8a:28:fd:3f: f6:e2:6d:35:ba:4f:6d:c5:f2:26:a6:9a:a3:80:c4: 38:4b:b9:c4:0d:83:3e:42:e5:cb:63:7b:6a:70:0f: d1:64:95:41:1c:b4:b7:86:fd:fa:9f:15:7f:8c:6e: c5:9a:5b:47:4e:ef:47:6c:ed:90:cd:ca:a2:6d:ca: 64:c5:a8:40:54:c6:00:0f:5a:4d:c1:eb:e7:55:ce: 1c:03:20:ff:54:b6:6d:30:ce:86:d7:c4:80:67:25: 24:1b:3f:77:af:2d:ff:54:9a:6b:38:60:17:a3:e5: 37:d6:e2:13:1c:65:36:13:32:65:61:bc:6b:c2:c1: b7:78:37:32:d4:9c:30:78:1e:6c:22:ab:e9:7e:b6: 35:00:75:31:6a:15:c2:e8:cd:22:e2:18:69:7d:b8: 75:70:a3:47:4b:ea:22:f4:1d:f3:7c:04:00:51:28: fd:7e:d3:51:ba:ae:c2:04:b1:3c:72:13:21:9c:f0: b5:70:b4:51:69:83:3a:8d:f5:c0:5a:5d:ed:ee:06: c7:1c:c4:1f:69:a5:c6:6d:52:cc:ba:6a:b5:37:d4: ac:a4:7b:4c:d1:27:98:16:9e:5e:05:09:27:75:4c: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B9:30:79:B3:69:7C:A9:B8:B7:2C:5F:C2:4C:34:0A:14:9E:B3:75 X509v3 Authority Key Identifier: keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b6:74:1a:98:64:08:97:d0:2e:a7:c9:e8:c4:31:65:ef:96: ee:84:93:31:07:27:dd:bd:d4:de:2f:44:d1:ec:44:7c:09:ec: fc:d8:60:21:95:9a:a7:1f:03:9d:8b:8e:4a:4a:fb:5c:dc:7d: e8:cf:3b:b1:99:56:ca:e8:c2:bc:d4:90:76:91:cd:35:f3:6d: 33:50:bc:dc:a1:e7:2c:f6:ca:e0:88:c3:6a:5e:86:41:47:99: e9:86:49:8f:8f:68:39:94:a4:8b:2d:e4:88:81:20:8a:3b:c2: 59:0c:15:ca:da:6c:2c:10:15:2f:a6:f7:8a:11:99:04:9e:9b: a5:62:7e:84:8b:01:bf:2e:bc:04:9f:a4:f6:ad:7f:5c:de:3e: 7e:31:a3:af:38:a9:00:28:94:1c:85:83:fb:b4:f8:a7:24:1f: e7:86:c3:d0:09:4b:af:c8:4f:b4:2c:33:fb:09:e0:72:3a:96: 47:c4:49:3e:c8:04:fb:5c:51:82:e8:ea:d1:76:d2:51:de:fd: 52:20:86:35:f6:56:9b:58:c4:69:3c:88:d2:c6:93:08:15:c9: 66:cc:f1:51:1c:ff:39:29:4d:d3:10:8e:40:7a:e7:94:6b:fc: 61:24:2e:93:84:c6:bb:85:4b:58:02:f6:87:7f:b0:b8:3d:94: e1:30:72:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmq6LqmlGaOBtdnTcsNGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYzJiODkyZjJkYmVmNmY1NGI0NTM2MGZlYjBmODQxNGE1 YTg1MDQwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD Eyg5NmI5MzA3OWIzNjk3Y2E5YjhiNzJjNWZjMjRjMzQwYTE0OWViMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPboaOhgAvvrz6eBYz/uIGlt0MrH j1t8eIoo/T/24m01uk9txfImppqjgMQ4S7nEDYM+QuXLY3tqcA/RZJVBHLS3hv36 nxV/jG7FmltHTu9HbO2QzcqibcpkxahAVMYAD1pNwevnVc4cAyD/VLZtMM6G18SA ZyUkGz93ry3/VJprOGAXo+U31uITHGU2EzJlYbxrwsG3eDcy1JwweB5sIqvpfrY1 AHUxahXC6M0i4hhpfbh1cKNHS+oi9B3zfAQAUSj9ftNRuq7CBLE8chMhnPC1cLRR aYM6jfXAWl3t7gbHHMQfaaXGbVLMumq1N9SspHtM0SeYFp5eBQkndUwlNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa5MHmzaXypuLcsX8JMNAoUnrN1MB8GA1UdIwQY MBaAFEvCuJLy2+9vVLRTYP6w+EFKWoUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzhLNGt2TGI3MjlVdEZOZ19yRDRRVXBhaFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jMWE4NTItNTVmNS00NTA1LThkOTAt MjE1N2E1NzVkYjBiLzEvUzhLNGt2TGI3MjlVdEZOZ19yRDRRVXBhaFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jMWE4NTItNTVmNS00NTA1LThkOTAtMjE1N2E1NzVkYjBi LzEvUzhLNGt2TGI3MjlVdEZOZ19yRDRRVXBhaFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrZ0Gphk CJfQLqfJ6MQxZe+W7oSTMQcn3b3U3i9E0exEfAns/NhgIZWapx8DnYuOSkr7XNx9 6M87sZlWyujCvNSQdpHNNfNtM1C83KHnLPbK4IjDal6GQUeZ6YZJj49oOZSkiy3k iIEgijvCWQwVytpsLBAVL6b3ihGZBJ6bpWJ+hIsBvy68BJ+k9q1/XN4+fjGjrzip ACiUHIWD+7T4pyQf54bD0AlLr8hPtCwz+wngcjqWR8RJPsgE+1xRgujq0XbSUd79 UiCGNfZWm1jEaTyI0saTCBXJZszxURz/OSlN0xCOQHrnlGv8YSQuk4TGu4VLWAL2 h3+wuD2U4TBy2w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:48:22 2025 by rpki-client