This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json) Hash identifier: /jCyrFI2KIdlp4LY1NH+/ODQFRZKIk4H1ICuckxomjo= Subject key identifier: 38:38:C6:55:B6:62:0A:95:54:A7:8E:91:4B:68:2C:C2:CA:85:41:1D Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b Certificate serial: 019AF1D1C8937E073D15E55AC7B61C4569B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft Manifest number: 16BE Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: SiQxZJ22cjGNPA0GeMXvpHOOm1ZoXElLbYf+QO/rU60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c8:93:7e:07:3d:15:e5:5a:c7:b6:1c:45:69:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fece2716cead8c008546224be4b568708683ff4b Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=3838c655b6620a9554a78e914b682cc2ca85411d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:bc:63:6f:9c:59:3e:89:7b:1f:35:07:20: 96:b7:f4:44:89:b5:af:0c:09:f5:8b:f8:3d:ed:9a: 51:36:60:c0:63:08:c9:27:41:42:4b:82:dc:3b:6f: 02:4b:b0:ae:8d:61:a1:f5:70:15:48:9b:9a:df:44: 6a:12:4a:c1:b7:ae:ff:04:99:49:5d:77:3a:4f:bc: 42:91:c9:39:c9:18:07:b1:0a:19:cc:60:5a:77:e8: b5:75:2d:85:d7:57:b7:f8:6d:8e:fa:c6:cb:75:e3: e4:40:c1:02:b0:16:4a:a8:dd:0b:0d:05:ae:cc:07: cb:b0:fb:52:2f:27:20:59:76:bb:ab:0e:56:13:09: a3:ee:7a:a9:c5:a1:42:ef:f2:34:0f:b3:ca:60:95: 5b:8a:7b:c0:32:4d:32:d0:f0:3a:05:5d:6f:23:44: 31:6f:b9:1a:a0:c4:55:b1:1e:41:a9:92:c0:cf:dd: 69:a9:8e:34:9d:4a:fa:47:1d:39:44:8d:f0:ee:55: a8:04:12:8b:de:bd:9d:e4:6c:cf:7f:d3:24:35:0d: e6:3f:01:bf:c3:23:74:30:f0:5b:6f:8e:21:46:d2: 88:95:3e:1f:77:39:11:c9:15:ef:dc:3f:e0:e9:9c: 4b:5d:74:fa:e1:79:f3:d9:a5:b4:89:bf:e6:83:84: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:38:C6:55:B6:62:0A:95:54:A7:8E:91:4B:68:2C:C2:CA:85:41:1D X509v3 Authority Key Identifier: keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:56:3c:25:66:86:bb:a1:cd:49:4d:45:e8:bf:1f:2d:fd:9a: 1d:89:a9:5f:d8:c2:3f:53:e7:af:9a:be:f4:7b:0c:6c:65:9d: 89:b4:91:b1:05:53:19:6d:09:da:c0:fd:6a:c4:1c:fc:c0:d0: 64:1f:41:64:32:a0:03:6b:f8:be:40:34:89:37:bd:d0:e8:22: 24:a6:e1:fc:7d:a1:fc:61:4f:cc:0a:d1:50:bd:85:aa:f4:a1: 8e:d4:a9:ed:28:9b:ff:02:82:87:bb:a3:a5:56:ff:19:55:83: 17:44:11:0a:3b:7d:03:d5:de:73:80:74:46:d7:b7:91:7d:4a: 7c:5b:0d:43:34:f5:16:f6:98:78:f2:b9:48:65:a9:80:6e:7a: b6:ef:ce:03:62:e0:8c:99:b6:fd:3d:f2:24:c7:87:72:28:76: f9:dd:79:bd:83:13:1b:17:49:65:48:bb:cc:02:b0:cb:c3:bc: 08:c8:b1:5b:3f:9f:bb:7b:9c:cb:68:36:46:17:2e:6d:94:28: 05:63:bc:bf:83:ea:50:59:83:cd:e8:f0:c5:94:17:79:87:f6: 67:af:d2:e9:d5:2d:ac:6c:6e:86:81:c6:4e:db:ac:42:79:7c: 72:67:dd:3f:d6:2d:fd:22:15:97:33:8c:c3:f3:a8:50:96:56: 51:15:10:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ciTfgc9FeVax7YcRWm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2UyNzE2Y2VhZDhjMDA4NTQ2MjI0YmU0YjU2ODcwODY4 M2ZmNGIwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EygzODM4YzY1NWI2NjIwYTk1NTRhNzhlOTE0YjY4MmNjMmNhODU0MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTa8Y2+cWT6Jex81ByCWt/REibWv DAn1i/g97ZpRNmDAYwjJJ0FCS4LcO28CS7CujWGh9XAVSJua30RqEkrBt67/BJlJ XXc6T7xCkck5yRgHsQoZzGBad+i1dS2F11e3+G2O+sbLdePkQMECsBZKqN0LDQWu zAfLsPtSLycgWXa7qw5WEwmj7nqpxaFC7/I0D7PKYJVbinvAMk0y0PA6BV1vI0Qx b7kaoMRVsR5BqZLAz91pqY40nUr6Rx05RI3w7lWoBBKL3r2d5GzPf9MkNQ3mPwG/ wyN0MPBbb44hRtKIlT4fdzkRyRXv3D/g6ZxLXXT64Xnz2aW0ib/mg4RzUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDg4xlW2YgqVVKeOkUtoLMLKhUEdMB8GA1UdIwQY MBaAFP7OJxbOrYwAhUYiS+S1aHCGg/9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NDMxYTItZDBkOC00MmRmLWJjYzgt MTdkNjMzZDhmMzlmLzEvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83NDMxYTItZDBkOC00MmRmLWJjYzgtMTdkNjMzZDhmMzlm LzEvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFY8JWaG u6HNSU1F6L8fLf2aHYmpX9jCP1Pnr5q+9HsMbGWdibSRsQVTGW0J2sD9asQc/MDQ ZB9BZDKgA2v4vkA0iTe90OgiJKbh/H2h/GFPzArRUL2FqvShjtSp7Sib/wKCh7uj pVb/GVWDF0QRCjt9A9Xec4B0Rte3kX1KfFsNQzT1FvaYePK5SGWpgG56tu/OA2Lg jJm2/T3yJMeHcih2+d15vYMTGxdJZUi7zAKwy8O8CMixWz+fu3ucy2g2RhcubZQo BWO8v4PqUFmDzejwxZQXeYf2Z6/S6dUtrGxuhoHGTtusQnl8cmfdP9Yt/SIVlzOM w/OoUJZWURUQnA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:38 2025 by rpki-client