This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json) Hash identifier: SUsFcG/Cw2cd8/ngKo6/uCfVH/IRyonPdKfCdhyWnwA= Subject key identifier: E6:85:FB:15:E8:7E:82:32:F8:11:72:25:30:A0:14:7E:58:6A:6C:2D Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c Certificate serial: 019B360E9455A84AE096562C15F7A2167810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft Manifest number: 0997 Signing time: Fri 19 Dec 2025 10:01:23 +0000 Manifest this update: Fri 19 Dec 2025 10:01:23 +0000 Manifest next update: Sat 20 Dec 2025 10:01:23 +0000 Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: XXB2E/qImMVJ3VMjZCO3wHeRl4ZGzGhIVdNpH0hoz9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:94:55:a8:4a:e0:96:56:2c:15:f7:a2:16:78:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c Validity Not Before: Dec 19 10:01:23 2025 GMT Not After : Dec 20 10:01:23 2025 GMT Subject: CN=e685fb15e87e8232f811722530a0147e586a6c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:e8:5a:00:43:b4:26:07:b6:54:f0:96:b4: e4:e5:49:ab:e3:14:30:67:29:b8:68:e8:a9:f5:48: e7:9b:bc:b4:73:40:d9:29:cf:69:07:46:ed:8a:6b: d0:f0:da:aa:9a:46:e0:cc:63:e0:43:ee:ab:24:e9: 07:e8:e2:f0:66:06:ed:b5:4b:60:00:53:f2:63:b4: 24:5e:ba:19:00:29:b7:23:d4:64:4d:93:ce:23:a6: 99:49:fb:ff:7c:2d:77:80:46:02:cd:fd:1e:99:20: f3:95:df:c0:46:28:b8:93:05:ce:91:9a:ab:cf:70: 5c:6c:f9:3c:54:e0:5d:34:7f:9c:2b:66:4b:96:4d: 21:f6:17:fc:8a:fa:05:90:8e:37:73:48:4f:6f:95: 16:55:d6:ee:35:8e:19:f7:6f:dd:a4:60:89:ed:66: 94:32:77:f2:10:bc:88:61:f8:e6:92:1a:6a:14:a0: 2e:54:1e:64:7b:06:27:19:b3:fc:ad:36:d8:f9:e1: dc:9a:d1:9d:6d:b6:8e:41:d1:d2:63:93:94:d5:fa: fb:df:11:2f:e3:58:4e:1a:ef:62:6d:93:4e:e0:a5: b2:26:5b:7f:9f:9c:3f:7c:e3:2d:70:68:e9:6b:29: b1:07:b5:b6:6a:a0:c5:7e:20:0a:5f:1f:54:fa:83: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:85:FB:15:E8:7E:82:32:F8:11:72:25:30:A0:14:7E:58:6A:6C:2D X509v3 Authority Key Identifier: keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6e:a9:77:21:d4:b9:6d:89:94:ab:4c:3f:4f:b4:16:1a:5e: 25:95:c6:a6:88:85:bd:95:15:80:a8:94:a5:2d:bd:a3:18:80: 60:4f:64:26:2d:cc:24:17:be:4b:6b:d3:c8:a6:e8:49:e4:c9: b5:30:cd:c6:d3:ae:fd:82:dd:45:e2:9d:f1:97:7f:ea:4e:3d: b4:11:f6:bb:4c:67:b8:55:d8:fd:ad:48:f0:de:9e:83:a5:f1: 89:4c:67:7d:69:85:92:d8:90:53:74:8f:c9:07:d3:9c:8c:88: da:06:4d:99:2e:a6:6a:d3:f5:7b:2a:93:8b:62:60:1b:bc:72: 67:2d:e8:ff:a6:f0:ed:ab:7e:85:05:0c:fb:91:c6:d4:21:5a: 59:d0:e4:e5:81:e1:4f:27:f1:10:32:34:ea:d9:08:83:e4:56: ce:4e:6d:48:12:88:b6:37:87:16:85:89:a5:d8:55:7c:e0:a5: b6:77:35:08:f3:6b:ea:d2:c7:4d:41:db:37:93:b3:65:45:b0: a1:3b:b2:51:50:98:ed:c8:51:98:47:3d:9b:c9:60:a2:48:80: 51:83:71:e8:f8:bb:6a:51:56:92:b1:5d:0d:dd:f2:42:ec:78: dc:1e:d0:76:81:5d:45:72:ae:10:56:b9:0b:16:ca:6b:20:83: f7:2b:d6:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DpRVqErgllYsFfeiFngQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiY2NkMGRiNTJmMGVkNGY3M2E2ODFlM2QzNmFiNmMyMzAy NzdkM2MwHhcNMjUxMjE5MTAwMTIzWhcNMjUxMjIwMTAwMTIzWjAzMTEwLwYDVQQD EyhlNjg1ZmIxNWU4N2U4MjMyZjgxMTcyMjUzMGEwMTQ3ZTU4NmE2YzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo/oWgBDtCYHtlTwlrTk5Umr4xQw Zym4aOip9Ujnm7y0c0DZKc9pB0btimvQ8NqqmkbgzGPgQ+6rJOkH6OLwZgbttUtg AFPyY7QkXroZACm3I9RkTZPOI6aZSfv/fC13gEYCzf0emSDzld/ARii4kwXOkZqr z3BcbPk8VOBdNH+cK2ZLlk0h9hf8ivoFkI43c0hPb5UWVdbuNY4Z92/dpGCJ7WaU MnfyELyIYfjmkhpqFKAuVB5kewYnGbP8rTbY+eHcmtGdbbaOQdHSY5OU1fr73xEv 41hOGu9ibZNO4KWyJlt/n5w/fOMtcGjpaymxB7W2aqDFfiAKXx9U+oNVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaF+xXofoIy+BFyJTCgFH5YamwtMB8GA1UdIwQY MBaAFEvM0NtS8O1Pc6aB49NqtsIwJ308MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMt ZjNmMTViMTI2NWJiLzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMtZjNmMTViMTI2NWJi LzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG6pdyHU uW2JlKtMP0+0FhpeJZXGpoiFvZUVgKiUpS29oxiAYE9kJi3MJBe+S2vTyKboSeTJ tTDNxtOu/YLdReKd8Zd/6k49tBH2u0xnuFXY/a1I8N6eg6XxiUxnfWmFktiQU3SP yQfTnIyI2gZNmS6matP1eyqTi2JgG7xyZy3o/6bw7at+hQUM+5HG1CFaWdDk5YHh TyfxEDI06tkIg+RWzk5tSBKItjeHFoWJpdhVfOCltnc1CPNr6tLHTUHbN5OzZUWw oTuyUVCY7chRmEc9m8lgokiAUYNx6Pi7alFWkrFdDd3yQux43B7QdoFdRXKuEFa5 CxbKayCD9yvWNw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:29 2025 by rpki-client