This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json) Hash identifier: pBxrCdjRrBDinTG89tsSsBiLk4tzI+xRMyADTWTX2rQ= Subject key identifier: F8:2E:CF:83:53:AA:49:71:45:03:89:09:E2:92:6A:23:0F:45:DA:4B Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Certificate serial: 019B0E2682F1B8CA394FC5463236C4018E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft Manifest number: 04B5 Signing time: Thu 11 Dec 2025 16:02:43 +0000 Manifest this update: Thu 11 Dec 2025 16:02:43 +0000 Manifest next update: Fri 12 Dec 2025 16:02:43 +0000 Files and hashes: 1: A3eZlYEypGjwef6ovVTvAMEG2Sc.roa (hash: itiiU42XBZajUxpH3eQ5BL8/j+cYwxjPvYG7bJxrjyA=) 2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: z5U3kMqhMEHrLnjCq0QTBPd/jkdNiU/wSs47yMPEPnc=) 3: ZioYOGsNfMxy07UlqgZrBgcTE4o.roa (hash: 4f3pcz2xE9Ywmo/wXO916PUITihDfuTfzvT55VS4uaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:82:f1:b8:ca:39:4f:c5:46:32:36:c4:01:8e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Validity Not Before: Dec 11 16:02:43 2025 GMT Not After : Dec 12 16:02:43 2025 GMT Subject: CN=f82ecf8353aa497145038909e2926a230f45da4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:4f:7b:3f:fa:7a:1a:89:5d:7a:99:8a:ba: 4d:4d:fa:bf:43:08:37:04:f5:fe:ab:98:74:4f:1e: af:69:55:e9:78:38:97:8c:f4:cf:69:a9:4b:37:a6: 9b:5f:0c:6b:fd:ac:26:f8:6e:94:1c:23:8d:08:ff: 35:98:12:85:a7:67:c8:55:26:f7:b7:04:08:81:8c: 5e:39:9b:98:30:a0:97:a6:56:71:dd:09:6e:49:a7: 97:8b:38:bb:15:0a:f4:8c:48:2e:c2:5a:6a:4f:c6: 00:aa:78:89:2d:2d:30:62:22:5a:b5:53:1d:ab:ce: 57:5a:5f:9b:a4:08:be:0c:52:6b:ec:46:8f:67:4f: a1:3a:f4:aa:f1:b2:9c:07:2d:7a:d9:c0:a6:68:40: d0:04:bc:af:a0:4e:ef:70:0d:c6:c1:ea:e2:62:7a: 6a:7f:40:d4:6f:64:da:5b:3f:bd:78:05:90:e5:db: 98:2d:34:68:dd:70:c1:ce:14:bf:e5:6d:1b:6b:1d: ee:d0:a1:dd:2a:3f:c7:4c:dd:86:3d:5d:1c:3c:87: 94:37:f8:3d:ef:ca:43:95:57:7f:cc:5c:a7:e7:fb: a0:01:2a:f3:b3:0e:cf:40:7f:ec:59:c1:58:85:f1: d0:87:82:dd:44:58:1a:f9:7f:8e:d2:58:47:f7:9a: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2E:CF:83:53:AA:49:71:45:03:89:09:E2:92:6A:23:0F:45:DA:4B X509v3 Authority Key Identifier: keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b2:62:7c:61:0b:e4:2d:68:0f:a6:6f:5c:00:4e:49:ac:5f: 93:67:51:c8:39:76:1c:97:94:8a:e5:b3:12:0c:3b:ca:2e:99: e6:3f:e3:6f:e2:ef:2a:aa:ec:c8:a2:59:fc:c1:13:a1:ee:a0: 68:07:e6:6b:10:c8:3a:bd:31:d9:af:4d:d4:0c:cb:c5:4c:74: 33:01:da:43:8e:f8:f4:07:cb:54:21:5c:b0:37:f9:7e:8e:97: e0:95:0d:91:05:6d:6a:df:f6:51:67:f2:94:f8:44:9d:5f:14: 1c:8d:35:34:8d:97:49:b1:3b:5b:06:34:14:6b:ac:ab:9b:3b: 97:3e:44:7d:af:a5:c2:2e:ba:b3:7b:00:5f:6c:19:b6:fc:55: 4a:69:45:ec:57:47:e0:ad:0d:c6:3c:e7:77:37:4e:d3:4a:09: 48:8b:40:07:f2:3b:b3:6b:bc:0e:5a:ef:fa:df:fc:48:fd:90: 54:a5:80:1e:43:e1:b4:48:f9:3a:e0:41:97:45:eb:36:1e:e6: 55:8f:28:4b:62:ec:5f:3b:58:dd:f0:4c:96:4c:9d:b4:a8:46: 27:8e:37:88:a7:ea:13:6a:78:81:f7:ec:43:aa:a3:93:9d:db: 0d:d1:70:31:f6:a2:4f:70:19:b4:c6:da:f9:25:b3:6e:b3:bd: 41:18:53:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJoLxuMo5T8VGMjbEAY4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjhlMWZiYTdiNDRhN2I2NjYyMzZiMjEyNTNkN2Q2MzYy ZDBkODMwHhcNMjUxMjExMTYwMjQzWhcNMjUxMjEyMTYwMjQzWjAzMTEwLwYDVQQD EyhmODJlY2Y4MzUzYWE0OTcxNDUwMzg5MDllMjkyNmEyMzBmNDVkYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5VPez/6ehqJXXqZirpNTfq/Qwg3 BPX+q5h0Tx6vaVXpeDiXjPTPaalLN6abXwxr/awm+G6UHCONCP81mBKFp2fIVSb3 twQIgYxeOZuYMKCXplZx3QluSaeXizi7FQr0jEguwlpqT8YAqniJLS0wYiJatVMd q85XWl+bpAi+DFJr7EaPZ0+hOvSq8bKcBy162cCmaEDQBLyvoE7vcA3GweriYnpq f0DUb2TaWz+9eAWQ5duYLTRo3XDBzhS/5W0bax3u0KHdKj/HTN2GPV0cPIeUN/g9 78pDlVd/zFyn5/ugASrzsw7PQH/sWcFYhfHQh4LdRFga+X+O0lhH95rqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPguz4NTqklxRQOJCeKSaiMPRdpLMB8GA1UdIwQY MBaAFEto4funtEp7ZmI2shJT19Y2LQ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMt OGIwNmVjNTY0YTFiLzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMtOGIwNmVjNTY0YTFi LzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebJifGEL 5C1oD6ZvXABOSaxfk2dRyDl2HJeUiuWzEgw7yi6Z5j/jb+LvKqrsyKJZ/METoe6g aAfmaxDIOr0x2a9N1AzLxUx0MwHaQ4749AfLVCFcsDf5fo6X4JUNkQVtat/2UWfy lPhEnV8UHI01NI2XSbE7WwY0FGusq5s7lz5Efa+lwi66s3sAX2wZtvxVSmlF7FdH 4K0NxjzndzdO00oJSItAB/I7s2u8Dlrv+t/8SP2QVKWAHkPhtEj5OuBBl0XrNh7m VY8oS2LsXztY3fBMlkydtKhGJ443iKfqE2p4gffsQ6qjk53bDdFwMfaiT3AZtMba +SWzbrO9QRhTpg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:51 2025 by rpki-client