This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json) Hash identifier: QjkOmSCQVwcVsycorOzDkQaSNeSGxIG8JEM5Jl+KtW8= Subject key identifier: 7D:68:0C:13:5A:1D:B9:AC:6D:97:D5:E0:DE:AC:DA:F9:44:AC:C8:51 Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0 Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0 Certificate serial: 019B44006812CAF2513F5FD8952018AD694D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft Manifest number: 0727 Signing time: Mon 22 Dec 2025 03:00:35 +0000 Manifest this update: Mon 22 Dec 2025 03:00:35 +0000 Manifest next update: Tue 23 Dec 2025 03:00:35 +0000 Files and hashes: 1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: 4Iz3fCbnc0fTNiDyOnwvUTfEYYT1cAveyO31MVqZwmY=) 2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:68:12:ca:f2:51:3f:5f:d8:95:20:18:ad:69:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0 Validity Not Before: Dec 22 03:00:35 2025 GMT Not After : Dec 23 03:00:35 2025 GMT Subject: CN=7d680c135a1db9ac6d97d5e0deacdaf944acc851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:d0:39:cb:80:2b:3a:a5:a9:4b:cd:a8:9b: 54:a6:fb:9b:d1:c2:05:b7:d5:7c:fc:a2:0b:79:07: 2e:cf:20:52:7b:d9:83:65:0e:cb:1f:f1:27:72:de: fd:24:13:b7:e4:1f:80:6f:41:9d:43:da:38:44:2e: 69:e8:d8:2e:eb:ff:23:6c:a4:c9:17:0c:2f:d5:b5: 61:3f:2f:c3:3c:6e:1a:29:31:2c:b3:77:12:fa:2e: d7:3b:ca:44:af:dc:63:d3:b7:0f:2f:84:7a:50:97: a8:22:01:e6:cd:98:24:03:42:c8:9c:65:16:0f:e7: fa:59:87:27:6f:15:d3:ee:f8:2a:1c:af:b2:05:60: b7:18:9d:db:98:13:41:3e:7d:ce:2d:f3:13:56:b1: df:3b:86:84:ad:6c:29:ed:d6:dc:b3:82:02:dd:f5: 24:23:b7:d5:e1:b6:d0:8a:8e:72:2f:60:a5:09:c5: c2:bd:48:90:12:d5:cf:92:51:1a:ad:42:6d:27:e9: 13:71:89:24:ae:8d:07:a9:6e:e1:56:e0:87:1a:7b: 4a:39:04:37:42:38:5d:58:e2:12:57:0f:9e:33:1b: 92:8f:4f:bd:0e:31:dd:09:0a:87:cc:7a:09:eb:6a: f3:d8:f3:98:79:01:68:aa:5b:98:e6:35:8f:87:54: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:68:0C:13:5A:1D:B9:AC:6D:97:D5:E0:DE:AC:DA:F9:44:AC:C8:51 X509v3 Authority Key Identifier: keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e4:ed:32:0e:08:82:27:68:66:2b:c9:ef:de:73:27:60:7f: 0c:eb:21:eb:5d:cf:3b:54:b9:ed:01:86:ff:41:73:f5:a3:6b: 2e:05:7f:d1:f0:a7:07:62:49:8a:28:48:0c:ed:34:24:f8:36: b7:96:76:2e:d5:2d:d2:66:51:5e:3b:56:c5:f5:ae:8f:d0:8d: 98:df:2d:87:34:1b:bb:db:36:79:70:dc:a8:a7:d5:dd:92:94: a1:20:f4:d1:30:eb:31:f4:2b:69:f8:d6:7a:fd:00:f9:ed:d4: 3e:e0:45:eb:06:5f:a8:74:2b:d9:60:ca:f7:8d:70:de:53:c2: 34:a2:34:60:35:6f:a9:e0:d2:0b:66:3f:99:bc:6d:34:b4:c8: 76:6d:0c:ed:a8:a3:1b:1d:f8:33:96:b9:8b:2a:b3:41:01:43: 83:a4:c9:2b:f2:d6:fd:c4:b3:18:49:56:2c:1c:8d:da:09:38: a8:50:54:74:85:6f:dd:28:ff:e1:3c:73:91:cd:7b:e4:f3:8e: 6b:e5:ee:39:80:02:d7:53:38:f5:eb:a6:38:32:65:9d:c3:6d: 28:6f:f6:ba:57:43:d7:ff:6f:67:a6:45:45:f0:0e:f5:bc:f7: 77:32:71:41:2d:c7:ca:5d:a0:e9:b0:ff:82:43:86:bb:20:d4: 8f:b5:6a:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAGgSyvJRP1/YlSAYrWlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWYzMDYyNDIxMGMwMGQzYTg2ZGZkNmM4MDEwNjEyYmIx YjEyYTAwHhcNMjUxMjIyMDMwMDM1WhcNMjUxMjIzMDMwMDM1WjAzMTEwLwYDVQQD Eyg3ZDY4MGMxMzVhMWRiOWFjNmQ5N2Q1ZTBkZWFjZGFmOTQ0YWNjODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFjQOcuAKzqlqUvNqJtUpvub0cIF t9V8/KILeQcuzyBSe9mDZQ7LH/Enct79JBO35B+Ab0GdQ9o4RC5p6Ngu6/8jbKTJ Fwwv1bVhPy/DPG4aKTEss3cS+i7XO8pEr9xj07cPL4R6UJeoIgHmzZgkA0LInGUW D+f6WYcnbxXT7vgqHK+yBWC3GJ3bmBNBPn3OLfMTVrHfO4aErWwp7dbcs4IC3fUk I7fV4bbQio5yL2ClCcXCvUiQEtXPklEarUJtJ+kTcYkkro0HqW7hVuCHGntKOQQ3 QjhdWOISVw+eMxuSj0+9DjHdCQqHzHoJ62rz2POYeQFoqluY5jWPh1TJAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1oDBNaHbmsbZfV4N6s2vlErMhRMB8GA1UdIwQY MBaAFEvvMGJCEMANOobf1sgBBhK7GxKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2Qt Nzg5MjdmYzc4ZTdkLzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2QtNzg5MjdmYzc4ZTdk LzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeTtMg4I gidoZivJ795zJ2B/DOsh613PO1S57QGG/0Fz9aNrLgV/0fCnB2JJiihIDO00JPg2 t5Z2LtUt0mZRXjtWxfWuj9CNmN8thzQbu9s2eXDcqKfV3ZKUoSD00TDrMfQrafjW ev0A+e3UPuBF6wZfqHQr2WDK941w3lPCNKI0YDVvqeDSC2Y/mbxtNLTIdm0M7aij Gx34M5a5iyqzQQFDg6TJK/LW/cSzGElWLByN2gk4qFBUdIVv3Sj/4Txzkc175POO a+XuOYAC11M49eumODJlncNtKG/2uldD1/9vZ6ZFRfAO9bz3dzJxQS3Hyl2g6bD/ gkOGuyDUj7Vqrg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:15:13 2025 by rpki-client