This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json) Hash identifier: hyc3KgiDkOuLKPFQPWTC1hP4AdSGDsjaNmr/Fn5mDEQ= Subject key identifier: 08:64:1B:22:4F:CC:7C:AB:A8:FD:8E:90:A1:4E:38:7A:A7:F1:5A:58 Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b Certificate serial: 019B1871AA184F3F4F8911A533D36CDF0E69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft Manifest number: 16D2 Signing time: Sat 13 Dec 2025 16:01:00 +0000 Manifest this update: Sat 13 Dec 2025 16:01:00 +0000 Manifest next update: Sun 14 Dec 2025 16:01:00 +0000 Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: Lygf0wZEF7cLCPiMA5UQoaXZiTtogR/XMYBmwbrdJnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:aa:18:4f:3f:4f:89:11:a5:33:d3:6c:df:0e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fece2716cead8c008546224be4b568708683ff4b Validity Not Before: Dec 13 16:01:00 2025 GMT Not After : Dec 14 16:01:00 2025 GMT Subject: CN=08641b224fcc7caba8fd8e90a14e387aa7f15a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:8b:02:98:f1:cf:52:2f:ed:59:ea:bf:14: ee:67:39:c2:d3:0e:b9:2c:7a:cf:da:38:19:7d:2d: 35:18:42:23:48:0f:b2:ab:ae:e3:b3:87:63:df:ff: c8:6d:1c:e5:9c:02:f7:dd:cc:e9:f3:40:3d:91:2a: b0:b7:12:e4:0f:e4:a8:53:5a:ad:07:d7:b9:46:ae: 2a:7a:a0:55:2c:63:13:ed:41:68:32:a9:df:5b:0e: 5f:21:43:2d:40:24:f2:64:10:bf:8a:ab:95:13:83: 93:fc:33:91:28:a6:ec:35:56:ed:2f:ff:04:f2:3a: 85:ad:7d:7b:58:4c:92:59:69:12:88:85:4c:8c:55: b9:c7:62:18:81:1b:51:6d:d2:93:4a:37:3c:f1:84: 41:4f:a8:5d:0a:10:56:00:1d:1a:c2:f4:a1:55:35: 5d:e4:7f:2b:a4:cf:2c:28:59:37:a4:1a:46:6f:41: ba:71:20:3e:d1:f6:fc:f5:27:43:6f:0a:ae:c3:9f: 5b:de:b1:b7:17:a0:45:33:be:ee:fb:0c:5c:97:00: 02:af:8e:f1:49:2a:6a:d2:a3:ef:d2:77:1f:2e:80: 01:dd:07:b4:fd:7f:05:00:bd:f4:d6:c9:38:fd:64: bd:fa:b7:2b:bd:cf:ae:10:d3:31:14:fa:c0:01:27: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:64:1B:22:4F:CC:7C:AB:A8:FD:8E:90:A1:4E:38:7A:A7:F1:5A:58 X509v3 Authority Key Identifier: keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2a:e7:5a:81:7e:23:90:60:bc:51:4e:45:27:46:21:5f:a5: 20:2b:aa:f9:b6:5d:73:41:28:30:1c:31:31:38:a5:f8:bb:35: 7f:75:3e:a8:d5:5a:1f:b8:d3:12:f6:55:70:27:f9:9b:70:87: e7:66:c4:01:f2:61:98:11:05:cb:c6:0a:eb:46:30:f1:cb:0a: bd:79:c5:dc:77:fa:2e:af:29:bf:da:d5:16:33:fb:d1:14:27: 66:32:8f:fb:be:6f:f3:57:da:04:64:a0:7a:ef:a1:6a:b4:90: 0d:a4:ab:17:4a:c9:67:5c:dd:ad:a9:09:c4:b8:06:02:de:9a: 09:69:bc:74:6c:fe:23:57:19:37:c4:da:0a:1f:3d:be:07:55: b3:8e:6c:3f:ed:ea:3e:c8:c0:96:e7:cb:07:ba:ce:d4:6f:39: 9e:18:79:13:91:a0:04:66:07:f6:3c:f1:46:91:c4:25:e5:cc: 7d:76:51:06:99:e2:5a:85:83:b0:e4:50:d5:62:13:a2:51:a7: f3:e8:71:6d:82:3e:fb:51:1e:ba:12:99:9f:84:35:12:db:82: 0e:94:79:e7:d9:b7:f3:79:d9:73:38:a5:7a:30:6d:3f:10:fa: 04:c0:e8:66:73:47:2c:8e:5e:bc:0b:6c:4c:d2:64:ae:72:34: b3:ee:ac:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcaoYTz9PiRGlM9Ns3w5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2UyNzE2Y2VhZDhjMDA4NTQ2MjI0YmU0YjU2ODcwODY4 M2ZmNGIwHhcNMjUxMjEzMTYwMTAwWhcNMjUxMjE0MTYwMTAwWjAzMTEwLwYDVQQD EygwODY0MWIyMjRmY2M3Y2FiYThmZDhlOTBhMTRlMzg3YWE3ZjE1YTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKKLApjxz1Iv7VnqvxTuZznC0w65 LHrP2jgZfS01GEIjSA+yq67js4dj3//IbRzlnAL33czp80A9kSqwtxLkD+SoU1qt B9e5Rq4qeqBVLGMT7UFoMqnfWw5fIUMtQCTyZBC/iquVE4OT/DORKKbsNVbtL/8E 8jqFrX17WEySWWkSiIVMjFW5x2IYgRtRbdKTSjc88YRBT6hdChBWAB0awvShVTVd 5H8rpM8sKFk3pBpGb0G6cSA+0fb89SdDbwquw59b3rG3F6BFM77u+wxclwACr47x SSpq0qPv0ncfLoAB3Qe0/X8FAL301sk4/WS9+rcrvc+uENMxFPrAASdp8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhkGyJPzHyrqP2OkKFOOHqn8VpYMB8GA1UdIwQY MBaAFP7OJxbOrYwAhUYiS+S1aHCGg/9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NDMxYTItZDBkOC00MmRmLWJjYzgt MTdkNjMzZDhmMzlmLzEvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83NDMxYTItZDBkOC00MmRmLWJjYzgtMTdkNjMzZDhmMzlm LzEvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSrnWoF+ I5BgvFFORSdGIV+lICuq+bZdc0EoMBwxMTil+Ls1f3U+qNVaH7jTEvZVcCf5m3CH 52bEAfJhmBEFy8YK60Yw8csKvXnF3Hf6Lq8pv9rVFjP70RQnZjKP+75v81faBGSg eu+harSQDaSrF0rJZ1zdrakJxLgGAt6aCWm8dGz+I1cZN8TaCh89vgdVs45sP+3q PsjAlufLB7rO1G85nhh5E5GgBGYH9jzxRpHEJeXMfXZRBpniWoWDsORQ1WITolGn 8+hxbYI++1EeuhKZn4Q1EtuCDpR559m383nZczilejBtPxD6BMDoZnNHLI5evAts TNJkrnI0s+6sug== -----END CERTIFICATE-----Generated at Sun Dec 14 00:08:20 2025 by rpki-client