This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json) Hash identifier: 4W1SpUbyiZZD4aOIBQYW61KO6tSg37+YwVqX5s5uyhs= Subject key identifier: 98:CD:71:BA:8A:77:E8:8E:1F:BA:AC:AC:83:51:A4:0B:84:F4:7C:9C Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79 Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879 Certificate serial: 019AF35243629931E493C954E37C5CFE2150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft Manifest number: 071D Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: wy7LIkxRFCfiIcRRBk5L1qcfV8TLBAneGH5Itb/tYQI=) 2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:43:62:99:31:e4:93:c9:54:e3:7c:5c:fe:21:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879 Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=98cd71ba8a77e88e1fbaacac8351a40b84f47c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:df:e4:4c:16:fd:8c:36:7d:c5:af:fe:e9:56: 7d:d8:1b:7d:3a:4d:75:35:e8:ee:46:35:b2:0b:30: 32:e4:05:2e:9a:7e:ac:a9:3a:ee:08:b5:b5:43:46: f4:f8:fb:cf:69:6c:33:16:df:e0:c7:13:ce:a6:22: e3:e7:fd:77:d2:f5:ae:b8:79:5e:6f:2a:43:3b:4c: f8:5e:65:b2:43:69:74:a9:66:3a:c8:04:70:0f:b7: 6f:1f:e3:cc:20:dd:4e:98:71:ca:87:fd:fb:1d:4e: 2b:ba:09:a7:6b:29:9e:c8:bf:7c:1b:37:82:43:22: 6e:f8:06:9c:08:f6:59:de:b8:02:50:ce:f4:8a:bb: 3b:6b:5f:a6:a0:47:57:79:10:ca:89:8e:92:6d:63: c8:7f:99:ec:e9:83:27:f9:1d:26:c5:83:3c:e5:b6: cd:dd:7a:27:20:f4:75:11:63:75:05:0f:78:98:48: bc:38:11:ae:07:ff:e5:e0:0b:f1:16:51:f9:95:47: 84:fa:67:57:0e:7e:31:c6:05:a7:d5:7b:6a:a3:e7: 55:99:04:86:7e:38:d3:f9:99:f1:c7:6d:eb:33:84: b5:be:ef:2c:3d:38:6f:b6:ac:cf:d2:51:74:70:51: e4:2c:21:ca:55:5f:90:33:09:1c:60:a4:ed:96:53: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:71:BA:8A:77:E8:8E:1F:BA:AC:AC:83:51:A4:0B:84:F4:7C:9C X509v3 Authority Key Identifier: keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:54:85:85:06:c8:52:fe:48:a1:30:43:b7:0e:d8:f3:1f:18: 16:89:5d:17:68:7b:65:3f:b7:5d:e5:19:8a:fd:d3:dd:3d:94: 0f:92:e9:c8:36:2a:14:89:82:8a:ac:f8:31:12:4a:0f:52:79: e2:b8:c1:c0:2e:aa:b7:5e:ec:44:53:1b:01:cb:87:6a:86:09: 16:f7:21:ba:7c:19:ea:1b:d7:dc:88:92:cd:ac:fd:2d:7f:2b: 01:d8:fc:a6:31:5c:41:9a:b9:2f:7b:d6:af:e9:a4:27:10:53: cf:53:cd:fd:f2:ff:55:40:04:75:d4:f5:48:f7:b6:bb:68:a3: d7:66:ed:1d:3d:6c:0d:92:ae:2d:65:25:12:8d:50:67:61:d9: f7:98:1a:b5:22:82:49:51:91:84:92:f6:8b:4d:b0:49:18:1a: 4f:5b:05:74:f2:4c:62:9f:6f:44:02:87:81:b0:7c:d4:bb:b1: a0:13:e3:cc:a8:67:c8:db:af:06:8a:b0:ae:0b:3d:ce:71:69: 69:fa:50:a7:bd:62:af:a2:49:1f:18:8f:63:41:5c:06:a1:ff: fd:de:ae:ce:35:ff:5a:51:a8:9a:81:4e:2e:4c:41:3e:2d:f2: 01:ad:99:6b:4b:4d:49:36:7b:1d:88:7b:00:ab:89:d6:d4:23: 11:7e:fe:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkNimTHkk8lU43xc/iFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNDc3MDcyYjkxYWY1YzNmM2JmZTY5NzQzMjQzZTdjZGEz YWU4NzkwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD Eyg5OGNkNzFiYThhNzdlODhlMWZiYWFjYWM4MzUxYTQwYjg0ZjQ3YzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8d/kTBb9jDZ9xa/+6VZ92Bt9Ok11 NejuRjWyCzAy5AUumn6sqTruCLW1Q0b0+PvPaWwzFt/gxxPOpiLj5/130vWuuHle bypDO0z4XmWyQ2l0qWY6yARwD7dvH+PMIN1OmHHKh/37HU4rugmnaymeyL98GzeC QyJu+AacCPZZ3rgCUM70irs7a1+moEdXeRDKiY6SbWPIf5ns6YMn+R0mxYM85bbN 3XonIPR1EWN1BQ94mEi8OBGuB//l4AvxFlH5lUeE+mdXDn4xxgWn1Xtqo+dVmQSG fjjT+Znxx23rM4S1vu8sPThvtqzP0lF0cFHkLCHKVV+QMwkcYKTtllNTSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjNcbqKd+iOH7qsrINRpAuE9HycMB8GA1UdIwQY MBaAFOFHcHK5GvXD87/ml0MkPnzaOuh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2Ut ZTdjOGNmM2FmNWRlLzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2UtZTdjOGNmM2FmNWRl LzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1SFhQbI Uv5IoTBDtw7Y8x8YFoldF2h7ZT+3XeUZiv3T3T2UD5LpyDYqFImCiqz4MRJKD1J5 4rjBwC6qt17sRFMbAcuHaoYJFvchunwZ6hvX3IiSzaz9LX8rAdj8pjFcQZq5L3vW r+mkJxBTz1PN/fL/VUAEddT1SPe2u2ij12btHT1sDZKuLWUlEo1QZ2HZ95gatSKC SVGRhJL2i02wSRgaT1sFdPJMYp9vRAKHgbB81LuxoBPjzKhnyNuvBoqwrgs9znFp afpQp71ir6JJHxiPY0FcBqH//d6uzjX/WlGomoFOLkxBPi3yAa2Za0tNSTZ7HYh7 AKuJ1tQjEX7+ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:34 2025 by rpki-client