This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json) Hash identifier: g+tob6mavN2lzMJkfv2Ki9ZJC53eaL7pC82PhUxCZ2o= Subject key identifier: C7:2A:7C:C7:10:55:0A:47:9B:C6:DA:7F:1A:EA:C3:2C:6F:C7:8D:EA Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58 Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358 Certificate serial: 019AF08836BA3874D0AFA317CAC547EA61D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft Manifest number: 072A Signing time: Fri 05 Dec 2025 22:00:49 +0000 Manifest this update: Fri 05 Dec 2025 22:00:49 +0000 Manifest next update: Sat 06 Dec 2025 22:00:49 +0000 Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: afwMpuZ2AniHQOd5Itc1W/xq19RbSsuzBKk5XjqltAs=) 2: IrEzCg-L6ChV6NO0z_pSKTvObkE.roa (hash: BAxTmTfKNgnausi613sLgqp7n2C4MuqhHvDS7/1g8aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:36:ba:38:74:d0:af:a3:17:ca:c5:47:ea:61:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358 Validity Not Before: Dec 5 22:00:49 2025 GMT Not After : Dec 6 22:00:49 2025 GMT Subject: CN=c72a7cc710550a479bc6da7f1aeac32c6fc78dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:a8:ca:44:0c:a0:5c:16:8c:c3:73:bb:ea: 1d:09:90:a8:db:98:f6:8e:18:81:25:ec:b7:79:0d: 8b:72:d5:25:e3:d2:e9:15:e7:7f:05:7f:cc:7f:e5: 61:b9:ad:32:8d:dc:c9:c4:66:5c:91:f4:ce:05:b7: 78:1e:b1:a2:88:9d:20:2c:3a:e1:d0:a9:26:67:c3: 35:15:4a:ae:69:96:d5:6a:de:22:dc:6c:10:57:75: 97:bf:de:75:0e:81:cb:fe:a9:2d:46:0e:2a:6a:c5: 62:9b:ed:08:8a:5c:69:81:18:84:fc:4b:ab:72:2e: e6:b6:ac:ab:0d:df:dc:8e:57:3a:d6:d4:6f:dc:f8: a1:a8:fd:95:9e:2c:ea:b2:75:25:36:22:3b:2f:14: 17:27:d8:2e:73:38:57:0b:d1:fe:3f:38:15:5b:f0: bb:cb:cf:7d:2e:a6:84:1e:9a:7d:0c:86:90:6f:f1: 71:bc:f5:11:87:47:a9:5a:44:67:c5:21:c2:34:e7: 28:bd:70:89:6f:c3:e5:95:e7:2e:60:4a:a1:78:a7: 66:9f:31:6f:5e:61:72:fb:45:7a:46:fd:0a:c5:3b: 8c:50:2c:96:4b:ba:14:6c:fd:b9:9b:7a:80:e1:a8: a9:d5:dc:ea:8d:e7:51:1d:8b:af:fd:f3:b1:9c:ec: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2A:7C:C7:10:55:0A:47:9B:C6:DA:7F:1A:EA:C3:2C:6F:C7:8D:EA X509v3 Authority Key Identifier: keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:6c:94:de:24:c6:d3:bd:c4:3b:81:22:2e:6d:77:ef:e0:1b: 1d:7b:14:0d:b9:86:10:fc:75:01:b8:19:1a:0a:b7:3a:9a:e7: 28:da:2e:c8:25:f1:c1:aa:4c:2c:07:90:15:61:e9:d9:47:fa: b1:35:5d:fe:7b:06:37:79:ca:11:29:15:0d:9f:6c:8f:1a:e6: 3c:11:88:3b:f6:8b:12:24:01:dd:4f:73:be:1c:b7:0d:21:62: ff:94:40:76:43:3b:a6:b1:96:e3:c8:a4:65:66:fe:7a:3f:95: dc:74:13:08:06:0d:a6:9c:89:0b:b8:dc:2f:29:67:e6:1e:be: d0:5e:54:90:6c:78:7c:1f:16:1e:40:16:b3:30:09:21:3b:42: 02:bd:47:2c:d7:36:97:d4:57:30:94:81:9e:de:41:c2:eb:a7: 14:23:e8:71:b1:1f:8e:8d:78:4c:a7:38:45:72:cf:2b:c4:3c: d0:4f:a3:d7:13:a5:f4:04:8d:16:b7:3a:09:47:8a:2f:d5:58: 03:44:2d:41:93:89:3b:df:c8:16:a6:10:f6:85:35:29:20:cd: 50:f1:ad:fb:19:ef:7d:45:d4:a1:a0:4c:0c:e5:f4:0e:fd:ad: 83:10:c9:84:5c:6d:4d:ec:71:c7:3e:1c:3e:e3:1f:34:bc:50: ac:86:20:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDa6OHTQr6MXysVH6mHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWI4NmY4MGM0YmIyYWM1NmU0MWVjN2EyNDZhZTI5Njlk OGQzNTgwHhcNMjUxMjA1MjIwMDQ5WhcNMjUxMjA2MjIwMDQ5WjAzMTEwLwYDVQQD EyhjNzJhN2NjNzEwNTUwYTQ3OWJjNmRhN2YxYWVhYzMyYzZmYzc4ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3KoykQMoFwWjMNzu+odCZCo25j2 jhiBJey3eQ2LctUl49LpFed/BX/Mf+Vhua0yjdzJxGZckfTOBbd4HrGiiJ0gLDrh 0KkmZ8M1FUquaZbVat4i3GwQV3WXv951DoHL/qktRg4qasVim+0IilxpgRiE/Eur ci7mtqyrDd/cjlc61tRv3PihqP2VnizqsnUlNiI7LxQXJ9guczhXC9H+PzgVW/C7 y899LqaEHpp9DIaQb/FxvPURh0epWkRnxSHCNOcovXCJb8PllecuYEqheKdmnzFv XmFy+0V6Rv0KxTuMUCyWS7oUbP25m3qA4aip1dzqjedRHYuv/fOxnOyx0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcqfMcQVQpHm8bafxrqwyxvx43qMB8GA1UdIwQY MBaAFOGrhvgMS7KsVuQex6JGrilp2NNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODct NTE2ZjExYWNiM2FlLzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODctNTE2ZjExYWNiM2Fl LzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGyU3iTG 073EO4EiLm137+AbHXsUDbmGEPx1AbgZGgq3OprnKNouyCXxwapMLAeQFWHp2Uf6 sTVd/nsGN3nKESkVDZ9sjxrmPBGIO/aLEiQB3U9zvhy3DSFi/5RAdkM7prGW48ik ZWb+ej+V3HQTCAYNppyJC7jcLyln5h6+0F5UkGx4fB8WHkAWszAJITtCAr1HLNc2 l9RXMJSBnt5BwuunFCPocbEfjo14TKc4RXLPK8Q80E+j1xOl9ASNFrc6CUeKL9VY A0QtQZOJO9/IFqYQ9oU1KSDNUPGt+xnvfUXUoaBMDOX0Dv2tgxDJhFxtTexxxz4c PuMfNLxQrIYgBA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:31 2025 by rpki-client