This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft File: 4ram_1lpoV0l3cO73da-uU9Ipfk.mft (raw, json) Hash identifier: 8j/mAus2Jz3Pt/SuDYCBCwwqlRAoRYVVU/t9hHDZO14= Subject key identifier: 5A:2A:D3:8E:65:81:4F:D6:20:90:E4:3D:5A:EB:F4:B6:63:1F:D7:8C Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9 Certificate issuer: /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9 Certificate serial: 019AF50A7A45EF0071B9DADB1BB4B7EA4E67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:01:35 +0000 Manifest this update: Sat 06 Dec 2025 19:01:35 +0000 Manifest next update: Sun 07 Dec 2025 19:01:35 +0000 Files and hashes: 1: 4ram_1lpoV0l3cO73da-uU9Ipfk.crl (hash: GcHk1opZ9jl2r3nKqQFRabehMkr+zEVfOrs90GP4Xvo=) 2: Jw977rRbSBm1vkOFCP_ZwqthNts.roa (hash: pZc4mT999KgIePYxSGeV1dkG1LyeuUgVh98eZi0P55s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:7a:45:ef:00:71:b9:da:db:1b:b4:b7:ea:4e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9 Validity Not Before: Dec 6 19:01:35 2025 GMT Not After : Dec 7 19:01:35 2025 GMT Subject: CN=5a2ad38e65814fd62090e43d5aebf4b6631fd78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:f6:79:93:0f:28:d0:1b:69:9a:78:42:72: a7:ac:80:a0:44:16:d3:1a:37:0e:6a:8d:aa:8d:0f: ee:9f:43:df:82:5a:2b:2d:a7:a4:0e:14:70:4a:ee: 5c:09:28:f5:4f:4e:12:b3:94:9e:4e:4d:87:a2:b8: bd:af:f4:47:38:13:21:df:0e:d7:92:b8:a9:07:f8: cb:1a:c2:b2:93:a9:60:b6:55:86:e0:22:8e:77:47: d4:f5:b1:3f:fc:ad:ca:d5:c5:25:43:50:85:a6:68: 32:5e:e1:94:eb:5e:67:01:f5:0c:3b:ba:82:9f:bb: 22:73:5f:47:32:73:73:41:d2:6c:16:33:32:56:81: 28:b0:97:56:0e:d3:b0:d5:80:54:e1:47:4f:c5:ee: eb:35:de:c9:c8:ef:24:64:d5:9f:b4:fe:7c:4d:0b: 6f:34:75:ee:ca:d5:1b:04:64:37:f8:a4:0a:8e:22: 97:d0:a9:a4:9a:6a:56:f6:88:ab:72:8b:c2:3c:ff: 28:69:f6:7c:41:a4:85:a4:8c:f8:80:1f:84:c9:39: ba:5a:6f:91:8d:f1:d8:6c:fc:39:d9:62:34:58:a9: 97:e5:98:ac:60:a0:a8:f0:29:44:df:8f:c2:9f:2e: e9:c1:28:69:29:d1:e5:ca:69:22:d0:79:ea:be:16: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2A:D3:8E:65:81:4F:D6:20:90:E4:3D:5A:EB:F4:B6:63:1F:D7:8C X509v3 Authority Key Identifier: keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fc:5b:28:ff:2e:63:2e:15:43:f2:25:20:22:3b:fa:c5:11: 71:72:7e:02:b0:51:4c:be:4d:be:61:dd:d3:27:e4:63:99:90: f5:66:32:e3:2a:83:5e:67:e7:7c:0a:0c:e9:f9:d4:e7:38:1f: 7d:8f:23:1f:a4:7b:87:1b:f2:bb:f7:7d:cd:47:72:79:f0:a3: d3:e2:98:e2:72:03:6d:6d:1f:54:8b:75:fc:a6:10:79:a5:76: a5:8a:73:c9:eb:96:01:5b:33:7a:46:16:91:7c:11:f0:b7:77: 6b:4d:17:1d:54:97:52:19:79:db:e2:f8:7d:bd:1a:34:04:2b: 20:d4:be:b9:6c:7a:ef:ec:c9:41:24:9a:d2:84:d1:03:e5:e9: e6:5d:39:81:28:c2:7d:44:d1:44:c9:f1:1d:f8:a7:a9:24:4d: ad:94:34:ef:ee:fe:7d:75:72:de:f6:b1:9c:85:09:cd:13:c0: e2:99:e4:52:cf:b9:46:8c:c8:a4:9e:c0:fd:a0:83:7e:a8:e8: 75:84:71:a7:a3:df:1d:50:d1:e3:1a:ac:7c:66:f8:6d:73:33: f4:5e:68:b0:ad:aa:4a:5c:f0:dc:b2:4a:d0:c0:2d:10:55:7d: 1c:ea:e9:e9:d4:ed:33:9d:16:e2:5d:5d:7f:2d:00:90:a6:9f: 37:49:9f:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CnpF7wBxudrbG7S36k5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjZhNmZmNTk2OWExNWQyNWRkYzNiYmRkZDZiZWI5NGY0 OGE1ZjkwHhcNMjUxMjA2MTkwMTM1WhcNMjUxMjA3MTkwMTM1WjAzMTEwLwYDVQQD Eyg1YTJhZDM4ZTY1ODE0ZmQ2MjA5MGU0M2Q1YWViZjRiNjYzMWZkNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUb2eZMPKNAbaZp4QnKnrICgRBbT GjcOao2qjQ/un0PfglorLaekDhRwSu5cCSj1T04Ss5SeTk2Hori9r/RHOBMh3w7X kripB/jLGsKyk6lgtlWG4CKOd0fU9bE//K3K1cUlQ1CFpmgyXuGU615nAfUMO7qC n7sic19HMnNzQdJsFjMyVoEosJdWDtOw1YBU4UdPxe7rNd7JyO8kZNWftP58TQtv NHXuytUbBGQ3+KQKjiKX0KmkmmpW9oircovCPP8oafZ8QaSFpIz4gB+EyTm6Wm+R jfHYbPw52WI0WKmX5ZisYKCo8ClE34/Cny7pwShpKdHlymki0HnqvhaPKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoq045lgU/WIJDkPVrr9LZjH9eMMB8GA1UdIwQY MBaAFOK2pv9ZaaFdJd3Du93WvrlPSKX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJhbV8xbHBvVjBsM2NPNzNkYS11VTlJcGZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MGMwYTAtODUzOS00NmVkLWIxMjIt ZmUwY2ExYTdkMzVkLzEvNHJhbV8xbHBvVjBsM2NPNzNkYS11VTlJcGZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MGMwYTAtODUzOS00NmVkLWIxMjItZmUwY2ExYTdkMzVk LzEvNHJhbV8xbHBvVjBsM2NPNzNkYS11VTlJcGZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfxbKP8u Yy4VQ/IlICI7+sURcXJ+ArBRTL5NvmHd0yfkY5mQ9WYy4yqDXmfnfAoM6fnU5zgf fY8jH6R7hxvyu/d9zUdyefCj0+KY4nIDbW0fVIt1/KYQeaV2pYpzyeuWAVszekYW kXwR8Ld3a00XHVSXUhl52+L4fb0aNAQrINS+uWx67+zJQSSa0oTRA+Xp5l05gSjC fUTRRMnxHfinqSRNrZQ07+7+fXVy3vaxnIUJzRPA4pnkUs+5RozIpJ7A/aCDfqjo dYRxp6PfHVDR4xqsfGb4bXMz9F5osK2qSlzw3LJK0MAtEFV9HOrp6dTtM50W4l1d fy0AkKafN0mfrQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:43 2025 by rpki-client