This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json) Hash identifier: KWJmojJ20lOaRybD3H6RTaZg3RETLnBPBaJM0pCoGws= Subject key identifier: E0:A8:22:82:92:33:91:74:D6:B8:24:77:B8:F8:65:74:E3:E8:DB:02 Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0 Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0 Certificate serial: 019AF7D425671690D6D24C9E796966C22A17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft Manifest number: 1421 Signing time: Sun 07 Dec 2025 08:01:06 +0000 Manifest this update: Sun 07 Dec 2025 08:01:06 +0000 Manifest next update: Mon 08 Dec 2025 08:01:06 +0000 Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: MxONCLLMHabsDkURSq+us9TwZly9U8aIM50pSH1AQAY=) 2: _SDGNnpAJAI5c9TTproSlcDE1Ew.roa (hash: FWM2UQvUNqFuHmMAV7nZEdUtqbqVwiTq2Q2yh+QWjTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:25:67:16:90:d6:d2:4c:9e:79:69:66:c2:2a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0 Validity Not Before: Dec 7 08:01:06 2025 GMT Not After : Dec 8 08:01:06 2025 GMT Subject: CN=e0a8228292339174d6b82477b8f86574e3e8db02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:36:bf:86:2b:f8:2d:1a:73:43:73:48:c4:92: 02:cb:5f:ee:4c:41:61:07:19:3a:c0:97:a6:e8:fe: 0a:49:37:ba:47:56:ca:44:07:9a:4e:ea:f8:db:c2: 34:06:e2:0f:87:f9:f1:66:a0:2a:29:e1:c1:4c:1a: c1:e7:b0:b9:06:a0:55:92:bd:97:c0:5b:64:19:2c: bb:63:cf:f3:0d:9f:10:cd:2f:25:17:cf:a2:84:48: 06:fc:b1:2b:63:88:74:82:84:e7:13:03:95:a8:21: 7b:4c:b9:88:c5:13:f0:84:4f:3b:d5:8b:2c:67:f0: f4:d0:01:79:21:0a:84:f9:48:28:2d:39:e7:8b:a7: 04:9c:08:a4:55:2c:30:e1:7c:19:ce:cf:16:8b:f6: e2:bf:9a:23:28:4c:1d:60:68:78:19:03:76:56:c5: 30:6e:5f:da:f2:95:63:e3:6f:9a:94:13:54:ef:f4: 85:bf:0f:1f:d2:38:f4:b4:17:e7:34:af:b9:65:a1: 8c:c1:e4:fb:6d:1b:3b:b0:4e:dc:d5:08:5f:41:d9: 34:db:68:b4:2b:60:a8:ac:82:ce:5a:da:0a:7f:ed: 64:21:27:72:56:d1:c5:cd:ae:d6:b2:d1:fe:47:a3: b3:0f:8d:dc:8b:ba:3d:01:e8:c7:0f:95:b6:d8:e7: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A8:22:82:92:33:91:74:D6:B8:24:77:B8:F8:65:74:E3:E8:DB:02 X509v3 Authority Key Identifier: keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:da:89:a4:ed:ca:13:ed:f2:aa:90:51:19:d0:ed:10:cd:18: ab:e8:7d:dd:11:78:48:0a:e4:ee:f6:22:fc:3c:8f:93:1a:cd: 04:d7:da:1c:42:47:c4:0e:0a:62:b8:94:eb:ed:24:f9:ee:a7: ac:fd:c9:df:10:17:78:0e:55:b3:52:ca:47:83:bb:51:22:9c: 6f:fa:33:7c:3c:65:88:1b:74:cf:b6:ab:39:bd:61:34:43:c2: 4c:db:12:35:29:ba:22:2d:c3:42:27:25:f6:3f:52:22:4d:59: 75:a2:ee:b3:b1:31:f9:e8:9f:d6:6b:9b:59:06:3b:eb:7b:8b: f3:00:17:73:8f:af:8f:4e:a4:02:4b:bd:79:d6:6e:8b:9b:26: e7:70:d8:47:e0:63:63:93:e3:cf:f7:34:ae:fb:85:3d:5a:c9: 5c:f3:fe:2f:9f:d4:84:3b:a3:77:1e:c8:f2:c1:f4:33:2e:3f: 2a:c8:3a:53:da:e6:a3:d4:85:71:2b:89:48:36:ee:55:4b:fe: 6f:5a:e4:a5:08:7c:07:50:f0:a7:ca:5e:eb:29:7b:66:52:a2: 96:0d:56:29:2e:51:9c:92:af:75:4b:43:ea:9f:b2:68:2b:66: 60:49:8f:be:88:82:d3:b6:3b:ed:c3:2c:b7:7a:00:fe:e6:3c: cb:4c:55:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31CVnFpDW0kyeeWlmwioXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGEwM2Y4MGY2MmRhODY2MzUyZTE5OTA5OTdmMWQ0NmNl YjJmYjAwHhcNMjUxMjA3MDgwMTA2WhcNMjUxMjA4MDgwMTA2WjAzMTEwLwYDVQQD EyhlMGE4MjI4MjkyMzM5MTc0ZDZiODI0NzdiOGY4NjU3NGUzZThkYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ja/hiv4LRpzQ3NIxJICy1/uTEFh Bxk6wJem6P4KSTe6R1bKRAeaTur428I0BuIPh/nxZqAqKeHBTBrB57C5BqBVkr2X wFtkGSy7Y8/zDZ8QzS8lF8+ihEgG/LErY4h0goTnEwOVqCF7TLmIxRPwhE871Yss Z/D00AF5IQqE+UgoLTnni6cEnAikVSww4XwZzs8Wi/biv5ojKEwdYGh4GQN2VsUw bl/a8pVj42+alBNU7/SFvw8f0jj0tBfnNK+5ZaGMweT7bRs7sE7c1QhfQdk022i0 K2CorILOWtoKf+1kISdyVtHFza7WstH+R6OzD43ci7o9AejHD5W22OexNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCoIoKSM5F01rgkd7j4ZXTj6NsCMB8GA1UdIwQY MBaAFOJKA/gPYtqGY1LhmQmX8dRs6y+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODct NDFiNTQ1MDBmZGNmLzEvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODctNDFiNTQ1MDBmZGNm LzEvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9qJpO3K E+3yqpBRGdDtEM0Yq+h93RF4SArk7vYi/DyPkxrNBNfaHEJHxA4KYriU6+0k+e6n rP3J3xAXeA5Vs1LKR4O7USKcb/ozfDxliBt0z7arOb1hNEPCTNsSNSm6Ii3DQicl 9j9SIk1ZdaLus7Ex+eif1mubWQY763uL8wAXc4+vj06kAku9edZui5sm53DYR+Bj Y5Pjz/c0rvuFPVrJXPP+L5/UhDujdx7I8sH0My4/Ksg6U9rmo9SFcSuJSDbuVUv+ b1rkpQh8B1Dwp8pe6yl7ZlKilg1WKS5RnJKvdUtD6p+yaCtmYEmPvoiC07Y77cMs t3oA/uY8y0xVVg== -----END CERTIFICATE-----Generated at Sun Dec 7 11:19:21 2025 by rpki-client