This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json) Hash identifier: QKBfrT9Uhx1BgYtBOKXSwOIzhE90Sr/FRumDibaBxMU= Subject key identifier: C1:6E:F7:E1:4C:31:25:B3:45:71:EF:EF:97:7F:EE:B3:92:14:37:F9 Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57 Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057 Certificate serial: 019AF6F98B79801A24360420AB04B640C642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft Manifest number: 16F7 Signing time: Sun 07 Dec 2025 04:02:20 +0000 Manifest this update: Sun 07 Dec 2025 04:02:20 +0000 Manifest next update: Mon 08 Dec 2025 04:02:20 +0000 Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: QC90DQ2GNEl+SZeeq2jlFJh2c6eBPndBW22Weoiqwik=) 2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:8b:79:80:1a:24:36:04:20:ab:04:b6:40:c6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2ea593464858e293952345cf4e97792c8811057 Validity Not Before: Dec 7 04:02:20 2025 GMT Not After : Dec 8 04:02:20 2025 GMT Subject: CN=c16ef7e14c3125b34571efef977feeb3921437f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:ea:d6:d4:47:fc:5d:e9:d9:44:97:27:76: 03:0b:6e:85:7d:24:6c:ba:c7:a3:18:7e:98:25:d6: 2f:3e:0f:26:eb:00:b0:20:18:11:4b:0c:e5:cd:ca: 88:ff:14:09:5b:4a:e7:72:fe:ad:fc:49:b2:00:c1: ce:90:f1:5e:23:58:8d:3b:25:01:6a:b0:32:43:91: ab:b1:bd:0e:59:98:94:7c:2b:ba:2f:b8:b6:2e:3a: 2e:56:de:0d:52:e0:47:cf:7b:b5:d3:15:9b:ce:87: c7:b4:4c:cf:79:66:5c:bb:bd:83:2b:39:6b:ae:3b: ef:5f:d2:b9:b4:7b:6f:0a:00:4c:50:49:48:74:c6: 21:9f:be:a5:8e:cd:38:ce:cd:3f:d5:db:f5:f8:56: 49:d8:e9:37:c6:5b:4a:2a:03:0a:1d:a9:75:ce:4d: e7:f5:ee:ab:5e:ee:65:12:63:62:46:c7:96:c3:a4: a3:ba:30:eb:e7:15:6b:f9:97:35:95:04:6c:e3:50: 7d:cf:2c:c3:de:89:fb:d6:fd:e4:f6:58:9c:2c:cb: fb:b6:38:3f:3b:88:d5:9a:0a:92:d5:8f:d1:81:a8: a7:02:2d:8d:b8:25:e9:24:6b:98:d9:81:9a:59:8c: 40:27:77:85:02:00:a5:9f:84:92:49:8a:37:28:2c: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6E:F7:E1:4C:31:25:B3:45:71:EF:EF:97:7F:EE:B3:92:14:37:F9 X509v3 Authority Key Identifier: keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:85:a4:f2:03:92:70:fa:39:09:b3:bd:9e:61:59:b6:73:74: 7e:bc:99:8e:e2:a8:12:8c:be:98:c3:fe:4f:de:95:c0:9e:1c: 57:22:35:69:82:cf:a7:0c:74:a0:e9:1d:05:5c:df:69:49:1c: 3b:ee:aa:91:fe:33:73:36:e7:f4:3f:58:95:4b:4d:79:fe:cc: 52:85:46:60:e3:42:c9:9f:a2:28:76:dc:92:55:1c:f4:ba:e0: 2f:f7:8e:6e:f3:eb:9c:99:84:0d:3d:11:8c:df:74:64:7e:39: f6:f6:38:08:34:12:32:05:25:4c:ba:08:12:5e:14:cc:ae:01: ed:66:ab:ae:43:65:2e:47:1c:09:af:39:1e:f1:66:3d:55:de: 8e:ef:cf:47:28:ed:23:30:e0:dd:6f:10:b4:9e:18:1c:a9:21: 66:dc:57:b5:21:ca:c5:28:e9:3c:23:df:45:3c:da:2e:10:36: 7f:fe:46:17:e3:36:f9:2e:c3:71:dc:2f:84:15:25:eb:41:bb: 31:bd:bd:c6:68:5e:de:ae:a2:1e:88:3f:7b:84:88:15:9f:da: ee:d9:df:4a:61:3c:16:de:cc:58:08:14:c7:48:65:10:7b:b8: 8d:48:05:59:a1:ab:7b:c7:69:69:40:cb:da:62:45:3a:04:46: d3:49:46:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+Yt5gBokNgQgqwS2QMZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4 MTEwNTcwHhcNMjUxMjA3MDQwMjIwWhcNMjUxMjA4MDQwMjIwWjAzMTEwLwYDVQQD EyhjMTZlZjdlMTRjMzEyNWIzNDU3MWVmZWY5NzdmZWViMzkyMTQzN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRvq1tRH/F3p2USXJ3YDC26FfSRs usejGH6YJdYvPg8m6wCwIBgRSwzlzcqI/xQJW0rncv6t/EmyAMHOkPFeI1iNOyUB arAyQ5Grsb0OWZiUfCu6L7i2LjouVt4NUuBHz3u10xWbzofHtEzPeWZcu72DKzlr rjvvX9K5tHtvCgBMUElIdMYhn76ljs04zs0/1dv1+FZJ2Ok3xltKKgMKHal1zk3n 9e6rXu5lEmNiRseWw6SjujDr5xVr+Zc1lQRs41B9zyzD3on71v3k9licLMv7tjg/ O4jVmgqS1Y/RgainAi2NuCXpJGuY2YGaWYxAJ3eFAgCln4SSSYo3KCz7MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFu9+FMMSWzRXHv75d/7rOSFDf5MB8GA1UdIwQY MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1 LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoWk8gOS cPo5CbO9nmFZtnN0fryZjuKoEoy+mMP+T96VwJ4cVyI1aYLPpwx0oOkdBVzfaUkc O+6qkf4zczbn9D9YlUtNef7MUoVGYONCyZ+iKHbcklUc9LrgL/eObvPrnJmEDT0R jN90ZH459vY4CDQSMgUlTLoIEl4UzK4B7WarrkNlLkccCa85HvFmPVXeju/PRyjt IzDg3W8QtJ4YHKkhZtxXtSHKxSjpPCPfRTzaLhA2f/5GF+M2+S7DcdwvhBUl60G7 Mb29xmhe3q6iHog/e4SIFZ/a7tnfSmE8Ft7MWAgUx0hlEHu4jUgFWaGre8dpaUDL 2mJFOgRG00lGvw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:34:00 2025 by rpki-client