This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json) Hash identifier: S+pz0VMox+v3H/a12gd0W7hCSiz6fByIYIzK3BSVYJw= Subject key identifier: C7:5E:5D:D7:8E:E1:8E:D8:7F:45:BB:9A:E6:60:10:2F:41:21:3B:0C Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a Certificate serial: 019AF12D5822085C4AE7317D1ADD9EFA9D9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft Manifest number: 077B Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: T975zeE35ysQVr6zkNY8uBNqu4/Bi9nADP6ie6HeRdo=) 2: 6QTOObZCJD1chm-ODo_uH-86-lI.roa (hash: PPt6OC48BVzBGzWbhNau2lL/cgNIrrJFP+rxLWVwYyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:58:22:08:5c:4a:e7:31:7d:1a:dd:9e:fa:9d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=c75e5dd78ee18ed87f45bb9ae660102f41213b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:08:2d:05:1f:cf:31:81:e4:ac:a8:59:cb:6b: 5d:56:7e:a7:85:40:00:17:d5:90:d6:eb:1e:b1:6c: e2:a7:75:50:45:84:3c:21:ea:f3:09:44:52:7c:3a: b3:d3:f1:58:34:63:48:35:d2:29:68:78:90:dd:c3: dd:cb:51:cc:df:1b:ec:f7:a2:18:ec:ea:c5:85:1a: a0:1e:92:71:e3:b2:3d:71:38:26:89:7e:3b:fc:ac: 94:bb:88:9d:63:d3:94:49:33:64:a7:b3:ed:38:97: c3:5a:85:51:20:3e:47:17:c0:d8:d4:88:40:ac:38: d0:b6:4a:22:9a:2d:13:1b:e9:b1:3f:a7:3c:35:71: 3b:54:84:ce:82:6e:07:a9:a2:82:f2:e5:d5:89:a0: 5a:e6:1f:0b:0a:e3:e2:5b:65:ac:e8:73:50:df:4e: c4:62:59:68:3c:31:4b:0b:d2:ed:e2:92:ca:ca:a9: cc:99:0e:96:21:44:65:68:67:c3:3b:07:eb:83:33: a2:9d:03:d3:64:48:74:cb:f7:d1:2d:a8:e9:cf:bd: 0f:c4:c9:bd:c2:8c:3e:4f:9c:19:36:e0:af:e7:9f: 6e:67:de:ff:c6:e6:57:3d:8c:45:ea:3c:3b:73:2d: 49:a7:47:2f:92:7f:78:bc:37:80:6c:23:0c:1d:a2: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:5D:D7:8E:E1:8E:D8:7F:45:BB:9A:E6:60:10:2F:41:21:3B:0C X509v3 Authority Key Identifier: keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9a:47:c4:c0:29:b3:10:40:cc:79:01:cb:4f:25:5b:86:15: 36:67:30:15:b0:7a:86:df:54:3d:fc:fe:ad:f2:53:07:19:bf: b0:6b:5a:29:a1:6b:b2:52:ce:50:f9:bc:e1:d4:83:65:d7:99: c4:b6:b0:b1:b1:ff:ba:f9:81:ef:dd:32:79:08:ba:d1:2c:f1: 27:13:84:de:ca:de:82:08:bb:e0:cd:80:d2:34:4a:f2:9b:2d: dc:cb:44:96:fa:f4:70:12:73:2c:a3:36:f5:e0:c9:34:6d:1f: 68:c0:da:df:6a:c8:49:65:9e:fe:88:4d:c7:a3:a5:87:b8:60: 3d:3a:bc:42:55:56:33:17:62:c4:06:d3:53:c2:f9:69:11:84: 05:f2:72:7f:26:2e:30:c7:f8:4b:2f:66:30:22:8c:2e:99:a6: e5:67:d8:f9:8a:61:14:28:5e:13:75:1a:71:94:1b:86:2e:a4: 03:e3:a4:6d:cf:d4:68:3f:da:0a:66:16:47:92:0e:f1:14:57: dd:c1:b2:f7:9c:9b:4c:47:03:37:a5:9f:2a:a0:3f:28:3e:de: f9:6c:16:46:c7:d1:22:31:ed:f0:bd:25:cb:dd:80:af:d0:d0: 29:e3:95:24:6a:5d:19:fb:ef:67:49:d9:55:32:4d:2a:23:c1: dd:3f:df:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVgiCFxK5zF9Gt2e+p2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjViMDhkYzQzM2Y4ZTlmNzc3MjdjYjUxZjZiYTI0YmRk NWYzOWEwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EyhjNzVlNWRkNzhlZTE4ZWQ4N2Y0NWJiOWFlNjYwMTAyZjQxMjEzYjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ggtBR/PMYHkrKhZy2tdVn6nhUAA F9WQ1usesWzip3VQRYQ8IerzCURSfDqz0/FYNGNINdIpaHiQ3cPdy1HM3xvs96IY 7OrFhRqgHpJx47I9cTgmiX47/KyUu4idY9OUSTNkp7PtOJfDWoVRID5HF8DY1IhA rDjQtkoimi0TG+mxP6c8NXE7VITOgm4HqaKC8uXViaBa5h8LCuPiW2Ws6HNQ307E YlloPDFLC9Lt4pLKyqnMmQ6WIURlaGfDOwfrgzOinQPTZEh0y/fRLajpz70PxMm9 wow+T5wZNuCv559uZ97/xuZXPYxF6jw7cy1Jp0cvkn94vDeAbCMMHaLgFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdeXdeO4Y7Yf0W7muZgEC9BITsMMB8GA1UdIwQY MBaAFOK1sI3EM/jp93cny1H2uiS91fOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYWU0NDMtMTk4Yi00MzJlLWI0MTkt M2U2ZmJlMzc5ZTgzLzEvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mYWU0NDMtMTk4Yi00MzJlLWI0MTktM2U2ZmJlMzc5ZTgz LzEvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJpHxMAp sxBAzHkBy08lW4YVNmcwFbB6ht9UPfz+rfJTBxm/sGtaKaFrslLOUPm84dSDZdeZ xLawsbH/uvmB790yeQi60SzxJxOE3sreggi74M2A0jRK8pst3MtElvr0cBJzLKM2 9eDJNG0faMDa32rISWWe/ohNx6Olh7hgPTq8QlVWMxdixAbTU8L5aRGEBfJyfyYu MMf4Sy9mMCKMLpmm5WfY+YphFCheE3UacZQbhi6kA+Okbc/UaD/aCmYWR5IO8RRX 3cGy95ybTEcDN6WfKqA/KD7e+WwWRsfRIjHt8L0ly92Ar9DQKeOVJGpdGfvvZ0nZ VTJNKiPB3T/f+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:50:28 2025 by rpki-client