This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json) Hash identifier: CGZ57PGghvnk2wVwaDlYdUirYXjZgoogXx1UxJJ68Nk= Subject key identifier: 88:3C:08:B8:E8:EF:C8:48:87:04:C4:A0:8B:6F:DF:26:9B:48:51:6E Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0 Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0 Certificate serial: 019AF12DC6D35F51C05F4F9DE4185B1FC2AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft Manifest number: 0563 Signing time: Sat 06 Dec 2025 01:01:40 +0000 Manifest this update: Sat 06 Dec 2025 01:01:40 +0000 Manifest next update: Sun 07 Dec 2025 01:01:40 +0000 Files and hashes: 1: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (hash: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=) 2: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: 7XwR6sWE63i+4cSErxGPK1DmkarFVJG5OlmGbHPESqE=) 3: xDz5khWz84DZoygENZz9smDY9DE.roa (hash: ImBhN/9eW34k/DBkodgK0kDXEWCtP6C29MLbYuo8Lq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c6:d3:5f:51:c0:5f:4f:9d:e4:18:5b:1f:c2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0 Validity Not Before: Dec 6 01:01:40 2025 GMT Not After : Dec 7 01:01:40 2025 GMT Subject: CN=883c08b8e8efc8488704c4a08b6fdf269b48516e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:e2:46:ea:25:08:f1:23:78:1d:ff:51:66: 23:ad:34:7b:93:1e:5c:f6:d5:c5:2d:90:74:1d:85: 73:55:78:27:ff:d6:13:f0:13:fd:d1:5c:86:7a:59: 36:f8:dd:08:aa:62:8b:e4:e0:ad:bf:45:fd:91:73: c3:98:1c:8a:e4:e4:2f:03:f4:2b:b2:b7:4f:17:f0: bf:3c:31:8c:7d:87:d1:11:61:9a:bd:63:b9:d4:a0: f7:65:61:a4:9e:05:a1:0a:ba:b4:1c:61:89:8d:cb: ec:16:f2:7c:db:15:ec:24:cc:c8:ff:35:ad:45:16: 6f:ca:85:69:21:44:f0:2c:8f:14:39:fd:6c:68:86: 69:54:7a:c8:db:3d:25:cc:74:60:ec:a1:5c:9c:45: 15:06:2e:69:fe:cf:fe:e4:9e:50:d3:ab:9d:bb:6d: 22:8c:8a:d5:a7:a4:37:21:a8:82:ad:64:bc:e5:c3: 55:24:c5:98:d7:c2:dc:05:8c:1e:8b:86:77:14:7d: e2:12:19:36:32:d4:ea:7d:27:53:f7:6f:c6:ce:78: 93:b7:c6:1a:dd:a9:49:34:bd:01:b7:45:44:9b:d9: 53:71:d7:03:ae:dd:97:b1:b0:58:67:2a:d5:5a:f6: ca:83:df:a3:7a:c8:62:f6:5e:3b:c6:e8:39:b0:fd: b2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3C:08:B8:E8:EF:C8:48:87:04:C4:A0:8B:6F:DF:26:9B:48:51:6E X509v3 Authority Key Identifier: keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e4:36:05:dd:ea:4d:fb:cb:dc:63:68:a7:e0:63:b8:d1:67: 81:29:d5:13:98:63:42:1e:4c:ab:69:71:e7:e7:f2:fa:45:f6: 8d:02:6a:47:8b:19:ec:f8:21:69:ce:c2:e3:57:23:be:f3:a8: 33:93:80:65:4b:25:87:27:c7:11:38:7f:b7:cd:60:a5:18:2a: 97:c9:89:fe:eb:0b:a4:67:79:dc:a0:eb:5c:55:0c:d3:45:06: c8:7d:92:44:ba:c3:35:77:2a:37:8d:08:60:72:e7:69:a6:25: 58:08:ea:c6:cb:f2:d9:08:de:fa:32:a5:be:d0:21:b5:e7:60: e7:ba:0c:60:72:60:58:62:88:15:28:d7:f9:1e:9f:da:fd:ea: 58:72:08:09:e0:fc:c1:aa:98:c9:be:82:1c:57:36:d7:f7:cc: 1b:4c:0c:22:60:9d:d8:f2:31:ad:61:fb:54:e1:4a:7c:ae:73: 91:f6:db:3d:b7:f1:bf:89:34:e0:00:bb:2e:98:06:f8:04:ed: ab:ff:f9:fb:f4:81:c0:08:5f:f5:a8:5f:69:05:ba:e9:a9:33: a7:ed:5a:f7:10:1d:3e:90:87:fb:34:0b:bc:5b:46:4e:79:92: df:62:96:85:b6:b0:2b:59:7d:4d:07:e0:ac:03:f5:9e:9f:c2: 54:1c:20:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcbTX1HAX0+d5BhbH8KvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjNmNmRjNDYxMGY2YzliYmFhNDUzMjExMTczOGU0OTNi NmFkZjAwHhcNMjUxMjA2MDEwMTQwWhcNMjUxMjA3MDEwMTQwWjAzMTEwLwYDVQQD Eyg4ODNjMDhiOGU4ZWZjODQ4ODcwNGM0YTA4YjZmZGYyNjliNDg1MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusniRuolCPEjeB3/UWYjrTR7kx5c 9tXFLZB0HYVzVXgn/9YT8BP90VyGelk2+N0IqmKL5OCtv0X9kXPDmByK5OQvA/Qr srdPF/C/PDGMfYfREWGavWO51KD3ZWGkngWhCrq0HGGJjcvsFvJ82xXsJMzI/zWt RRZvyoVpIUTwLI8UOf1saIZpVHrI2z0lzHRg7KFcnEUVBi5p/s/+5J5Q06udu20i jIrVp6Q3IaiCrWS85cNVJMWY18LcBYwei4Z3FH3iEhk2MtTqfSdT92/GzniTt8Ya 3alJNL0Bt0VEm9lTcdcDrt2XsbBYZyrVWvbKg9+jeshi9l47xug5sP2y0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg8CLjo78hIhwTEoItv3yabSFFuMB8GA1UdIwQY MBaAFOHz9txGEPbJu6pFMhEXOOSTtq3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2It MjkxYjdhZDA5M2JmLzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2ItMjkxYjdhZDA5M2Jm LzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeQ2Bd3q TfvL3GNop+BjuNFngSnVE5hjQh5Mq2lx5+fy+kX2jQJqR4sZ7Pghac7C41cjvvOo M5OAZUslhyfHETh/t81gpRgql8mJ/usLpGd53KDrXFUM00UGyH2SRLrDNXcqN40I YHLnaaYlWAjqxsvy2Qje+jKlvtAhtedg57oMYHJgWGKIFSjX+R6f2v3qWHIICeD8 waqYyb6CHFc21/fMG0wMImCd2PIxrWH7VOFKfK5zkfbbPbfxv4k04AC7LpgG+ATt q//5+/SBwAhf9ahfaQW66akzp+1a9xAdPpCH+zQLvFtGTnmS32KWhbawK1l9TQfg rAP1np/CVBwg+w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:50 2025 by rpki-client