This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json) Hash identifier: SR6H4aPckYtf6CTc7qBjF4tBdn2Qij1QCOkIcM4Jc+c= Subject key identifier: 4B:FA:B8:89:AE:39:0A:79:7C:78:9A:75:30:D3:DB:BF:4C:8E:45:60 Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc Certificate serial: 019AF12D78F27628C10DDAB4DB0C4E166F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft Manifest number: 1472 Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: yxtM4B+v0fKgmz2lTGrCrcjZtuOEiDHjZVkipHeUuxU=) 2: KUdT6ERAiaY5ZjAg0l7_pkDNLCw.roa (hash: JWvFQTdlTw7oZyEK0anyzQ0bLLNEO6CoBLxhpsT9tmY=) 3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:78:f2:76:28:c1:0d:da:b4:db:0c:4e:16:6f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=4bfab889ae390a797c789a7530d3dbbf4c8e4560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:4a:5a:d1:fb:22:7c:41:b4:b2:40:a3:b0: ae:88:d9:68:ff:07:16:c4:5f:23:96:6c:a6:80:53: da:b1:25:12:f5:bf:bc:f1:29:05:98:84:53:02:bc: cd:a8:70:87:cd:fe:99:37:37:79:5e:00:d8:0b:68: 02:94:50:66:ba:04:8a:7f:f2:02:8b:cb:b6:55:96: 63:2c:56:b8:e4:6b:5f:32:4b:74:31:1c:00:b6:f9: 7d:d0:ca:1f:1c:69:20:07:c3:27:63:d3:1a:47:24: 3d:40:7d:6f:27:e2:e0:82:b3:88:65:ee:c2:6f:aa: db:54:09:93:56:69:50:ca:08:33:3e:ed:a4:b2:9b: 12:04:d6:f1:3c:34:09:a0:9c:6d:0d:30:d9:69:de: b1:30:c0:c5:e0:d4:f9:2b:66:68:40:3e:86:1f:59: 8c:2e:b2:48:ca:ab:b1:ff:d1:f8:e8:fc:26:48:f5: 86:e2:8b:0a:8a:90:57:7d:cc:71:e7:9f:1c:ab:3b: e1:d2:34:22:38:34:20:b0:7e:61:38:8f:c2:4f:2b: 31:33:c9:c5:1c:83:a6:6b:97:48:f2:cd:31:fb:5d: 01:2a:9c:9a:f8:5d:bf:cc:e2:78:4e:e6:dd:2f:30: 62:0f:c3:41:b4:31:5d:22:11:d6:ea:80:b7:99:32: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FA:B8:89:AE:39:0A:79:7C:78:9A:75:30:D3:DB:BF:4C:8E:45:60 X509v3 Authority Key Identifier: keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:f3:5e:2f:06:81:62:a7:31:7d:5e:ca:ce:a0:a7:3c:1a:87: 85:59:4c:8b:8c:f0:25:73:0e:8e:63:40:76:a3:08:00:d3:96: 0e:74:2b:f9:07:0e:31:dd:79:b0:08:c9:1e:ec:b1:ba:a8:a5: 75:ef:88:ac:91:5c:63:ea:19:db:98:f1:c1:01:28:e6:29:b6: 0c:ee:c1:60:1d:84:da:99:19:ae:57:b2:7c:2c:f6:ed:5f:be: 18:65:40:1f:98:d9:0d:4c:88:a8:d3:cf:9f:b9:03:e7:56:ee: 3b:f5:0b:46:26:01:a3:bd:fe:72:c2:29:43:93:ea:d8:b2:cc: 15:8c:c2:b2:73:9c:32:85:09:26:49:9b:1e:f7:b1:f6:bb:51: 54:ec:a9:4b:43:d8:c3:1c:86:5d:15:84:c1:a6:17:d7:46:35: 19:d1:1d:0e:dd:69:a2:b8:42:ef:e1:8d:1d:90:31:81:7f:af: 98:7f:72:e3:93:bd:9f:b8:91:7f:dd:37:11:79:5f:e6:16:e5: 77:64:ea:9e:78:12:28:af:9c:3f:39:e8:22:5b:86:c8:fb:94: e6:68:1c:de:e5:c5:dd:b0:a6:9a:e3:29:7b:2f:21:6d:c3:02: a2:4c:dd:6c:fe:77:5a:67:a4:aa:ff:f1:3c:d6:39:5c:17:0c: 1f:68:92:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXjydijBDdq02wxOFm+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw NGI1ZGMwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD Eyg0YmZhYjg4OWFlMzkwYTc5N2M3ODlhNzUzMGQzZGJiZjRjOGU0NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtetKWtH7InxBtLJAo7CuiNlo/wcW xF8jlmymgFPasSUS9b+88SkFmIRTArzNqHCHzf6ZNzd5XgDYC2gClFBmugSKf/IC i8u2VZZjLFa45GtfMkt0MRwAtvl90MofHGkgB8MnY9MaRyQ9QH1vJ+LggrOIZe7C b6rbVAmTVmlQyggzPu2kspsSBNbxPDQJoJxtDTDZad6xMMDF4NT5K2ZoQD6GH1mM LrJIyqux/9H46PwmSPWG4osKipBXfcxx558cqzvh0jQiODQgsH5hOI/CTysxM8nF HIOma5dI8s0x+10BKpya+F2/zOJ4TubdLzBiD8NBtDFdIhHW6oC3mTKdZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv6uImuOQp5fHiadTDT279MjkVgMB8GA1UdIwQY MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt MzFjNzMzMTk3MDczLzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxfNeLwaB YqcxfV7KzqCnPBqHhVlMi4zwJXMOjmNAdqMIANOWDnQr+QcOMd15sAjJHuyxuqil de+IrJFcY+oZ25jxwQEo5im2DO7BYB2E2pkZrleyfCz27V++GGVAH5jZDUyIqNPP n7kD51buO/ULRiYBo73+csIpQ5Pq2LLMFYzCsnOcMoUJJkmbHvex9rtRVOypS0PY wxyGXRWEwaYX10Y1GdEdDt1porhC7+GNHZAxgX+vmH9y45O9n7iRf903EXlf5hbl d2TqnngSKK+cPznoIluGyPuU5mgc3uXF3bCmmuMpey8hbcMCokzdbP53Wmekqv/x PNY5XBcMH2iS9g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:14 2025 by rpki-client