This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft File: Zp4hLXARG0TeZvV1An4ADNRB_c4.mft (raw, json) Hash identifier: jkIVyHCfzU+ALKonmIC1zto4huIFHTDNkMfIijhOj6M= Subject key identifier: 61:F3:0F:34:B1:6D:37:21:B9:D0:A5:F7:B5:50:D5:E0:60:42:CB:92 Authority key identifier: 66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE Certificate issuer: /CN=669e212d70111b44de66f575027e000cd441fdce Certificate serial: 019AF16421351A16AB9624E7BFA86B7AD74C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft Manifest number: C4 Signing time: Sat 06 Dec 2025 02:01:02 +0000 Manifest this update: Sat 06 Dec 2025 02:01:02 +0000 Manifest next update: Sun 07 Dec 2025 02:01:02 +0000 Files and hashes: 1: DPBiMkfZcMPnWu4HuBAMRqRAx3E.roa (hash: RRc9ujZ9wYKMEBB2jrXKo0UcJxSJ/KgGd/cdw5jOUv0=) 2: Zp4hLXARG0TeZvV1An4ADNRB_c4.crl (hash: QAe31cFwL6jD2nwkVGL8yg0sawzXxNaqnUBIvcHuR94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:21:35:1a:16:ab:96:24:e7:bf:a8:6b:7a:d7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669e212d70111b44de66f575027e000cd441fdce Validity Not Before: Dec 6 02:01:02 2025 GMT Not After : Dec 7 02:01:02 2025 GMT Subject: CN=61f30f34b16d3721b9d0a5f7b550d5e06042cb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:86:c6:1f:d1:c7:99:2c:42:1c:18:50:8d: 1f:8e:fd:06:d8:4b:95:5b:6a:a2:89:fe:06:44:c6: a8:40:08:93:19:32:43:02:a8:c6:b7:7e:16:6a:d4: fb:61:51:40:a3:60:02:2f:ff:f6:99:4b:09:4c:dd: 98:51:35:dc:4a:8d:c7:44:b9:5c:3b:4b:07:84:86: 01:1c:df:1e:9b:30:a8:fc:b0:b7:75:da:07:4e:74: 5d:cb:03:b5:87:d6:59:c6:c3:33:a8:50:48:1f:7a: c8:10:94:d6:b3:34:56:7e:50:cb:74:f2:04:82:fb: 7e:6c:b1:51:a5:57:8c:e9:25:e9:3e:47:13:0f:04: 05:65:12:62:fb:55:d2:4f:70:91:79:48:d4:7c:69: 76:67:a3:91:ce:8a:d9:f9:fd:24:53:05:d3:4a:40: 6e:92:6c:ab:68:a8:95:73:05:95:13:ff:ec:a9:60: 26:05:a4:4a:e9:4f:81:74:2d:a3:22:3f:c7:3e:1d: d1:f9:be:88:e2:b5:74:a4:5f:65:80:37:9f:3c:00: c2:66:df:1d:7d:a7:c8:35:a5:55:27:a9:3d:fa:b0: 88:ed:cf:c9:15:1e:8e:4d:b9:31:5d:92:99:30:e0: 23:18:51:07:4b:ac:1e:4b:13:8b:55:be:31:70:40: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F3:0F:34:B1:6D:37:21:B9:D0:A5:F7:B5:50:D5:E0:60:42:CB:92 X509v3 Authority Key Identifier: keyid:66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:19:0b:4d:11:0f:b5:86:e9:c1:25:03:88:2c:82:8f:58:52: e4:8f:8b:d6:a8:b5:26:5c:91:18:4c:68:a5:bd:d6:2c:76:ae: c8:c1:19:d3:34:59:f8:c2:bc:e3:3b:cb:94:e7:43:6d:91:24: cb:4b:85:56:7c:91:57:54:86:cf:2b:68:ea:b3:0b:fb:9c:4e: 65:4c:67:89:7e:49:9c:65:c1:54:4a:6a:ed:e2:fb:ec:9e:4a: 4c:81:58:b4:8a:46:76:f0:64:26:0e:07:51:08:11:be:2d:14: 0e:08:a3:f9:66:47:1a:ff:dd:a1:f8:12:ad:f5:72:f2:55:7c: 9a:06:c8:7b:1c:d4:b3:89:3e:41:28:bd:95:0b:43:59:63:65: 8d:36:cd:cb:ee:80:74:43:93:94:11:49:d8:31:b2:87:b5:ae: e5:50:b0:ee:55:25:a7:f8:9c:df:95:29:1e:89:2b:17:fe:83: f4:91:66:a3:1b:79:05:fb:a2:4c:2b:c8:18:0b:b6:91:04:1c: 09:40:3b:3d:41:ee:6a:29:ca:bb:57:73:16:6f:4a:72:cd:bc: b7:f7:d6:6c:3d:20:02:c2:59:6b:ad:59:c8:42:c6:4e:95:bc: 13:7f:af:a9:db:00:57:40:4b:57:5d:05:ea:1a:29:80:19:bc: 6f:30:ca:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCE1GharliTnv6hretdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OWUyMTJkNzAxMTFiNDRkZTY2ZjU3NTAyN2UwMDBjZDQ0 MWZkY2UwHhcNMjUxMjA2MDIwMTAyWhcNMjUxMjA3MDIwMTAyWjAzMTEwLwYDVQQD Eyg2MWYzMGYzNGIxNmQzNzIxYjlkMGE1ZjdiNTUwZDVlMDYwNDJjYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueOGxh/Rx5ksQhwYUI0fjv0G2EuV W2qiif4GRMaoQAiTGTJDAqjGt34WatT7YVFAo2ACL//2mUsJTN2YUTXcSo3HRLlc O0sHhIYBHN8emzCo/LC3ddoHTnRdywO1h9ZZxsMzqFBIH3rIEJTWszRWflDLdPIE gvt+bLFRpVeM6SXpPkcTDwQFZRJi+1XST3CReUjUfGl2Z6ORzorZ+f0kUwXTSkBu kmyraKiVcwWVE//sqWAmBaRK6U+BdC2jIj/HPh3R+b6I4rV0pF9lgDefPADCZt8d fafINaVVJ6k9+rCI7c/JFR6OTbkxXZKZMOAjGFEHS6weSxOLVb4xcEA+5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHzDzSxbTchudCl97VQ1eBgQsuSMB8GA1UdIwQY MBaAFGaeIS1wERtE3mb1dQJ+AAzUQf3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnA0aExYQVJHMFRlWnZWMUFuNEFETlJCX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NDYwNTUtMjIzYy00Y2EyLTg3ZmEt ZTE1MDhlMGE4ODM2LzEvWnA0aExYQVJHMFRlWnZWMUFuNEFETlJCX2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NDYwNTUtMjIzYy00Y2EyLTg3ZmEtZTE1MDhlMGE4ODM2 LzEvWnA0aExYQVJHMFRlWnZWMUFuNEFETlJCX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhkLTREP tYbpwSUDiCyCj1hS5I+L1qi1JlyRGExopb3WLHauyMEZ0zRZ+MK84zvLlOdDbZEk y0uFVnyRV1SGzyto6rML+5xOZUxniX5JnGXBVEpq7eL77J5KTIFYtIpGdvBkJg4H UQgRvi0UDgij+WZHGv/dofgSrfVy8lV8mgbIexzUs4k+QSi9lQtDWWNljTbNy+6A dEOTlBFJ2DGyh7Wu5VCw7lUlp/ic35UpHokrF/6D9JFmoxt5BfuiTCvIGAu2kQQc CUA7PUHuainKu1dzFm9Kcs28t/fWbD0gAsJZa61ZyELGTpW8E3+vqdsAV0BLV10F 6hopgBm8bzDKYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:25 2025 by rpki-client