This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json) Hash identifier: 9MqT0KXISxu/mRyJ/dth4/gLDLJCWZZRirNCza78hoU= Subject key identifier: 4F:00:30:90:6B:04:B2:92:86:B9:4B:D6:1C:45:94:69:DC:FD:F1:65 Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Certificate serial: 019AF19B56DB454187BD2F29184C2E4C3AF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft Manifest number: 41 Signing time: Sat 06 Dec 2025 03:01:20 +0000 Manifest this update: Sat 06 Dec 2025 03:01:20 +0000 Manifest next update: Sun 07 Dec 2025 03:01:20 +0000 Files and hashes: 1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: UDEkVlkB1YjkMSO29CbR6EE/96KTkQdgbpOgInvmN6k=) 2: qkFhtaRNkFQe2FJdCI5qu6080QY.roa (hash: xC3MFctLYU5Sqy4pPIgPdmj9SR/syFEI+jQKydbsJRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:56:db:45:41:87:bd:2f:29:18:4c:2e:4c:3a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Validity Not Before: Dec 6 03:01:20 2025 GMT Not After : Dec 7 03:01:20 2025 GMT Subject: CN=4f0030906b04b29286b94bd61c459469dcfdf165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bb:d8:9f:8d:dc:e0:40:16:3c:f0:78:f1:49: 72:dc:f6:eb:03:92:2e:df:11:bd:15:ca:92:6f:9f: 9e:30:6c:ec:66:37:15:fe:23:db:c3:49:0f:4a:76: 19:91:d2:df:05:ba:59:cb:77:33:87:1f:74:b4:47: b1:98:6a:f3:77:98:f5:5d:5b:51:55:0f:37:54:30: 02:53:52:d0:58:1f:18:75:38:2e:8f:54:58:7e:b3: 45:d1:1b:59:6e:12:ce:2e:85:63:17:84:d1:cc:c6: c5:00:b5:04:f1:dd:e8:29:1b:7f:85:60:07:92:79: e3:36:07:27:b9:6c:13:9d:a1:8f:a2:25:8a:d9:eb: a3:af:3c:9b:5d:da:0b:73:83:4a:d1:b0:a1:2b:60: dc:3d:da:d4:38:09:7c:1a:ed:85:eb:f1:8c:f6:9c: 61:c9:db:d0:a3:10:c0:a2:80:c7:5c:64:00:93:86: fc:5d:56:2b:55:0e:77:44:7f:d2:57:85:43:a5:17: e1:32:fc:55:b7:70:17:7a:e9:ea:a2:53:10:55:87: 4b:fd:93:c9:8a:30:db:93:31:1e:25:24:e4:f7:48: 19:4e:10:74:7a:55:d2:1c:8b:77:26:5b:23:56:8c: 91:4e:61:f1:b9:d3:39:bd:22:33:15:a0:ff:1d:20: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:30:90:6B:04:B2:92:86:B9:4B:D6:1C:45:94:69:DC:FD:F1:65 X509v3 Authority Key Identifier: keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:60:52:e4:7d:1c:d7:cd:ef:b6:c8:03:59:4d:a8:e3:48:24: 51:25:51:a3:68:99:75:01:0c:fc:de:43:bc:8a:79:1a:96:7e: 58:9f:fc:52:39:a4:c4:5b:54:ec:85:03:45:a0:3f:72:5c:ef: e7:71:63:57:18:6c:f0:e7:27:05:1a:1d:be:80:81:3c:f4:46: aa:62:3a:b4:a4:0f:9e:94:a1:a2:70:d7:88:63:c2:e3:db:e4: 0f:33:22:04:80:c8:96:e6:40:50:fa:e3:73:bd:60:46:4d:a0: d1:dd:c0:7b:32:9e:1c:b7:c9:e0:d8:d8:cd:17:e8:4d:3d:ef: 1a:d2:89:53:91:97:f4:46:57:04:90:a1:43:92:ba:ba:ca:f0: 71:03:e3:4c:42:b0:9e:b0:70:ed:94:4f:45:6c:70:56:a4:66: 18:78:10:21:4d:a9:eb:23:4e:14:4b:1e:93:9d:f1:3f:e3:5e: bd:7b:b1:e9:d0:da:e7:de:54:1d:aa:36:4a:dc:a7:3a:f7:94: 92:ae:77:0e:12:48:1f:49:13:7d:ff:9b:74:a1:7e:a8:46:50: 6e:43:40:39:01:8e:ba:c0:b5:a7:de:2a:47:64:7e:a7:f5:c5: 39:64:fa:0d:db:44:8f:96:ba:96:65:8e:93:df:e6:bd:c4:32: 4d:ad:33:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1bbRUGHvS8pGEwuTDr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDE1ZTM2Y2RiMzg4Mjc2ZjA0YTYwNmIwMjI2NjI2MGUy YTE5ZjgwHhcNMjUxMjA2MDMwMTIwWhcNMjUxMjA3MDMwMTIwWjAzMTEwLwYDVQQD Eyg0ZjAwMzA5MDZiMDRiMjkyODZiOTRiZDYxYzQ1OTQ2OWRjZmRmMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprvYn43c4EAWPPB48Uly3PbrA5Iu 3xG9FcqSb5+eMGzsZjcV/iPbw0kPSnYZkdLfBbpZy3czhx90tEexmGrzd5j1XVtR VQ83VDACU1LQWB8YdTguj1RYfrNF0RtZbhLOLoVjF4TRzMbFALUE8d3oKRt/hWAH knnjNgcnuWwTnaGPoiWK2eujrzybXdoLc4NK0bChK2DcPdrUOAl8Gu2F6/GM9pxh ydvQoxDAooDHXGQAk4b8XVYrVQ53RH/SV4VDpRfhMvxVt3AXeunqolMQVYdL/ZPJ ijDbkzEeJSTk90gZThB0elXSHIt3JlsjVoyRTmHxudM5vSIzFaD/HSCZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8AMJBrBLKShrlL1hxFlGnc/fFlMB8GA1UdIwQY MBaAFOHRXjbNs4gnbwSmBrAiZiYOKhn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMt MjM0NDJhMTRhNWY3LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMtMjM0NDJhMTRhNWY3 LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmBS5H0c 183vtsgDWU2o40gkUSVRo2iZdQEM/N5DvIp5GpZ+WJ/8UjmkxFtU7IUDRaA/clzv 53FjVxhs8OcnBRodvoCBPPRGqmI6tKQPnpShonDXiGPC49vkDzMiBIDIluZAUPrj c71gRk2g0d3AezKeHLfJ4NjYzRfoTT3vGtKJU5GX9EZXBJChQ5K6usrwcQPjTEKw nrBw7ZRPRWxwVqRmGHgQIU2p6yNOFEsek53xP+NevXux6dDa595UHao2StynOveU kq53DhJIH0kTff+bdKF+qEZQbkNAOQGOusC1p94qR2R+p/XFOWT6DdtEj5a6lmWO k9/mvcQyTa0zyg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:32 2025 by rpki-client