This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json) Hash identifier: Z4LzbF5J73qTKj1XRbtr7rdCyDvIZOHt6CjSttoftNg= Subject key identifier: 57:D8:4A:5F:79:FE:BE:12:93:7D:24:E3:09:CD:70:B0:B9:A7:8C:70 Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30 Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330 Certificate serial: 019AF50B284B5C13C13B00EDA16E2478E66A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:02:20 +0000 Manifest this update: Sat 06 Dec 2025 19:02:20 +0000 Manifest next update: Sun 07 Dec 2025 19:02:20 +0000 Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: SdRrM+30SkvbggwPkms89hVWIwdzv61O70A7NUUmcR4=) 2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:28:4b:5c:13:c1:3b:00:ed:a1:6e:24:78:e6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330 Validity Not Before: Dec 6 19:02:20 2025 GMT Not After : Dec 7 19:02:20 2025 GMT Subject: CN=57d84a5f79febe12937d24e309cd70b0b9a78c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:3d:11:7a:3d:42:58:cc:22:d3:d6:cb:45: 21:29:b4:02:e2:d6:3b:d7:2e:3b:77:7b:8c:3b:2a: 4e:9c:4a:d8:98:1d:f0:47:ad:64:23:b7:5f:95:81: 29:6f:cd:3d:f0:a4:b8:e4:83:39:56:1a:a1:af:ca: d3:07:18:2c:89:4b:d5:f1:77:fb:55:f7:d1:61:0f: 5a:81:2d:44:a9:07:45:59:46:16:4f:e6:be:51:e3: 88:75:3e:68:41:70:80:8d:45:0d:a0:9d:6d:b3:75: a1:34:52:2c:1c:aa:0b:bd:88:ae:68:dc:a9:9b:59: e2:cd:72:4e:ae:f1:a4:32:0b:d7:64:c1:78:64:23: 16:c1:ac:d4:4b:98:17:09:b3:9a:ca:43:57:99:d0: 85:92:56:68:61:d0:e2:6e:45:8c:8c:b9:9c:f7:ba: 2d:10:72:d4:10:05:e1:50:5a:c2:de:3d:cb:f4:18: 5b:db:4a:14:e9:d1:aa:7b:3d:a4:bf:45:65:d1:d8: fc:21:70:2f:d4:4a:db:44:b8:44:fe:ac:1e:af:47: 55:f4:fa:0b:85:29:c8:48:2a:3a:9b:fb:4e:11:88: 1f:fd:ce:2b:01:7d:0f:fd:0f:b2:95:81:ee:27:5a: 2c:53:2e:ac:2c:ab:6d:ff:b6:61:fc:8d:a4:31:60: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D8:4A:5F:79:FE:BE:12:93:7D:24:E3:09:CD:70:B0:B9:A7:8C:70 X509v3 Authority Key Identifier: keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:42:36:96:78:17:ed:13:2f:3f:a4:43:ce:5c:d8:5b:c7:a1: 7b:5a:40:7d:fb:64:d3:e8:15:ea:c4:62:23:4d:79:d5:17:5d: 17:be:7c:96:41:78:08:4f:5f:84:43:38:e5:c7:03:95:d9:5a: 89:b0:61:0c:d3:2d:2a:dc:5c:83:f3:b7:f0:41:4c:08:ae:bf: 13:1a:ef:23:c4:18:74:d8:55:5c:a4:05:88:4b:30:82:9e:a9: ca:6f:46:ba:f8:20:f8:f4:94:e8:5a:5b:0d:4c:e2:6c:ab:dc: 03:f1:17:09:cc:2f:af:31:1c:b3:1e:39:ed:be:e8:52:92:52: 20:54:12:a2:fa:eb:05:b9:94:fb:74:0e:90:41:a1:14:eb:7f: 0e:11:da:5b:a6:0b:08:6c:25:e5:b3:93:66:01:2a:29:3a:17: a2:c9:a2:ca:85:da:9a:af:64:d7:c2:31:22:0a:c4:9f:e1:bd: 03:0b:15:15:40:1c:cd:00:10:28:2c:a4:8b:5f:72:9b:70:01: b7:3b:9c:7a:45:72:68:3c:53:83:30:5e:dc:96:bb:19:75:5d: 12:4d:a1:dd:97:d0:08:0b:bc:8a:1e:a3:a2:91:a9:58:25:c6: 0a:09:99:db:6b:9e:84:1d:ac:df:2a:61:01:d5:dd:11:a3:6c: d3:8f:0e:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CyhLXBPBOwDtoW4keOZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjI3N2ZkZjY1ODI4ZWY0MGI1OGNlMTAxOTQ2NTk1NTA3 ZjEzMzAwHhcNMjUxMjA2MTkwMjIwWhcNMjUxMjA3MTkwMjIwWjAzMTEwLwYDVQQD Eyg1N2Q4NGE1Zjc5ZmViZTEyOTM3ZDI0ZTMwOWNkNzBiMGI5YTc4YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupA9EXo9QljMItPWy0UhKbQC4tY7 1y47d3uMOypOnErYmB3wR61kI7dflYEpb8098KS45IM5Vhqhr8rTBxgsiUvV8Xf7 VffRYQ9agS1EqQdFWUYWT+a+UeOIdT5oQXCAjUUNoJ1ts3WhNFIsHKoLvYiuaNyp m1nizXJOrvGkMgvXZMF4ZCMWwazUS5gXCbOaykNXmdCFklZoYdDibkWMjLmc97ot EHLUEAXhUFrC3j3L9Bhb20oU6dGqez2kv0Vl0dj8IXAv1ErbRLhE/qwer0dV9PoL hSnISCo6m/tOEYgf/c4rAX0P/Q+ylYHuJ1osUy6sLKtt/7Zh/I2kMWDkgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfYSl95/r4Sk30k4wnNcLC5p4xwMB8GA1UdIwQY MBaAFOIid/32WCjvQLWM4QGUZZVQfxMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2Ut ODIyYjg0MmMzYzBlLzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2UtODIyYjg0MmMzYzBl LzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUI2lngX 7RMvP6RDzlzYW8ehe1pAfftk0+gV6sRiI0151RddF758lkF4CE9fhEM45ccDldla ibBhDNMtKtxcg/O38EFMCK6/ExrvI8QYdNhVXKQFiEswgp6pym9Guvgg+PSU6Fpb DUzibKvcA/EXCcwvrzEcsx457b7oUpJSIFQSovrrBbmU+3QOkEGhFOt/DhHaW6YL CGwl5bOTZgEqKToXosmiyoXamq9k18IxIgrEn+G9AwsVFUAczQAQKCyki19ym3AB tzucekVyaDxTgzBe3Ja7GXVdEk2h3ZfQCAu8ih6jopGpWCXGCgmZ22uehB2s3yph AdXdEaNs048OXA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:32 2025 by rpki-client