This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json) Hash identifier: QgtqknNw+h+PK8XL+CiwdS5lYF1iVg4M+eUxeR7PzGA= Subject key identifier: B0:9F:07:C0:6E:A9:2C:DD:AC:4A:42:9D:45:8A:F4:B2:D8:BF:D6:45 Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Certificate serial: 019AF31C51E4D7D5D0EC2F634234A005D0D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft Manifest number: 07C8 Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 10:01:50 +0000 Manifest next update: Sun 07 Dec 2025 10:01:50 +0000 Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: 2q1nhJJES3/fmA8heMf4qHffoaxSdPvvbTcvZMzPn2c=) 2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=) 3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:51:e4:d7:d5:d0:ec:2f:63:42:34:a0:05:d0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Validity Not Before: Dec 6 10:01:50 2025 GMT Not After : Dec 7 10:01:50 2025 GMT Subject: CN=b09f07c06ea92cddac4a429d458af4b2d8bfd645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:19:c6:ad:a0:56:14:3c:5c:d8:55:d4:a2:1c: 02:07:1e:dc:cd:3f:a7:66:1f:56:54:1d:f4:91:5c: 8f:67:c7:e6:38:c8:b5:4e:6b:2b:e0:24:0e:a3:3c: 95:be:1a:b9:c1:f6:1b:54:be:b2:e5:52:70:2d:d5: 44:22:36:02:bc:3a:80:1e:37:1d:07:be:df:0a:78: ee:40:31:52:3b:a3:d0:aa:0f:3b:04:50:f1:16:a8: d9:29:db:9f:95:a3:80:3a:77:2a:b0:f9:cb:8c:10: 74:35:33:93:63:9a:ad:29:17:df:a8:7c:36:71:10: bf:25:9a:f9:c9:34:86:28:7a:d2:fb:be:4f:30:42: 88:1e:e0:c6:bf:f4:e7:f6:65:4d:54:97:79:97:1e: bd:e4:fc:e1:5f:8b:26:90:ad:ce:ec:01:bc:1e:c0: f3:c9:ef:42:21:85:4b:59:05:08:1e:b0:c4:22:fd: b9:3b:9e:e1:f0:54:70:f6:1c:4e:b0:e5:08:1b:90: ff:20:f9:d6:78:fd:8f:59:36:45:18:72:3f:a5:d9: 91:9d:10:ea:d2:38:1c:db:09:65:c8:27:cd:53:1b: c3:1d:39:86:fa:73:c0:af:8d:3d:73:d3:44:d2:74: a6:ca:8b:11:59:c7:86:18:bc:b8:6d:5a:a1:a7:68: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9F:07:C0:6E:A9:2C:DD:AC:4A:42:9D:45:8A:F4:B2:D8:BF:D6:45 X509v3 Authority Key Identifier: keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a9:87:32:ec:c6:7e:a5:29:53:b9:63:51:64:fc:b6:f4:7a: 04:08:ff:df:a3:b7:97:c0:ad:11:9a:86:17:e2:7d:c3:64:04: fb:91:0c:14:c4:77:4c:a9:02:a2:05:96:3a:bd:43:75:36:2b: 97:f1:57:9e:2f:a1:a2:47:58:84:22:88:6b:6b:a2:8c:e4:03: 9c:c2:a3:8d:15:8c:43:1e:13:9c:77:50:b7:f6:94:22:de:b9: 28:79:b4:18:06:9a:84:30:21:e4:19:00:78:ab:63:a7:3e:08: e3:32:f5:93:bd:7f:30:3e:d0:38:4d:b2:70:e7:e3:4c:a8:10: e6:d0:7a:b3:f9:18:75:79:91:54:34:51:27:35:ae:22:c5:ab: 62:cf:6c:f9:7b:9d:f1:e8:6a:d6:70:c9:38:03:36:bd:3e:64: 9c:2b:05:1f:1d:16:bb:c5:58:63:49:09:ab:cf:0f:f8:37:57: 8c:48:5e:5d:88:03:04:c7:59:b6:2c:53:21:f9:e4:b6:9d:31: e3:57:4e:7a:73:0c:71:f2:98:fa:7e:9c:e3:fd:ca:1a:86:b5: 9c:2c:8b:2d:ef:b1:ac:26:97:24:9e:6e:63:56:25:2c:f8:0e: 1e:b7:78:ef:24:df:07:ad:b3:54:b9:54:99:48:4c:51:4a:f5: b3:5c:29:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFHk19XQ7C9jQjSgBdDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4 MjBhZDkwHhcNMjUxMjA2MTAwMTUwWhcNMjUxMjA3MTAwMTUwWjAzMTEwLwYDVQQD EyhiMDlmMDdjMDZlYTkyY2RkYWM0YTQyOWQ0NThhZjRiMmQ4YmZkNjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hnGraBWFDxc2FXUohwCBx7czT+n Zh9WVB30kVyPZ8fmOMi1Tmsr4CQOozyVvhq5wfYbVL6y5VJwLdVEIjYCvDqAHjcd B77fCnjuQDFSO6PQqg87BFDxFqjZKduflaOAOncqsPnLjBB0NTOTY5qtKRffqHw2 cRC/JZr5yTSGKHrS+75PMEKIHuDGv/Tn9mVNVJd5lx695PzhX4smkK3O7AG8HsDz ye9CIYVLWQUIHrDEIv25O57h8FRw9hxOsOUIG5D/IPnWeP2PWTZFGHI/pdmRnRDq 0jgc2wllyCfNUxvDHTmG+nPAr409c9NE0nSmyosRWceGGLy4bVqhp2iBTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCfB8BuqSzdrEpCnUWK9LLYv9ZFMB8GA1UdIwQY MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKmHMuzG fqUpU7ljUWT8tvR6BAj/36O3l8CtEZqGF+J9w2QE+5EMFMR3TKkCogWWOr1DdTYr l/FXni+hokdYhCKIa2uijOQDnMKjjRWMQx4TnHdQt/aUIt65KHm0GAaahDAh5BkA eKtjpz4I4zL1k71/MD7QOE2ycOfjTKgQ5tB6s/kYdXmRVDRRJzWuIsWrYs9s+Xud 8ehq1nDJOAM2vT5knCsFHx0Wu8VYY0kJq88P+DdXjEheXYgDBMdZtixTIfnktp0x 41dOenMMcfKY+n6c4/3KGoa1nCyLLe+xrCaXJJ5uY1YlLPgOHrd47yTfB62zVLlU mUhMUUr1s1wpDw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:59 2025 by rpki-client