This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json) Hash identifier: fk1qMed0ZhGI2GHCWKKUpeVG3JRo95TvkWFb90M1XjU= Subject key identifier: 1A:11:8E:E2:5E:22:82:54:69:21:CC:A2:DE:6A:47:2E:C6:26:9F:A2 Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3 Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3 Certificate serial: 019AF19AD389300BE6D1F06C1865849FE660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft Manifest number: 0B8D Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: CwnDKGE6OtXrVwGVHe7y0Lfw12Ztr/3vQqA1vODbbqA=) 2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d3:89:30:0b:e6:d1:f0:6c:18:65:84:9f:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=1a118ee25e2282546921cca2de6a472ec6269fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:7a:18:3f:a8:ba:81:9b:63:f4:8c:1a:a4: 50:19:6d:79:0d:05:47:f1:3c:f6:10:f1:8e:3e:0b: d8:5b:c9:3f:74:79:cc:73:bf:47:72:8f:89:a8:82: 82:4a:48:fd:06:ef:26:f0:17:32:1b:e9:0e:40:74: 69:0c:0c:07:15:ab:38:94:78:17:c3:9f:91:d3:72: 8e:90:a7:40:c9:d8:10:cf:0a:37:95:c9:51:a2:e2: 1e:38:23:b1:45:98:35:45:9e:f2:86:ac:fd:8a:a2: ce:09:c5:29:b3:97:31:52:a2:e6:60:7f:91:5b:91: ab:de:72:a4:de:07:83:4b:2c:71:13:5b:56:00:fb: 23:ef:7f:0d:dd:51:fc:94:b3:ac:e8:28:6b:ba:c4: 83:4c:b7:cf:ab:db:12:03:b7:8c:1d:54:ed:76:25: 5a:6e:46:c8:19:b7:a2:ea:f1:d0:e1:5d:be:17:bf: c5:35:c0:83:8f:24:96:c0:2b:7a:75:e0:a7:29:5b: 0c:16:49:e1:67:2f:24:87:f7:31:bb:f2:d3:8d:2c: 07:bf:73:ec:29:dd:8b:b8:23:2a:c2:82:9c:af:fd: 10:08:be:5f:93:be:48:3e:90:09:4a:1f:75:a1:4e: 40:81:3a:a5:2f:b2:a8:56:0f:78:97:46:4c:4d:26: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:8E:E2:5E:22:82:54:69:21:CC:A2:DE:6A:47:2E:C6:26:9F:A2 X509v3 Authority Key Identifier: keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d3:cb:95:aa:8f:af:4f:1f:fb:a7:7e:c7:c6:30:d2:32:10: b3:dc:95:01:43:4c:8e:df:cb:55:9b:f6:af:d4:5f:f8:e2:c4: ce:cf:68:70:08:6b:4f:66:53:0e:3f:9f:50:44:6d:c2:43:a4: 81:55:55:5d:1f:92:a4:95:ca:df:c7:a4:91:39:8d:87:46:c2: 41:a7:48:c2:e9:23:b9:93:19:50:83:c7:1f:b6:15:e9:eb:8e: 31:f6:e2:85:3a:b7:6c:58:e8:3d:2d:18:6a:96:ce:7a:2a:0c: 98:4d:31:70:e9:7d:54:17:98:c7:88:79:b5:3b:ad:d6:4e:54: 55:c6:11:55:01:b4:c6:c1:3d:cd:a5:16:08:6c:60:29:ce:da: 65:68:b1:6b:ad:39:0b:90:7e:89:0a:23:ed:ff:f1:bb:9b:fb: cf:26:be:a3:b3:df:ac:5c:13:f4:39:11:bf:04:b6:2a:d2:2b: 36:1c:e2:18:75:10:d8:c1:fc:3c:09:a2:e8:f5:50:fb:5c:07: 49:2f:3e:7a:b4:f6:0e:fd:c8:d6:b7:d6:1f:79:7b:19:f6:93: 8e:c8:7e:47:c4:29:1e:43:96:12:67:ad:f0:41:34:c0:33:c1: 3e:b2:b9:66:e9:41:a9:7a:8b:16:6a:db:26:a7:12:a3:fe:de: 45:e3:f5:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtOJMAvm0fBsGGWEn+ZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNmI2MTg1MTY1MmZjOGZlZGMwMTFhNmYyMmY3YWU5YjZi ZWIwYTMwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EygxYTExOGVlMjVlMjI4MjU0NjkyMWNjYTJkZTZhNDcyZWM2MjY5ZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g16GD+ouoGbY/SMGqRQGW15DQVH 8Tz2EPGOPgvYW8k/dHnMc79Hco+JqIKCSkj9Bu8m8BcyG+kOQHRpDAwHFas4lHgX w5+R03KOkKdAydgQzwo3lclRouIeOCOxRZg1RZ7yhqz9iqLOCcUps5cxUqLmYH+R W5Gr3nKk3geDSyxxE1tWAPsj738N3VH8lLOs6ChrusSDTLfPq9sSA7eMHVTtdiVa bkbIGbei6vHQ4V2+F7/FNcCDjySWwCt6deCnKVsMFknhZy8kh/cxu/LTjSwHv3Ps Kd2LuCMqwoKcr/0QCL5fk75IPpAJSh91oU5AgTqlL7KoVg94l0ZMTSZNmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoRjuJeIoJUaSHMot5qRy7GJp+iMB8GA1UdIwQY MBaAFOJrYYUWUvyP7cARpvIveum2vrCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG10aGhSWlNfSV90d0JHbThpOTY2YmEtc0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kNzA4MzMtNjhlYi00MTAwLTkxMjMt OTRlMWFiNTc1MDk0LzEvNG10aGhSWlNfSV90d0JHbThpOTY2YmEtc0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9kNzA4MzMtNjhlYi00MTAwLTkxMjMtOTRlMWFiNTc1MDk0 LzEvNG10aGhSWlNfSV90d0JHbThpOTY2YmEtc0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdPLlaqP r08f+6d+x8Yw0jIQs9yVAUNMjt/LVZv2r9Rf+OLEzs9ocAhrT2ZTDj+fUERtwkOk gVVVXR+SpJXK38ekkTmNh0bCQadIwukjuZMZUIPHH7YV6euOMfbihTq3bFjoPS0Y apbOeioMmE0xcOl9VBeYx4h5tTut1k5UVcYRVQG0xsE9zaUWCGxgKc7aZWixa605 C5B+iQoj7f/xu5v7zya+o7PfrFwT9DkRvwS2KtIrNhziGHUQ2MH8PAmi6PVQ+1wH SS8+erT2Dv3I1rfWH3l7GfaTjsh+R8QpHkOWEmet8EE0wDPBPrK5ZulBqXqLFmrb JqcSo/7eReP1+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:13 2025 by rpki-client