This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json) Hash identifier: /v80M3Jq6MSwUe6b+DseItM+uS60lcpYneeeC6jJzU4= Subject key identifier: BA:11:DB:10:7C:D6:48:41:33:63:AE:EB:83:91:F9:4D:AD:8D:F8:5B Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03 Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903 Certificate serial: 019AF276C8E1B2B7FF929DC1F6C8A92F1986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft Manifest number: 101C Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: +LkyWkJcFe6tH9l5A6tFw4/olQ6zIFYhS/toj4JrCtE=) 2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c8:e1:b2:b7:ff:92:9d:c1:f6:c8:a9:2f:19:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2834429775e6555e5742492286254b1da9f1903 Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=ba11db107cd648413363aeeb8391f94dad8df85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c0:cf:87:db:84:b3:ba:6b:2b:66:24:ca:26: 27:0a:10:de:1f:b6:5a:38:e7:a4:2f:d3:8b:d7:01: c2:45:3d:f7:5e:41:d3:f2:ca:4a:84:98:de:77:0d: fc:48:c9:66:a3:b7:55:c8:ba:3a:82:83:f3:9c:19: 22:75:98:c8:c8:9d:06:22:2c:0d:35:d1:42:30:fd: bd:13:8a:16:b9:27:0e:6c:8d:45:64:ae:f9:17:84: 28:88:be:b6:61:40:ad:c5:da:0c:03:f9:3c:f8:5b: 31:3f:cd:66:84:01:bc:7d:69:de:e3:d1:0f:ab:f7: 02:81:32:65:f4:34:83:e7:d2:8b:34:54:50:f5:f4: d8:e0:10:b4:78:92:37:63:07:fd:d2:f5:a7:87:30: 47:16:72:02:d1:ed:b3:77:e8:5a:05:a6:e2:02:40: b9:de:53:41:1e:1a:5b:c1:b0:8b:4f:a9:85:b1:88: 4e:c4:20:af:a4:0b:ca:02:e1:00:91:fa:b2:10:66: af:0a:1c:17:bf:47:47:06:bc:fe:b2:d4:10:9a:ce: f8:35:57:a0:6b:ec:28:b8:bf:a9:e0:cd:c1:f5:98: 69:a9:83:1e:e8:b7:de:f1:fa:1f:9c:fe:63:ef:f9: eb:56:b3:2d:99:e8:cb:10:9e:c5:6f:73:c0:e9:a0: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:11:DB:10:7C:D6:48:41:33:63:AE:EB:83:91:F9:4D:AD:8D:F8:5B X509v3 Authority Key Identifier: keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ac:94:99:3d:9c:2b:83:03:fe:3f:65:7b:18:ca:cc:fc:1c: 4a:2b:31:66:a9:e3:7d:84:17:8e:47:f8:5d:51:74:01:02:36: 2c:f3:05:87:a3:04:45:dd:a7:9b:f6:8a:f4:ba:5e:71:06:d0: cf:19:b9:3f:59:a5:c8:4e:a8:f0:c6:80:4d:78:0e:a1:cb:4b: 32:87:42:18:0a:12:ba:1c:40:b5:ac:12:03:f5:45:00:9a:c1: c6:0f:68:70:0f:73:51:b1:c6:37:69:fc:96:74:bc:47:03:b0: 03:7f:2a:91:b0:2d:ce:93:9b:5a:4c:c2:f1:6b:45:43:8f:06: 71:ec:e5:ea:66:8a:62:4e:ce:ea:7d:03:3b:2e:6f:7a:c9:4a: b7:63:12:1f:6c:e3:d1:f2:7d:8c:5c:77:af:10:30:dc:c7:8f: a7:7b:30:5f:a6:e2:08:a7:45:a8:12:8f:30:13:14:e7:15:2d: 3b:23:cd:a0:ee:6f:b2:3a:b2:1d:6a:cb:4b:82:dd:32:73:9f: 67:2c:e7:b8:17:c1:78:bf:eb:42:25:b1:67:ed:be:0d:b6:ab: 14:34:4e:5f:ee:31:f4:6e:af:c5:5f:d0:bf:53:db:37:b5:ce: 45:88:ab:5b:7b:b9:98:13:8d:78:67:ae:2c:78:07:a5:15:41: 01:7d:67:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsjhsrf/kp3B9sipLxmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyODM0NDI5Nzc1ZTY1NTVlNTc0MjQ5MjI4NjI1NGIxZGE5 ZjE5MDMwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD EyhiYTExZGIxMDdjZDY0ODQxMzM2M2FlZWI4MzkxZjk0ZGFkOGRmODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8DPh9uEs7prK2YkyiYnChDeH7Za OOekL9OL1wHCRT33XkHT8spKhJjedw38SMlmo7dVyLo6goPznBkidZjIyJ0GIiwN NdFCMP29E4oWuScObI1FZK75F4QoiL62YUCtxdoMA/k8+FsxP81mhAG8fWne49EP q/cCgTJl9DSD59KLNFRQ9fTY4BC0eJI3Ywf90vWnhzBHFnIC0e2zd+haBabiAkC5 3lNBHhpbwbCLT6mFsYhOxCCvpAvKAuEAkfqyEGavChwXv0dHBrz+stQQms74NVeg a+wouL+p4M3B9ZhpqYMe6Lfe8fofnP5j7/nrVrMtmejLEJ7Fb3PA6aDjqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoR2xB81khBM2Ou64OR+U2tjfhbMB8GA1UdIwQY MBaAFOKDRCl3XmVV5XQkkihiVLHanxkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2Mt ZWE5NzY2NWMxM2RmLzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2MtZWE5NzY2NWMxM2Rm LzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKyUmT2c K4MD/j9lexjKzPwcSisxZqnjfYQXjkf4XVF0AQI2LPMFh6MERd2nm/aK9LpecQbQ zxm5P1mlyE6o8MaATXgOoctLModCGAoSuhxAtawSA/VFAJrBxg9ocA9zUbHGN2n8 lnS8RwOwA38qkbAtzpObWkzC8WtFQ48Gcezl6maKYk7O6n0DOy5veslKt2MSH2zj 0fJ9jFx3rxAw3MePp3swX6biCKdFqBKPMBMU5xUtOyPNoO5vsjqyHWrLS4LdMnOf ZyznuBfBeL/rQiWxZ+2+DbarFDROX+4x9G6vxV/Qv1PbN7XORYirW3u5mBONeGeu LHgHpRVBAX1nPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:05 2025 by rpki-client