This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json) Hash identifier: 34Ll/OKOthto4iskuqRfqe9HmyFKmKmHGcu2GTFhLKo= Subject key identifier: C2:C7:2C:E2:3D:FF:3B:82:D3:FD:ED:A0:48:6B:93:50:A4:12:AC:CA Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10 Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10 Certificate serial: 019AF23FC7CA02D4336128917CFBD109DB06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft Manifest number: 088E Signing time: Sat 06 Dec 2025 06:00:57 +0000 Manifest this update: Sat 06 Dec 2025 06:00:57 +0000 Manifest next update: Sun 07 Dec 2025 06:00:57 +0000 Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: kaTvRWhg1BQxj2dR77he+pQxyczdbUK263iMCuYZxQ0=) 2: Y17oOJ4cy2XAOGSF7cV-mvshqNg.roa (hash: WzuVM00RV4G9sz/56LZ6o+LxunxTuItSjJs5x2gRuZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c7:ca:02:d4:33:61:28:91:7c:fb:d1:09:db:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10 Validity Not Before: Dec 6 06:00:57 2025 GMT Not After : Dec 7 06:00:57 2025 GMT Subject: CN=c2c72ce23dff3b82d3fdeda0486b9350a412acca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e0:f6:c7:e2:99:be:c4:7b:b9:6a:8d:2f:c5: 1f:b7:b8:3d:c5:52:a1:fd:06:03:ab:66:64:18:9b: b9:3d:f9:81:5e:d4:a3:da:5a:33:25:ad:50:44:a9: f5:b1:f3:17:76:0b:22:71:60:5a:82:69:35:3b:76: ca:34:50:1c:97:97:d6:cb:b4:13:21:c6:74:69:e8: c1:f1:60:a1:5e:13:e3:c4:66:f2:ff:95:97:66:c1: 24:28:8a:65:44:7c:ac:d7:e5:4b:85:45:70:fa:6b: 59:f9:a7:4e:a4:3b:f6:02:87:98:a1:f8:e1:fc:6c: 5f:c3:1e:99:04:c5:96:d0:27:6b:65:0f:95:e9:87: a3:83:78:78:75:4c:ca:93:7c:cf:98:f1:17:98:6b: 3c:7b:0a:1f:e7:44:59:98:29:16:8f:5c:56:12:60: 98:8a:1d:ed:21:d1:a2:94:93:8f:24:2d:87:79:e3: cf:b7:6c:ed:f4:30:6b:a0:5a:3f:42:dc:ec:fb:78: 40:c8:da:fe:1e:cc:6b:c7:4c:97:3f:81:d4:67:90: c5:29:a2:ff:bf:95:b2:22:72:7c:e4:c2:5b:d8:ef: 01:7a:ee:a2:e1:c1:c0:33:89:02:05:55:01:1e:39: 2d:6c:70:aa:a0:ea:f5:ab:1d:57:cd:c1:bc:58:eb: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C7:2C:E2:3D:FF:3B:82:D3:FD:ED:A0:48:6B:93:50:A4:12:AC:CA X509v3 Authority Key Identifier: keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:69:db:e4:b7:00:f1:19:66:bd:ce:40:7c:fc:74:8c:53:2c: d5:24:a3:d7:3c:a2:de:6c:5a:aa:02:52:bb:6c:f7:c3:1c:84: 24:ab:8d:d7:e6:88:dd:7f:66:b0:76:3d:80:d5:97:75:a6:14: ea:64:fa:9a:71:72:26:72:c9:cc:77:96:ff:22:8d:62:22:6c: b2:d7:7c:ce:e1:56:1b:c1:87:36:12:9c:fa:ec:19:fd:97:05: 61:4c:db:f2:38:77:ee:9e:17:ba:9c:a0:30:c6:31:61:39:a3: 97:b3:20:12:dc:c1:78:12:b2:10:ba:2c:a1:90:bc:f1:2e:3c: a7:df:5e:9a:e5:fa:63:96:aa:c5:d8:e7:4c:9c:17:07:3a:95: f8:43:3e:15:77:e0:b4:13:0e:f4:9a:34:b9:49:4c:ae:94:5c: 27:8a:62:a6:e3:72:0a:0a:be:1a:71:78:dd:57:c8:da:2d:39: 65:c5:6c:18:e6:15:a1:03:3e:44:94:73:9c:1a:71:7d:55:6a: 0b:cd:4f:54:e4:52:63:50:26:9f:e9:33:28:53:6e:49:7d:c9: 3b:a8:e2:70:ad:7f:df:25:1a:5b:68:45:ac:67:48:2d:26:74: 8c:99:cd:6c:7b:fd:61:0d:d2:d5:31:4b:ed:40:5a:59:14:b4: e2:29:0c:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8fKAtQzYSiRfPvRCdsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNmM4YWQyODUzOGVkZTBiNGM3ZTFhNzFlOWNhOTg5YTlm MDNmMTAwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD EyhjMmM3MmNlMjNkZmYzYjgyZDNmZGVkYTA0ODZiOTM1MGE0MTJhY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eD2x+KZvsR7uWqNL8Uft7g9xVKh /QYDq2ZkGJu5PfmBXtSj2lozJa1QRKn1sfMXdgsicWBagmk1O3bKNFAcl5fWy7QT IcZ0aejB8WChXhPjxGby/5WXZsEkKIplRHys1+VLhUVw+mtZ+adOpDv2AoeYofjh /Gxfwx6ZBMWW0CdrZQ+V6Yejg3h4dUzKk3zPmPEXmGs8ewof50RZmCkWj1xWEmCY ih3tIdGilJOPJC2HeePPt2zt9DBroFo/Qtzs+3hAyNr+Hsxrx0yXP4HUZ5DFKaL/ v5WyInJ85MJb2O8Beu6i4cHAM4kCBVUBHjktbHCqoOr1qx1XzcG8WOt0yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLHLOI9/zuC0/3toEhrk1CkEqzKMB8GA1UdIwQY MBaAFOBsitKFOO3gtMfhpx6cqYmp8D8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTkt MzFiMmM2NjZiMmRjLzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTktMzFiMmM2NjZiMmRj LzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGnb5LcA 8Rlmvc5AfPx0jFMs1SSj1zyi3mxaqgJSu2z3wxyEJKuN1+aI3X9msHY9gNWXdaYU 6mT6mnFyJnLJzHeW/yKNYiJsstd8zuFWG8GHNhKc+uwZ/ZcFYUzb8jh37p4Xupyg MMYxYTmjl7MgEtzBeBKyELosoZC88S48p99emuX6Y5aqxdjnTJwXBzqV+EM+FXfg tBMO9Jo0uUlMrpRcJ4pipuNyCgq+GnF43VfI2i05ZcVsGOYVoQM+RJRznBpxfVVq C81PVORSY1Amn+kzKFNuSX3JO6jicK1/3yUaW2hFrGdILSZ0jJnNbHv9YQ3S1TFL 7UBaWRS04ikMfw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:41 2025 by rpki-client