This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json) Hash identifier: GAixRWMYkd1P1UjY7yhA8LnfMoc4ZmA736Nq3f71+GE= Subject key identifier: 5E:B1:3C:5E:84:79:D5:5D:4F:CC:7E:77:0F:A0:1F:D0:A4:D0:3E:E6 Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Certificate serial: 019AF1D22279201C09203476E672036F33AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft Manifest number: 062D Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: DKBlSoCh5Xeajf+0fnwi771mHW7IXppvU8GhS1kcczE=) 2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:22:79:20:1c:09:20:34:76:e6:72:03:6f:33:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=5eb13c5e8479d55d4fcc7e770fa01fd0a4d03ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:e3:bf:0a:0b:e9:47:bc:df:75:32:30:3f: 25:64:0d:b4:98:c0:09:eb:5b:5c:18:4d:28:0d:51: 73:99:87:c8:d1:78:29:e9:3e:9e:de:c9:9e:ff:76: fe:bd:c0:cb:52:bf:ae:c8:2e:ba:44:fc:22:f9:1a: a6:f3:7f:11:67:1b:55:8e:e3:30:ee:00:f4:11:2e: 31:08:45:4e:e8:96:e8:0d:80:f0:02:eb:a9:55:60: a1:8b:d1:83:b7:17:57:f4:11:f5:70:ee:e7:a1:29: 3e:df:14:d3:8c:11:f6:aa:23:5d:13:f9:95:65:ca: 14:88:fc:3b:42:fc:8b:14:bf:a8:67:81:0d:36:53: 3f:df:b6:c5:01:c5:b8:0d:be:5b:7c:49:0d:1d:c2: 1d:09:31:13:fd:c2:a0:a1:52:e5:66:a1:df:b7:64: 41:46:a5:13:86:a9:36:46:54:e6:c2:68:b8:c9:50: 57:81:31:bc:41:db:cc:de:d6:87:37:65:a0:d0:51: c2:d6:f8:ed:fe:0c:82:e1:84:0d:c0:78:eb:47:03: bb:98:df:f2:b8:28:46:96:48:b1:51:00:5f:65:95: 1e:9a:db:3f:bb:2c:d2:58:dd:ea:27:7b:c8:cf:48: 9e:44:3e:3e:cd:61:6f:77:bf:a1:0c:56:8b:f4:d4: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B1:3C:5E:84:79:D5:5D:4F:CC:7E:77:0F:A0:1F:D0:A4:D0:3E:E6 X509v3 Authority Key Identifier: keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:53:00:7f:0f:7f:3e:5f:40:27:e2:95:60:f0:52:96:40:1c: 5f:a4:41:58:a9:5b:e1:e5:92:11:93:d8:e0:88:ab:49:99:22: 30:ad:1b:f9:f5:59:9f:b8:dc:3b:92:de:eb:1e:a9:70:25:4a: 5a:2a:6d:5e:b1:eb:7d:e0:e9:90:16:1e:7c:5d:ba:a8:44:a8: d7:bb:0c:27:6e:57:4a:c4:7b:9f:f0:e8:a3:a0:c3:0e:99:da: 71:c5:9c:0f:1d:c1:ad:4a:ea:d7:11:b4:13:6f:60:a4:ee:02: 6d:c4:f5:a0:e6:65:cb:49:b0:94:df:64:eb:b4:ef:44:cd:85: 99:d4:a2:1c:bf:be:62:60:a7:fd:51:d7:98:ab:75:89:8d:eb: a6:af:e2:5e:ca:91:64:c2:72:51:b0:f9:49:0e:58:a4:76:8a: 84:b0:17:bb:8a:f4:8c:94:aa:96:12:94:db:33:93:98:55:69: ca:d9:07:1e:1e:39:27:a0:30:06:f3:a1:9a:28:be:24:3a:ae: 45:47:b2:75:33:a0:38:d9:0e:68:7a:9b:55:e3:14:aa:22:ee: 83:af:cb:b1:34:48:ba:9f:43:a4:4e:bd:94:65:09:4e:68:10: b5:01:00:2c:c5:c1:ac:e1:72:ad:da:9b:fa:98:68:62:4b:c4: b8:1e:93:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iJ5IBwJIDR25nIDbzOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDVkNTYxZTc2ZWYyNTljNGEwMmRmMzBmMzUwNjRkZWRl ZGYyZDcwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD Eyg1ZWIxM2M1ZTg0NzlkNTVkNGZjYzdlNzcwZmEwMWZkMGE0ZDAzZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2brjvwoL6Ue833UyMD8lZA20mMAJ 61tcGE0oDVFzmYfI0Xgp6T6e3sme/3b+vcDLUr+uyC66RPwi+Rqm838RZxtVjuMw 7gD0ES4xCEVO6JboDYDwAuupVWChi9GDtxdX9BH1cO7noSk+3xTTjBH2qiNdE/mV ZcoUiPw7QvyLFL+oZ4ENNlM/37bFAcW4Db5bfEkNHcIdCTET/cKgoVLlZqHft2RB RqUThqk2RlTmwmi4yVBXgTG8QdvM3taHN2Wg0FHC1vjt/gyC4YQNwHjrRwO7mN/y uChGlkixUQBfZZUemts/uyzSWN3qJ3vIz0ieRD4+zWFvd7+hDFaL9NRktQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6xPF6EedVdT8x+dw+gH9Ck0D7mMB8GA1UdIwQY MBaAFODV1WHnbvJZxKAt8w81Bk3t7fLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUt N2RjNTI4YWE1ZDRlLzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUtN2RjNTI4YWE1ZDRl LzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFMAfw9/ Pl9AJ+KVYPBSlkAcX6RBWKlb4eWSEZPY4IirSZkiMK0b+fVZn7jcO5Le6x6pcCVK WiptXrHrfeDpkBYefF26qESo17sMJ25XSsR7n/Doo6DDDpnaccWcDx3BrUrq1xG0 E29gpO4CbcT1oOZly0mwlN9k67TvRM2FmdSiHL++YmCn/VHXmKt1iY3rpq/iXsqR ZMJyUbD5SQ5YpHaKhLAXu4r0jJSqlhKU2zOTmFVpytkHHh45J6AwBvOhmii+JDqu RUeydTOgONkOaHqbVeMUqiLug6/LsTRIup9DpE69lGUJTmgQtQEALMXBrOFyrdqb +phoYkvEuB6Txg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:06 2025 by rpki-client