This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: FcPa84OTaRH1TiQeGgTTIzqIDDBFxPzwRgb9rvoqTds= Subject key identifier: 5E:0E:66:4B:E4:BC:C0:E1:4B:64:2D:8D:80:B0:08:E0:AF:78:BF:E3 Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019AF464C1316E6F28EFDA95F77C1B368FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 17BE Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: 0zUctL52J_kpeotUgg_3OfpEKpM.roa (hash: arTUke7n2xZYHzAOrNJlpFltADfEev/gf1naczn2GEI=) 2: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: VWe6CeWW5kS7risr0/ubNJNDRXaexWAlRPEaJ2mAg7E=) 3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=) 4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=) 5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=) 6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=) 7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c1:31:6e:6f:28:ef:da:95:f7:7c:1b:36:8f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=5e0e664be4bcc0e14b642d8d80b008e0af78bfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:b7:c0:da:35:51:55:52:d5:af:37:94:e7: 03:0a:5c:72:c9:41:cc:99:3a:47:c1:b2:95:8b:14: 40:b4:99:20:fd:d0:42:78:bc:72:c2:89:79:be:77: 8e:52:0a:9c:f2:64:fc:37:f7:cc:b6:0a:51:ff:75: 06:ca:a3:ee:52:34:5f:0a:e7:45:32:94:0c:d7:00: 86:33:9c:92:b9:26:ee:7c:c0:df:7a:c6:c5:77:ee: 28:3b:b4:72:75:32:b5:f6:ae:76:fb:f7:7b:8e:5b: b4:a5:35:b3:5f:3b:ec:81:2c:99:4f:ac:37:d3:2b: e2:2d:e2:37:9d:02:59:49:ac:b4:9e:7b:18:6b:3a: 6c:ec:96:76:c6:d6:76:63:ca:c4:cf:43:a0:ec:9f: 01:6a:ca:41:3e:e8:0e:01:f6:d4:b6:52:6d:cf:1a: 52:97:1b:af:d5:84:e6:64:92:26:c4:0b:65:2c:eb: 87:50:06:b8:95:a5:9e:6a:54:18:81:fb:b9:47:5d: c1:aa:88:0c:00:a1:e8:c0:60:c9:f2:bf:df:5b:39: 7a:a9:8c:36:bd:c0:91:2a:f3:4a:9a:d4:73:c9:18: cb:66:c0:24:7f:6c:e6:63:7b:5d:e0:fc:c6:12:8e: 14:a8:e6:50:85:a5:7e:d1:06:34:a5:c4:7c:16:c6: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0E:66:4B:E4:BC:C0:E1:4B:64:2D:8D:80:B0:08:E0:AF:78:BF:E3 X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e5:b8:a3:1b:a7:eb:a7:28:ec:06:64:b3:8b:66:36:b6:44: 7b:f6:61:0b:b7:f3:f4:09:1b:0e:04:60:ca:5a:a5:c1:36:bf: 38:72:c1:83:de:3e:bc:f6:e4:bc:56:17:4a:dd:d2:4e:7f:bc: 6e:ae:37:17:92:66:a5:ff:97:bc:1c:94:d3:1d:10:03:96:01: 37:71:f0:1e:83:24:eb:b1:18:20:31:1f:71:a7:4a:e0:6d:b3: 1a:be:db:60:b2:70:9e:cc:52:ca:a7:f7:40:d8:16:17:ce:9e: 53:52:c1:12:ed:4e:8d:03:7d:fd:7c:67:5f:53:56:d2:39:70: 88:1f:26:e1:44:45:cb:c8:b6:5f:ef:f0:a4:97:e9:30:2c:8f: 78:72:4f:3c:fd:cf:04:0a:96:ea:86:80:36:20:0e:e0:38:44: ee:87:0e:93:eb:47:98:11:7f:73:7e:02:86:d3:0b:14:b7:12: 17:3d:67:86:b6:43:c9:0a:b5:35:77:82:01:9c:6e:3d:bc:65: e4:1d:65:2c:ad:31:a6:f9:de:6b:b2:b8:c8:d2:44:be:5c:a1: b6:9f:99:8f:0b:d9:c8:2e:3e:3e:8e:67:c1:ec:1a:59:60:4d: d0:c4:b3:a5:8a:48:60:55:3f:c2:00:56:8b:bc:b9:82:cd:38: bb:54:79:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMExbm8o79qV93wbNo/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD Eyg1ZTBlNjY0YmU0YmNjMGUxNGI2NDJkOGQ4MGIwMDhlMGFmNzhiZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnW3wNo1UVVS1a83lOcDClxyyUHM mTpHwbKVixRAtJkg/dBCeLxywol5vneOUgqc8mT8N/fMtgpR/3UGyqPuUjRfCudF MpQM1wCGM5ySuSbufMDfesbFd+4oO7RydTK19q52+/d7jlu0pTWzXzvsgSyZT6w3 0yviLeI3nQJZSay0nnsYazps7JZ2xtZ2Y8rEz0Og7J8BaspBPugOAfbUtlJtzxpS lxuv1YTmZJImxAtlLOuHUAa4laWealQYgfu5R13BqogMAKHowGDJ8r/fWzl6qYw2 vcCRKvNKmtRzyRjLZsAkf2zmY3td4PzGEo4UqOZQhaV+0QY0pcR8FsY/owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4OZkvkvMDhS2QtjYCwCOCveL/jMB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+W4oxun 66co7AZks4tmNrZEe/ZhC7fz9AkbDgRgylqlwTa/OHLBg94+vPbkvFYXSt3STn+8 bq43F5Jmpf+XvByU0x0QA5YBN3HwHoMk67EYIDEfcadK4G2zGr7bYLJwnsxSyqf3 QNgWF86eU1LBEu1OjQN9/XxnX1NW0jlwiB8m4URFy8i2X+/wpJfpMCyPeHJPPP3P BAqW6oaANiAO4DhE7ocOk+tHmBF/c34ChtMLFLcSFz1nhrZDyQq1NXeCAZxuPbxl 5B1lLK0xpvnea7K4yNJEvlyhtp+ZjwvZyC4+Po5nwewaWWBN0MSzpYpIYFU/wgBW i7y5gs04u1R5Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:04 2025 by rpki-client