This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json) Hash identifier: rrhuqDPoVCz0YZKzEFlo8ceZXvpCpJ91QpB48YZCaeE= Subject key identifier: FD:29:C8:A8:7B:50:34:ED:B2:90:B4:24:5F:CB:9E:65:AA:5D:7F:6C Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb Certificate serial: 019AF352CB8B638797241FC589A68ABC695F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:01:20 +0000 Manifest this update: Sat 06 Dec 2025 11:01:20 +0000 Manifest next update: Sun 07 Dec 2025 11:01:20 +0000 Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: 3xUatLTIEgFlO82ieQHuGV2MANEdvBhWkmLNBycVMUc=) 2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:cb:8b:63:87:97:24:1f:c5:89:a6:8a:bc:69:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb Validity Not Before: Dec 6 11:01:20 2025 GMT Not After : Dec 7 11:01:20 2025 GMT Subject: CN=fd29c8a87b5034edb290b4245fcb9e65aa5d7f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:29:66:60:0b:d1:ba:0e:e8:72:90:fe:30:e2: a2:fd:5f:71:78:55:81:6a:bd:76:11:10:c7:46:15: 25:5b:70:9c:d2:56:fe:9e:65:29:23:26:83:17:1a: a6:34:0a:ec:b0:d2:32:c9:01:f5:94:f1:a3:d3:af: 24:bb:52:11:3a:37:f5:81:d4:47:16:99:f1:02:d2: 64:68:c3:ba:18:c5:1b:ee:5a:ad:7a:06:34:5f:04: 67:64:61:05:85:26:1b:1f:cd:9e:6b:ee:20:95:2f: 1e:8b:31:1d:eb:d7:02:ab:52:ff:88:97:8e:f5:fa: c4:4e:cc:f1:18:70:a0:f1:24:74:26:45:75:d3:cf: 12:0e:85:bf:b2:0f:f7:09:6e:d2:b4:4c:96:99:0d: ef:1b:ef:b2:b3:66:36:93:1b:80:d4:2e:79:21:44: 11:59:3b:20:65:46:cc:08:72:b0:bb:26:d1:cf:0a: c3:cb:43:76:e7:a6:08:9d:7e:d0:fa:e3:b4:0d:fe: 0c:cc:4c:c6:f3:d0:54:b7:5a:81:5d:e7:79:3a:ff: 7d:a2:83:b6:22:c9:1d:21:2d:e9:8b:44:c6:c4:20: 75:e2:b5:65:68:2b:44:85:ef:03:c6:5a:67:2a:4d: 89:b3:e7:24:7f:42:55:0c:9b:d0:c5:d5:a4:ab:c8: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:C8:A8:7B:50:34:ED:B2:90:B4:24:5F:CB:9E:65:AA:5D:7F:6C X509v3 Authority Key Identifier: keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:04:6b:3d:93:6e:e5:49:ce:7e:ec:0c:00:16:20:8d:9b:30: cc:61:cb:0a:61:b7:d5:57:bf:22:74:87:54:60:04:ee:95:e4: 75:d7:2c:68:a1:a0:94:4a:8b:89:ae:56:1a:6c:a7:9e:e0:e1: 43:a7:f7:8f:ab:7b:50:d5:9b:ff:8e:b3:7e:e8:3c:d5:1b:41: e4:a1:19:6b:37:58:fb:0b:3f:3e:24:44:2d:00:7c:cf:6c:f9: 15:a6:4a:71:30:c0:0e:40:ed:df:e1:88:64:a8:9d:96:92:95: 98:40:38:2b:e5:96:ca:90:9f:5c:09:fc:ea:6e:70:9b:b3:03: 96:26:e9:d5:59:c6:49:a2:71:5b:e9:31:82:d6:12:db:32:20: da:47:23:0d:42:fd:89:04:c4:e7:9b:1f:f0:f2:03:be:05:ac: 82:a0:64:2c:19:67:07:3e:c0:c6:1c:2d:00:e5:37:40:c6:ee: 1a:1e:57:04:ab:40:cd:0f:0c:2a:03:a0:c4:17:6d:20:18:1f: 4e:b7:72:03:bd:18:dc:cf:37:18:94:4a:f9:c6:7f:91:82:56: 67:f6:b1:41:29:30:39:a4:49:4b:cc:57:f0:70:44:53:49:2d: 9d:e6:1e:7e:55:8c:e8:cc:b2:46:33:f2:8e:ea:40:50:f3:56: 7b:4d:98:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsuLY4eXJB/FiaaKvGlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzhjZDY4MTFkY2UyZWQ0ZjQyNjE0M2MzZmM4NDU3YjFi NDM0YmIwHhcNMjUxMjA2MTEwMTIwWhcNMjUxMjA3MTEwMTIwWjAzMTEwLwYDVQQD EyhmZDI5YzhhODdiNTAzNGVkYjI5MGI0MjQ1ZmNiOWU2NWFhNWQ3ZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ylmYAvRug7ocpD+MOKi/V9xeFWB ar12ERDHRhUlW3Cc0lb+nmUpIyaDFxqmNArssNIyyQH1lPGj068ku1IROjf1gdRH FpnxAtJkaMO6GMUb7lqtegY0XwRnZGEFhSYbH82ea+4glS8eizEd69cCq1L/iJeO 9frETszxGHCg8SR0JkV1088SDoW/sg/3CW7StEyWmQ3vG++ys2Y2kxuA1C55IUQR WTsgZUbMCHKwuybRzwrDy0N256YInX7Q+uO0Df4MzEzG89BUt1qBXed5Ov99ooO2 IskdIS3pi0TGxCB14rVlaCtEhe8DxlpnKk2Js+ckf0JVDJvQxdWkq8jOTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0pyKh7UDTtspC0JF/LnmWqXX9sMB8GA1UdIwQY MBaAFOM4zWgR3OLtT0JhQ8P8hFextDS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYt MmViMGFmM2FjNzgxLzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYtMmViMGFmM2FjNzgx LzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgRrPZNu 5UnOfuwMABYgjZswzGHLCmG31Ve/InSHVGAE7pXkddcsaKGglEqLia5WGmynnuDh Q6f3j6t7UNWb/46zfug81RtB5KEZazdY+ws/PiRELQB8z2z5FaZKcTDADkDt3+GI ZKidlpKVmEA4K+WWypCfXAn86m5wm7MDlibp1VnGSaJxW+kxgtYS2zIg2kcjDUL9 iQTE55sf8PIDvgWsgqBkLBlnBz7AxhwtAOU3QMbuGh5XBKtAzQ8MKgOgxBdtIBgf TrdyA70Y3M83GJRK+cZ/kYJWZ/axQSkwOaRJS8xX8HBEU0ktneYeflWM6MyyRjPy jupAUPNWe02Yvw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:32 2025 by rpki-client