This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft File: e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json) Hash identifier: 2fXshEnTHeu+9jggI2229aWpo+oRHS5PCRVzfLLoSZs= Subject key identifier: 67:FC:EB:30:A5:88:F2:02:F7:2A:94:B1:2B:56:22:C5:7F:DE:CB:D8 Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f Certificate serial: 019AF19AC526645576429A6BCC215DCCF457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=) 2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: HDuZ5L+3L1b96v/7qMuQjXGwU28yE9GWT7liyj5UCJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c5:26:64:55:76:42:9a:6b:cc:21:5d:cc:f4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=67fceb30a588f202f72a94b12b5622c57fdecbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:0a:92:ae:f6:2a:34:bc:9c:8c:a9:d3:e5: 2e:5e:8a:7b:69:29:26:2e:43:e9:52:79:e5:63:42: fa:16:b8:ab:55:dd:82:8b:c3:4a:8f:b7:a7:a2:7e: 1a:14:b0:00:2b:98:df:7c:da:58:ed:fc:84:57:2b: 37:ff:ba:5b:d1:4f:c5:f3:9b:bb:cc:f0:1c:fa:31: 13:64:ce:fc:dc:88:e4:08:2e:20:a8:ff:e0:9a:75: 34:50:a9:89:ee:f8:ce:71:f7:87:c7:4c:59:67:5b: 27:10:57:95:21:a3:a9:fd:b7:b4:8e:ad:2d:5a:2b: aa:94:cb:0f:61:3f:09:f4:e8:6c:65:97:7d:37:c7: c2:82:5b:ed:c1:e4:04:72:ea:87:2a:2d:b9:e9:3c: 16:60:da:b6:0c:ba:4e:95:22:f5:db:e8:f4:e7:fb: 5c:6a:2b:a5:8a:9e:b5:c3:c7:2f:a2:09:36:94:0f: 62:f6:25:e6:fb:6b:dd:ff:72:61:bc:27:42:b9:56: 71:a2:e0:74:cf:b8:54:a0:00:b5:77:90:d3:b0:46: 31:f4:ee:8c:96:77:78:fa:10:59:2e:f0:b1:09:13: b5:76:56:f9:95:7c:ea:d1:e7:1d:07:a6:ba:0b:25: 43:b9:9e:f6:ce:8a:cf:38:8d:56:42:ee:c1:e0:f2: c6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:EB:30:A5:88:F2:02:F7:2A:94:B1:2B:56:22:C5:7F:DE:CB:D8 X509v3 Authority Key Identifier: keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f3:58:aa:02:b0:b2:88:e9:ab:70:a6:5c:3c:24:28:7f:6d: 9f:22:23:f1:d1:71:42:f1:c6:0a:38:92:46:33:8a:5b:1a:47: 2b:c8:24:b5:77:a2:aa:3d:b4:a2:bb:01:6e:6c:13:cf:9e:70: a0:9f:f0:6a:2e:3f:71:f6:44:15:ec:83:14:7a:6a:eb:3a:0d: 3b:1d:6d:0a:77:bd:5c:38:ae:9a:69:f9:b3:74:2c:11:bc:60: 91:fb:23:50:8c:d4:8a:46:00:29:b9:e1:f2:b1:72:94:56:12: 10:6a:a7:d9:4e:4f:b9:3d:7f:3c:95:4e:40:30:6e:27:48:b4: b9:af:d3:21:37:15:66:70:46:d4:e3:aa:f7:95:26:79:ab:84: e1:ca:e3:ad:72:63:09:8d:43:67:0b:91:c8:99:40:bc:19:a2: 52:76:0a:97:fd:8f:18:d6:4b:88:3e:5c:98:45:6b:07:5f:fb: 85:20:da:70:ee:fd:73:ca:cf:80:80:41:63:6f:92:b6:4c:c2: ef:e6:25:8f:76:b8:4d:cd:2c:8a:95:15:1c:8b:6c:b8:5e:5b: 4a:8c:b7:ca:e2:93:50:6f:76:6f:7c:55:01:8c:1a:0e:48:65: 8b:b2:16:7f:a2:17:db:ea:48:54:7b:a9:7a:5e:ac:40:07:fc: cb:c3:53:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsUmZFV2QpprzCFdzPRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODkzODVjMDAwMjMzMGIwOTY1NjdiMjE1MTRkOGUxYmMw OTY4OWYwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD Eyg2N2ZjZWIzMGE1ODhmMjAyZjcyYTk0YjEyYjU2MjJjNTdmZGVjYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWsKkq72KjS8nIyp0+UuXop7aSkm LkPpUnnlY0L6FrirVd2Ci8NKj7enon4aFLAAK5jffNpY7fyEVys3/7pb0U/F85u7 zPAc+jETZM783IjkCC4gqP/gmnU0UKmJ7vjOcfeHx0xZZ1snEFeVIaOp/be0jq0t WiuqlMsPYT8J9OhsZZd9N8fCglvtweQEcuqHKi256TwWYNq2DLpOlSL12+j05/tc aiulip61w8cvogk2lA9i9iXm+2vd/3JhvCdCuVZxouB0z7hUoAC1d5DTsEYx9O6M lnd4+hBZLvCxCRO1dlb5lXzq0ecdB6a6CyVDuZ72zorPOI1WQu7B4PLGCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf86zCliPIC9yqUsStWIsV/3svYMB8GA1UdIwQY MBaAFHuJOFwAAjMLCWVnshUU2OG8CWifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQt ZmUyNzkyMWUxNTQyLzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQtZmUyNzkyMWUxNTQy LzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/NYqgKw sojpq3CmXDwkKH9tnyIj8dFxQvHGCjiSRjOKWxpHK8gktXeiqj20orsBbmwTz55w oJ/wai4/cfZEFeyDFHpq6zoNOx1tCne9XDiummn5s3QsEbxgkfsjUIzUikYAKbnh 8rFylFYSEGqn2U5PuT1/PJVOQDBuJ0i0ua/TITcVZnBG1OOq95UmeauE4crjrXJj CY1DZwuRyJlAvBmiUnYKl/2PGNZLiD5cmEVrB1/7hSDacO79c8rPgIBBY2+StkzC 7+Ylj3a4Tc0sipUVHItsuF5bSoy3yuKTUG92b3xVAYwaDkhli7IWf6IX2+pIVHup el6sQAf8y8NTeA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:06 2025 by rpki-client