This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json) Hash identifier: 6XfPAXxQuBlRV28S1kbw83CwqG17Aol/CfP7zonKr0M= Subject key identifier: 31:77:AB:B5:15:21:82:92:CB:56:DB:26:F2:D5:31:98:28:E6:47:75 Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789 Certificate serial: 019AF19B8783B1FC7E68456AF1F06DBC04D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: /K5HTqhDxEm7KgSB3FkeclDg2+kUAmWFEvtHYDVvECw=) 2: nvFWMlN4X92KRkvOxX78tU9AiMU.roa (hash: Cawdk3ecA0ugRKq4sCsh7iIYZI6bpAW5VK6MQOdmMWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:87:83:b1:fc:7e:68:45:6a:f1:f0:6d:bc:04:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789 Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=3177abb515218292cb56db26f2d5319828e64775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:ae:cf:7d:74:de:b7:3b:0c:19:a7:fe:e3: a1:88:ad:92:8a:b3:3c:5c:cf:c6:4c:97:59:e5:14: 8e:d4:4e:1c:4d:f1:82:3b:40:7b:c9:69:dd:77:f7: 51:50:db:ac:0d:4a:47:89:4d:af:05:5b:5c:86:5e: c3:4b:86:82:33:07:8a:91:9d:fb:70:8f:40:b9:00: e6:bf:50:ac:5e:a9:5b:ba:43:4e:20:59:ba:60:56: d8:34:45:f5:da:f1:5b:e1:0f:12:a6:dc:eb:6f:95: b4:66:92:65:f4:ce:df:68:cc:9f:5d:d1:c6:9d:42: 37:2f:f0:00:b5:5a:bc:b2:e6:e1:0c:12:9a:17:c2: d6:09:e0:a5:77:91:4c:e7:84:cf:6f:ff:73:26:fb: 36:cf:2c:19:c8:41:29:5a:b9:68:15:ed:0c:79:70: 0e:41:c3:e4:12:4a:65:4a:28:c1:f6:13:c4:c5:96: 4b:44:c9:84:fa:3e:70:99:4f:a1:f5:82:69:e0:4a: 9c:24:28:a1:00:fc:43:e8:96:72:ce:2f:15:9d:bd: a3:71:02:7d:0e:01:67:e5:ec:a4:5f:1d:88:cb:70: a9:94:17:af:b5:f7:a4:05:6a:b9:23:26:42:f5:41: 04:17:ca:57:34:ae:81:f6:55:2b:e4:da:9a:84:0f: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:AB:B5:15:21:82:92:CB:56:DB:26:F2:D5:31:98:28:E6:47:75 X509v3 Authority Key Identifier: keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e2:06:2d:ed:18:1a:73:7a:4c:ea:a4:5e:3a:15:64:14:5f: 1a:ee:27:92:21:b5:87:be:cc:d0:59:ea:4a:31:c9:9f:15:8a: c3:3d:7e:3c:18:f7:08:95:44:47:4a:e1:37:25:e3:f5:e6:79: 35:5d:68:fe:8a:8e:d5:c8:a0:5d:e3:aa:fa:69:0e:f5:ef:1d: be:00:2c:86:80:7e:de:92:5d:bc:13:e2:20:0c:da:f8:1e:75: 61:4d:ff:cd:da:4a:5f:a8:31:d4:ee:74:33:5b:bd:14:02:eb: 0c:7a:8e:6a:51:98:df:79:01:6b:de:bd:cf:95:15:94:2a:85: a5:6f:8b:cd:94:34:25:41:b9:a3:72:8f:48:2d:ce:f1:ef:1b: 88:5a:8d:c7:fe:4c:b1:45:f0:95:3e:7e:ca:76:0c:f4:0c:37: 8c:b8:71:06:dc:16:a6:36:07:f2:45:65:20:7b:9b:75:16:27: f9:31:70:dc:d4:7b:13:ba:6d:42:66:6c:e9:78:24:72:9c:4c: 9f:4f:7a:fe:88:10:0e:0b:40:a5:2a:c0:6b:5e:f4:49:fd:73: 06:2f:b5:0e:1a:1e:cb:90:34:ec:35:12:82:d3:98:79:ed:ce: 77:6c:0a:b9:84:64:40:ec:5a:53:8d:39:08:3f:95:3b:8c:9f: 87:d5:82:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4eDsfx+aEVq8fBtvATQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMzk2NDlmYWE4ZjlkZTNkYWU5MWJlNzk5YTI3ZTJjYTY2 Mjg3ODkwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD EygzMTc3YWJiNTE1MjE4MjkyY2I1NmRiMjZmMmQ1MzE5ODI4ZTY0Nzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP6uz3103rc7DBmn/uOhiK2SirM8 XM/GTJdZ5RSO1E4cTfGCO0B7yWndd/dRUNusDUpHiU2vBVtchl7DS4aCMweKkZ37 cI9AuQDmv1CsXqlbukNOIFm6YFbYNEX12vFb4Q8Sptzrb5W0ZpJl9M7faMyfXdHG nUI3L/AAtVq8subhDBKaF8LWCeCld5FM54TPb/9zJvs2zywZyEEpWrloFe0MeXAO QcPkEkplSijB9hPExZZLRMmE+j5wmU+h9YJp4EqcJCihAPxD6JZyzi8Vnb2jcQJ9 DgFn5eykXx2Iy3CplBevtfekBWq5IyZC9UEEF8pXNK6B9lUr5NqahA9pfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF3q7UVIYKSy1bbJvLVMZgo5kd1MB8GA1UdIwQY MBaAFOA5ZJ+qj53j2ukb55mifiymYoeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgt ZDc2NzhhMDc4N2QxLzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgtZDc2NzhhMDc4N2Qx LzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+IGLe0Y GnN6TOqkXjoVZBRfGu4nkiG1h77M0FnqSjHJnxWKwz1+PBj3CJVER0rhNyXj9eZ5 NV1o/oqO1cigXeOq+mkO9e8dvgAshoB+3pJdvBPiIAza+B51YU3/zdpKX6gx1O50 M1u9FALrDHqOalGY33kBa969z5UVlCqFpW+LzZQ0JUG5o3KPSC3O8e8biFqNx/5M sUXwlT5+ynYM9Aw3jLhxBtwWpjYH8kVlIHubdRYn+TFw3NR7E7ptQmZs6XgkcpxM n096/ogQDgtApSrAa170Sf1zBi+1Dhoey5A07DUSgtOYee3Od2wKuYRkQOxaU405 CD+VO4yfh9WC2A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:39 2025 by rpki-client