This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json) Hash identifier: T812jy96IrXAhW5FUaKsK/UPfYfOapNvipqc9Ecg+Bw= Subject key identifier: 0F:99:21:B6:D6:77:DE:AE:3C:71:6D:94:28:D2:0F:39:40:51:01:08 Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d Certificate serial: 019AF0515F400571872B0EE4F07C41E56CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft Manifest number: 0CB8 Signing time: Fri 05 Dec 2025 21:00:55 +0000 Manifest this update: Fri 05 Dec 2025 21:00:55 +0000 Manifest next update: Sat 06 Dec 2025 21:00:55 +0000 Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: SPZBR/MZadv8lckG/70Ifp49QvRRDyyMw4jfQWssS9o=) 2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:5f:40:05:71:87:2b:0e:e4:f0:7c:41:e5:6c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d Validity Not Before: Dec 5 21:00:55 2025 GMT Not After : Dec 6 21:00:55 2025 GMT Subject: CN=0f9921b6d677deae3c716d9428d20f3940510108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:72:55:61:82:91:52:6c:cd:d6:90:bb:ce: e8:3d:ba:20:5a:b0:2f:3d:60:cf:13:7a:2a:a1:d8: c6:24:7c:3d:f7:f7:b9:1e:49:a3:34:aa:6a:c1:b4: 0d:a1:57:e7:75:c7:ed:be:4e:f1:d8:ac:5c:00:cd: 82:a3:ee:ea:34:66:99:c8:a1:bf:99:6d:1a:38:d0: 0a:ef:64:9e:07:68:48:37:0d:4d:95:4b:ac:59:60: 37:d9:78:f2:0d:57:c2:b8:a4:99:b2:c4:6c:74:53: 29:28:f9:e8:2e:fe:4d:ba:14:cc:69:b7:a6:09:ff: f6:86:e5:21:38:88:47:86:aa:39:1b:d6:22:62:27: 55:3d:9b:45:cd:07:24:e5:ca:89:de:a7:61:88:74: c5:a7:8a:83:68:60:94:0f:40:67:00:01:f2:46:4b: ed:79:5b:b0:a8:0f:09:b1:5e:f9:8c:a7:4c:6e:b0: 20:84:47:7e:69:53:22:a6:cf:75:2b:22:0c:d5:77: f4:4d:31:14:99:ae:33:d7:41:b0:75:a8:a4:64:13: a4:ea:27:d6:95:90:e2:e7:64:28:52:2a:7d:0b:2c: 61:4b:78:03:d0:df:f6:99:16:79:65:b9:09:bb:bd: 64:31:25:66:2a:5a:43:4b:5f:71:88:71:d3:31:19: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:99:21:B6:D6:77:DE:AE:3C:71:6D:94:28:D2:0F:39:40:51:01:08 X509v3 Authority Key Identifier: keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:99:3e:51:d7:f2:82:1d:dc:3e:02:ad:de:53:89:1a:68: 12:f4:0f:38:ed:b2:90:8a:5b:0e:5b:e7:22:bf:42:fc:88:af: b7:43:ca:40:32:fd:e5:bf:f3:73:eb:36:7a:b1:df:16:57:f5: 18:d1:0f:9f:41:99:b8:2d:fd:c0:bd:4c:65:41:2a:25:a7:f1: ed:59:79:84:8d:c1:cb:fd:d6:2e:af:34:1b:2a:61:57:42:ae: 96:4b:bc:47:07:a8:22:7e:8a:62:c4:e8:c3:2f:42:9d:4a:ba: 1e:8c:24:27:ae:b4:e1:c4:4f:45:77:25:ae:ee:4d:f6:8b:05: 95:ac:13:65:22:92:fa:b7:51:8d:aa:c9:ae:49:c0:7d:49:c6: 43:3f:39:b3:1b:61:be:63:a4:73:e8:b4:08:a0:d6:12:1d:c2: 54:58:36:d2:ac:96:77:e8:b5:82:f0:aa:e2:98:de:d4:b0:02: 84:0f:33:14:99:e9:4f:05:97:b7:1a:76:e2:67:7f:55:03:2a: ac:90:19:82:e0:e5:76:d2:d9:81:c9:2a:3f:96:78:de:30:89: 1a:1f:34:56:cd:6b:0b:2f:5c:0b:07:66:d3:b1:24:9b:34:55: d2:bf:1d:6d:07:35:fb:73:3a:05:d7:d2:b2:67:08:3a:de:03: 8e:62:3f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUV9ABXGHKw7k8HxB5WzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1 NjVlOWQwHhcNMjUxMjA1MjEwMDU1WhcNMjUxMjA2MjEwMDU1WjAzMTEwLwYDVQQD EygwZjk5MjFiNmQ2NzdkZWFlM2M3MTZkOTQyOGQyMGYzOTQwNTEwMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaZyVWGCkVJszdaQu87oPbogWrAv PWDPE3oqodjGJHw99/e5HkmjNKpqwbQNoVfndcftvk7x2KxcAM2Co+7qNGaZyKG/ mW0aONAK72SeB2hINw1NlUusWWA32XjyDVfCuKSZssRsdFMpKPnoLv5NuhTMabem Cf/2huUhOIhHhqo5G9YiYidVPZtFzQck5cqJ3qdhiHTFp4qDaGCUD0BnAAHyRkvt eVuwqA8JsV75jKdMbrAghEd+aVMips91KyIM1Xf0TTEUma4z10GwdaikZBOk6ifW lZDi52QoUip9CyxhS3gD0N/2mRZ5ZbkJu71kMSVmKlpDS19xiHHTMRmIVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+ZIbbWd96uPHFtlCjSDzlAUQEIMB8GA1UdIwQY MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfuZPlHX 8oId3D4Crd5TiRpoEvQPOO2ykIpbDlvnIr9C/Iivt0PKQDL95b/zc+s2erHfFlf1 GNEPn0GZuC39wL1MZUEqJafx7Vl5hI3By/3WLq80GyphV0Kulku8RweoIn6KYsTo wy9CnUq6HowkJ6604cRPRXclru5N9osFlawTZSKS+rdRjarJrknAfUnGQz85sxth vmOkc+i0CKDWEh3CVFg20qyWd+i1gvCq4pje1LAChA8zFJnpTwWXtxp24md/VQMq rJAZguDldtLZgckqP5Z43jCJGh80Vs1rCy9cCwdm07EkmzRV0r8dbQc1+3M6BdfS smcIOt4DjmI/HA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:19 2025 by rpki-client