This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json) Hash identifier: LQgKgchWw05aDxZ+s78kscWduoQYVTtXT36rUzBkKTU= Subject key identifier: AB:20:19:E3:4A:3F:BD:9D:D7:74:EC:50:A3:88:74:23:47:72:BE:25 Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Certificate serial: 019AF19BA375B8084E0C06BFFB63BB154302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft Manifest number: 1862 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: 0KdeedL2T8Rp4WiBVO1IOf9Yktc.roa (hash: Nc/tWrHQyoi0hEQ+1RcEv6I0SBogxbOFgcOCweAWCBY=) 2: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: GzwCBe6TjayCJQmS9SUUh9DUv6cOVsELqRDZwcszN8A=) 3: 7RC3Heke14KWEkE1YfovjuS1AV4.roa (hash: 9kNgfJeVl3CqYFhxYkFKQO4Oj9G96rT+UBRZvsr6QiY=) 4: WAoTQBn8iJZBu8e2AHqa1bGEmrI.roa (hash: Gvh794vOKgG0OwQ64JTnIyPSYhfW7Hev4v5ELJw0JcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a3:75:b8:08:4e:0c:06:bf:fb:63:bb:15:43:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=ab2019e34a3fbd9dd774ec50a38874234772be25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:e4:4a:48:ca:54:5c:bb:97:22:1a:47:44: 3c:97:82:44:a2:8b:f1:7d:a0:ec:72:f4:c0:db:9d: 74:45:fd:1f:9d:ca:2a:81:b1:ee:37:dc:5b:3a:2c: 3a:88:58:e1:f6:78:e4:24:78:89:5a:e5:f6:d2:46: 09:99:11:25:f7:9d:bf:5f:ba:60:31:32:7f:a6:e3: d5:b4:55:30:35:e8:cc:4b:6d:ca:54:54:70:7f:c3: 64:f2:79:45:3b:f1:ff:82:d3:8b:5d:76:1e:e0:51: c6:36:a1:d6:d3:08:86:52:2f:df:9b:d0:52:4a:63: d5:6f:f2:5b:73:d5:dc:5b:8f:b3:62:1b:cb:61:24: 75:93:14:5a:d4:79:5a:a6:ef:a2:90:78:5e:3f:af: 10:f7:af:e8:2e:8f:c2:10:0d:13:01:f7:86:ff:49: c4:04:8d:84:da:2b:97:9c:c1:75:4b:de:7a:1a:a8: 1a:9c:8e:4e:fe:b5:5a:be:fc:6e:22:c3:2a:a7:fb: b4:de:a5:62:ff:7c:78:e4:f1:73:bf:ac:19:9e:15: 3f:88:de:45:11:06:ac:11:58:fc:52:fe:5a:51:f8: 14:cf:e7:fd:81:02:a9:92:ad:b3:07:68:40:b2:0d: 20:b8:b2:f6:4b:bc:be:a4:4e:cc:bd:62:dc:0a:b4: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:20:19:E3:4A:3F:BD:9D:D7:74:EC:50:A3:88:74:23:47:72:BE:25 X509v3 Authority Key Identifier: keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:35:33:bd:c7:2f:40:04:af:5d:c6:8d:0c:96:3e:f4:98:00: 96:87:1b:3a:a4:cc:4e:47:86:45:bc:ad:d2:14:e6:3a:86:8d: f4:17:71:89:1b:ab:fc:96:72:8c:1b:82:f6:01:e9:c9:e4:4a: 6f:a6:49:36:85:39:cc:32:09:70:70:1b:82:24:8b:67:69:1e: 9a:af:de:eb:15:c5:c8:4d:2d:23:dd:2a:79:51:55:12:bc:5b: 1e:5a:72:3d:4f:cd:1c:7a:fa:c1:77:a2:3c:a8:34:e8:b8:7f: 08:0b:69:ca:5f:fb:91:5b:52:04:81:91:23:98:d7:ab:ee:d2: 9f:90:74:ee:bb:48:02:df:47:aa:59:c5:ed:ce:0a:88:4f:a2: 25:cc:52:b0:60:71:1c:e6:bb:82:be:b7:40:42:b9:88:25:8f: 6b:ca:1d:89:06:2b:5d:de:d2:fe:7e:4c:e1:44:bc:3f:f0:fe: 57:d8:03:1d:53:fe:78:b0:37:33:0b:cd:a3:d7:7b:67:4f:d6: f2:42:12:49:31:77:d4:7e:9e:11:2e:dc:b0:a1:6e:d6:74:16: ad:1d:94:50:5c:65:4b:ad:b4:17:94:c6:ab:1b:e7:d5:ce:73: 65:60:de:04:c0:54:69:a0:f3:f5:05:de:92:59:45:a2:25:05: b9:2b:8f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6N1uAhODAa/+2O7FUMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMmJjZDQwYzY3NzQ2NzdkMmMzNzAyZWY1OWVkZjQ5ZDBi MzZjNmMwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD EyhhYjIwMTllMzRhM2ZiZDlkZDc3NGVjNTBhMzg4NzQyMzQ3NzJiZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/3kSkjKVFy7lyIaR0Q8l4JEoovx faDscvTA2510Rf0fncoqgbHuN9xbOiw6iFjh9njkJHiJWuX20kYJmREl952/X7pg MTJ/puPVtFUwNejMS23KVFRwf8Nk8nlFO/H/gtOLXXYe4FHGNqHW0wiGUi/fm9BS SmPVb/Jbc9XcW4+zYhvLYSR1kxRa1Hlapu+ikHheP68Q96/oLo/CEA0TAfeG/0nE BI2E2iuXnMF1S956GqganI5O/rVavvxuIsMqp/u03qVi/3x45PFzv6wZnhU/iN5F EQasEVj8Uv5aUfgUz+f9gQKpkq2zB2hAsg0guLL2S7y+pE7MvWLcCrS29wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsgGeNKP72d13TsUKOIdCNHcr4lMB8GA1UdIwQY MBaAFOMrzUDGd0Z30sNwLvWe30nQs2xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEt MDc0MDExNWI1YTUyLzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEtMDc0MDExNWI1YTUy LzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDUzvccv QASvXcaNDJY+9JgAlocbOqTMTkeGRbyt0hTmOoaN9BdxiRur/JZyjBuC9gHpyeRK b6ZJNoU5zDIJcHAbgiSLZ2kemq/e6xXFyE0tI90qeVFVErxbHlpyPU/NHHr6wXei PKg06Lh/CAtpyl/7kVtSBIGRI5jXq+7Sn5B07rtIAt9HqlnF7c4KiE+iJcxSsGBx HOa7gr63QEK5iCWPa8odiQYrXd7S/n5M4US8P/D+V9gDHVP+eLA3MwvNo9d7Z0/W 8kISSTF31H6eES7csKFu1nQWrR2UUFxlS620F5TGqxvn1c5zZWDeBMBUaaDz9QXe kllFoiUFuSuPVA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:23 2025 by rpki-client