This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json) Hash identifier: Gj15UL+dcA/QsS2kvRJ/P/xn2KL/DEv0wBcPmhsHbAo= Subject key identifier: 30:AA:E2:0A:17:B8:68:7C:3C:73:91:CD:AC:7D:37:AB:DD:4A:2B:37 Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9 Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9 Certificate serial: 019AF19B57BC2BFC381B44D1D0749BE694F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft Manifest number: 08E6 Signing time: Sat 06 Dec 2025 03:01:20 +0000 Manifest this update: Sat 06 Dec 2025 03:01:20 +0000 Manifest next update: Sun 07 Dec 2025 03:01:20 +0000 Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: yD1O3edA3jJ+67a66YFj+WjGGuOEfW0LMWGIywRndOU=) 2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:57:bc:2b:fc:38:1b:44:d1:d0:74:9b:e6:94:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9 Validity Not Before: Dec 6 03:01:20 2025 GMT Not After : Dec 7 03:01:20 2025 GMT Subject: CN=30aae20a17b8687c3c7391cdac7d37abdd4a2b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:98:9e:e6:5b:d0:37:6f:1c:17:b8:85:4c: a6:ed:f4:3d:f9:e5:96:64:6d:17:00:74:0e:c3:54: 57:2e:56:67:c3:ba:d0:53:e6:e3:b0:5c:3f:eb:5f: 76:7f:3f:e4:03:76:ac:0a:b0:5a:7d:eb:6c:51:9f: a3:6e:ac:2f:bd:8d:fe:37:35:3b:1b:2c:cf:18:94: 8f:90:44:3c:8c:d9:ba:bb:b9:c5:e9:f2:27:ae:f0: 6b:59:5d:b8:4e:47:11:66:45:04:e9:df:49:a4:6c: f5:c0:52:b9:c3:44:ed:f5:73:7f:da:e8:c3:80:92: dc:a9:93:e0:99:59:fe:0b:e8:f2:f1:05:8b:64:86: 4c:fc:b3:b5:b3:03:c0:30:06:26:7d:f7:75:c8:f3: df:17:dc:ac:fa:74:b4:78:5f:d0:f1:5b:30:b3:b1: a0:57:ce:43:8b:2d:18:c6:07:e9:89:2a:27:b7:f8: bf:76:68:47:52:cf:5f:e9:8c:cd:98:d7:c3:f2:cc: b4:2e:31:d1:33:38:12:e8:52:da:fa:69:fe:33:7f: 80:c2:64:bf:e1:0a:68:6e:9c:1e:9a:45:15:4c:fc: 13:30:07:c7:87:1d:a2:db:21:e7:83:5c:b6:08:0f: 97:76:42:aa:1f:14:13:4b:dd:52:af:6f:41:90:0d: 84:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AA:E2:0A:17:B8:68:7C:3C:73:91:CD:AC:7D:37:AB:DD:4A:2B:37 X509v3 Authority Key Identifier: keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a5:ea:66:6f:49:9f:a1:e0:3f:5c:ef:ee:47:50:b6:dd:62: 5e:4b:5f:59:b8:bb:f2:37:9c:f9:45:d8:5a:ba:c5:e9:e0:60: 66:e0:5b:61:8d:e9:55:69:de:3d:ad:25:0d:45:e7:a2:11:a3: 68:94:20:79:31:d9:98:a7:f1:eb:cf:33:f7:73:36:18:87:21: 2b:95:ab:b8:3d:27:10:cb:e5:ae:a9:e8:55:c0:fb:8d:f8:6e: 6b:97:b0:51:de:7a:35:a2:28:61:4b:63:9d:54:eb:67:38:b0: c8:d6:a8:68:df:5e:d4:7a:aa:86:c1:cc:f3:69:bb:65:ce:94: 28:39:41:bb:b7:41:77:4a:dd:f5:ba:20:f4:ce:45:f4:d3:70: 6b:aa:a6:6e:c4:53:ab:e4:83:c5:ca:7f:ba:c6:18:1e:7d:66: 34:ec:e5:c3:67:37:5b:4a:93:01:9c:ae:8b:21:d3:5b:e0:0b: 77:a6:b4:7d:0a:bd:a5:50:a3:d5:29:c2:1d:6b:36:12:ee:48: c4:5f:b3:75:e5:dc:12:28:eb:70:b2:a2:0f:09:69:b4:a5:29: a8:1f:aa:76:18:a2:5c:ea:07:99:c0:78:83:d6:ab:46:74:33: 3e:d5:40:de:4d:17:c8:fb:a2:33:64:ee:21:9d:c7:9c:27:68: c2:42:1b:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1e8K/w4G0TR0HSb5pT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5 YzUzZDkwHhcNMjUxMjA2MDMwMTIwWhcNMjUxMjA3MDMwMTIwWjAzMTEwLwYDVQQD EygzMGFhZTIwYTE3Yjg2ODdjM2M3MzkxY2RhYzdkMzdhYmRkNGEyYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG+YnuZb0DdvHBe4hUym7fQ9+eWW ZG0XAHQOw1RXLlZnw7rQU+bjsFw/6192fz/kA3asCrBafetsUZ+jbqwvvY3+NzU7 GyzPGJSPkEQ8jNm6u7nF6fInrvBrWV24TkcRZkUE6d9JpGz1wFK5w0Tt9XN/2ujD gJLcqZPgmVn+C+jy8QWLZIZM/LO1swPAMAYmffd1yPPfF9ys+nS0eF/Q8Vsws7Gg V85Diy0YxgfpiSont/i/dmhHUs9f6YzNmNfD8sy0LjHRMzgS6FLa+mn+M3+AwmS/ 4QpobpwemkUVTPwTMAfHhx2i2yHng1y2CA+XdkKqHxQTS91Sr29BkA2EIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCq4goXuGh8PHORzax9N6vdSis3MB8GA1UdIwQY MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt NTYzZDQ3YTdhYjYxLzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKXqZm9J n6HgP1zv7kdQtt1iXktfWbi78jec+UXYWrrF6eBgZuBbYY3pVWnePa0lDUXnohGj aJQgeTHZmKfx688z93M2GIchK5WruD0nEMvlrqnoVcD7jfhua5ewUd56NaIoYUtj nVTrZziwyNaoaN9e1HqqhsHM82m7Zc6UKDlBu7dBd0rd9bog9M5F9NNwa6qmbsRT q+SDxcp/usYYHn1mNOzlw2c3W0qTAZyuiyHTW+ALd6a0fQq9pVCj1SnCHWs2Eu5I xF+zdeXcEijrcLKiDwlptKUpqB+qdhiiXOoHmcB4g9arRnQzPtVA3k0XyPuiM2Tu IZ3HnCdowkIbyA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:19 2025 by rpki-client