This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft File: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json) Hash identifier: knkkC0qsPryKWCQ79Cpkhqb/tz6x3yiPUnyQ/rzN4dA= Subject key identifier: 43:86:D2:85:41:5B:9F:7E:63:AC:4B:4D:58:46:2C:64:89:0E:8C:38 Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Certificate serial: 019AF163ED934CB3F4AE08328B97D7218C55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: LG0Vg8klNTPShkO03/z8scu7GcscC4D+bBN13fJbkiQ=) 2: 69Gg052Fvx4I2Fe4cFxkAgmaw8U.roa (hash: 4OJvsk33eSq4Pcms3ZWUp5ICc5rvGRU0gr/rstfeV/0=) 3: M0_KB7YWngkVytRrWSYysj7YJLA.roa (hash: Wx2mA+u5jzHoEfTRzsY0nX3Oe/9sdMOBfbPWiWl5Xlc=) 4: V0Sp0TtSbp08bch-dMvX-f8oa2o.roa (hash: JjHFR/Br8lLNxd0wBIShn4KBf2iV68ca7V3XI/Bh6Lc=) 5: w2HliW1FxAoWboCzBC57HQK_5M4.roa (hash: 1o/6TghmsgYeou6D438p0wdWpOeCHDeKRbg9VK0Bxfs=) 6: z5K__5uwKXFTzaD79qKBdTd2bJI.roa (hash: Cp/izXCB0pUAYpj87c/lOI2duT2TX+EDfDIWds1Fqng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ed:93:4c:b3:f4:ae:08:32:8b:97:d7:21:8c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=4386d285415b9f7e63ac4b4d58462c64890e8c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:25:ad:c7:32:0b:51:3c:6e:68:d4:c9:6b: d5:74:d0:63:d9:b0:06:d0:09:7a:3b:eb:e5:a4:00: b5:c5:25:99:92:46:01:17:fe:02:59:a9:fe:dd:dd: 6e:b2:05:ef:8f:41:2f:01:a8:10:0f:8d:89:81:e0: 85:0d:a5:38:f1:85:3a:4d:00:d9:a3:cc:0a:3b:3b: 44:9e:37:28:6f:a0:97:57:bd:1d:78:0c:97:10:13: b1:3b:08:c2:38:e4:d0:04:72:3b:10:85:5d:a7:68: 77:32:fd:9f:04:a5:42:aa:5b:50:f1:ef:ea:4a:bf: 62:85:96:3b:05:4b:94:c2:19:fe:f7:e0:3c:66:45: b3:da:0e:61:46:f0:5d:d9:f7:ce:c7:83:b0:8e:70: 09:76:5d:9b:f3:9a:37:0b:83:54:a9:ac:0a:d0:2d: 5d:9b:7e:e2:f0:58:b9:df:5b:41:6a:f6:20:5d:f7: 9d:10:e3:2d:dc:64:9d:ef:01:bc:b3:07:b1:90:a3: c7:4f:6b:3b:7b:59:6e:49:33:c3:96:88:fb:db:9a: d9:61:55:42:14:28:bf:5f:98:cd:a5:52:6e:a1:05: 27:da:28:76:18:8d:c6:14:a8:84:67:48:d5:fe:3b: 9b:49:f5:f5:95:3f:7e:b5:af:e5:c5:b8:b5:41:2b: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:86:D2:85:41:5B:9F:7E:63:AC:4B:4D:58:46:2C:64:89:0E:8C:38 X509v3 Authority Key Identifier: keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:74:cc:62:cd:41:cb:0b:fe:8a:62:bf:38:40:5d:77:de:a7: 1c:d0:8d:c7:b3:e5:52:df:3d:96:6a:04:e0:1a:26:eb:07:98: c6:07:b1:6b:bf:84:fa:fd:78:85:ed:eb:3a:f3:47:cc:fa:27: b6:f3:ff:97:4b:e1:4a:6e:51:58:99:31:29:a6:04:01:69:4a: 1e:20:93:2f:1c:5e:06:8f:97:fa:04:25:89:80:6f:01:c1:81: 3b:0a:9e:eb:92:c4:89:ca:c8:fa:6a:51:66:bd:6a:d5:3d:bf: d2:4d:bc:c4:b0:c0:bb:11:54:a8:46:d3:98:3a:05:b5:f8:c8: 33:2a:b5:17:b7:40:b5:1d:1c:96:cf:58:18:59:8d:b6:9c:6d: 05:3a:de:c1:08:20:36:03:0f:ad:57:99:b2:e0:78:3d:42:72: e1:81:e4:04:97:b2:7f:3a:3e:e2:b0:26:5a:3a:3f:32:37:35: 69:43:2f:75:10:2c:92:7a:bf:de:07:1e:bf:b9:ee:ec:70:f4: fa:b8:6e:ce:b8:04:8f:70:b2:e1:78:b4:29:01:57:20:2f:0d: 3b:ca:4c:84:2c:d8:2e:8f:1f:a1:72:d9:c9:fb:c0:79:65:2f: 4c:a4:40:bd:02:60:ad:cc:7f:ba:9c:53:a3:9b:6c:28:4b:fd: f5:cb:5f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+2TTLP0rggyi5fXIYxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZThmNTZiYzFmNTAxMDI5MTY4MWJjMmQ4YzAyZjlhY2Jm NzE0YTAwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD Eyg0Mzg2ZDI4NTQxNWI5ZjdlNjNhYzRiNGQ1ODQ2MmM2NDg5MGU4YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn8lrccyC1E8bmjUyWvVdNBj2bAG 0Al6O+vlpAC1xSWZkkYBF/4CWan+3d1usgXvj0EvAagQD42JgeCFDaU48YU6TQDZ o8wKOztEnjcob6CXV70deAyXEBOxOwjCOOTQBHI7EIVdp2h3Mv2fBKVCqltQ8e/q Sr9ihZY7BUuUwhn+9+A8ZkWz2g5hRvBd2ffOx4OwjnAJdl2b85o3C4NUqawK0C1d m37i8Fi531tBavYgXfedEOMt3GSd7wG8swexkKPHT2s7e1luSTPDloj725rZYVVC FCi/X5jNpVJuoQUn2ih2GI3GFKiEZ0jV/jubSfX1lT9+ta/lxbi1QSvXSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOG0oVBW59+Y6xLTVhGLGSJDow4MB8GA1UdIwQY MBaAFOLo9WvB9QECkWgbwtjAL5rL9xSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTct NDQ3ZWRjNGY5YWY2LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTctNDQ3ZWRjNGY5YWY2 LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHTMYs1B ywv+imK/OEBdd96nHNCNx7PlUt89lmoE4Bom6weYxgexa7+E+v14he3rOvNHzPon tvP/l0vhSm5RWJkxKaYEAWlKHiCTLxxeBo+X+gQliYBvAcGBOwqe65LEicrI+mpR Zr1q1T2/0k28xLDAuxFUqEbTmDoFtfjIMyq1F7dAtR0cls9YGFmNtpxtBTrewQgg NgMPrVeZsuB4PUJy4YHkBJeyfzo+4rAmWjo/Mjc1aUMvdRAsknq/3gcev7nu7HD0 +rhuzrgEj3Cy4Xi0KQFXIC8NO8pMhCzYLo8foXLZyfvAeWUvTKRAvQJgrcx/upxT o5tsKEv99ctf1A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:03 2025 by rpki-client