This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json) Hash identifier: XRz7VtQds+OEkE7ceaVo3zTaCRI9Tku9UeFFRT17Ork= Subject key identifier: BD:46:0E:72:A7:F0:17:00:5E:CB:95:E5:77:5A:D0:1F:D1:63:CC:E2 Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Certificate serial: 019AF12F17B53B872DCC952B72DABFAA5C63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:03:06 +0000 Manifest this update: Sat 06 Dec 2025 01:03:06 +0000 Manifest next update: Sun 07 Dec 2025 01:03:06 +0000 Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: IlEbEriAwBRqcdA2wIHoqXe+EcBm5QswgerBqLoMcOw=) 2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:17:b5:3b:87:2d:cc:95:2b:72:da:bf:aa:5c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Validity Not Before: Dec 6 01:03:06 2025 GMT Not After : Dec 7 01:03:06 2025 GMT Subject: CN=bd460e72a7f017005ecb95e5775ad01fd163cce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:c5:94:79:41:3d:dc:41:0a:00:17:f1:4d: 61:9e:e9:45:d1:d2:a2:60:ff:20:09:a2:04:c3:20: 8d:11:e7:8a:38:af:a9:44:f4:23:a7:17:a1:8d:d4: 91:31:56:2d:da:89:8b:e6:4e:28:d5:48:10:46:7a: 91:92:73:2a:22:a9:c2:83:14:04:6a:c0:e2:c5:51: 77:3d:95:18:37:0d:a7:78:61:fc:fa:9c:4a:6c:f9: 19:fd:49:16:30:84:0c:0d:ae:5e:5f:0b:70:17:3b: 40:36:b8:43:5a:55:60:35:3e:c8:0c:9a:5c:67:a3: 4f:f2:4f:83:0d:81:aa:77:c0:1a:7e:1a:2c:13:34: db:f9:d1:36:22:31:54:24:33:5d:cf:03:17:2e:52: 9c:2c:bf:45:3e:2f:5a:6c:26:23:2b:d4:1c:19:63: 78:b0:ba:29:ac:59:0c:18:15:c1:91:8e:23:9b:82: 2b:56:b5:fc:54:29:29:c7:8c:8a:20:98:92:92:38: d5:37:83:ea:73:97:ec:5c:a2:d9:e0:3d:be:87:fb: 99:1a:27:7d:00:d0:ff:8c:1c:83:7d:b4:99:6f:52: a9:40:d9:c6:ff:90:46:3b:e0:97:67:c4:31:02:cc: 4c:9f:a3:74:07:6a:b2:4e:41:c0:8b:7a:cc:35:fd: d8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:46:0E:72:A7:F0:17:00:5E:CB:95:E5:77:5A:D0:1F:D1:63:CC:E2 X509v3 Authority Key Identifier: keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ac:bc:3d:d3:0e:e2:17:ac:85:58:63:ed:25:ac:f7:dd:83: fd:af:54:c4:15:2e:f3:63:0f:47:19:ab:26:4a:aa:d4:9f:01: 9c:27:32:83:b5:48:da:99:3a:6f:f1:8c:4a:6e:75:88:a4:41: a7:ca:9c:bc:8c:cd:d8:e7:9d:e3:cd:f6:66:19:97:36:b9:ba: a4:a5:60:6c:d9:71:f8:77:dd:56:87:92:08:81:d4:01:54:ee: 8b:0e:17:d1:b3:cd:62:47:82:96:6f:f4:09:be:de:ff:90:5b: 35:b0:12:17:aa:64:9a:39:a1:8e:44:ef:40:0a:64:da:fd:c3: ab:b6:93:3f:1b:01:82:b2:a5:ff:6a:42:75:26:e9:91:ca:5e: e3:98:0f:32:78:ed:77:80:92:5e:b7:ac:74:4b:5c:c1:59:55: be:2e:2c:9f:91:8d:0f:9e:6c:5b:95:46:3a:87:94:64:df:65: b6:67:9e:31:64:96:35:ad:fd:da:46:33:ef:cb:4a:d6:e2:59: be:57:8e:56:a5:51:58:00:93:a6:0e:80:e5:de:7d:33:b5:1f: 0d:75:d3:1e:57:5d:ec:da:ab:e1:d7:66:fc:22:18:21:38:02: ad:be:bd:50:fe:bf:14:ef:6d:71:f5:40:54:a9:d6:1f:8b:c8: 4e:7e:1b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLxe1O4ctzJUrctq/qlxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2 MTNiYzUwHhcNMjUxMjA2MDEwMzA2WhcNMjUxMjA3MDEwMzA2WjAzMTEwLwYDVQQD EyhiZDQ2MGU3MmE3ZjAxNzAwNWVjYjk1ZTU3NzVhZDAxZmQxNjNjY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0HFlHlBPdxBCgAX8U1hnulF0dKi YP8gCaIEwyCNEeeKOK+pRPQjpxehjdSRMVYt2omL5k4o1UgQRnqRknMqIqnCgxQE asDixVF3PZUYNw2neGH8+pxKbPkZ/UkWMIQMDa5eXwtwFztANrhDWlVgNT7IDJpc Z6NP8k+DDYGqd8AafhosEzTb+dE2IjFUJDNdzwMXLlKcLL9FPi9abCYjK9QcGWN4 sLoprFkMGBXBkY4jm4IrVrX8VCkpx4yKIJiSkjjVN4Pqc5fsXKLZ4D2+h/uZGid9 AND/jByDfbSZb1KpQNnG/5BGO+CXZ8QxAsxMn6N0B2qyTkHAi3rMNf3YUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1GDnKn8BcAXsuV5Xda0B/RY8ziMB8GA1UdIwQY MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4 LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXay8PdMO 4heshVhj7SWs992D/a9UxBUu82MPRxmrJkqq1J8BnCcyg7VI2pk6b/GMSm51iKRB p8qcvIzN2Oed4832ZhmXNrm6pKVgbNlx+HfdVoeSCIHUAVTuiw4X0bPNYkeClm/0 Cb7e/5BbNbASF6pkmjmhjkTvQApk2v3Dq7aTPxsBgrKl/2pCdSbpkcpe45gPMnjt d4CSXresdEtcwVlVvi4sn5GND55sW5VGOoeUZN9ltmeeMWSWNa392kYz78tK1uJZ vleOVqVRWACTpg6A5d59M7UfDXXTHldd7Nqr4ddm/CIYITgCrb69UP6/FO9tcfVA VKnWH4vITn4b0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:02:59 2025 by rpki-client