This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json) Hash identifier: 1DKJCMizHxQ2NOooX9XqM4So5sm+YUNkjyJZPvmjN8g= Subject key identifier: 69:D2:2C:62:D4:CE:90:93:00:5A:BD:F0:15:3D:59:3E:64:56:37:68 Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02 Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02 Certificate serial: 019AF0BF55B09675449703D9D71E594B3B26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft Manifest number: 0D54 Signing time: Fri 05 Dec 2025 23:01:02 +0000 Manifest this update: Fri 05 Dec 2025 23:01:02 +0000 Manifest next update: Sat 06 Dec 2025 23:01:02 +0000 Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: Md7QncMMJGTPOGusuhWcNVsLQpzv6kKpULOH+7QUvUA=) 2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:55:b0:96:75:44:97:03:d9:d7:1e:59:4b:3b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02 Validity Not Before: Dec 5 23:01:02 2025 GMT Not After : Dec 6 23:01:02 2025 GMT Subject: CN=69d22c62d4ce9093005abdf0153d593e64563768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:8b:b2:5b:43:0e:e6:2d:46:0d:39:d0:e3: 3c:9f:55:a9:a5:77:f9:22:40:d0:8a:a6:a3:2d:dc: 86:61:5e:9f:15:c4:5f:46:3e:9c:f4:8e:fa:6c:9d: ab:8c:84:d7:51:db:32:59:36:e3:ee:ec:d3:4e:99: b7:9e:ce:26:0e:ea:0a:b3:92:c2:6e:04:29:6b:f5: 1f:35:2b:82:e1:ab:3f:1c:69:6d:2e:e5:67:02:a8: 78:9d:a5:aa:f8:af:6f:74:7a:76:c8:84:76:43:dd: 8c:30:2b:67:39:02:7f:45:15:95:49:b9:e4:57:16: 7b:70:76:47:ec:30:00:fb:ff:c8:73:1b:7c:1a:99: 9f:72:cc:e3:94:46:fa:ba:12:17:4b:36:b6:d9:db: 97:95:cf:ab:2a:3a:ae:96:4e:f2:e6:2e:82:30:be: b1:a0:cd:6d:68:d7:31:1f:0e:2f:fe:f5:e9:e5:ba: be:c2:2b:86:e8:84:a1:7a:b6:0c:23:be:8b:4c:5a: f8:25:df:c4:5b:7a:74:5b:86:01:2e:9a:d3:7f:c7: c1:38:61:2f:0e:16:d3:84:40:22:0c:70:09:f2:55: 97:e6:97:98:84:21:57:7c:fe:c7:65:c5:11:59:7a: fb:a1:d3:e0:d7:c0:f6:bc:c3:0a:01:4f:11:7d:b0: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D2:2C:62:D4:CE:90:93:00:5A:BD:F0:15:3D:59:3E:64:56:37:68 X509v3 Authority Key Identifier: keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5d:5d:6e:d3:fb:b8:a2:3a:d3:c5:04:43:99:07:6f:07:ca: 92:65:41:f3:b6:45:5b:bf:5e:fc:23:d4:3d:4b:62:b4:87:ff: d2:f2:cb:b6:b0:1d:3b:d5:71:43:4b:71:ee:45:86:17:d4:5c: 15:1f:9b:a6:ab:53:87:5e:1d:bd:43:57:0b:c6:fa:97:ca:40: 4c:7a:9e:6e:04:d2:eb:8a:1b:97:35:7d:6c:10:b0:f7:29:38: e1:bc:fa:73:4f:b8:ca:39:89:a6:90:8e:c0:0a:7c:8a:55:48: f5:31:a3:c9:d8:78:c3:2b:1e:70:e9:bc:9c:85:0d:49:0e:f8: fe:26:05:b3:58:c8:29:e7:7d:24:66:c5:93:1c:1c:ba:a7:73: 3e:6b:b7:7b:d1:17:9a:7b:6e:bd:e2:1d:9e:e8:eb:7d:1c:f5: 6c:2b:13:f9:83:20:0b:69:09:d8:f1:37:98:ed:10:e7:8b:ad: 1a:a2:1e:47:20:71:41:e4:a1:0e:26:54:3c:3f:6c:0c:c7:9d: e2:08:7a:a1:80:f3:ce:29:c4:f6:12:51:0b:f7:9f:f1:a4:12: 1a:df:1e:2e:9f:6d:e1:8e:f8:82:46:fb:f3:c4:ef:43:77:72: 6d:ad:47:e4:b5:97:80:d0:86:c7:d2:74:26:7f:dd:f4:83:02: c8:d6:36:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1WwlnVElwPZ1x5ZSzsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3 NTBkMDIwHhcNMjUxMjA1MjMwMTAyWhcNMjUxMjA2MjMwMTAyWjAzMTEwLwYDVQQD Eyg2OWQyMmM2MmQ0Y2U5MDkzMDA1YWJkZjAxNTNkNTkzZTY0NTYzNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui2LsltDDuYtRg050OM8n1WppXf5 IkDQiqajLdyGYV6fFcRfRj6c9I76bJ2rjITXUdsyWTbj7uzTTpm3ns4mDuoKs5LC bgQpa/UfNSuC4as/HGltLuVnAqh4naWq+K9vdHp2yIR2Q92MMCtnOQJ/RRWVSbnk VxZ7cHZH7DAA+//Icxt8GpmfcszjlEb6uhIXSza22duXlc+rKjqulk7y5i6CML6x oM1taNcxHw4v/vXp5bq+wiuG6ISherYMI76LTFr4Jd/EW3p0W4YBLprTf8fBOGEv DhbThEAiDHAJ8lWX5peYhCFXfP7HZcURWXr7odPg18D2vMMKAU8RfbB/DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnSLGLUzpCTAFq98BU9WT5kVjdoMB8GA1UdIwQY MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt MTBiMDIxMWQ5NmZjLzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU11dbtP7 uKI608UEQ5kHbwfKkmVB87ZFW79e/CPUPUtitIf/0vLLtrAdO9VxQ0tx7kWGF9Rc FR+bpqtTh14dvUNXC8b6l8pATHqebgTS64oblzV9bBCw9yk44bz6c0+4yjmJppCO wAp8ilVI9TGjydh4wysecOm8nIUNSQ74/iYFs1jIKed9JGbFkxwcuqdzPmu3e9EX mntuveIdnujrfRz1bCsT+YMgC2kJ2PE3mO0Q54utGqIeRyBxQeShDiZUPD9sDMed 4gh6oYDzzinE9hJRC/ef8aQSGt8eLp9t4Y74gkb788TvQ3dyba1H5LWXgNCGx9J0 Jn/d9IMCyNY27w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:40 2025 by rpki-client