This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json) Hash identifier: uW5rwHtdUMvvAmwpPd8DkaPJO/stLwlUN0t7MA7a71Y= Subject key identifier: 4D:C9:E8:69:88:F3:8F:07:29:EA:18:EC:34:D2:D5:1B:C0:E4:78:D3 Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5 Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5 Certificate serial: 019AF3522AD09F546E573F2EB69605F6AC09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft Manifest number: 0F5E Signing time: Sat 06 Dec 2025 11:00:39 +0000 Manifest this update: Sat 06 Dec 2025 11:00:39 +0000 Manifest next update: Sun 07 Dec 2025 11:00:39 +0000 Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=) 2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=) 3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: yMW6WmW2j7QXzkdUfARf3gHNeUj0j1p9vBtdyQXI4xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:2a:d0:9f:54:6e:57:3f:2e:b6:96:05:f6:ac:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5 Validity Not Before: Dec 6 11:00:39 2025 GMT Not After : Dec 7 11:00:39 2025 GMT Subject: CN=4dc9e86988f38f0729ea18ec34d2d51bc0e478d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:93:d6:ae:4e:87:d7:39:69:2f:67:5e:44: 21:a7:76:ed:ed:d7:69:10:2c:52:c3:83:20:ff:b4: db:17:0a:1a:ba:da:75:43:c6:1b:80:71:e0:c5:f7: 7c:df:55:f7:9b:09:d3:e2:98:68:7d:66:53:24:5a: dc:d4:34:5b:76:19:35:4e:ae:e1:8f:d5:f7:5e:ed: 09:f4:c9:27:64:0c:e2:5c:14:ef:10:c3:c2:73:35: 1e:20:24:fc:d2:be:bc:f6:12:30:b6:ab:89:72:27: 76:f4:5d:cd:a8:b1:88:ff:3a:4d:dd:80:5f:3e:a0: b0:84:15:4c:7e:8f:5e:07:56:7e:fd:4e:b9:77:53: e7:57:d9:bf:a5:6a:0c:70:bc:de:0b:e3:9d:16:53: 23:b3:83:42:63:40:bd:c1:b8:ce:12:df:f8:ae:d5: 3c:d2:94:90:b7:c1:9a:b2:0b:31:81:55:01:93:a8: 03:99:5b:19:27:6e:29:fd:4a:06:e0:fc:c0:61:f4: de:0a:87:ae:2e:7b:d8:90:6b:ee:f3:0d:53:1a:b2: 47:c9:3d:7c:7a:f9:07:9b:af:86:d1:1b:30:5d:93: e8:bb:02:a1:11:12:e2:d7:21:15:2d:65:5d:ef:05: a7:de:67:ff:1f:dc:99:9d:23:45:95:16:77:54:93: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C9:E8:69:88:F3:8F:07:29:EA:18:EC:34:D2:D5:1B:C0:E4:78:D3 X509v3 Authority Key Identifier: keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f6:15:cc:89:74:0a:5b:cf:56:31:d3:76:81:7d:70:8b:e5: 8d:82:83:c9:74:ed:fb:ed:f8:5d:44:c7:82:3b:42:e7:e5:21: 20:20:dd:81:cd:59:68:9b:56:33:28:8b:9d:c0:9b:99:2c:5a: 26:61:6c:42:9d:b4:d4:35:a3:16:8f:ae:39:78:10:40:c7:16: db:30:85:29:f9:94:5a:58:10:eb:08:b4:22:a8:83:50:0f:ed: d4:a6:5e:14:d9:a3:7b:e0:55:7e:94:f1:7c:e1:29:d7:46:92: 79:18:be:f6:b5:be:cd:32:3a:35:13:e7:70:be:06:6d:c2:30: 29:a2:ec:49:0b:ad:d6:54:f1:45:1f:fb:7e:ff:27:e7:4f:6d: a4:6b:5e:4c:2c:2f:f3:92:5e:fb:ed:50:83:f3:1c:6d:15:4a: b8:d8:9f:34:f4:a2:55:9a:ec:a8:3b:66:bf:62:ca:3e:ec:c2: 45:6b:6a:e0:86:6b:36:de:9f:69:c0:e1:d7:90:c4:c2:c0:3c: 3d:58:bc:7f:dc:aa:e3:e8:a3:2a:13:ee:c6:ec:43:e9:d8:85: ae:1f:14:41:a2:ef:bf:a7:c9:84:1a:93:5b:d6:14:f4:08:e8: 33:89:bb:19:6a:40:d6:f6:07:54:03:7d:e1:9d:c2:49:af:9a: 84:85:93:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUirQn1RuVz8utpYF9qwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODA5NjQ0MDdjNWRhYTQ0MDg4YWNmZTk1ZTY0ODhiODAw ZmFkZTUwHhcNMjUxMjA2MTEwMDM5WhcNMjUxMjA3MTEwMDM5WjAzMTEwLwYDVQQD Eyg0ZGM5ZTg2OTg4ZjM4ZjA3MjllYTE4ZWMzNGQyZDUxYmMwZTQ3OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ieT1q5Oh9c5aS9nXkQhp3bt7ddp ECxSw4Mg/7TbFwoautp1Q8YbgHHgxfd831X3mwnT4phofWZTJFrc1DRbdhk1Tq7h j9X3Xu0J9MknZAziXBTvEMPCczUeICT80r689hIwtquJcid29F3NqLGI/zpN3YBf PqCwhBVMfo9eB1Z+/U65d1PnV9m/pWoMcLzeC+OdFlMjs4NCY0C9wbjOEt/4rtU8 0pSQt8GasgsxgVUBk6gDmVsZJ24p/UoG4PzAYfTeCoeuLnvYkGvu8w1TGrJHyT18 evkHm6+G0RswXZPouwKhERLi1yEVLWVd7wWn3mf/H9yZnSNFlRZ3VJM93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3J6GmI848HKeoY7DTS1RvA5HjTMB8GA1UdIwQY MBaAFG+AlkQHxdqkQIis/pXmSIuAD63lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2Qt NWQ5MmNlZjIzYzVhLzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2QtNWQ5MmNlZjIzYzVh LzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPYVzIl0 ClvPVjHTdoF9cIvljYKDyXTt++34XUTHgjtC5+UhICDdgc1ZaJtWMyiLncCbmSxa JmFsQp201DWjFo+uOXgQQMcW2zCFKfmUWlgQ6wi0IqiDUA/t1KZeFNmje+BVfpTx fOEp10aSeRi+9rW+zTI6NRPncL4GbcIwKaLsSQut1lTxRR/7fv8n509tpGteTCwv 85Je++1Qg/McbRVKuNifNPSiVZrsqDtmv2LKPuzCRWtq4IZrNt6facDh15DEwsA8 PVi8f9yq4+ijKhPuxuxD6diFrh8UQaLvv6fJhBqTW9YU9AjoM4m7GWpA1vYHVAN9 4Z3CSa+ahIWTeA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:39 2025 by rpki-client