This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json) Hash identifier: YjBm1GPT4gVoTepFUQkqwiwCV+IOsxhGG174BPb+yfs= Subject key identifier: 17:30:6F:0B:8B:53:D2:07:AC:46:4D:0B:B0:CD:74:85:8D:81:14:D0 Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3 Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3 Certificate serial: 019AF0882DD1107FD33B73841CACB5B5F5E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft Manifest number: 146E Signing time: Fri 05 Dec 2025 22:00:47 +0000 Manifest this update: Fri 05 Dec 2025 22:00:47 +0000 Manifest next update: Sat 06 Dec 2025 22:00:47 +0000 Files and hashes: 1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=) 2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: 9qswN1RLjE5u7T04eLRyfrpU2E/SQzB2pXpcpb8vo4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2d:d1:10:7f:d3:3b:73:84:1c:ac:b5:b5:f5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3 Validity Not Before: Dec 5 22:00:47 2025 GMT Not After : Dec 6 22:00:47 2025 GMT Subject: CN=17306f0b8b53d207ac464d0bb0cd74858d8114d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:07:ce:6e:41:dc:1a:cf:ac:e1:98:08:cd: cb:94:ef:8d:5f:fd:9f:f9:17:94:6a:c1:37:d7:af: ac:9f:b4:80:b9:61:a3:54:6d:60:11:75:c2:d9:35: 62:f1:c5:0d:29:a6:43:da:c6:ba:60:03:ac:25:85: c6:b9:bc:a0:ec:25:5c:41:64:6c:6c:c6:60:27:b9: 07:fe:f5:08:fe:3d:c4:15:f1:ad:02:4c:36:8f:46: 6a:7e:54:e2:1f:6b:02:ff:09:61:84:05:06:4c:52: 20:80:3c:31:43:a3:b4:a2:9b:45:1a:93:1e:ad:b1: ec:58:13:3b:72:0f:f8:61:5d:f1:78:a7:e2:d1:7d: 9f:c7:bd:28:2f:73:32:99:ec:d8:50:d0:99:41:74: a9:de:5d:0c:7c:c8:bb:89:1f:32:81:9b:dc:b3:af: 22:86:73:9b:88:01:7d:65:a7:fb:2f:a7:bf:0e:7e: 96:7c:3a:d4:ef:73:15:80:12:47:75:7b:0a:af:fe: 7d:d4:b0:14:25:08:18:17:30:49:4c:e8:05:1e:99: cd:6b:ce:d2:f9:a1:b1:6a:f1:42:a7:e3:d3:ae:c5: d4:07:fb:5b:8f:99:02:e5:26:c2:a7:d7:87:20:30: 9b:70:9e:15:3f:39:13:23:18:9c:bb:8b:8b:3c:93: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:30:6F:0B:8B:53:D2:07:AC:46:4D:0B:B0:CD:74:85:8D:81:14:D0 X509v3 Authority Key Identifier: keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bd:41:24:a2:bd:66:79:98:94:4f:81:3f:2c:9c:2d:74:ea: 5f:2c:f8:5e:93:94:f9:b0:c5:b8:7c:fd:cd:29:da:dc:7f:8e: f1:b6:89:f4:92:32:d2:8c:41:c2:1e:af:ac:39:eb:38:0c:45: 0d:84:02:e5:a4:d6:51:4b:63:58:c6:87:69:8e:5f:99:6d:2d: 45:01:32:ec:ad:f3:2c:47:bc:6f:94:44:4f:dc:6e:e1:22:58: 4d:d1:7b:71:47:ce:82:40:89:3a:7b:be:fa:8f:4d:58:01:c0: 88:66:b0:f0:55:d2:4e:9f:f0:32:2e:8e:e1:89:79:bf:fe:45: 75:e6:11:a2:70:36:b8:e9:e9:b8:e4:b4:11:23:a9:1d:f6:0f: 7a:51:ec:a8:7b:c9:ff:a4:ec:fd:83:9a:5c:8b:2e:5f:d0:71: 99:2f:cc:a3:47:3b:17:64:69:d2:ae:c9:a2:91:f3:61:04:16: e0:bd:17:d1:99:ad:99:ad:d8:95:6d:1f:98:45:19:ae:b1:a0: 36:3a:01:2b:a5:2d:5c:1a:92:c9:ef:1f:72:7b:15:ac:10:61: 0d:62:b5:d2:54:14:ff:7a:6f:3f:0f:f7:45:b2:55:d5:93:f0: d3:15:f9:2c:c4:96:c2:16:eb:a2:8b:19:89:e8:e2:f5:21:e7: b5:48:21:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiC3REH/TO3OEHKy1tfXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMGM3YWM1NmIxMWUxMDRhYmIxNjdiYjFhYjM3OTJiM2Zh N2MzZDMwHhcNMjUxMjA1MjIwMDQ3WhcNMjUxMjA2MjIwMDQ3WjAzMTEwLwYDVQQD EygxNzMwNmYwYjhiNTNkMjA3YWM0NjRkMGJiMGNkNzQ4NThkODExNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveUHzm5B3BrPrOGYCM3LlO+NX/2f +ReUasE316+sn7SAuWGjVG1gEXXC2TVi8cUNKaZD2sa6YAOsJYXGubyg7CVcQWRs bMZgJ7kH/vUI/j3EFfGtAkw2j0ZqflTiH2sC/wlhhAUGTFIggDwxQ6O0optFGpMe rbHsWBM7cg/4YV3xeKfi0X2fx70oL3MymezYUNCZQXSp3l0MfMi7iR8ygZvcs68i hnObiAF9Zaf7L6e/Dn6WfDrU73MVgBJHdXsKr/591LAUJQgYFzBJTOgFHpnNa87S +aGxavFCp+PTrsXUB/tbj5kC5SbCp9eHIDCbcJ4VPzkTIxicu4uLPJM1VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcwbwuLU9IHrEZNC7DNdIWNgRTQMB8GA1UdIwQY MBaAFOAMesVrEeEEq7FnuxqzeSs/p8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYt NGZkMGUxYjljMTJmLzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYtNGZkMGUxYjljMTJm LzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPL1BJKK9 ZnmYlE+BPyycLXTqXyz4XpOU+bDFuHz9zSna3H+O8baJ9JIy0oxBwh6vrDnrOAxF DYQC5aTWUUtjWMaHaY5fmW0tRQEy7K3zLEe8b5RET9xu4SJYTdF7cUfOgkCJOnu+ +o9NWAHAiGaw8FXSTp/wMi6O4Yl5v/5FdeYRonA2uOnpuOS0ESOpHfYPelHsqHvJ /6Ts/YOaXIsuX9BxmS/Mo0c7F2Rp0q7JopHzYQQW4L0X0Zmtma3YlW0fmEUZrrGg NjoBK6UtXBqSye8fcnsVrBBhDWK10lQU/3pvPw/3RbJV1ZPw0xX5LMSWwhbroosZ ieji9SHntUghXw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:38 2025 by rpki-client