This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json) Hash identifier: alcKRET8S3N+MIEZYksj9FcUHvCN0Ax44FStLp+3JP0= Subject key identifier: 6A:22:99:C1:FE:31:F9:CB:D6:15:8C:55:C8:7F:02:5B:54:AE:2A:9C Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Certificate serial: 019AF6F9354958F9655D004F05105C7D5512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft Manifest number: 0117 Signing time: Sun 07 Dec 2025 04:01:58 +0000 Manifest this update: Sun 07 Dec 2025 04:01:58 +0000 Manifest next update: Mon 08 Dec 2025 04:01:58 +0000 Files and hashes: 1: 2l62dAKm04WNCR-je-bPkSJnLtk.roa (hash: nr1ofanqNDye36o5ymwo4drebXuJubRmduTbD4ErXCA=) 2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: FxxdawQSOcLlrxE5gX0weD6sFEYUoGrvfN6I3xUxou0=) 3: JXqAYK5l-_wM9jMlcMoBRcvTpnw.roa (hash: WtaTh/P/aPKzmJKsdEQ9npXPcszgPjwctR1jbOex9BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:35:49:58:f9:65:5d:00:4f:05:10:5c:7d:55:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Validity Not Before: Dec 7 04:01:58 2025 GMT Not After : Dec 8 04:01:58 2025 GMT Subject: CN=6a2299c1fe31f9cbd6158c55c87f025b54ae2a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:35:ea:a8:bd:4e:fc:c8:3f:23:70:1f:40: ce:fd:09:9e:c9:2b:b6:5f:7d:c9:14:4c:79:52:43: 52:16:aa:8b:cb:36:b2:a3:e1:0b:d7:30:f0:8f:3f: f9:13:8d:58:8f:96:2b:5e:65:76:60:b7:45:e5:89: cd:6b:52:35:ea:9d:8b:9c:a0:11:cb:21:7f:ba:91: 90:a4:6e:7a:3c:f0:be:aa:d3:4f:d2:eb:29:cf:92: dc:69:4a:26:ca:88:4f:14:be:5d:6d:d6:c8:e8:0d: 56:bf:15:8f:67:cd:f5:a1:3f:84:6d:a3:50:ab:cb: ee:c7:85:d3:e5:56:77:db:27:6b:e7:e0:bb:75:29: 1c:15:73:a4:1d:77:ba:f3:fa:40:48:1d:ba:57:d2: 9e:27:4e:4f:a0:01:73:8c:bb:bf:d9:33:97:a8:4a: e6:7f:ce:3f:3c:f8:b4:60:f0:c0:03:3a:7a:52:f7: e9:b0:82:ea:f0:4e:70:1c:79:7e:1b:70:1c:72:f3: 7f:44:71:f7:af:69:6c:63:f6:9a:49:d6:b6:91:64: 7f:44:a5:f2:16:73:ea:f3:ec:8f:e0:9c:fb:5b:b7: 2e:01:bd:c1:1f:2c:52:bf:23:f9:ad:8e:40:e8:97: f7:1f:74:bd:95:28:6d:d5:25:05:f5:19:16:4a:ea: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:22:99:C1:FE:31:F9:CB:D6:15:8C:55:C8:7F:02:5B:54:AE:2A:9C X509v3 Authority Key Identifier: keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:73:85:ab:f8:b5:74:c8:3a:9c:80:1c:06:00:e7:4d:5e:86: 61:5d:03:c6:fb:28:30:7a:74:29:76:64:38:e1:2c:e2:f9:13: bc:5c:ae:d6:0e:48:bc:07:0b:24:4d:34:91:4f:88:30:1f:49: 34:1a:1e:16:6f:cc:ba:4a:9c:2a:54:f1:e9:3e:31:09:54:14: a5:10:05:ef:ed:e9:41:85:12:cd:8e:8c:51:1c:f6:f3:4b:b4: 79:2c:bd:92:eb:c9:6d:93:cd:e1:88:57:50:19:e5:e5:5e:f9: 15:59:f4:cc:fe:74:70:12:72:f5:ea:8d:a0:c7:a1:a4:4d:3d: 1f:4f:59:90:32:2c:04:e2:3a:63:97:94:db:9c:f0:a3:da:e4: 0d:19:7a:62:c0:36:fc:d2:12:fb:87:e2:37:dc:61:58:53:fe: 46:07:25:c1:a1:4e:06:90:10:f6:1d:ce:48:d7:f4:f7:0e:b4: da:6c:4d:e6:90:10:8e:d4:33:83:e2:f2:92:fc:b4:b9:7f:79: 93:bf:c5:84:5e:a1:95:0b:ec:09:93:93:ff:48:1c:f4:f7:64: 5a:84:3a:c7:02:2b:c2:6d:b2:5e:a8:53:af:9d:df:e7:bb:16: 0a:48:87:b7:d9:01:db:08:20:c5:ec:0c:6f:f3:17:65:b3:3f: da:57:05:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+TVJWPllXQBPBRBcfVUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwM2Y1NTAwYWVmZTZhYjRkYmRlMTI0MDczYTM3YmMwZGMz MzFlODAwHhcNMjUxMjA3MDQwMTU4WhcNMjUxMjA4MDQwMTU4WjAzMTEwLwYDVQQD Eyg2YTIyOTljMWZlMzFmOWNiZDYxNThjNTVjODdmMDI1YjU0YWUyYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHs16qi9TvzIPyNwH0DO/QmeySu2 X33JFEx5UkNSFqqLyzayo+EL1zDwjz/5E41Yj5YrXmV2YLdF5YnNa1I16p2LnKAR yyF/upGQpG56PPC+qtNP0uspz5LcaUomyohPFL5dbdbI6A1WvxWPZ831oT+EbaNQ q8vux4XT5VZ32ydr5+C7dSkcFXOkHXe68/pASB26V9KeJ05PoAFzjLu/2TOXqErm f84/PPi0YPDAAzp6UvfpsILq8E5wHHl+G3AccvN/RHH3r2lsY/aaSda2kWR/RKXy FnPq8+yP4Jz7W7cuAb3BHyxSvyP5rY5A6Jf3H3S9lSht1SUF9RkWSuqVMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoimcH+MfnL1hWMVch/AltUriqcMB8GA1UdIwQY MBaAFOA/VQCu/mq0294SQHOje8DcMx6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDct M2FjNTY1ZGNkZjczLzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDctM2FjNTY1ZGNkZjcz LzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnOFq/i1 dMg6nIAcBgDnTV6GYV0DxvsoMHp0KXZkOOEs4vkTvFyu1g5IvAcLJE00kU+IMB9J NBoeFm/MukqcKlTx6T4xCVQUpRAF7+3pQYUSzY6MURz280u0eSy9kuvJbZPN4YhX UBnl5V75FVn0zP50cBJy9eqNoMehpE09H09ZkDIsBOI6Y5eU25zwo9rkDRl6YsA2 /NIS+4fiN9xhWFP+RgclwaFOBpAQ9h3OSNf09w602mxN5pAQjtQzg+Lykvy0uX95 k7/FhF6hlQvsCZOT/0gc9PdkWoQ6xwIrwm2yXqhTr53f57sWCkiHt9kB2wggxewM b/MXZbM/2lcFTw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:49 2025 by rpki-client