This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json) Hash identifier: zbsIXEww750Sq+OJvXdU3r/fgJqppbuVWfQkoUsIh/k= Subject key identifier: A1:E7:B2:87:99:FB:49:23:0D:FF:64:0C:60:D8:B4:D6:6C:80:64:39 Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Certificate serial: 019AF12D69B0CAD63EB2CF7E222D95D65666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft Manifest number: 0E30 Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=) 2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: FdOl2NxkU+HE8z/te/kv14Je2IIQ41DAJeWBFQS2TLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:69:b0:ca:d6:3e:b2:cf:7e:22:2d:95:d6:56:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=a1e7b28799fb49230dff640c60d8b4d66c806439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:98:87:20:a2:32:da:b4:a7:b2:2d:cf:d6: 67:5a:7a:5d:db:7c:02:72:0e:60:31:5a:4b:18:61: a6:78:4d:36:51:33:48:4a:d1:88:31:ed:64:0d:0f: 91:09:04:24:09:80:ee:b5:16:2a:7e:df:b3:2d:6a: 69:b8:e6:5c:57:8a:ed:89:17:2c:4c:85:4e:e3:84: 60:b4:c6:dd:12:31:7a:af:64:d5:a2:30:f4:5d:13: 1b:bf:47:a4:de:36:2f:14:c2:56:84:9a:2a:df:0a: 36:03:b0:e8:67:ee:17:cb:43:5b:e7:ca:f1:d6:21: 45:9c:67:8e:95:b6:f2:50:f1:9a:63:e6:c1:44:85: 19:9c:70:b9:ff:2b:f4:25:09:26:4f:f2:d6:eb:5e: 75:02:2a:b0:c0:f4:a7:8a:00:6a:c0:a3:7c:06:12: 71:a2:b3:47:12:26:0b:3c:a0:ef:49:b7:3f:fd:c7: 5e:72:67:98:0b:32:29:df:bd:c6:ca:09:a5:e0:6d: d4:03:0f:b6:e0:40:56:31:3f:c8:76:b5:59:00:f8: 68:61:74:35:55:7f:f1:38:f7:40:07:8f:ff:ed:c1: 06:bb:dc:80:aa:be:ca:9a:d3:7b:0a:fc:c2:18:c0: c7:7c:67:46:26:89:b3:0c:79:ca:e1:9e:d9:06:51: a6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E7:B2:87:99:FB:49:23:0D:FF:64:0C:60:D8:B4:D6:6C:80:64:39 X509v3 Authority Key Identifier: keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a4:9d:e1:c5:a9:04:6b:c7:2a:5e:6c:52:57:ff:92:12:43: 14:b0:27:db:34:86:59:da:93:38:f4:37:58:73:1c:8d:1a:96: 96:f4:fd:2c:2d:15:f6:ac:56:45:29:9c:ee:94:91:72:00:fb: aa:cd:8f:b5:f9:b8:39:79:12:29:a4:fd:b5:52:c5:8f:ee:f9: 01:7e:21:e3:ae:42:ed:cf:bd:aa:d0:5e:4f:98:9d:f2:d3:4a: 13:b2:15:59:54:cd:ea:0a:a1:b7:54:40:90:86:1c:8c:00:10: 11:f5:81:6e:5d:0c:2f:1f:f4:76:b7:50:69:12:d8:74:eb:a3: 71:c6:e5:d7:17:63:11:c7:a1:26:6d:5b:69:f7:b2:0f:6f:2c: c5:02:a7:34:9a:8d:0f:55:7c:2e:49:de:3a:62:0a:f6:b8:f4: af:ca:9d:60:d4:3b:c6:e4:1c:59:d7:77:16:e1:3f:ca:a5:92: 95:c3:d3:09:32:8b:35:0e:53:df:a9:74:35:04:2b:82:b1:10: 35:93:59:5c:7f:d2:59:d5:c2:4e:16:81:c0:8f:57:f8:b0:ba: ff:b8:28:59:f6:da:4f:e6:87:5c:47:f7:1c:f8:0d:62:59:3a: 81:f0:e2:b3:e1:24:48:68:e1:2b:90:be:dc:88:55:de:cb:a0: 9a:7e:bc:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWmwytY+ss9+Ii2V1lZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODBlN2JjYjQyYmNjYjgwOTJhZTI4YTQxYWVkOTI4ZWVh NGQ2MzUwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD EyhhMWU3YjI4Nzk5ZmI0OTIzMGRmZjY0MGM2MGQ4YjRkNjZjODA2NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQeYhyCiMtq0p7Itz9ZnWnpd23wC cg5gMVpLGGGmeE02UTNIStGIMe1kDQ+RCQQkCYDutRYqft+zLWppuOZcV4rtiRcs TIVO44RgtMbdEjF6r2TVojD0XRMbv0ek3jYvFMJWhJoq3wo2A7DoZ+4Xy0Nb58rx 1iFFnGeOlbbyUPGaY+bBRIUZnHC5/yv0JQkmT/LW6151AiqwwPSnigBqwKN8BhJx orNHEiYLPKDvSbc//cdecmeYCzIp373Gygml4G3UAw+24EBWMT/IdrVZAPhoYXQ1 VX/xOPdAB4//7cEGu9yAqr7KmtN7CvzCGMDHfGdGJomzDHnK4Z7ZBlGmCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHnsoeZ+0kjDf9kDGDYtNZsgGQ5MB8GA1UdIwQY MBaAFAuA57y0K8y4CSriikGu2SjupNY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYt ZmMwMTQ4MTE5NjM4LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYtZmMwMTQ4MTE5NjM4 LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaSd4cWp BGvHKl5sUlf/khJDFLAn2zSGWdqTOPQ3WHMcjRqWlvT9LC0V9qxWRSmc7pSRcgD7 qs2Ptfm4OXkSKaT9tVLFj+75AX4h465C7c+9qtBeT5id8tNKE7IVWVTN6gqht1RA kIYcjAAQEfWBbl0MLx/0drdQaRLYdOujccbl1xdjEcehJm1bafeyD28sxQKnNJqN D1V8LkneOmIK9rj0r8qdYNQ7xuQcWdd3FuE/yqWSlcPTCTKLNQ5T36l0NQQrgrEQ NZNZXH/SWdXCThaBwI9X+LC6/7goWfbaT+aHXEf3HPgNYlk6gfDis+EkSGjhK5C+ 3IhV3sugmn68Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:26 2025 by rpki-client