This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json) Hash identifier: zp+W8SoB1YbVb3yVusU6SCGTTGnsq9m9HE4zI0PSRHk= Subject key identifier: 73:93:35:19:D1:E4:96:4D:D2:36:26:83:EF:DB:93:9A:36:C6:65:D0 Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Certificate serial: 019AF208ED2BEDB8086F6A4A1536C70B930E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft Manifest number: 047C Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: J6zEfQVUxUBpLLHf45p8i0NLXq5e8xxtPPYe/Ng0NQA=) 2: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (hash: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ed:2b:ed:b8:08:6f:6a:4a:15:36:c7:0b:93:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=73933519d1e4964dd2362683efdb939a36c665d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:29:1b:5e:3a:3c:a8:ad:9e:58:ce:ce:b7: cf:a6:48:ec:8b:fc:f3:17:45:a4:f8:c2:ed:2c:7c: 9a:bf:14:d6:7b:9d:7a:fb:1c:cf:c5:93:bc:23:94: 8a:95:1c:f7:ae:13:5e:c6:f0:7e:a0:a4:76:e4:a0: ca:e8:ff:a7:cf:12:c2:48:dc:a8:ca:6e:e3:34:27: 00:cc:94:83:9b:9b:3d:f5:3a:09:c9:19:f3:42:91: a9:13:46:a1:83:e6:89:f0:41:b1:a6:28:e9:85:86: 37:8d:4d:6c:5c:a1:ed:09:8d:b8:65:d5:9b:1a:ec: 41:b5:14:dc:39:85:b9:e6:59:ae:f4:47:49:67:7e: 15:57:53:6a:b8:75:d0:4f:71:d3:fa:26:c5:09:5e: 93:a8:0b:1c:7e:d1:fd:37:da:0f:84:82:1a:af:b0: 57:c9:08:aa:c4:85:a1:de:dd:55:b7:81:33:63:fc: bc:fb:64:57:95:1a:0e:e9:40:1f:8b:07:13:4e:4f: 65:65:61:19:e2:3a:1d:4c:bf:d4:11:e9:90:26:a0: 11:f0:ee:a1:bb:b7:75:2b:60:35:4d:24:ee:a5:cd: 95:b4:9e:21:e6:81:d1:62:ef:f8:90:9d:80:66:2d: dd:9b:5c:68:43:61:44:87:f7:e6:a1:98:3f:91:fb: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:93:35:19:D1:E4:96:4D:D2:36:26:83:EF:DB:93:9A:36:C6:65:D0 X509v3 Authority Key Identifier: keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:57:96:ef:e6:ce:02:b1:eb:ee:92:f8:3e:5f:3a:38:72:10: 83:4f:33:95:ef:bc:c3:10:5b:fb:8d:ff:8a:18:d7:46:70:f2: 9a:1c:89:41:16:43:a8:97:ef:f0:c1:cf:43:07:5d:2e:d4:ab: 20:99:29:a7:ea:93:be:3c:cf:64:47:44:f8:aa:16:6e:07:48: e2:aa:ed:40:3e:ae:df:0c:26:b7:85:c2:a8:db:7a:1c:b3:b3: 46:a2:28:8a:bd:dc:58:74:73:21:d2:49:07:b1:9b:0e:9d:9e: 28:fd:77:e4:c8:82:a7:cf:89:fb:60:b0:9b:05:26:f5:39:e3: 4a:78:e7:b3:c6:cc:22:17:2a:75:5e:1a:51:be:47:21:42:0c: b4:cc:f3:83:33:e2:22:f0:67:92:e0:50:7f:e9:00:49:7f:65: 03:ae:be:ce:a8:8a:58:bb:d2:18:3c:05:f2:dd:3a:03:e5:7e: 60:25:ca:9d:ab:8f:6c:09:20:4e:63:e0:15:61:3a:84:81:06: 66:f8:3e:60:4d:cf:64:14:b2:89:a2:88:79:9f:4c:c2:c9:0c: 53:a4:af:09:c9:e7:4e:b8:a0:c0:d2:99:f8:99:61:2b:21:41: 77:aa:1b:35:ab:c2:86:3d:df:ea:c2:a0:a6:5d:0c:46:0c:c6: bb:7b:03:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO0r7bgIb2pKFTbHC5MOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj YmZkZDQwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD Eyg3MzkzMzUxOWQxZTQ5NjRkZDIzNjI2ODNlZmRiOTM5YTM2YzY2NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDwpG146PKitnljOzrfPpkjsi/zz F0Wk+MLtLHyavxTWe516+xzPxZO8I5SKlRz3rhNexvB+oKR25KDK6P+nzxLCSNyo ym7jNCcAzJSDm5s99ToJyRnzQpGpE0ahg+aJ8EGxpijphYY3jU1sXKHtCY24ZdWb GuxBtRTcOYW55lmu9EdJZ34VV1NquHXQT3HT+ibFCV6TqAscftH9N9oPhIIar7BX yQiqxIWh3t1Vt4EzY/y8+2RXlRoO6UAfiwcTTk9lZWEZ4jodTL/UEemQJqAR8O6h u7d1K2A1TSTupc2VtJ4h5oHRYu/4kJ2AZi3dm1xoQ2FEh/fmoZg/kfsbWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOTNRnR5JZN0jYmg+/bk5o2xmXQMB8GA1UdIwQY MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt M2FkYTM1MjY1MmI0LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0 LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVeW7+bO ArHr7pL4Pl86OHIQg08zle+8wxBb+43/ihjXRnDymhyJQRZDqJfv8MHPQwddLtSr IJkpp+qTvjzPZEdE+KoWbgdI4qrtQD6u3wwmt4XCqNt6HLOzRqIoir3cWHRzIdJJ B7GbDp2eKP135MiCp8+J+2CwmwUm9TnjSnjns8bMIhcqdV4aUb5HIUIMtMzzgzPi IvBnkuBQf+kASX9lA66+zqiKWLvSGDwF8t06A+V+YCXKnauPbAkgTmPgFWE6hIEG Zvg+YE3PZBSyiaKIeZ9MwskMU6SvCcnnTrigwNKZ+JlhKyFBd6obNavChj3f6sKg pl0MRgzGu3sDxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:38 2025 by rpki-client