This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json) Hash identifier: m/foT724ZSunqstGPpDldmvjrlki7XJTnAu6xq/3VWM= Subject key identifier: 3B:72:86:0D:74:36:2D:EF:1A:40:5F:77:96:A5:9B:B6:D2:9B:E9:71 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019AF49C2D5EE81741EFEF6B5C51A8664BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 17:01:07 +0000 Manifest this update: Sat 06 Dec 2025 17:01:07 +0000 Manifest next update: Sun 07 Dec 2025 17:01:07 +0000 Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: PKtLcgN3bHZzzuuG637f3QzCFaQgANUs5yZFAFAHG8w=) 2: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (hash: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=) 3: AoQHR-c0TNu8hCvrBSny9rtvc-s.roa (hash: OjMzYAMFYdPVuu7HxYZKXpI6mzGVW1BBR3UyiRLx1pA=) 4: EQbezCZuZ92DkuV3XJNIJgpMcwQ.roa (hash: ouC7+qG8m6kvP27Cs9N1FzVBn73sZt27mXI2ZqqBOYg=) 5: LDm4Z6KcMo2VYx3_khyYeC8O4Iw.roa (hash: zcLdl9fx/6GOLrBrDhcPW18T+TQSB2ZgDSkWNEHGluY=) 6: OVTjGADJ7YYJwQ0oJOwTN2X0vSY.roa (hash: qsBTTkXpQxhgbXJV5zUDTdGyL3Kcpnnbr12OpzsF9V0=) 7: eXkwSgVPS9XZOX05ekvLiV3Hea8.roa (hash: hwC7YsLscA1OGWq1yDoBRShx/gTjgCqvH47aihQduUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2d:5e:e8:17:41:ef:ef:6b:5c:51:a8:66:4b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Dec 6 17:01:07 2025 GMT Not After : Dec 7 17:01:07 2025 GMT Subject: CN=3b72860d74362def1a405f7796a59bb6d29be971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:79:a5:51:16:3e:e7:63:fa:75:b7:88:46: 9e:c1:5a:74:05:ea:b5:b1:75:99:68:31:2d:53:ec: d6:4e:c7:62:38:4d:7b:1f:84:2b:e2:c3:20:21:80: 5a:b6:c4:8e:68:10:ca:f7:61:18:ec:fa:71:40:c6: d2:61:8a:34:9c:6f:0c:e1:a2:c5:3d:7d:9b:08:bd: f9:91:ba:e9:35:47:10:ae:11:02:b1:b9:4b:b5:2d: b3:9a:46:88:b4:5a:8c:3e:e6:1c:ca:81:f1:e0:f5: d9:0a:8f:91:af:49:1c:d6:52:af:ca:03:eb:74:91: 6a:5d:3b:54:00:78:3c:d8:9f:b7:46:37:9e:43:12: b9:04:2c:3c:a1:7c:bd:98:1c:7b:3a:3b:e2:09:3f: af:4f:00:69:fc:cf:07:81:0b:07:c7:7f:35:26:a2: ad:70:7b:67:53:a9:db:32:6b:74:cf:29:dc:37:3e: 5d:14:99:e6:9a:aa:ba:4f:21:29:01:78:ff:e3:bc: 36:d7:34:f7:00:48:68:d5:1f:5c:01:93:34:6c:a5: 54:01:5f:63:a0:39:bf:8e:60:2f:f6:4c:ab:8f:01: 8f:49:2d:20:ba:ff:54:c6:86:04:41:e9:8b:22:47: f6:8a:a2:a4:d7:11:3e:f4:2f:a3:8a:6d:57:75:7f: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:72:86:0D:74:36:2D:EF:1A:40:5F:77:96:A5:9B:B6:D2:9B:E9:71 X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:55:c0:a0:b8:d9:72:b2:05:7d:26:b9:7b:5d:bf:7e:ad:02: b8:71:26:5f:19:05:df:65:52:a2:82:60:0a:06:35:46:ea:28: 29:18:34:68:92:8f:b4:0b:3e:fe:db:17:d1:dd:b4:0f:55:7e: ea:1f:cb:5e:77:03:6d:d2:82:83:f1:75:64:9e:89:25:07:31: e1:a5:57:04:5e:7b:01:2c:a9:fc:7b:bf:f9:4a:34:3a:f4:60: c9:d5:35:cb:11:b4:c7:c4:35:79:41:5b:16:cc:7e:88:71:c0: a1:16:ba:8b:5d:6b:be:23:d2:6f:c4:1e:16:da:e5:48:97:be: 7f:67:2b:a8:3a:33:5e:6e:44:0e:21:59:99:1c:7f:8f:71:9d: 00:00:27:1e:a8:11:42:cf:96:24:e0:d1:4e:e0:6f:4f:78:fe: 5c:d8:d0:30:c8:71:0a:99:7a:e3:f5:cf:ec:0d:d5:a1:bc:58: c0:3b:3b:00:72:3f:90:85:04:77:3e:67:d0:1d:85:d6:7b:65: c5:56:ae:63:0d:33:a1:fd:5e:58:b6:c3:36:b5:05:68:89:6d: ad:6e:c5:6f:5f:ee:ec:3c:03:87:31:23:5f:9c:aa:7e:b4:3c: d6:c1:64:cc:c0:50:93:30:eb:95:8d:0e:bf:ed:91:78:cf:0a: 0f:89:5f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nC1e6BdB7+9rXFGoZkvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjUxMjA2MTcwMTA3WhcNMjUxMjA3MTcwMTA3WjAzMTEwLwYDVQQD EygzYjcyODYwZDc0MzYyZGVmMWE0MDVmNzc5NmE1OWJiNmQyOWJlOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw15pVEWPudj+nW3iEaewVp0Beq1 sXWZaDEtU+zWTsdiOE17H4Qr4sMgIYBatsSOaBDK92EY7PpxQMbSYYo0nG8M4aLF PX2bCL35kbrpNUcQrhECsblLtS2zmkaItFqMPuYcyoHx4PXZCo+Rr0kc1lKvygPr dJFqXTtUAHg82J+3RjeeQxK5BCw8oXy9mBx7OjviCT+vTwBp/M8HgQsHx381JqKt cHtnU6nbMmt0zyncNz5dFJnmmqq6TyEpAXj/47w21zT3AEho1R9cAZM0bKVUAV9j oDm/jmAv9kyrjwGPSS0guv9UxoYEQemLIkf2iqKk1xE+9C+jim1XdX9ZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtyhg10Ni3vGkBfd5alm7bSm+lxMB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVXAoLjZ crIFfSa5e12/fq0CuHEmXxkF32VSooJgCgY1RuooKRg0aJKPtAs+/tsX0d20D1V+ 6h/LXncDbdKCg/F1ZJ6JJQcx4aVXBF57ASyp/Hu/+Uo0OvRgydU1yxG0x8Q1eUFb Fsx+iHHAoRa6i11rviPSb8QeFtrlSJe+f2crqDozXm5EDiFZmRx/j3GdAAAnHqgR Qs+WJODRTuBvT3j+XNjQMMhxCpl64/XP7A3VobxYwDs7AHI/kIUEdz5n0B2F1ntl xVauYw0zof1eWLbDNrUFaIltrW7Fb1/u7DwDhzEjX5yqfrQ81sFkzMBQkzDrlY0O v+2ReM8KD4lfTg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:46 2025 by rpki-client