This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json) Hash identifier: XYYunpxahYkJYZIUzKkL861iJcykxeOZAfhBFZnFuUk= Subject key identifier: BE:AA:E5:00:8E:8A:7E:2E:DB:ED:DE:A6:BD:62:56:EB:81:D3:FC:51 Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26 Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626 Certificate serial: 019AF12EB95C6C2FCBF8F34B6342D9651C95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft Manifest number: 083A Signing time: Sat 06 Dec 2025 01:02:42 +0000 Manifest this update: Sat 06 Dec 2025 01:02:42 +0000 Manifest next update: Sun 07 Dec 2025 01:02:42 +0000 Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: 4De5JW6SNU75WKeav8KdOzprnBhVJ/Ww4mD5WCwu5cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b9:5c:6c:2f:cb:f8:f3:4b:63:42:d9:65:1c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626 Validity Not Before: Dec 6 01:02:42 2025 GMT Not After : Dec 7 01:02:42 2025 GMT Subject: CN=beaae5008e8a7e2edbeddea6bd6256eb81d3fc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:96:96:00:01:1c:40:89:82:ff:4c:53:dd: e1:a4:db:9d:61:cf:8c:1b:3f:20:db:55:2d:92:db: ab:d1:3e:05:6c:87:61:19:d1:98:ff:c9:8e:d3:dd: 42:fc:1c:4b:1b:05:25:d4:d0:ff:4f:8a:0a:1a:cc: d3:f4:f5:ed:5c:2c:0f:21:96:d0:7e:b4:d8:8c:88: d9:19:e7:58:b9:01:e6:f8:3f:10:32:89:5f:f0:88: fb:36:2a:e1:90:50:00:c3:51:f2:2a:ac:22:2a:87: fb:43:24:91:b5:bd:b1:8c:95:8d:1a:d6:17:d9:b3: 08:a0:9c:ab:55:23:e2:2b:04:89:bc:5e:67:ec:6f: b9:c0:5b:0d:ea:ac:6c:af:5c:6a:47:b5:c4:84:2d: 02:56:c8:80:eb:3a:2d:60:98:ec:93:c8:52:a0:24: 25:49:7e:b5:82:05:62:ed:a8:f0:95:18:c6:c8:3f: 16:cd:36:4c:8b:fc:c6:a6:f8:07:de:a0:1e:be:b3: 4a:69:40:44:e4:71:06:bc:a4:09:4a:a8:93:20:33: 5d:37:fc:d1:c3:d6:30:69:ba:ac:66:67:2a:87:e2: 79:a0:59:2a:10:1a:44:da:4c:17:3c:af:35:9b:66: 3f:e3:e9:7e:e1:af:85:97:9c:36:71:40:34:a0:b4: c7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:E5:00:8E:8A:7E:2E:DB:ED:DE:A6:BD:62:56:EB:81:D3:FC:51 X509v3 Authority Key Identifier: keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:24:d7:5b:ed:6f:b9:8d:58:24:c1:85:1d:b6:12:76:8e:c4: 26:7a:ff:3a:3f:21:06:85:41:85:cd:2a:f3:6f:26:88:b1:0b: 33:9a:48:e6:42:ba:bf:25:1f:7d:df:33:5b:2f:11:8b:64:eb: 5e:42:7f:a3:72:ff:b9:b5:66:7b:7b:bb:f7:ff:b8:0c:aa:e6: 26:9a:e1:35:a9:f7:5a:9b:ff:0d:bd:9c:8c:0f:ba:5b:a4:d2: 09:81:26:53:fd:b0:2e:98:0d:5d:2a:03:e5:89:73:2b:f7:4f: e4:1b:1d:f4:dc:d0:fb:76:8f:d5:7b:5d:dc:cb:8b:76:82:f7: 64:f1:d9:03:06:cc:68:fe:fb:72:72:e1:68:bf:81:b4:0d:14: 72:2c:ce:36:33:60:b2:08:88:f3:24:1c:4e:d6:15:47:25:5e: 05:7b:84:9d:e9:18:bd:7e:b6:2c:74:9c:55:e0:4d:b6:e9:0d: 37:b1:7c:67:8d:37:94:43:fe:8c:3c:b6:eb:58:e1:de:da:13: 42:01:7c:14:76:f1:11:e2:93:f8:e0:3d:5d:30:39:9a:30:3d: e6:04:d3:a2:ca:ab:38:dd:fb:c8:76:95:5b:63:b3:06:2f:75: c9:6f:52:a4:59:17:6a:e0:56:2b:e6:a7:e8:b5:a3:68:91:ff: 9d:14:2e:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrlcbC/L+PNLY0LZZRyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDcxYzUzNWFhN2EwYWNlOTNmYWRhYmRiNjU4M2Y4ODRh NmM2MjYwHhcNMjUxMjA2MDEwMjQyWhcNMjUxMjA3MDEwMjQyWjAzMTEwLwYDVQQD EyhiZWFhZTUwMDhlOGE3ZTJlZGJlZGRlYTZiZDYyNTZlYjgxZDNmYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8OWlgABHECJgv9MU93hpNudYc+M Gz8g21Utktur0T4FbIdhGdGY/8mO091C/BxLGwUl1ND/T4oKGszT9PXtXCwPIZbQ frTYjIjZGedYuQHm+D8QMolf8Ij7NirhkFAAw1HyKqwiKof7QySRtb2xjJWNGtYX 2bMIoJyrVSPiKwSJvF5n7G+5wFsN6qxsr1xqR7XEhC0CVsiA6zotYJjsk8hSoCQl SX61ggVi7ajwlRjGyD8WzTZMi/zGpvgH3qAevrNKaUBE5HEGvKQJSqiTIDNdN/zR w9YwabqsZmcqh+J5oFkqEBpE2kwXPK81m2Y/4+l+4a+Fl5w2cUA0oLTHAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6q5QCOin4u2+3epr1iVuuB0/xRMB8GA1UdIwQY MBaAFOLXHFNap6Cs6T+tq9tlg/iEpsYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRjY1UxcW5vS3pwUDYycjIyV0QtSVNteGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yYzcwOGItYjZlMi00ZGVmLWEyZDkt YjMxMDExMTM3YTU3LzEvNHRjY1UxcW5vS3pwUDYycjIyV0QtSVNteGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yYzcwOGItYjZlMi00ZGVmLWEyZDktYjMxMDExMTM3YTU3 LzEvNHRjY1UxcW5vS3pwUDYycjIyV0QtSVNteGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiTXW+1v uY1YJMGFHbYSdo7EJnr/Oj8hBoVBhc0q828miLELM5pI5kK6vyUffd8zWy8Ri2Tr XkJ/o3L/ubVme3u79/+4DKrmJprhNan3Wpv/Db2cjA+6W6TSCYEmU/2wLpgNXSoD 5YlzK/dP5Bsd9NzQ+3aP1Xtd3MuLdoL3ZPHZAwbMaP77cnLhaL+BtA0UcizONjNg sgiI8yQcTtYVRyVeBXuEnekYvX62LHScVeBNtukNN7F8Z403lEP+jDy261jh3toT QgF8FHbxEeKT+OA9XTA5mjA95gTTosqrON37yHaVW2OzBi91yW9SpFkXauBWK+an 6LWjaJH/nRQu5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:42 2025 by rpki-client