This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json) Hash identifier: OILowaCYUNNlC81JmuZON3B9n5GC/2W6un8o89YsI/8= Subject key identifier: D7:0B:3D:E7:30:C8:4C:02:57:1E:29:5C:79:3F:72:B9:A3:97:30:AF Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e Certificate serial: 019AF3F732D651962AB4423A7B5DB77D6E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft Manifest number: 0D14 Signing time: Sat 06 Dec 2025 14:00:55 +0000 Manifest this update: Sat 06 Dec 2025 14:00:55 +0000 Manifest next update: Sun 07 Dec 2025 14:00:55 +0000 Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: dFTauHTjxszqyMjyHZvjdWjj1pMd07a8Sp5gotNVtAE=) 2: 8bvtISuekSRpBrLsSpaV6rAQww8.roa (hash: aP0bCcp5CUzuOtRFBu3Cv7XlqsZIi2ySA9u8hp6h1oU=) 3: HbFrbBDigmkbyhupjsQvR2G2rcg.roa (hash: DeaPvaz1CarpC6mp6iOUrw4n3hX9gcQTUiHE5Oraa94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:32:d6:51:96:2a:b4:42:3a:7b:5d:b7:7d:6e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e Validity Not Before: Dec 6 14:00:55 2025 GMT Not After : Dec 7 14:00:55 2025 GMT Subject: CN=d70b3de730c84c02571e295c793f72b9a39730af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:38:84:d1:42:02:17:3d:1f:05:cb:ea:70: 83:32:1e:30:c5:ff:93:d0:29:e8:88:08:f0:be:30: 2c:5a:d7:52:c9:f7:b5:12:97:be:86:80:65:21:6b: 82:b0:f7:f9:61:33:0b:35:86:ec:37:36:c3:81:37: 57:91:0a:29:b3:6a:c0:19:37:2a:14:0e:2e:ad:de: de:fe:1e:44:bd:52:af:7e:76:ef:2d:98:b1:28:bf: 8c:3e:05:68:2b:d4:c1:57:85:14:f0:9f:ad:25:4b: a4:e7:32:5d:93:34:0c:66:b5:80:b1:59:61:e7:82: 17:ff:26:c0:36:be:d5:b9:e7:18:8a:d1:d2:89:79: cd:3a:00:79:aa:4f:f9:92:ab:11:8f:84:3f:0d:95: d4:27:76:70:a2:61:44:49:ec:72:74:09:9a:e4:94: 87:17:6c:9b:74:73:98:a2:a9:f2:c0:0b:47:a1:e1: 96:f5:07:9d:9b:ef:04:14:16:71:6d:c7:9e:ed:1d: 08:08:fe:de:d7:e1:86:cb:ad:54:07:53:5a:14:fe: 37:6b:a2:57:32:36:2b:9e:2d:6e:d9:5e:75:85:96: 6e:c2:83:b8:28:70:21:44:1b:0d:37:14:b8:93:f4: 6d:ba:a0:91:d6:89:ac:5b:00:7c:8f:b6:04:9e:04: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0B:3D:E7:30:C8:4C:02:57:1E:29:5C:79:3F:72:B9:A3:97:30:AF X509v3 Authority Key Identifier: keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f6:44:8f:0e:d5:d8:bf:ab:a3:f7:2a:29:d5:e8:54:d9:6d: 0f:12:34:89:5e:c2:0c:2b:d4:c6:ee:a8:c0:09:cb:2d:a7:63: 19:fa:ad:03:57:3c:d2:e5:bf:39:3b:ae:0d:82:d2:02:e5:3c: 85:1e:c8:97:57:44:61:82:a9:d3:41:93:ad:b3:9e:8f:27:27: 96:84:98:c1:d3:5e:7e:fa:d0:21:6d:f8:fb:de:4f:94:bc:99: c6:13:96:aa:d6:e3:94:fe:7a:96:c6:47:6a:19:0d:f1:b3:c0: 09:d3:b5:f6:bc:2c:17:a8:66:41:f4:bf:56:3c:a3:ef:5e:2c: 32:33:f6:c9:f9:56:df:df:62:69:2b:6b:55:8a:1f:7e:af:d7: fb:05:59:51:a0:70:30:14:a3:af:a6:04:f6:0a:a4:26:8e:15: ce:ef:5b:77:1b:0a:30:e1:b9:d4:95:ef:cb:ce:38:79:e6:e1: 0f:9e:57:8a:d3:c4:57:6c:bc:07:69:50:db:14:66:dd:9d:66: e8:0c:00:52:ec:13:d7:3e:0b:5b:17:c0:91:87:f3:b3:81:06: f6:71:dc:29:fd:89:d6:9f:76:79:e8:f0:c7:f0:e0:98:db:bd: ca:fd:a1:41:a5:2f:6a:6a:50:00:2f:77:b1:d3:c1:9e:94:7f: 99:92:ae:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zLWUZYqtEI6e123fW5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2 NmIyMWUwHhcNMjUxMjA2MTQwMDU1WhcNMjUxMjA3MTQwMDU1WjAzMTEwLwYDVQQD EyhkNzBiM2RlNzMwYzg0YzAyNTcxZTI5NWM3OTNmNzJiOWEzOTczMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h04hNFCAhc9HwXL6nCDMh4wxf+T 0CnoiAjwvjAsWtdSyfe1Epe+hoBlIWuCsPf5YTMLNYbsNzbDgTdXkQops2rAGTcq FA4urd7e/h5EvVKvfnbvLZixKL+MPgVoK9TBV4UU8J+tJUuk5zJdkzQMZrWAsVlh 54IX/ybANr7VuecYitHSiXnNOgB5qk/5kqsRj4Q/DZXUJ3ZwomFESexydAma5JSH F2ybdHOYoqnywAtHoeGW9Qedm+8EFBZxbcee7R0ICP7e1+GGy61UB1NaFP43a6JX MjYrni1u2V51hZZuwoO4KHAhRBsNNxS4k/RtuqCR1omsWwB8j7YEngQeyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcLPecwyEwCVx4pXHk/crmjlzCvMB8GA1UdIwQY MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt ODA5MWViY2UzYmJmLzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfZEjw7V 2L+ro/cqKdXoVNltDxI0iV7CDCvUxu6owAnLLadjGfqtA1c80uW/OTuuDYLSAuU8 hR7Il1dEYYKp00GTrbOejycnloSYwdNefvrQIW34+95PlLyZxhOWqtbjlP56lsZH ahkN8bPACdO19rwsF6hmQfS/Vjyj714sMjP2yflW399iaStrVYoffq/X+wVZUaBw MBSjr6YE9gqkJo4Vzu9bdxsKMOG51JXvy844eebhD55XitPEV2y8B2lQ2xRm3Z1m 6AwAUuwT1z4LWxfAkYfzs4EG9nHcKf2J1p92eejwx/DgmNu9yv2hQaUvampQAC93 sdPBnpR/mZKuCw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:00 2025 by rpki-client