This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json) Hash identifier: jFJ8mIccv1sgbIYubdv2IcW7Lfb7qsuUR+cxiZiFu5U= Subject key identifier: 38:FA:48:16:5A:5A:8A:AA:56:7F:5D:C4:46:81:7D:82:71:52:75:0B Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 019AF50AA89E5A4AD55F8289DD0665DCBB82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft Manifest number: 0338 Signing time: Sat 06 Dec 2025 19:01:47 +0000 Manifest this update: Sat 06 Dec 2025 19:01:47 +0000 Manifest next update: Sun 07 Dec 2025 19:01:47 +0000 Files and hashes: 1: 2wr3VnHPGzlL2arFNUC9_MLTdaY.roa (hash: riabhN7uUC9dX01WplUZkRt4qxUdWnv+rCQJ9LvkhhE=) 2: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: MjcAJjEA6j7jkNKV8vfiuP6Hic77Z/lVlYX+6voglNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a8:9e:5a:4a:d5:5f:82:89:dd:06:65:dc:bb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Dec 6 19:01:47 2025 GMT Not After : Dec 7 19:01:47 2025 GMT Subject: CN=38fa48165a5a8aaa567f5dc446817d827152750b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:62:ef:d8:8f:a7:3c:93:16:41:c9:43:6d: 9d:45:70:ec:0c:16:45:c9:d7:63:eb:1f:70:e8:4e: 72:d9:ab:72:5b:2c:7a:88:d2:11:18:d6:a5:bd:4a: 33:7b:7e:3e:43:d6:02:d1:85:08:ad:47:4d:59:7c: 85:a7:58:38:b8:c4:96:2b:dc:c7:fd:2e:d5:83:90: 84:01:43:93:69:af:f5:75:32:a9:9d:31:32:18:2b: 17:4b:0f:72:de:ac:4f:30:cd:d9:5c:bb:5c:1c:6e: 18:e0:98:2e:a9:0e:e1:38:43:ba:bd:7c:7a:d4:3f: 33:79:e9:95:66:fc:40:a9:9b:36:4e:f2:74:5f:a0: 4f:87:18:ab:fa:1d:30:99:a1:d2:a6:c9:dd:91:d3: 8e:4c:f0:90:05:cf:5d:32:e8:87:c8:d7:39:99:90: 2c:47:8c:b1:ac:1e:35:67:cf:0e:fb:9e:9d:36:57: 92:8a:49:3c:8a:a8:2a:8a:69:b6:50:11:b0:12:ab: 01:89:bf:91:75:50:30:10:a8:38:76:a8:d8:b0:df: 2f:bf:97:1b:80:9e:77:49:ff:a8:af:3d:54:a3:fe: ac:45:af:e6:7f:61:32:bc:cd:d4:2e:85:21:3a:f7: 89:a5:60:3e:53:5a:a2:df:8c:51:db:72:f1:bb:a2: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FA:48:16:5A:5A:8A:AA:56:7F:5D:C4:46:81:7D:82:71:52:75:0B X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c8:6f:5d:50:fc:66:37:66:95:e8:eb:ef:da:18:f9:c7:80: 68:2f:ed:b5:e5:01:9a:39:c1:1c:ea:68:26:c4:e5:69:8c:3f: 25:ca:26:3c:7e:13:01:09:b8:b2:63:36:88:1e:d3:89:d8:af: 08:cd:63:5e:f4:3e:04:af:82:d7:26:91:a5:26:03:17:6e:da: b8:4a:fb:ae:10:43:db:93:4d:e8:62:32:3f:85:b0:64:35:b7: 50:a2:1b:34:98:5f:1e:30:9e:93:05:fb:c3:11:84:1b:e7:1d: 99:cc:2a:a7:91:77:24:a9:eb:0f:80:86:71:fe:fb:12:aa:8d: a9:a6:e9:87:8f:14:28:dc:ca:f1:da:14:c5:93:dc:c3:1a:d8: 02:2e:a9:94:1c:11:52:ae:af:fb:e6:7f:48:2f:a1:28:7b:9a: 95:b7:a5:54:43:0b:0b:bf:9a:4f:24:01:19:91:39:ea:5e:97: ac:55:a8:1e:f8:86:1c:73:d9:00:5b:44:9a:bc:a6:bd:e2:be: a3:ab:a1:9b:29:56:ab:72:35:81:15:67:df:9e:26:bb:e8:84: 72:5f:c9:dd:6f:4e:6c:be:98:b4:6f:30:02:fd:00:bc:c3:cf: 83:20:12:62:f4:2b:49:cb:00:82:bf:e2:cc:99:b7:a6:6f:0d: ce:78:6c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqieWkrVX4KJ3QZl3LuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjUxMjA2MTkwMTQ3WhcNMjUxMjA3MTkwMTQ3WjAzMTEwLwYDVQQD EygzOGZhNDgxNjVhNWE4YWFhNTY3ZjVkYzQ0NjgxN2Q4MjcxNTI3NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ1i79iPpzyTFkHJQ22dRXDsDBZF yddj6x9w6E5y2atyWyx6iNIRGNalvUoze34+Q9YC0YUIrUdNWXyFp1g4uMSWK9zH /S7Vg5CEAUOTaa/1dTKpnTEyGCsXSw9y3qxPMM3ZXLtcHG4Y4JguqQ7hOEO6vXx6 1D8zeemVZvxAqZs2TvJ0X6BPhxir+h0wmaHSpsndkdOOTPCQBc9dMuiHyNc5mZAs R4yxrB41Z88O+56dNleSikk8iqgqimm2UBGwEqsBib+RdVAwEKg4dqjYsN8vv5cb gJ53Sf+orz1Uo/6sRa/mf2EyvM3ULoUhOveJpWA+U1qi34xR23Lxu6LF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDj6SBZaWoqqVn9dxEaBfYJxUnULMB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMchvXVD8 Zjdmlejr79oY+ceAaC/tteUBmjnBHOpoJsTlaYw/JcomPH4TAQm4smM2iB7Tidiv CM1jXvQ+BK+C1yaRpSYDF27auEr7rhBD25NN6GIyP4WwZDW3UKIbNJhfHjCekwX7 wxGEG+cdmcwqp5F3JKnrD4CGcf77EqqNqabph48UKNzK8doUxZPcwxrYAi6plBwR Uq6v++Z/SC+hKHualbelVEMLC7+aTyQBGZE56l6XrFWoHviGHHPZAFtEmrymveK+ o6uhmylWq3I1gRVn354mu+iEcl/J3W9ObL6YtG8wAv0AvMPPgyASYvQrScsAgr/i zJm3pm8Nznhs5w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:07 2025 by rpki-client