This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json) Hash identifier: OzHHPG/Bp52hPrXxopaKN+8zSdTfONU4QDZ57D7HHH4= Subject key identifier: E4:01:59:5D:74:9E:27:F6:9F:5D:1C:7C:A5:19:49:FD:66:2F:D3:9F Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Certificate serial: 019AF42E0B062835BC81DC03DB037E8E0A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft Manifest number: 1152 Signing time: Sat 06 Dec 2025 15:00:49 +0000 Manifest this update: Sat 06 Dec 2025 15:00:49 +0000 Manifest next update: Sun 07 Dec 2025 15:00:49 +0000 Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=) 2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=) 3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: Wlh63BXMZqZVxanIw7doxgoBcv4MUuC3/DsQ7Wzc1O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:0b:06:28:35:bc:81:dc:03:db:03:7e:8e:0a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Validity Not Before: Dec 6 15:00:49 2025 GMT Not After : Dec 7 15:00:49 2025 GMT Subject: CN=e401595d749e27f69f5d1c7ca51949fd662fd39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2c:34:bc:9e:87:df:fc:21:01:ab:11:99:b1: 09:2b:8f:ea:76:83:57:1f:fd:03:f9:05:9a:fa:90: f0:25:a7:d5:c4:13:36:11:ad:3f:5d:17:d3:d4:0b: 92:b4:d2:f4:33:90:55:40:af:79:a5:58:b4:e2:30: ff:b6:39:ef:9f:d8:26:29:91:85:27:d3:65:82:1e: e7:75:7c:5d:97:39:0a:1a:20:6c:b4:b0:34:61:9a: 66:30:d1:ac:a9:b2:e3:0d:14:97:03:c3:68:4b:45: 59:f2:14:68:2d:26:b5:9b:4a:4d:7d:27:0b:6e:f4: e0:35:ea:b7:30:f0:93:19:ef:8b:c3:a4:c1:e8:8e: d3:51:4e:83:2f:32:23:1f:2c:00:79:c7:d9:c0:46: d8:62:0e:99:6c:68:b5:a4:63:fe:63:e5:0d:c8:7e: 8e:9a:35:04:3b:ea:6f:15:01:57:06:7a:9a:b0:b9: a6:87:ae:0c:e0:0b:01:2b:95:de:9a:69:d0:ce:74: 3d:32:6b:b3:3d:c3:c8:47:02:04:77:de:1d:14:c8: 51:9f:7e:ad:2b:6a:76:a9:12:30:34:01:d4:a4:a6: ef:8d:40:83:9f:5e:96:7c:e4:63:a4:1c:20:29:ec: e9:49:50:15:87:fc:c3:08:0f:1d:f0:4a:1e:b9:7f: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:59:5D:74:9E:27:F6:9F:5D:1C:7C:A5:19:49:FD:66:2F:D3:9F X509v3 Authority Key Identifier: keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e6:c6:24:2a:39:bf:dd:4f:28:92:49:66:63:cc:b5:60:d7: 4f:a5:a9:c5:f5:32:fd:22:25:65:20:ef:6a:96:25:2e:14:6e: 47:b8:6f:e1:3d:52:28:2f:81:ae:f8:a8:c4:78:76:d7:36:99: 7c:d8:fa:e2:f0:9a:75:75:50:1b:c8:8e:2e:82:68:51:d1:80: 73:94:2e:dd:3b:0e:a6:0a:6e:ac:87:73:0a:a4:2d:0d:51:49: a1:fc:14:4b:a3:1e:fa:a9:90:73:81:7c:94:b6:43:c6:84:8f: ab:2a:53:5b:39:91:91:e5:24:22:99:67:81:d5:d7:e3:49:4a: 94:67:dd:4a:a3:3e:a3:96:fd:a4:57:ed:bb:ad:f4:d7:11:a9: a6:ba:1e:67:a4:14:7d:34:aa:66:83:a3:05:ef:4d:4a:6b:6b: dd:99:26:f5:92:70:13:59:3d:f8:c0:b7:83:57:f1:6a:06:31: 90:77:b2:41:b0:02:9a:aa:f7:39:9e:3e:c1:c4:1b:4c:d3:2e: cc:75:21:f2:0d:7c:01:b5:53:ba:d8:bb:ba:0b:f6:4a:86:a0: 8f:da:96:08:75:0b:7e:81:d8:df:0d:bf:5f:15:8e:4e:64:7b: 60:37:b7:02:68:10:72:8c:d5:16:3b:48:0c:f2:91:3f:ac:21: 6b:b0:d0:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgsGKDW8gdwD2wN+jgobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl OTVjYWYwHhcNMjUxMjA2MTUwMDQ5WhcNMjUxMjA3MTUwMDQ5WjAzMTEwLwYDVQQD EyhlNDAxNTk1ZDc0OWUyN2Y2OWY1ZDFjN2NhNTE5NDlmZDY2MmZkMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cw0vJ6H3/whAasRmbEJK4/qdoNX H/0D+QWa+pDwJafVxBM2Ea0/XRfT1AuStNL0M5BVQK95pVi04jD/tjnvn9gmKZGF J9Nlgh7ndXxdlzkKGiBstLA0YZpmMNGsqbLjDRSXA8NoS0VZ8hRoLSa1m0pNfScL bvTgNeq3MPCTGe+Lw6TB6I7TUU6DLzIjHywAecfZwEbYYg6ZbGi1pGP+Y+UNyH6O mjUEO+pvFQFXBnqasLmmh64M4AsBK5XemmnQznQ9MmuzPcPIRwIEd94dFMhRn36t K2p2qRIwNAHUpKbvjUCDn16WfORjpBwgKezpSVAVh/zDCA8d8EoeuX9YEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQBWV10nif2n10cfKUZSf1mL9OfMB8GA1UdIwQY MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3 LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsebGJCo5 v91PKJJJZmPMtWDXT6WpxfUy/SIlZSDvapYlLhRuR7hv4T1SKC+BrvioxHh21zaZ fNj64vCadXVQG8iOLoJoUdGAc5Qu3TsOpgpurIdzCqQtDVFJofwUS6Me+qmQc4F8 lLZDxoSPqypTWzmRkeUkIplngdXX40lKlGfdSqM+o5b9pFftu6301xGpproeZ6QU fTSqZoOjBe9NSmtr3Zkm9ZJwE1k9+MC3g1fxagYxkHeyQbACmqr3OZ4+wcQbTNMu zHUh8g18AbVTuti7ugv2Soagj9qWCHULfoHY3w2/XxWOTmR7YDe3AmgQcozVFjtI DPKRP6wha7DQ5g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:20 2025 by rpki-client