This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json) Hash identifier: kThMA6cektAmH13K3Xa34H4BfX8MKLqQstht6wcFf7c= Subject key identifier: F8:47:EE:59:3A:1B:3C:DE:CA:0C:BF:05:9B:3C:2E:AF:4E:DA:BB:B1 Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Certificate serial: 019AF19B50D49BB571F5644BF7B3B5447C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft Manifest number: 0827 Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: D3QxA4ItPSnNeKx/MK5T9Y3B1jPG40DbGM1n/oT/jzE=) 2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:50:d4:9b:b5:71:f5:64:4b:f7:b3:b5:44:7c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=f847ee593a1b3cdeca0cbf059b3c2eaf4edabbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:47:f3:1f:21:ad:85:3d:91:2e:a0:50:c7: 56:a3:56:20:32:9e:66:ae:06:ea:9a:a4:73:55:25: aa:62:fb:73:70:81:1a:39:fc:ca:7f:25:8f:33:23: 71:51:3e:54:dd:45:5f:ca:93:45:ab:9f:fe:95:07: b1:fa:78:ab:9c:ae:b7:79:6b:1c:84:ba:8e:5f:4e: b1:07:53:ca:46:f4:8e:ca:e6:51:5a:48:82:9b:11: 47:2a:11:87:5f:bc:35:1a:ab:e1:73:76:95:35:98: 6d:cc:7a:82:98:65:16:d4:31:e8:55:28:5e:d9:c7: 3c:ce:72:93:57:14:38:22:62:af:4b:99:4d:e9:c8: 18:9d:07:e2:db:9b:08:af:2f:e0:e3:57:ca:f6:71: e4:fd:fa:80:88:89:35:a3:3d:db:61:9e:c9:87:01: 25:f0:4c:26:aa:a5:79:26:18:3c:99:3d:1e:ee:b5: 32:d7:78:3c:58:f8:c1:86:1f:3a:cc:52:80:58:a0: c3:42:6f:0a:1b:19:15:99:11:c1:b8:c4:3e:fe:5a: 9c:d7:cb:8b:7d:9d:e7:94:d2:93:74:cb:ce:af:9b: 32:52:3a:ce:08:38:e4:69:24:de:42:5c:68:5e:eb: e4:9a:c7:26:a4:27:bd:92:67:e7:ae:14:a5:9c:73: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:47:EE:59:3A:1B:3C:DE:CA:0C:BF:05:9B:3C:2E:AF:4E:DA:BB:B1 X509v3 Authority Key Identifier: keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fb:ec:e1:58:06:3b:1f:49:80:67:6e:ed:eb:62:fa:d7:ee: 4d:0f:ab:29:d2:1d:3f:96:b8:d1:b0:89:04:52:2f:ed:90:af: 14:43:2b:aa:9a:b4:d0:fe:a2:70:7b:d6:27:d3:4b:7f:f5:6d: cd:70:98:c8:59:56:b0:b4:a8:c0:ae:19:2e:30:33:91:e2:9d: f9:67:03:11:80:36:eb:08:4d:87:2a:9d:c0:06:97:67:f9:e7: 22:4a:4a:f0:d9:17:8f:37:21:aa:6c:0c:4e:08:7e:cc:a5:c1: 00:b1:64:99:93:70:52:75:2c:94:b5:7e:ff:ea:2f:b9:a5:c7: 57:51:e8:b3:4f:27:ae:76:d1:60:75:12:e5:a4:2b:03:89:17: 03:4e:df:d0:b0:4c:fc:01:4c:51:11:ad:fe:90:4d:0a:14:14: 26:63:42:14:fe:31:49:b7:51:b5:0d:47:43:1e:81:e2:6d:f6: ac:83:bf:2d:57:ce:36:dc:85:bb:4d:03:9e:48:a4:77:c4:f9: ab:44:fe:22:69:60:07:02:c8:f7:fc:85:42:d1:c1:df:d5:93: ec:3b:9a:d9:77:f8:43:5d:bb:5e:ce:c9:dd:9d:a7:09:21:ed: 4c:dd:92:dc:77:03:01:75:b7:a9:9d:53:39:e2:66:1d:03:0b: fc:4c:54:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1DUm7Vx9WRL97O1RHwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl ZjM1N2MwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EyhmODQ3ZWU1OTNhMWIzY2RlY2EwY2JmMDU5YjNjMmVhZjRlZGFiYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuxH8x8hrYU9kS6gUMdWo1YgMp5m rgbqmqRzVSWqYvtzcIEaOfzKfyWPMyNxUT5U3UVfypNFq5/+lQex+nirnK63eWsc hLqOX06xB1PKRvSOyuZRWkiCmxFHKhGHX7w1Gqvhc3aVNZhtzHqCmGUW1DHoVShe 2cc8znKTVxQ4ImKvS5lN6cgYnQfi25sIry/g41fK9nHk/fqAiIk1oz3bYZ7JhwEl 8EwmqqV5Jhg8mT0e7rUy13g8WPjBhh86zFKAWKDDQm8KGxkVmRHBuMQ+/lqc18uL fZ3nlNKTdMvOr5syUjrOCDjkaSTeQlxoXuvkmscmpCe9kmfnrhSlnHMB6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhH7lk6Gzzeygy/BZs8Lq9O2ruxMB8GA1UdIwQY MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt M2NkMzNmZjMyNzQzLzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEtM2NkMzNmZjMyNzQz LzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfvs4VgG Ox9JgGdu7eti+tfuTQ+rKdIdP5a40bCJBFIv7ZCvFEMrqpq00P6icHvWJ9NLf/Vt zXCYyFlWsLSowK4ZLjAzkeKd+WcDEYA26whNhyqdwAaXZ/nnIkpK8NkXjzchqmwM Tgh+zKXBALFkmZNwUnUslLV+/+ovuaXHV1Hos08nrnbRYHUS5aQrA4kXA07f0LBM /AFMURGt/pBNChQUJmNCFP4xSbdRtQ1HQx6B4m32rIO/LVfONtyFu00Dnkikd8T5 q0T+ImlgBwLI9/yFQtHB39WT7Dua2Xf4Q127Xs7J3Z2nCSHtTN2S3HcDAXW3qZ1T OeJmHQML/ExUGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:32 2025 by rpki-client