This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft File: 4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json) Hash identifier: XnuJFAbaq6HIW1QpI+OnrNMWAOiXqhSIb3BVHoQFAvU= Subject key identifier: B2:EE:E7:CA:42:17:5E:A4:7D:AC:1B:1E:2D:3A:DD:7D:05:F8:13:0D Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f Certificate serial: 019AF2ADE0E9EFBB360AB6851DBA400F787D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft Manifest number: 06C2 Signing time: Sat 06 Dec 2025 08:01:12 +0000 Manifest this update: Sat 06 Dec 2025 08:01:12 +0000 Manifest next update: Sun 07 Dec 2025 08:01:12 +0000 Files and hashes: 1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: dV5CGmZiq1fKNYL4bVYI5WlQz6LYGGI6vpNvNxScFkE=) 2: THpGYC3KAh4Nh2aSf_ElMpZJEww.roa (hash: 6eDhHzhaISARxdiDWICa8Q3A3/Q7+g+k7UoN1vc+WFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e0:e9:ef:bb:36:0a:b6:85:1d:ba:40:0f:78:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f Validity Not Before: Dec 6 08:01:12 2025 GMT Not After : Dec 7 08:01:12 2025 GMT Subject: CN=b2eee7ca42175ea47dac1b1e2d3add7d05f8130d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:d1:13:8f:f1:c7:81:1b:8c:78:51:c0:31: a9:2e:c4:29:ff:a5:85:57:69:62:52:4c:66:f0:1f: 28:7c:cb:a1:a8:de:30:94:6e:1d:0a:5e:69:e9:6b: 4b:23:8b:59:cb:ec:df:f2:db:f7:53:8a:c7:02:a8: 49:61:b1:ab:28:38:f2:14:a4:72:b8:50:20:82:8e: e9:c9:96:64:27:cc:e7:0f:88:ee:47:06:bd:7a:b1: f3:9a:c9:14:0f:f1:02:4d:73:75:87:6e:35:a6:68: 6c:72:7b:09:60:f9:f9:ac:2f:92:3b:a6:8f:7a:8c: 84:9c:44:6c:19:85:fb:55:f4:c9:fd:1e:c9:6d:19: 5e:20:91:f3:03:c7:cd:35:65:9e:fa:15:bb:ff:ca: c9:8e:82:7d:80:b0:32:23:61:ca:82:23:e5:b6:d0: 3d:e9:72:4a:ea:a6:24:b1:1a:51:dc:97:f6:c0:da: 23:67:48:46:b9:c7:0a:bb:97:7b:58:b9:d1:17:78: 76:3f:7f:81:7b:b1:2d:73:e3:10:61:00:22:ed:d6: 12:14:c9:cc:c3:13:62:12:07:02:cc:f6:3f:15:d8: 6a:e8:ef:10:1d:2e:c3:02:2f:5c:15:7d:23:c0:f7: 5f:b7:b5:1c:0e:26:b3:a3:a1:69:16:41:40:24:f4: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EE:E7:CA:42:17:5E:A4:7D:AC:1B:1E:2D:3A:DD:7D:05:F8:13:0D X509v3 Authority Key Identifier: keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:e1:4f:bd:00:fb:b6:0c:ce:55:92:2a:a8:3b:06:72:5f: db:60:97:80:30:7a:c3:5e:8e:05:40:96:e7:9d:87:02:9e:cf: 85:2a:cc:fc:50:4c:60:a3:cc:12:a8:10:3b:88:88:8a:8a:ba: bf:8d:07:7f:af:e4:ed:58:27:0b:1a:25:5b:c8:df:13:aa:b7: 7d:0c:f6:d8:d7:eb:7c:18:51:e5:b3:de:b7:37:8a:1f:6c:dc: 9d:4b:e2:0d:5d:9e:c0:88:66:54:1a:45:ac:d8:de:b8:41:8c: 68:16:8b:8d:3d:ff:5b:19:3f:33:2d:c6:ce:d3:e0:f4:2b:86: cc:3f:bc:c2:59:d4:76:97:3d:f3:6d:4f:9d:12:3d:66:9f:7e: 78:06:82:e3:5f:30:62:53:15:c8:49:8c:4a:a1:47:74:0f:1e: 4f:6a:65:ac:6b:73:d7:f1:67:64:67:1d:8b:ad:03:1c:fd:8b: c4:05:b7:e9:85:70:33:cb:71:09:31:9c:f8:9b:a1:84:55:d5: 41:3f:0b:f3:36:7b:07:48:9a:46:c4:3e:5e:46:e7:bc:a1:49: 5f:e6:db:a7:f7:72:c8:25:c1:50:1e:a6:1f:92:e5:2d:14:7d: 94:b6:8b:08:23:12:b2:72:f5:65:86:1c:92:8a:4e:7e:45:89: 52:6f:89:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreDp77s2CraFHbpAD3h9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2U2NmU0MDNkMzFjNzk1ODMzNTI5ODE2OGRlNjBhMjE1 YzBjMGYwHhcNMjUxMjA2MDgwMTEyWhcNMjUxMjA3MDgwMTEyWjAzMTEwLwYDVQQD EyhiMmVlZTdjYTQyMTc1ZWE0N2RhYzFiMWUyZDNhZGQ3ZDA1ZjgxMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskPRE4/xx4EbjHhRwDGpLsQp/6WF V2liUkxm8B8ofMuhqN4wlG4dCl5p6WtLI4tZy+zf8tv3U4rHAqhJYbGrKDjyFKRy uFAggo7pyZZkJ8znD4juRwa9erHzmskUD/ECTXN1h241pmhscnsJYPn5rC+SO6aP eoyEnERsGYX7VfTJ/R7JbRleIJHzA8fNNWWe+hW7/8rJjoJ9gLAyI2HKgiPlttA9 6XJK6qYksRpR3Jf2wNojZ0hGuccKu5d7WLnRF3h2P3+Be7Etc+MQYQAi7dYSFMnM wxNiEgcCzPY/Fdhq6O8QHS7DAi9cFX0jwPdft7UcDiazo6FpFkFAJPSpZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLu58pCF16kfawbHi063X0F+BMNMB8GA1UdIwQY MBaAFOJ+ZuQD0xx5WDNSmBaN5gohXAwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMt NmU2ZTc2ZjM3OTQ2LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMtNmU2ZTc2ZjM3OTQ2 LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB7hT70A +7YMzlWSKqg7BnJf22CXgDB6w16OBUCW552HAp7PhSrM/FBMYKPMEqgQO4iIioq6 v40Hf6/k7VgnCxolW8jfE6q3fQz22NfrfBhR5bPetzeKH2zcnUviDV2ewIhmVBpF rNjeuEGMaBaLjT3/Wxk/My3GztPg9CuGzD+8wlnUdpc9821PnRI9Zp9+eAaC418w YlMVyEmMSqFHdA8eT2plrGtz1/FnZGcdi60DHP2LxAW36YVwM8txCTGc+JuhhFXV QT8L8zZ7B0iaRsQ+XkbnvKFJX+bbp/dyyCXBUB6mH5LlLRR9lLaLCCMSsnL1ZYYc kopOfkWJUm+JkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:34 2025 by rpki-client