This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json) Hash identifier: kMlcceUw0yCY9zxxkDVJtyY/TiOwEdnx/KCujFIa2wk= Subject key identifier: 0D:4E:89:D8:78:91:E3:7E:94:69:BB:22:BA:99:EB:82:5A:7E:3C:D1 Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38 Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38 Certificate serial: 019AF12DE8527AE68C2ABFBA8482DC2C62D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: Z7FLUqIUkexmIxC8mBcZa+iElCA9i5zOvcXoTZa/mLI=) 2: STK2SAlRO7jYy3vcEqTR9ikjblA.roa (hash: k6oW+GQsDjU/vILzjfv+z+LTQhLzDJ0y7rBRC2wvlVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e8:52:7a:e6:8c:2a:bf:ba:84:82:dc:2c:62:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38 Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=0d4e89d87891e37e9469bb22ba99eb825a7e3cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:8d:5e:5c:76:bf:a0:ed:46:66:c1:94:ae: a6:ec:b5:54:d5:32:38:f7:cf:f1:d7:92:c5:59:5e: 14:3f:35:87:d4:b5:e6:ab:23:16:ee:47:aa:00:40: 8f:77:ba:3b:b7:e5:ec:af:dd:4f:b6:4f:e0:7b:f6: 49:2e:79:46:12:76:29:fe:be:da:0f:eb:f2:84:36: 3c:1b:c2:dc:9e:cf:53:9b:ef:6e:93:cf:f6:bf:bf: 27:5c:5b:fb:93:70:d5:11:49:96:ff:ba:3f:66:ee: d4:fb:be:d0:96:d9:02:68:79:79:ad:6c:4c:31:96: 74:11:47:33:7c:45:6c:89:f2:49:da:1a:0f:6e:a3: ea:b2:7b:d0:95:b0:2f:3c:d5:7e:2b:db:b9:e9:f7: 86:76:ac:a6:e0:f7:df:d0:3a:3c:f0:41:88:e7:63: 95:91:cc:08:a4:06:b7:e3:0a:1a:f8:64:78:b1:29: e5:1f:b3:b9:e5:73:72:6b:a2:7b:41:cd:73:68:23: 49:7c:6d:b8:9e:74:5c:ec:21:15:a3:a7:53:ab:44: 5e:df:f3:ac:b8:69:55:a8:a2:b5:1e:98:76:d3:4b: 63:f8:ba:96:7c:fc:cd:a7:fa:39:da:b7:d8:0f:79: ba:75:35:d2:53:82:dc:42:18:55:8a:ba:d5:76:ba: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4E:89:D8:78:91:E3:7E:94:69:BB:22:BA:99:EB:82:5A:7E:3C:D1 X509v3 Authority Key Identifier: keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:38:9c:30:68:c7:e3:74:b3:6a:44:37:6c:2a:3c:4c:e5:d4: 00:9d:27:b4:94:f1:7d:31:a7:a0:d7:b7:65:fd:21:70:48:ca: f7:f2:83:b9:42:3b:dc:d2:03:53:87:bd:e1:c1:d7:65:ce:03: 0e:cc:cf:f5:2e:f8:71:27:ea:72:90:f2:7d:f9:4c:3c:6b:46: 0c:f9:34:95:48:32:f1:d7:18:d4:4e:f0:9e:fc:74:76:29:d3: d3:b1:c9:8c:cf:d5:97:24:7a:9a:71:4f:ef:70:98:f2:7e:19: c3:b4:3e:66:a5:d3:3a:6e:06:49:75:3a:3c:09:ce:86:8c:89: 46:d9:7c:6a:3f:cd:8d:48:3c:57:e8:f9:22:d3:90:fc:9f:82: e4:0d:ab:4d:78:ca:e6:8b:c9:12:9f:59:c6:c5:b2:81:e1:c5: c6:7d:05:d6:dc:e5:92:dd:01:c4:3a:c1:b2:c4:fc:3c:08:0e: 79:65:c0:32:5c:ea:66:42:f7:16:8c:c9:43:02:fc:7f:94:dd: be:b1:e0:93:92:de:28:c7:bd:4b:64:84:28:3a:38:1d:c1:46: 45:91:d1:e2:f8:93:72:b2:e5:a2:ad:5e:09:10:e3:f5:23:b5: 38:8f:15:07:2f:e9:73:5e:80:9a:4b:db:19:bc:d2:55:a0:fa: a0:20:2d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLehSeuaMKr+6hILcLGLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGU5MDdjMGZlNTA4OTFhNzZiZDk5YjI5MDg3MDBhNmFj NjJlMzgwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD EygwZDRlODlkODc4OTFlMzdlOTQ2OWJiMjJiYTk5ZWI4MjVhN2UzY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth6NXlx2v6DtRmbBlK6m7LVU1TI4 98/x15LFWV4UPzWH1LXmqyMW7keqAECPd7o7t+Xsr91Ptk/ge/ZJLnlGEnYp/r7a D+vyhDY8G8Lcns9Tm+9uk8/2v78nXFv7k3DVEUmW/7o/Zu7U+77QltkCaHl5rWxM MZZ0EUczfEVsifJJ2hoPbqPqsnvQlbAvPNV+K9u56feGdqym4Pff0Do88EGI52OV kcwIpAa34woa+GR4sSnlH7O55XNya6J7Qc1zaCNJfG24nnRc7CEVo6dTq0Re3/Os uGlVqKK1Hph200tj+LqWfPzNp/o52rfYD3m6dTXSU4LcQhhVirrVdroePQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1Oidh4keN+lGm7IrqZ64JafjzRMB8GA1UdIwQY MBaAFOCOkHwP5QiRp2vZmykIcApqxi44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjhlMjctZDA1Yi00NzhhLTliMGIt ZGI5Nzg5MmE1MWZkLzEvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMjhlMjctZDA1Yi00NzhhLTliMGItZGI5Nzg5MmE1MWZk LzEvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjicMGjH 43SzakQ3bCo8TOXUAJ0ntJTxfTGnoNe3Zf0hcEjK9/KDuUI73NIDU4e94cHXZc4D DszP9S74cSfqcpDyfflMPGtGDPk0lUgy8dcY1E7wnvx0dinT07HJjM/VlyR6mnFP 73CY8n4Zw7Q+ZqXTOm4GSXU6PAnOhoyJRtl8aj/NjUg8V+j5ItOQ/J+C5A2rTXjK 5ovJEp9ZxsWygeHFxn0F1tzlkt0BxDrBssT8PAgOeWXAMlzqZkL3FozJQwL8f5Td vrHgk5LeKMe9S2SEKDo4HcFGRZHR4viTcrLloq1eCRDj9SO1OI8VBy/pc16Amkvb GbzSVaD6oCAt7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:19 2025 by rpki-client