This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json) Hash identifier: N8XmHhCilOLuaOO4DLBoN8VXqK2T5jAJ3yXHsgRatlM= Subject key identifier: 8B:FC:70:38:9E:18:35:17:99:ED:6B:29:9D:DC:14:EA:C9:22:31:37 Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd Certificate serial: 019AF19AA2E7B52B120E4A189A27A4D85267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft Manifest number: 038F Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: XIAriGwKiXIV89XyokuVSU6ok94.roa (hash: hF3zC1oiW03gwgTs9lo/n7vUmEiv8dfR/NI1cnnwuzk=) 2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: nua6Y3eJvEN5A8JggC8vmPPlHNKOEKy5TuSUF2msus8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a2:e7:b5:2b:12:0e:4a:18:9a:27:a4:d8:52:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=8bfc70389e18351799ed6b299ddc14eac9223137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:17:5a:7d:e1:6a:d8:c2:82:ce:7a:43:dc: b0:41:b9:e1:6d:05:e4:7e:a5:f4:cd:59:fa:5b:48: b5:6b:54:1c:b9:b9:ec:4f:63:f0:73:36:72:9a:b3: 0d:32:91:e0:2e:25:47:12:22:86:b1:77:43:c3:92: 36:87:89:a9:91:4c:e6:e0:a4:0d:4e:cd:0d:31:54: b5:6c:55:75:48:c2:28:8c:73:82:95:7d:d3:23:29: e2:53:b8:6b:8f:73:5f:69:4f:5a:de:90:65:6e:fe: 04:f8:72:f0:79:3f:a9:5b:d8:9a:1a:c9:a2:40:3f: 0d:f1:6c:20:7f:89:a8:b1:3b:3b:8c:0f:e0:44:44: cd:b7:82:28:88:6e:23:7f:af:7c:9a:45:8f:5d:89: c8:53:7d:39:d0:43:72:f9:6a:18:b7:29:5a:5f:1b: 93:36:30:12:f4:83:9b:a6:57:a1:ba:cd:80:60:c7: 39:64:94:d5:01:70:4a:7d:66:e0:33:8e:a1:72:03: 9a:68:6f:71:4d:f2:18:85:d4:82:8e:df:b7:fc:6f: d0:20:db:a8:3a:26:8c:7e:47:84:ed:c6:d8:7f:e8: a7:f2:c1:de:ed:6f:85:26:82:bd:b9:69:88:e5:19: 26:73:16:c8:3f:1b:13:ac:66:48:04:be:10:8a:64: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:70:38:9E:18:35:17:99:ED:6B:29:9D:DC:14:EA:C9:22:31:37 X509v3 Authority Key Identifier: keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ef:02:f1:a4:07:27:7c:a1:0c:dd:ed:f2:67:e7:63:09:7f: 6b:a5:fa:8f:66:a5:98:05:aa:90:e8:4f:4a:6b:39:76:8b:8e: c3:3f:c5:16:0b:2a:ad:b1:6d:d6:94:9e:a6:85:bf:6f:b2:76: 16:a9:58:bd:50:76:6f:f0:43:f5:b9:6c:57:d4:a4:a6:48:c8: cb:d3:0b:98:1e:96:a3:a2:d3:6f:d5:67:df:9d:02:69:0a:84: 38:7b:33:31:51:a9:c0:a5:7e:e2:54:28:02:bf:af:80:ea:11: 66:cb:12:a7:61:8f:5a:e3:a0:53:4c:a6:69:fd:18:57:6b:ab: 19:2a:22:c9:02:57:f7:7b:9a:01:37:7f:b1:25:2c:bf:ca:01: 76:90:54:d6:70:b2:ec:71:9a:08:9a:12:5f:76:ff:c5:b4:fe: 9a:6d:94:8b:da:e4:fa:d7:21:0e:9a:b8:26:bc:2b:b5:d2:ac: ee:74:c5:73:7a:fd:36:34:a7:c8:94:ac:97:9f:f6:02:90:4c: 09:c1:5a:fb:4f:04:5b:65:87:73:eb:3f:29:a5:dd:c0:30:b6: 30:14:44:99:7b:48:25:13:13:69:e3:b5:7b:12:ff:04:55:ae: ba:c7:3c:c2:16:a0:59:04:3f:40:a4:6f:2b:8b:15:8b:6f:20: ab:42:39:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqLntSsSDkoYmiek2FJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5 ZWZkY2QwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD Eyg4YmZjNzAzODllMTgzNTE3OTllZDZiMjk5ZGRjMTRlYWM5MjIzMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyekXWn3hatjCgs56Q9ywQbnhbQXk fqX0zVn6W0i1a1QcubnsT2PwczZymrMNMpHgLiVHEiKGsXdDw5I2h4mpkUzm4KQN Ts0NMVS1bFV1SMIojHOClX3TIyniU7hrj3NfaU9a3pBlbv4E+HLweT+pW9iaGsmi QD8N8Wwgf4mosTs7jA/gRETNt4IoiG4jf698mkWPXYnIU3050ENy+WoYtylaXxuT NjAS9IObplehus2AYMc5ZJTVAXBKfWbgM46hcgOaaG9xTfIYhdSCjt+3/G/QINuo OiaMfkeE7cbYf+in8sHe7W+FJoK9uWmI5RkmcxbIPxsTrGZIBL4QimSp0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIv8cDieGDUXme1rKZ3cFOrJIjE3MB8GA1UdIwQY MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt OGM5ZDU4MjNiYWQ5LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5 LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADe8C8aQH J3yhDN3t8mfnYwl/a6X6j2almAWqkOhPSms5douOwz/FFgsqrbFt1pSepoW/b7J2 FqlYvVB2b/BD9blsV9SkpkjIy9MLmB6Wo6LTb9Vn350CaQqEOHszMVGpwKV+4lQo Ar+vgOoRZssSp2GPWuOgU0ymaf0YV2urGSoiyQJX93uaATd/sSUsv8oBdpBU1nCy 7HGaCJoSX3b/xbT+mm2Ui9rk+tchDpq4JrwrtdKs7nTFc3r9NjSnyJSsl5/2ApBM CcFa+08EW2WHc+s/KaXdwDC2MBREmXtIJRMTaeO1exL/BFWuusc8whagWQQ/QKRv K4sVi28gq0I5zg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:10 2025 by rpki-client