This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft File: 4MW7PaU0Nb9B4X997EfUSE5_MSk.mft (raw, json) Hash identifier: KC2cWyv5voZ1ldFT9cgw4glc3eCTIMkeUc9OUGwqp/U= Subject key identifier: 33:09:6D:6D:9B:2A:62:CF:0A:86:EA:BF:24:76:1B:96:6A:05:E4:5C Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019AF3520C775E3912A3B0760F30E19CE3D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft Manifest number: 0130 Signing time: Sat 06 Dec 2025 11:00:31 +0000 Manifest this update: Sat 06 Dec 2025 11:00:31 +0000 Manifest next update: Sun 07 Dec 2025 11:00:31 +0000 Files and hashes: 1: 4MW7PaU0Nb9B4X997EfUSE5_MSk.crl (hash: U15wzW/mDhuTtMv3qt+7tKv4+/At1hssqbNUvqRNTFs=) 2: 9GR2dHkwSLVkeTC97SQWtO-Ou6s.roa (hash: 8dva46ddaCVAVhuRS29XVF0xv3mbOQXR/o6u4dePeK4=) 3: DOzJON1bs3hiZ3VHnEmsvsi0zBQ.roa (hash: 0UphDOF22C9mcUTv3cPQJDc8LIXIF1k+LyuIOSGCS50=) 4: OSYxWvdp836ljzdJlZno6YzlpGY.roa (hash: /5wE/HFby5mcM6+MFX0ZUh7Bq6r/zEB35ZUNILuEf84=) 5: Pfa8J12SK6qYlpp-JCEIEXT9ItQ.roa (hash: m14RvIzc2rz/0aG6QUUC8I/FrsLRlE3a6BpD0Y3vDzU=) 6: svN3Ok6VL2a-EVdJe6UTIYjW6Ug.roa (hash: MGU8Tr1wY79f7aOOX/E7HRh3hZPVTx7pl2+ACWyvncY=) 7: vmS5BdN7qv6lm6TAxWJK3LZ33KQ.roa (hash: 15/dbHkyNejRc1b3Z2HNyUYHE9FyHjv1laHgorxIb9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:0c:77:5e:39:12:a3:b0:76:0f:30:e1:9c:e3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Dec 6 11:00:31 2025 GMT Not After : Dec 7 11:00:31 2025 GMT Subject: CN=33096d6d9b2a62cf0a86eabf24761b966a05e45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:15:a8:c5:87:aa:dc:08:1f:48:d1:6d:24: 64:c0:0c:c1:04:33:d9:66:3f:ea:8b:29:a8:45:fc: 0a:f1:6c:03:8e:62:79:a1:cf:62:72:20:6f:1c:54: 29:03:a2:2e:84:aa:b8:e6:a7:06:40:c8:05:ce:ef: 12:61:be:18:3e:dc:20:6e:f2:c3:6d:86:0b:5d:11: ea:e4:c1:c7:ee:ae:50:3e:ca:01:f0:fe:8f:cf:f3: 90:78:2b:02:49:78:ee:73:b4:3e:3d:01:76:e3:ae: 34:32:ec:25:5a:72:cf:5c:d1:c4:4f:79:0b:63:2f: bf:ff:a6:d6:8a:2c:9b:ea:e7:2c:6b:11:69:1c:f8: 4a:7d:14:e8:07:e3:f2:6d:42:16:97:1a:20:78:f5: 08:e2:91:90:8f:b2:f4:2e:7e:04:99:ba:36:bc:e7: 85:b1:db:d8:5c:78:00:81:a3:0a:a7:17:4f:1e:86: 72:ee:93:ad:93:ab:cb:a2:43:e6:37:c2:ee:99:f5: a9:7b:9e:53:47:8e:bd:34:c5:73:02:a1:9a:55:79: 19:41:5a:d1:99:f2:2e:05:59:88:7d:95:0a:2c:d6: 45:35:7c:51:51:40:91:f9:2e:3a:55:74:54:ab:2f: f0:03:3c:47:c5:ee:88:65:df:da:a2:77:97:48:ad: f3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:09:6D:6D:9B:2A:62:CF:0A:86:EA:BF:24:76:1B:96:6A:05:E4:5C X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:4f:84:d6:f0:dd:9b:70:5d:22:ab:d5:84:26:d2:58:8c:d4: 05:fc:f3:d9:94:c3:2e:2d:e0:74:b8:4b:90:08:4c:3a:8d:42: 4e:42:e9:fd:72:a7:97:c3:0b:46:9f:c1:90:6d:03:8c:53:00: 96:47:87:bd:4a:ce:da:af:d1:22:99:af:95:42:b9:b2:87:9e: ea:1b:4d:d8:61:be:7d:35:01:cf:32:c7:78:4b:3a:62:b4:f8: 0a:ae:b0:65:24:e8:ef:9c:1a:96:a1:6c:2a:9b:6e:1e:b4:9b: 5b:e5:95:1a:8b:a2:5a:88:ac:14:33:a0:6b:ce:14:4f:b8:86: 1e:e7:d3:9a:01:e2:31:61:a7:7c:3f:7f:bf:cd:c2:aa:2a:2c: 2f:f4:fd:d9:9d:47:22:cc:d5:4f:d2:db:08:8b:08:4f:61:1a: a1:20:b1:82:c6:05:1e:13:04:a7:8c:26:e4:be:e6:21:f5:8e: 9b:83:6c:27:33:1e:c3:b7:20:b7:09:c7:46:b6:a4:a8:48:4c: 6c:cc:bd:b2:d1:39:9b:e0:b4:ae:30:2d:50:57:c6:fb:65:b6: a3:a3:7f:e4:bb:9e:95:aa:50:3b:f7:80:09:ef:72:ab:d3:42: e8:7a:de:72:e2:59:4d:ef:26:34:73:45:95:1c:63:91:56:72: 80:90:aa:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgx3XjkSo7B2DzDhnOPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjUxMjA2MTEwMDMxWhcNMjUxMjA3MTEwMDMxWjAzMTEwLwYDVQQD EygzMzA5NmQ2ZDliMmE2MmNmMGE4NmVhYmYyNDc2MWI5NjZhMDVlNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKQVqMWHqtwIH0jRbSRkwAzBBDPZ Zj/qiymoRfwK8WwDjmJ5oc9iciBvHFQpA6IuhKq45qcGQMgFzu8SYb4YPtwgbvLD bYYLXRHq5MHH7q5QPsoB8P6Pz/OQeCsCSXjuc7Q+PQF24640MuwlWnLPXNHET3kL Yy+//6bWiiyb6ucsaxFpHPhKfRToB+PybUIWlxogePUI4pGQj7L0Ln4Embo2vOeF sdvYXHgAgaMKpxdPHoZy7pOtk6vLokPmN8LumfWpe55TR469NMVzAqGaVXkZQVrR mfIuBVmIfZUKLNZFNXxRUUCR+S46VXRUqy/wAzxHxe6IZd/aoneXSK3z4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMJbW2bKmLPCobqvyR2G5ZqBeRcMB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy0+E1vDd m3BdIqvVhCbSWIzUBfzz2ZTDLi3gdLhLkAhMOo1CTkLp/XKnl8MLRp/BkG0DjFMA lkeHvUrO2q/RIpmvlUK5soee6htN2GG+fTUBzzLHeEs6YrT4Cq6wZSTo75walqFs KptuHrSbW+WVGouiWoisFDOga84UT7iGHufTmgHiMWGnfD9/v83CqiosL/T92Z1H IszVT9LbCIsIT2EaoSCxgsYFHhMEp4wm5L7mIfWOm4NsJzMew7cgtwnHRrakqEhM bMy9stE5m+C0rjAtUFfG+2W2o6N/5LuelapQO/eACe9yq9NC6HrecuJZTe8mNHNF lRxjkVZygJCqSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:22 2025 by rpki-client