This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json) Hash identifier: 2+vuVZQbTXegTPXxxNBL09YMaCTzUpkIjzQwTAM8PQk= Subject key identifier: B2:44:23:75:24:58:EC:A2:36:1A:5D:92:4B:4A:FE:70:4C:99:AF:84 Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3 Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3 Certificate serial: 019AF208DCC26A3D46886ACD04B39E0ABA2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft Manifest number: 1348 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=) 2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: Y1uGivPm6Pu9TtesOPe/Wzq7XEFMRZncyYunxRs3/AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dc:c2:6a:3d:46:88:6a:cd:04:b3:9e:0a:ba:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=b24423752458eca2361a5d924b4afe704c99af84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:be:ca:dc:18:4a:0b:58:d8:06:e7:f2:d4: 9a:67:fe:a4:87:46:d2:27:a2:82:8f:c4:e5:0b:b8: f4:bb:20:95:11:58:f3:bf:fe:b7:7f:89:bc:09:7d: 4c:73:24:60:d4:10:9b:9d:14:53:86:94:7f:4f:ce: f8:6b:9f:fc:62:66:2c:f0:93:3c:32:97:6b:e0:34: 3d:bc:95:39:0e:78:2d:72:9b:b1:7d:4a:b1:c3:a9: e2:47:65:43:29:a1:b0:98:1b:6e:68:83:58:45:45: 35:33:74:a5:4c:da:26:d0:d5:c5:8d:e2:bc:aa:06: 05:c0:a0:a6:d2:c3:1a:e7:76:b0:19:6c:a8:20:09: 49:5d:ec:ec:83:f0:20:05:7e:9b:50:78:b2:55:34: ff:ad:d4:b5:29:23:d3:cc:5e:62:95:3d:fc:14:37: 4c:a3:c7:8a:1f:1a:c8:aa:49:84:c6:6b:f2:b6:d7: 9a:1e:2e:2a:aa:c8:c1:9e:2b:75:2b:66:1a:f7:ae: 46:25:7f:7b:d6:11:2f:6d:82:84:12:c2:02:ef:39: 38:8c:fe:9c:ae:5b:de:24:57:1e:29:0c:7c:88:4a: 29:5c:74:1c:2b:33:96:65:59:47:16:3d:6e:ee:53: 22:54:20:8a:bf:2e:0a:bd:cd:a2:a4:f6:a5:f5:d3: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:44:23:75:24:58:EC:A2:36:1A:5D:92:4B:4A:FE:70:4C:99:AF:84 X509v3 Authority Key Identifier: keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2e:9d:16:29:84:34:ce:0f:3b:d3:78:0c:44:4f:be:12:ba: c9:e3:41:b8:19:b0:18:be:3e:7d:88:b3:c2:4e:94:fd:9c:2b: 01:58:b0:88:c9:7c:46:2b:a4:c1:a6:c8:06:1f:50:c3:ea:c3: 21:50:6d:58:d4:cd:1d:a1:50:7a:52:80:24:7d:59:48:7b:73: b6:86:4e:fb:e2:51:e0:5d:a7:aa:47:00:67:c5:bc:ab:b4:b7: 6d:b4:9f:01:2d:84:a6:bf:b5:9d:60:0e:d3:c2:2d:47:72:68: 0d:e1:2e:50:4d:61:e6:ea:45:2c:6a:b7:4a:51:2e:b5:16:99: c9:73:29:d6:c8:fe:44:21:12:b0:22:49:46:1b:00:63:0c:30: 47:19:b3:d4:c1:59:5c:89:c2:97:4a:82:bc:37:b3:3f:7c:f1: 8c:15:b4:59:11:bd:3a:25:df:e4:fc:0c:87:04:13:d1:fe:62: 4e:11:0d:90:06:67:12:20:57:77:cb:f3:a4:12:65:95:5d:35: c7:82:b7:d3:72:e4:d6:ed:38:b4:80:84:55:50:0f:3c:a2:2a: cc:e3:63:45:11:5c:46:ef:4f:c4:a3:ce:59:98:cd:f1:5a:c9: 06:d3:a3:9c:2d:8d:d3:b9:e3:db:60:a6:47:c1:c4:af:5d:a4: b5:68:6d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNzCaj1GiGrNBLOeCrouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODBiNzcxMGIxMzk4NDQyNzVjOWRlOWM4ZTc2NGViNjQy ZTE4YzMwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhiMjQ0MjM3NTI0NThlY2EyMzYxYTVkOTI0YjRhZmU3MDRjOTlhZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTG+ytwYSgtY2Abn8tSaZ/6kh0bS J6KCj8TlC7j0uyCVEVjzv/63f4m8CX1McyRg1BCbnRRThpR/T874a5/8YmYs8JM8 Mpdr4DQ9vJU5DngtcpuxfUqxw6niR2VDKaGwmBtuaINYRUU1M3SlTNom0NXFjeK8 qgYFwKCm0sMa53awGWyoIAlJXezsg/AgBX6bUHiyVTT/rdS1KSPTzF5ilT38FDdM o8eKHxrIqkmExmvytteaHi4qqsjBnit1K2Ya965GJX971hEvbYKEEsIC7zk4jP6c rlveJFceKQx8iEopXHQcKzOWZVlHFj1u7lMiVCCKvy4Kvc2ipPal9dOnrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJEI3UkWOyiNhpdkktK/nBMma+EMB8GA1UdIwQY MBaAFP+At3ELE5hEJ1yd6cjnZOtkLhjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQt MTMzZWZmNzg0NDJiLzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQtMTMzZWZmNzg0NDJi LzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy6dFimE NM4PO9N4DERPvhK6yeNBuBmwGL4+fYizwk6U/ZwrAViwiMl8RiukwabIBh9Qw+rD IVBtWNTNHaFQelKAJH1ZSHtztoZO++JR4F2nqkcAZ8W8q7S3bbSfAS2Epr+1nWAO 08ItR3JoDeEuUE1h5upFLGq3SlEutRaZyXMp1sj+RCESsCJJRhsAYwwwRxmz1MFZ XInCl0qCvDezP3zxjBW0WRG9OiXf5PwMhwQT0f5iThENkAZnEiBXd8vzpBJllV01 x4K303Lk1u04tICEVVAPPKIqzONjRRFcRu9PxKPOWZjN8VrJBtOjnC2N07nj22Cm R8HEr12ktWhtug== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:35 2025 by rpki-client