This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: sZOm8+nq+LmWbdr/ZVwbYPIySb+PbLJbnO1mYRoxpks=
Subject key identifier: 28:48:6E:DB:38:78:69:58:11:52:06:24:80:8B:F3:21:D5:EE:76:5A
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019AF352A069C59BE5FB246008593E0E64E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 0688
Signing time: Sat 06 Dec 2025 11:01:09 +0000
Manifest this update: Sat 06 Dec 2025 11:01:09 +0000
Manifest next update: Sun 07 Dec 2025 11:01:09 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: KsbSnDMD5uzAKw7D4W20Hg91AsQVfiqvcI2fhPIJw+k=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:a0:69:c5:9b:e5:fb:24:60:08:59:3e:0e:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Dec 6 11:01:09 2025 GMT
Not After : Dec 7 11:01:09 2025 GMT
Subject: CN=28486edb3878695811520624808bf321d5ee765a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:b0:0b:c3:7e:71:54:e4:a1:64:ed:da:29:
62:6c:5b:0c:92:c6:35:de:6a:a9:e0:95:0a:87:2a:
f1:a8:7c:19:57:57:05:80:4d:ab:b4:65:a4:d0:88:
9e:aa:82:9f:40:13:bd:b0:17:9d:92:9a:1a:a4:82:
5f:47:8f:99:4b:6c:1d:86:34:fe:ea:59:0d:ef:e0:
e7:78:a1:a5:b2:dd:25:84:e2:08:51:c5:44:ed:63:
26:6d:59:70:25:c8:bb:71:cb:cf:2a:e1:c0:16:dd:
6f:97:0d:34:ad:5b:2c:a4:b7:1e:c9:7a:2c:12:a3:
71:a7:a2:93:c4:53:8b:64:37:00:7a:8f:50:47:6a:
2f:25:cb:38:ac:9e:20:72:74:95:34:8e:73:db:85:
32:fc:c5:6b:c4:12:01:bf:52:d5:f8:0a:97:4c:51:
d5:62:cb:e6:68:6f:57:b9:1c:63:b1:f9:f5:a8:2a:
c9:41:61:d6:56:53:79:bd:f8:b4:72:ac:95:e3:73:
53:9d:71:6e:f6:51:00:4e:34:ca:96:e5:e8:f5:4f:
96:e3:21:37:a7:0c:b3:12:72:b7:5e:e3:38:0c:2b:
0e:c0:9d:26:bf:03:5f:07:d1:a7:ba:ba:bf:43:a9:
12:64:af:6e:52:fa:83:c7:41:04:d0:87:b1:f2:d2:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:6E:DB:38:78:69:58:11:52:06:24:80:8B:F3:21:D5:EE:76:5A
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8f:33:ed:aa:70:f4:5e:23:b9:26:c0:fb:d7:7d:75:5b:e4:
bb:37:cf:78:5b:53:ef:4b:4b:34:6d:76:ce:9e:d4:9d:04:35:
d9:2e:89:b2:f7:34:e3:6e:a6:dd:e5:f3:fd:9b:4e:d6:a2:62:
80:6a:32:6e:ea:3c:3b:3f:dc:aa:41:e3:2c:77:52:3c:97:e8:
52:a8:7c:8c:40:c4:57:01:98:63:6c:a0:9f:d4:19:f2:16:6d:
d0:24:71:9e:15:04:6c:f0:d6:4a:36:aa:dc:53:37:ad:21:d8:
d9:96:04:3b:fb:9f:8f:3d:03:62:ca:a2:6f:7b:c6:14:ae:e2:
ae:af:7e:b4:10:1d:30:75:d7:0e:b5:2b:be:63:b4:6f:73:98:
f3:29:44:c3:88:ed:da:78:b5:f7:a1:04:8b:06:34:45:03:5b:
76:f1:91:9e:a1:22:d2:8b:ef:ee:ee:22:a7:85:03:fb:8d:51:
f6:f3:cb:40:d2:2d:35:04:66:4b:74:6b:d2:f3:35:9b:1d:20:
ba:57:b8:3d:c6:8d:66:53:aa:98:f3:6b:a5:6b:16:b2:cc:86:
45:71:de:e4:12:a8:80:5f:18:7f:9d:16:44:c2:f0:e2:d9:e9:
e0:23:e0:77:9b:e7:f6:62:6e:9c:93:65:12:e4:a4:1f:e8:ff:
30:c5:5c:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUqBpxZvl+yRgCFk+DmTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjJiYjkyYmJlZTlmNmRlNzc1N2QyNTZkNDhmNjZlMjA3
ZjQ0YWYwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD
EygyODQ4NmVkYjM4Nzg2OTU4MTE1MjA2MjQ4MDhiZjMyMWQ1ZWU3NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocCwC8N+cVTkoWTt2ilibFsMksY1
3mqp4JUKhyrxqHwZV1cFgE2rtGWk0IieqoKfQBO9sBedkpoapIJfR4+ZS2wdhjT+
6lkN7+DneKGlst0lhOIIUcVE7WMmbVlwJci7ccvPKuHAFt1vlw00rVsspLceyXos
EqNxp6KTxFOLZDcAeo9QR2ovJcs4rJ4gcnSVNI5z24Uy/MVrxBIBv1LV+AqXTFHV
YsvmaG9XuRxjsfn1qCrJQWHWVlN5vfi0cqyV43NTnXFu9lEATjTKluXo9U+W4yE3
pwyzEnK3XuM4DCsOwJ0mvwNfB9Gnurq/Q6kSZK9uUvqDx0EE0Iex8tJzEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChIbts4eGlYEVIGJICL8yHV7nZaMB8GA1UdIwQY
MBaAFOBiu5K77p9t53V9JW1I9m4gf0SvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGIt
MWFiNWQ2MjA5ZjU3LzEvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGItMWFiNWQ2MjA5ZjU3
LzEvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG48z7apw
9F4juSbA+9d9dVvkuzfPeFtT70tLNG12zp7UnQQ12S6Jsvc0426m3eXz/ZtO1qJi
gGoybuo8Oz/cqkHjLHdSPJfoUqh8jEDEVwGYY2ygn9QZ8hZt0CRxnhUEbPDWSjaq
3FM3rSHY2ZYEO/ufjz0DYsqib3vGFK7irq9+tBAdMHXXDrUrvmO0b3OY8ylEw4jt
2ni196EEiwY0RQNbdvGRnqEi0ovv7u4ip4UD+41R9vPLQNItNQRmS3Rr0vM1mx0g
ule4PcaNZlOqmPNrpWsWssyGRXHe5BKogF8Yf50WRMLw4tnp4CPgd5vn9mJunJNl
EuSkH+j/MMVc6w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:58:41 2025 by rpki-client