This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json) Hash identifier: ZK7fjzuIpVEOKDKph8VjbjzMgjvK3eHx5ldYUzry1Xs= Subject key identifier: 7D:90:6A:8F:1C:DE:79:D1:FE:F0:F5:49:BB:D9:45:10:9D:49:28:60 Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a Certificate serial: 019AF12D123822F6BDA5055BD4CD4E0F90F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: Yz32SS/C4Z94+qnwvV6VGdwrOq/AOxaNKNtmepiOfC4=) 2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:12:38:22:f6:bd:a5:05:5b:d4:cd:4e:0f:90:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=7d906a8f1cde79d1fef0f549bbd945109d492860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a3:dc:11:51:94:69:1b:ea:58:e0:66:c5:a7: 43:cc:d3:36:d6:1f:47:2e:24:44:c7:e9:16:f1:8c: 8e:10:a0:1e:e9:43:9f:52:d8:df:53:77:46:b4:89: 62:4b:e2:d6:cc:32:00:84:a8:6f:1c:c3:a0:79:de: 39:1c:75:28:28:7d:b4:a8:ce:74:80:b3:5a:a9:f6: 06:f3:aa:89:5b:98:68:56:f5:8c:85:2c:fa:77:b8: 26:24:e1:ac:f8:d1:2d:3c:3f:2c:d9:03:91:b1:4b: 89:a2:20:77:3e:e3:b5:00:a4:4a:e5:05:36:6e:86: 01:21:b0:1e:6a:46:fc:1e:22:ce:cf:25:24:cf:2d: 45:80:e0:6d:b9:d9:db:76:5f:77:f0:d1:7b:94:26: ec:1a:f3:04:15:5f:a5:43:b9:c8:66:2d:47:cc:c0: b2:c9:6c:45:6f:93:5d:82:6d:16:e7:6b:04:04:e1: 15:0a:e7:22:36:57:c2:ba:90:79:a8:85:a1:52:83: c8:db:6b:fc:f5:32:e1:a4:ae:e3:fd:f3:16:75:19: 40:64:cf:18:a2:8d:7f:df:df:27:14:2e:16:9f:84: 57:b4:67:1e:d7:1c:8d:05:3f:53:7c:e4:0d:46:32: 36:38:2b:43:9d:fb:d2:32:22:f3:25:5b:8e:28:2d: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:90:6A:8F:1C:DE:79:D1:FE:F0:F5:49:BB:D9:45:10:9D:49:28:60 X509v3 Authority Key Identifier: keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:00:b4:be:f0:3f:a5:5a:90:1b:e6:01:ec:a6:73:95:0a:24: 41:00:dc:09:43:57:ed:cd:42:73:c4:ff:f3:c9:4f:9e:78:18: dd:de:0f:10:30:f0:3f:c6:27:f0:d1:84:d2:7c:25:4d:3e:3f: ff:6f:29:09:36:df:81:5f:b3:f8:3e:c8:36:01:2a:82:56:d5: c9:bc:56:15:b6:0c:fe:a8:71:a6:da:c6:46:d2:19:1d:5b:37: b4:3c:2e:41:1b:b8:b9:08:ff:38:c9:f0:23:d4:f6:05:06:20: f8:09:19:22:57:ed:82:bf:6a:e6:da:90:db:25:ca:d7:5c:52: 14:6e:29:22:15:fa:2a:09:28:38:f9:b8:24:a4:2d:cd:d0:03: 14:ba:7c:43:df:d6:1b:c3:70:c6:5d:23:1b:8e:fc:9d:62:56: f0:73:37:59:66:82:d1:f3:e4:64:e2:5b:4a:0b:f4:ce:f6:e4: 67:0e:92:ef:24:0e:6c:b9:84:56:7e:0c:ab:6a:7d:4a:80:43: fb:e4:2a:be:45:e8:a0:b1:a3:97:fd:21:a4:b0:c2:6f:ac:f7: f4:f5:ed:94:3a:b3:e3:41:85:6a:6c:92:56:8a:2c:99:ef:bb: 6c:86:ec:4a:37:3c:c7:99:e4:87:e3:2b:f0:00:50:10:a1:b1: ce:33:f2:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRI4Iva9pQVb1M1OD5D4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmFmOTBlZDEzZDE3NTQ1MmNmNWU1YTE2MzJhNzk0YmYx ZjRjOWEwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg3ZDkwNmE4ZjFjZGU3OWQxZmVmMGY1NDliYmQ5NDUxMDlkNDkyODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqPcEVGUaRvqWOBmxadDzNM21h9H LiREx+kW8YyOEKAe6UOfUtjfU3dGtIliS+LWzDIAhKhvHMOged45HHUoKH20qM50 gLNaqfYG86qJW5hoVvWMhSz6d7gmJOGs+NEtPD8s2QORsUuJoiB3PuO1AKRK5QU2 boYBIbAeakb8HiLOzyUkzy1FgOBtudnbdl938NF7lCbsGvMEFV+lQ7nIZi1HzMCy yWxFb5Ndgm0W52sEBOEVCuciNlfCupB5qIWhUoPI22v89TLhpK7j/fMWdRlAZM8Y oo1/398nFC4Wn4RXtGce1xyNBT9TfOQNRjI2OCtDnfvSMiLzJVuOKC1WgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2Qao8c3nnR/vD1SbvZRRCdSShgMB8GA1UdIwQY MBaAFOG6+Q7RPRdUUs9eWhYyp5S/H0yaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYt ZDUyZmRjOWU4Mjg3LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYtZDUyZmRjOWU4Mjg3 LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQC0vvA/ pVqQG+YB7KZzlQokQQDcCUNX7c1Cc8T/88lPnngY3d4PEDDwP8Yn8NGE0nwlTT4/ /28pCTbfgV+z+D7INgEqglbVybxWFbYM/qhxptrGRtIZHVs3tDwuQRu4uQj/OMnw I9T2BQYg+AkZIlftgr9q5tqQ2yXK11xSFG4pIhX6KgkoOPm4JKQtzdADFLp8Q9/W G8Nwxl0jG478nWJW8HM3WWaC0fPkZOJbSgv0zvbkZw6S7yQObLmEVn4Mq2p9SoBD ++QqvkXooLGjl/0hpLDCb6z39PXtlDqz40GFamySVoosme+7bIbsSjc8x5nkh+Mr 8ABQEKGxzjPy0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:29 2025 by rpki-client