This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json) Hash identifier: v0YLv9hgjdO2Mqizc2kKAnmKNo1bllKKxYTiEhRcbe0= Subject key identifier: CF:95:BC:E3:C4:97:20:12:19:DD:20:A5:73:C4:D0:8E:FB:96:A2:9D Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b Certificate serial: 019AF3F7DAF1E051E4C3E344BD99D938B999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft Manifest number: 0DFC Signing time: Sat 06 Dec 2025 14:01:38 +0000 Manifest this update: Sat 06 Dec 2025 14:01:38 +0000 Manifest next update: Sun 07 Dec 2025 14:01:38 +0000 Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=) 2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: 9icpELYsrt4wl/WvxqeaCY5Qw4ktuHnIrO+me5rUrQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:da:f1:e0:51:e4:c3:e3:44:bd:99:d9:38:b9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b Validity Not Before: Dec 6 14:01:38 2025 GMT Not After : Dec 7 14:01:38 2025 GMT Subject: CN=cf95bce3c497201219dd20a573c4d08efb96a29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:5c:36:9b:74:5f:51:0e:94:fc:47:8b:83: a2:c4:b4:9c:43:61:cc:ec:2f:32:bb:84:5b:ec:16: 77:3e:af:04:69:a6:22:51:e9:b8:0c:fb:ce:89:8e: 2b:cd:fd:fb:bc:87:32:9d:ba:bd:44:63:6a:c0:25: c6:bd:eb:c8:04:b6:1a:68:43:26:e5:2b:63:34:c7: 62:12:7a:91:14:15:95:2b:11:30:eb:01:db:56:22: ae:b7:dc:54:ed:7b:45:1d:c9:d6:a7:3b:02:80:f6: 83:7b:b1:65:56:5a:6b:9e:26:c0:25:12:46:97:4d: 9a:99:c0:5a:15:7d:5e:fb:a4:78:98:f0:66:76:83: 36:13:42:dd:6d:fd:12:fb:96:44:9d:7b:1e:94:d3: d2:18:0c:5a:89:42:3f:35:27:ab:4c:00:b9:38:4d: 53:5b:5a:88:6d:85:1b:a8:d5:14:8b:00:3f:e8:e8: d9:7f:37:1d:c4:86:c0:66:07:4e:b7:d7:d5:b4:8b: a0:e7:3e:5d:f3:96:34:68:5b:9f:1d:31:91:46:f8: 77:f7:95:f6:30:3f:03:eb:ac:65:83:e9:d3:a8:13: 77:75:a6:95:c0:2f:2f:e4:63:0f:9d:dc:bc:f8:bc: 45:22:7d:1d:4e:12:d1:9e:b2:af:00:9e:0b:0a:60: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:95:BC:E3:C4:97:20:12:19:DD:20:A5:73:C4:D0:8E:FB:96:A2:9D X509v3 Authority Key Identifier: keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7e:b0:16:6b:5e:19:c7:ff:f1:c1:0f:c4:ac:32:14:32:a7: 9b:a0:b2:7d:31:fe:f7:3b:fa:bb:ed:28:9e:37:af:96:cc:b4: 88:61:6f:96:f9:f7:0d:f7:47:25:b5:1f:03:53:22:71:ae:a5: b7:19:c5:91:29:5c:db:8f:67:24:d1:12:a0:0d:d0:35:4b:d3: fb:86:ad:09:37:e5:35:03:4a:fe:01:f4:25:e5:b8:08:90:75: 8b:ff:17:16:13:d2:43:6a:76:6c:0a:2b:24:5d:b6:de:85:cf: ba:e8:40:06:2c:93:e1:15:b1:7c:80:69:a9:bb:1d:e0:fd:d7: a8:92:f0:2d:97:ed:a0:d3:81:5c:d9:5d:30:92:6a:7b:4d:a1: 7f:69:9c:a4:e1:b0:a4:a8:44:dc:07:7e:6e:80:4e:54:2f:50: 28:f4:02:d3:85:2f:d0:36:18:eb:41:af:ce:23:bf:30:19:eb: 95:10:58:16:14:12:ec:ac:8c:37:4d:0c:a9:ad:56:6d:aa:c7: 0c:87:45:46:ef:3a:36:a8:03:9f:65:ac:29:80:ea:eb:b3:d1: 50:ba:d2:ec:2c:a1:1e:5d:2e:bf:b4:b9:3a:a3:ab:a2:13:55: d1:76:8a:d0:a1:e6:c8:c2:10:13:ec:45:aa:76:21:32:00:10: eb:ee:e7:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99rx4FHkw+NEvZnZOLmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhmZGU2ZmFkYmI2YjJjMWRiNmZlNDFmODI5ZDFmMjAx NWJlMGIwHhcNMjUxMjA2MTQwMTM4WhcNMjUxMjA3MTQwMTM4WjAzMTEwLwYDVQQD EyhjZjk1YmNlM2M0OTcyMDEyMTlkZDIwYTU3M2M0ZDA4ZWZiOTZhMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w9cNpt0X1EOlPxHi4OixLScQ2HM 7C8yu4Rb7BZ3Pq8EaaYiUem4DPvOiY4rzf37vIcynbq9RGNqwCXGvevIBLYaaEMm 5StjNMdiEnqRFBWVKxEw6wHbViKut9xU7XtFHcnWpzsCgPaDe7FlVlprnibAJRJG l02amcBaFX1e+6R4mPBmdoM2E0Ldbf0S+5ZEnXselNPSGAxaiUI/NSerTAC5OE1T W1qIbYUbqNUUiwA/6OjZfzcdxIbAZgdOt9fVtIug5z5d85Y0aFufHTGRRvh395X2 MD8D66xlg+nTqBN3daaVwC8v5GMPndy8+LxFIn0dThLRnrKvAJ4LCmCOEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+VvOPElyASGd0gpXPE0I77lqKdMB8GA1UdIwQY MBaAFK+I/eb627aywdtv5B+CnR8gFb4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAt NmUwZDIxM2Y0ODRhLzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAtNmUwZDIxM2Y0ODRh LzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH6wFmte Gcf/8cEPxKwyFDKnm6CyfTH+9zv6u+0onjevlsy0iGFvlvn3DfdHJbUfA1Mica6l txnFkSlc249nJNESoA3QNUvT+4atCTflNQNK/gH0JeW4CJB1i/8XFhPSQ2p2bAor JF223oXPuuhABiyT4RWxfIBpqbsd4P3XqJLwLZftoNOBXNldMJJqe02hf2mcpOGw pKhE3Ad+boBOVC9QKPQC04Uv0DYY60GvziO/MBnrlRBYFhQS7KyMN00Mqa1WbarH DIdFRu86NqgDn2WsKYDq67PRULrS7CyhHl0uv7S5OqOrohNV0XaK0KHmyMIQE+xF qnYhMgAQ6+7ndA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:03:51 2025 by rpki-client