This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json) Hash identifier: zTRhcgC9wlWtz21Kbbsl88RmqG1P6Ba4qjwEQS1x93Q= Subject key identifier: D7:A3:D9:92:29:C7:2C:54:1C:84:A5:63:88:9D:7C:40:29:48:F2:D8 Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e Certificate serial: 019AF23F766CA391DA9761A2A7A1CB7F648B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft Manifest number: 115B Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=) 2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: 39LT3HdqbMETNTb042uWKsfOos72LViUPASgNI6NfRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:76:6c:a3:91:da:97:61:a2:a7:a1:cb:7f:64:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=d7a3d99229c72c541c84a563889d7c402948f2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:59:d7:4c:6a:75:c1:c3:93:dc:6c:48:22: e1:dd:52:6b:5b:86:e7:a1:38:e1:25:6c:ae:3d:a6: 21:6e:ff:e9:0e:12:56:52:2a:6f:9c:ac:66:68:20: 40:c6:ba:ec:36:00:ea:a0:ef:a9:60:0f:f0:ad:12: b5:af:f0:27:d9:54:71:09:ce:b4:32:6a:e6:82:84: 97:c7:0c:e7:9d:58:6b:fd:30:b9:d1:22:48:c3:8e: c4:a7:cf:5d:3b:72:5e:19:e7:c7:5f:bd:b9:13:da: 45:bc:55:85:1d:d2:1c:37:47:37:b9:cb:80:a2:dc: 61:e0:4b:1b:49:16:de:37:92:12:7d:b6:f8:51:47: 34:14:77:d6:5d:8e:82:04:75:d8:16:1f:d4:8d:2f: d3:80:ed:c2:9f:b9:cc:76:8a:1b:58:cc:3f:5b:7c: 37:ab:21:53:a9:ab:d7:00:dd:a3:03:12:51:c8:75: ab:9d:35:a7:59:40:08:3e:fa:e4:b8:84:0e:0c:b2: 40:80:78:d5:03:1a:d5:8b:96:6a:fa:d6:e7:e7:01: f2:69:54:62:18:e5:db:20:31:a8:a8:dd:83:5b:4e: 6b:96:4e:19:4f:d6:2f:5b:65:07:7c:41:d2:3e:8f: fc:8f:85:9c:f6:a8:01:82:01:00:91:46:4f:78:ec: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A3:D9:92:29:C7:2C:54:1C:84:A5:63:88:9D:7C:40:29:48:F2:D8 X509v3 Authority Key Identifier: keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f6:6f:4c:90:f1:de:77:be:b2:22:67:ee:df:88:81:fe:e2: 53:99:59:d7:71:b8:ae:10:fa:c4:24:2d:7e:cf:2f:b8:4c:40: 52:92:d3:ea:49:1f:f5:f0:51:7c:14:d9:67:43:c8:52:92:70: 33:dc:76:31:fc:fd:db:b6:26:b4:5f:97:aa:7c:7b:21:54:aa: ac:e3:0a:d8:e8:fe:b5:99:bc:0d:bb:f5:7d:db:e8:35:19:8a: 0f:d4:1b:73:f8:a7:b3:42:ac:e6:a9:e8:ff:da:9e:d7:7a:a1: 63:55:5b:18:5e:94:4d:50:12:c8:e8:27:6d:25:14:76:1e:1f: 09:bd:2e:e9:e1:ac:89:e6:86:57:eb:f7:d2:1d:ed:b4:d0:2e: 0e:fb:fc:4f:bf:68:94:84:43:d4:cd:08:cb:7d:74:43:07:6e: 86:87:d4:00:43:0e:ae:8e:cf:39:b8:4c:a0:c2:19:3d:c6:a4: 0a:d1:45:57:4f:92:c3:80:8a:a8:df:9f:67:9c:4d:d7:6a:cb: 0a:6e:d9:75:a9:0d:6d:92:a6:7d:39:95:02:97:eb:cd:f7:4a: 63:00:d9:59:be:7e:a5:c2:00:1f:7a:b2:15:71:16:6c:08:24: a5:38:c6:97:40:5c:b3:52:97:fb:c5:18:76:27:8a:bc:0e:7b: 38:b7:45:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3Zso5Hal2Gip6HLf2SLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw Y2ZlNGUwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EyhkN2EzZDk5MjI5YzcyYzU0MWM4NGE1NjM4ODlkN2M0MDI5NDhmMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTNZ10xqdcHDk9xsSCLh3VJrW4bn oTjhJWyuPaYhbv/pDhJWUipvnKxmaCBAxrrsNgDqoO+pYA/wrRK1r/An2VRxCc60 MmrmgoSXxwznnVhr/TC50SJIw47Ep89dO3JeGefHX725E9pFvFWFHdIcN0c3ucuA otxh4EsbSRbeN5ISfbb4UUc0FHfWXY6CBHXYFh/UjS/TgO3Cn7nMdoobWMw/W3w3 qyFTqavXAN2jAxJRyHWrnTWnWUAIPvrkuIQODLJAgHjVAxrVi5Zq+tbn5wHyaVRi GOXbIDGoqN2DW05rlk4ZT9YvW2UHfEHSPo/8j4Wc9qgBggEAkUZPeOwgqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNej2ZIpxyxUHISlY4idfEApSPLYMB8GA1UdIwQY MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvZvTJDx 3ne+siJn7t+Igf7iU5lZ13G4rhD6xCQtfs8vuExAUpLT6kkf9fBRfBTZZ0PIUpJw M9x2Mfz927YmtF+Xqnx7IVSqrOMK2Oj+tZm8Dbv1fdvoNRmKD9Qbc/ins0Ks5qno /9qe13qhY1VbGF6UTVASyOgnbSUUdh4fCb0u6eGsieaGV+v30h3ttNAuDvv8T79o lIRD1M0Iy310QwduhofUAEMOro7PObhMoMIZPcakCtFFV0+Sw4CKqN+fZ5xN12rL Cm7ZdakNbZKmfTmVApfrzfdKYwDZWb5+pcIAH3qyFXEWbAgkpTjGl0Bcs1KX+8UY dieKvA57OLdFDA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:40 2025 by rpki-client