This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft File: 4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json) Hash identifier: SPO+b8cwLxRTV3uVIT38l3UBkeDFAC4B36aHCPTcM4o= Subject key identifier: 31:7B:06:9D:F4:86:5D:69:8B:B3:64:B8:CB:8C:08:04:51:EA:33:8E Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e Certificate serial: 019AF277264AD240F88C717A3C57FF2BDEDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft Manifest number: 05A6 Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: koHEJ7AG3dZ4/YzY29DJx5fcnbrp8Do4kS2seiEOBKE=) 2: f-egB3l-EDxvsW6G_3sHcV0KHX4.roa (hash: JtBE12d9bxExTSrRbQgShdNCUpSoJH+tA4uA0zrPLYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:26:4a:d2:40:f8:8c:71:7a:3c:57:ff:2b:de:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=317b069df4865d698bb364b8cb8c080451ea338e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:25:a2:36:66:03:c3:dd:b6:74:f5:71:d1: 8d:60:0d:24:97:66:f7:9f:62:cd:81:80:19:fb:b4: 64:7f:d1:d9:ec:5c:e5:14:ec:ba:56:5b:0b:a0:a0: a0:48:cf:69:f9:d7:31:71:e6:08:b0:8f:f1:bb:c9: 28:b0:ab:fc:da:06:08:16:18:71:b6:8b:4b:7a:51: 28:30:a6:df:04:61:1c:eb:0d:15:c7:64:53:e6:9e: 51:93:49:3b:62:9f:d4:34:f2:c7:55:df:87:65:c3: e1:23:d4:8e:0f:5b:c5:49:4f:88:50:6b:34:e6:ba: 78:f7:cb:2e:ca:c1:af:ad:97:7a:93:2b:bd:0d:7a: a7:e8:ff:c4:34:8d:76:56:4c:ef:ee:07:dd:21:dd: 74:ae:ed:d7:75:b8:2e:c8:5e:25:72:c3:55:d2:92: 8f:50:d4:fc:f1:db:ae:ea:c6:fc:a3:43:35:5c:b5: b4:10:1e:7e:3d:34:60:13:b0:2d:0b:06:31:9d:5a: af:4c:b4:20:64:f4:13:21:86:a4:70:65:eb:ee:01: 81:8c:2f:3c:f1:69:dd:d7:ad:8e:f3:26:95:f7:7b: 8e:21:40:49:07:da:58:94:2c:f3:c1:85:fd:b4:5f: 50:00:6e:5c:66:d4:bc:25:24:33:66:2d:44:34:67: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7B:06:9D:F4:86:5D:69:8B:B3:64:B8:CB:8C:08:04:51:EA:33:8E X509v3 Authority Key Identifier: keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b9:ce:9f:e7:56:ed:71:4a:c6:9c:a8:e2:df:70:99:3c:21: 85:a0:87:45:2a:ce:66:0f:e0:b6:bd:78:c1:87:4c:7d:d4:36: f8:c2:15:43:dc:ce:60:f0:16:84:b9:53:82:86:8b:86:52:46: 90:65:c2:b1:10:56:b5:56:12:ce:8c:56:08:1f:b1:09:cf:78: d9:d4:b0:96:9e:47:c6:f1:97:74:13:13:21:21:db:bf:e5:e4: 14:bd:cd:f4:14:c8:4a:d4:1d:9f:99:25:2d:99:be:b2:a0:b8: 4d:98:df:8d:03:d7:5d:00:74:d3:fd:3c:fc:d2:d7:47:d8:aa: 34:36:cd:d4:ab:19:17:3e:bc:d4:c4:c4:62:35:09:4f:2e:a5: b0:07:bc:bd:89:42:0e:bc:ff:3b:92:8c:0d:05:b0:40:75:65: 59:61:15:08:04:a0:e6:d0:95:4c:04:8f:3f:ab:31:aa:e6:e1: 11:22:b7:50:57:51:c5:89:3c:33:fc:35:ff:88:9d:41:75:58: be:6b:16:99:32:36:e5:c1:1a:c5:8d:10:22:40:26:88:ea:34: ef:2c:3c:bd:54:9d:7a:36:85:24:49:07:a6:e6:99:4e:83:4c: 22:cc:6f:c3:ae:04:7e:55:4c:28:d1:d3:53:ab:68:a7:bd:51: 0c:1a:88:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyZK0kD4jHF6PFf/K97bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyODNjNGFkMmZkODcyNGE4YzdkNWVhZjQzMTgxNGNiM2Qx NTEyN2UwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD EygzMTdiMDY5ZGY0ODY1ZDY5OGJiMzY0YjhjYjhjMDgwNDUxZWEzMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS4lojZmA8PdtnT1cdGNYA0kl2b3 n2LNgYAZ+7Rkf9HZ7FzlFOy6VlsLoKCgSM9p+dcxceYIsI/xu8kosKv82gYIFhhx totLelEoMKbfBGEc6w0Vx2RT5p5Rk0k7Yp/UNPLHVd+HZcPhI9SOD1vFSU+IUGs0 5rp498suysGvrZd6kyu9DXqn6P/ENI12Vkzv7gfdId10ru3XdbguyF4lcsNV0pKP UNT88duu6sb8o0M1XLW0EB5+PTRgE7AtCwYxnVqvTLQgZPQTIYakcGXr7gGBjC88 8Wnd162O8yaV93uOIUBJB9pYlCzzwYX9tF9QAG5cZtS8JSQzZi1ENGfpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF7Bp30hl1pi7NkuMuMCARR6jOOMB8GA1UdIwQY MBaAFOKDxK0v2HJKjH1er0MYFMs9FRJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYt NjFjMWVjYWFiNTVmLzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYtNjFjMWVjYWFiNTVm LzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLnOn+dW 7XFKxpyo4t9wmTwhhaCHRSrOZg/gtr14wYdMfdQ2+MIVQ9zOYPAWhLlTgoaLhlJG kGXCsRBWtVYSzoxWCB+xCc942dSwlp5HxvGXdBMTISHbv+XkFL3N9BTIStQdn5kl LZm+sqC4TZjfjQPXXQB00/08/NLXR9iqNDbN1KsZFz681MTEYjUJTy6lsAe8vYlC Drz/O5KMDQWwQHVlWWEVCASg5tCVTASPP6sxqubhESK3UFdRxYk8M/w1/4idQXVY vmsWmTI25cEaxY0QIkAmiOo07yw8vVSdejaFJEkHpuaZToNMIsxvw64EflVMKNHT U6top71RDBqIdw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:33 2025 by rpki-client