This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json) Hash identifier: glq/OJquSQWQtiVa+NL1FnoaYl1/HLqkuXkl2060EHM= Subject key identifier: 29:CE:5F:0C:70:A2:09:D7:41:8C:38:E6:ED:67:ED:A9:49:38:63:84 Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155 Certificate serial: 019AF27722DB858FE5B1BFA629A733A97DC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft Manifest number: 01CE Signing time: Sat 06 Dec 2025 07:01:25 +0000 Manifest this update: Sat 06 Dec 2025 07:01:25 +0000 Manifest next update: Sun 07 Dec 2025 07:01:25 +0000 Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: zuWOD19n/6g1AxwCNG3GHq2qnzv32vmopA1vp7H2tFk=) 2: Eba-gFj6_KEbGtGz74WD9Qe5r-8.roa (hash: IQzF41AYmHmWyxwMWh8AK7MBgafq4BN6uK+awf+6jdE=) 3: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (hash: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:22:db:85:8f:e5:b1:bf:a6:29:a7:33:a9:7d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155 Validity Not Before: Dec 6 07:01:25 2025 GMT Not After : Dec 7 07:01:25 2025 GMT Subject: CN=29ce5f0c70a209d7418c38e6ed67eda949386384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:50:42:73:c5:80:1f:3d:d4:0f:bd:f9:f9:43: 4d:b1:34:7a:10:a2:fd:d4:08:c6:54:2a:56:9d:80: e5:69:35:d0:8b:74:0f:cf:7f:f3:92:41:94:0b:02: dd:58:64:90:ff:51:92:05:7a:05:20:1d:f5:1e:7c: 7e:88:b2:a4:cb:29:21:30:b2:09:82:49:df:29:b0: e8:11:e0:8a:88:bb:21:ff:d7:de:97:f2:7b:31:1d: 90:47:16:ec:55:d9:e0:88:2a:0c:35:8f:3e:78:48: 50:2f:f0:9f:0b:d9:b5:c2:35:81:91:d2:fd:bf:12: f5:e7:a3:2a:18:dd:e6:28:ce:01:c4:cd:e7:88:e5: cf:a8:92:c4:35:72:ca:be:2f:c5:8d:48:da:a5:72: 06:53:21:8b:fe:55:c5:2e:e5:97:73:7f:be:c8:ec: df:93:a4:e9:bd:f5:fd:48:a4:e3:cb:f6:3c:46:0c: 17:76:41:da:f8:27:2b:d9:29:a5:16:b6:40:2d:12: 21:c7:39:8b:8e:89:53:1e:7c:d8:0f:a9:aa:f9:3f: 19:5f:f1:f7:01:81:94:6b:75:b8:e2:56:24:95:a7: 01:60:9b:f1:17:be:4e:9e:dc:a3:75:b2:a6:e8:fa: 8a:b7:fa:34:23:54:fb:52:bc:74:d4:99:5a:af:67: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CE:5F:0C:70:A2:09:D7:41:8C:38:E6:ED:67:ED:A9:49:38:63:84 X509v3 Authority Key Identifier: keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b2:aa:38:e2:26:48:86:0a:07:03:a3:64:03:08:04:f0:83: a2:5a:1b:ef:7c:9b:aa:3f:92:e9:94:b7:df:9b:4a:da:d3:97: 66:37:65:b5:8a:04:40:1f:68:97:b8:1f:f0:82:10:1d:3c:29: be:ed:d3:39:01:c7:a0:09:74:09:ec:9d:fd:f8:8e:c1:4d:26: 4f:d3:a9:e7:c2:e8:d6:37:e0:50:62:d9:60:23:9f:89:02:aa: f4:14:4a:c8:92:60:ab:0a:8b:5e:de:f7:c3:66:56:56:a7:88: 56:33:00:98:b3:8e:cd:44:66:ee:77:0c:ec:71:c1:ab:e8:62: 4f:12:b2:11:8c:f4:5c:d0:42:ab:fc:40:16:8c:65:fe:22:31: fa:5a:dd:e7:ff:01:0d:41:a2:8a:a4:c6:49:c4:2c:25:07:78: 10:78:a5:8a:16:86:61:f9:2b:7f:7d:80:45:b8:a9:84:59:6d: 9b:c4:b6:dd:8f:13:41:4c:14:9b:88:f2:db:1b:c2:c9:51:0f: 9d:00:71:14:a1:b3:0b:b3:63:58:34:52:d8:1b:9d:81:97:eb: 1c:eb:c2:98:42:0c:d5:a3:4b:24:5b:e9:59:1e:c8:8f:32:63: 5b:6a:70:3e:5a:5a:6c:72:65:3b:e7:3a:c7:15:be:d1:60:7a: d2:0f:a1:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyLbhY/lsb+mKaczqX3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzQyYzU4NjM3MWQ0NjViY2YzNWY3OWUxNjYwZTExZTA4 MDUxNTUwHhcNMjUxMjA2MDcwMTI1WhcNMjUxMjA3MDcwMTI1WjAzMTEwLwYDVQQD EygyOWNlNWYwYzcwYTIwOWQ3NDE4YzM4ZTZlZDY3ZWRhOTQ5Mzg2Mzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FBCc8WAHz3UD735+UNNsTR6EKL9 1AjGVCpWnYDlaTXQi3QPz3/zkkGUCwLdWGSQ/1GSBXoFIB31Hnx+iLKkyykhMLIJ gknfKbDoEeCKiLsh/9fel/J7MR2QRxbsVdngiCoMNY8+eEhQL/CfC9m1wjWBkdL9 vxL156MqGN3mKM4BxM3niOXPqJLENXLKvi/FjUjapXIGUyGL/lXFLuWXc3++yOzf k6TpvfX9SKTjy/Y8RgwXdkHa+Ccr2SmlFrZALRIhxzmLjolTHnzYD6mq+T8ZX/H3 AYGUa3W44lYklacBYJvxF75OntyjdbKm6PqKt/o0I1T7Urx01Jlar2eMawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnOXwxwognXQYw45u1n7alJOGOEMB8GA1UdIwQY MBaAFOM0LFhjcdRlvPNfeeFmDhHggFFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt ZDk1YTM4ZjBjMDZlLzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl LzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLKqOOIm SIYKBwOjZAMIBPCDolob73ybqj+S6ZS335tK2tOXZjdltYoEQB9ol7gf8IIQHTwp vu3TOQHHoAl0Ceyd/fiOwU0mT9Op58Lo1jfgUGLZYCOfiQKq9BRKyJJgqwqLXt73 w2ZWVqeIVjMAmLOOzURm7ncM7HHBq+hiTxKyEYz0XNBCq/xAFoxl/iIx+lrd5/8B DUGiiqTGScQsJQd4EHilihaGYfkrf32ARbiphFltm8S23Y8TQUwUm4jy2xvCyVEP nQBxFKGzC7NjWDRS2BudgZfrHOvCmEIM1aNLJFvpWR7IjzJjW2pwPlpabHJlO+c6 xxW+0WB60g+hRA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:35 2025 by rpki-client