This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json) Hash identifier: TkpDQcWHsC0PT4YycrhmEE+2e7aRE3Gd5p7xk4sh5EM= Subject key identifier: 3B:1F:D4:2F:67:A5:4E:CF:3D:CE:68:E8:94:22:DE:D0:4E:DF:D2:0B Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02 Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402 Certificate serial: 019AF23FC0AA7E9F8058890AD0A478109613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft Manifest number: 1013 Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: h0wvWQuMEikxHTUDhZTcq/jdvm7hyR1PtdliJm84yaE=) 2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c0:aa:7e:9f:80:58:89:0a:d0:a4:78:10:96:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402 Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=3b1fd42f67a54ecf3dce68e89422ded04edfd20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:ae:24:ed:3f:0e:2b:81:c3:7c:d8:b4:b9: ce:df:37:b0:24:73:70:5a:e1:4a:02:fa:49:4e:cf: f1:ca:a2:9f:b5:a3:0a:b0:fe:ce:a0:2e:82:c0:cc: f3:f3:99:ed:38:a3:74:17:f4:cb:ec:ec:f1:88:28: 83:af:6a:f8:e6:57:26:d4:db:3f:49:6c:f5:f7:c8: 1a:85:bd:10:00:7d:7e:18:8e:fb:a2:5b:78:31:9c: c3:06:9e:e8:e5:25:ab:d0:c7:6f:0b:f4:f6:da:72: 6f:1d:fa:af:27:60:27:ae:a7:a4:11:52:dc:1e:70: f9:21:0c:ff:76:db:1e:ba:f6:38:ec:ba:5d:e3:a9: d0:36:09:9d:06:d9:84:b6:28:6b:16:12:69:ee:f7: c3:a3:b0:89:e6:56:af:b6:8b:e8:ae:d7:21:22:92: c2:74:42:85:71:1f:e8:81:4f:30:65:2b:5f:c0:36: d2:53:19:31:e8:de:93:10:66:f3:48:53:10:30:e0: 15:cf:73:07:83:02:2b:b8:df:37:12:97:5a:fa:8a: 57:3b:5c:e5:53:e1:20:bf:ef:be:f3:cf:a3:4c:36: c7:8b:98:ac:bc:a9:f3:98:20:8f:30:a7:23:14:3a: 7f:94:56:c8:fe:b6:2d:e3:5f:47:84:df:4b:5c:86: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1F:D4:2F:67:A5:4E:CF:3D:CE:68:E8:94:22:DE:D0:4E:DF:D2:0B X509v3 Authority Key Identifier: keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:17:db:62:b3:b6:89:7e:bb:0c:98:a3:07:60:a8:45:a6:87: 44:3b:f4:18:f9:9c:44:3e:7f:ed:d1:bd:f3:44:6b:7e:11:7d: 40:42:c7:0e:9b:60:82:e8:0d:5f:e6:0a:af:4c:ad:2f:61:6e: 7c:16:b1:16:0a:45:77:9b:f7:eb:77:3e:3e:30:88:70:17:02: b0:63:c3:88:8e:5a:dd:b9:0b:5e:99:5e:b2:61:48:96:b2:87: 95:5e:e9:6a:2d:c9:da:d1:ed:9f:7f:49:c4:69:7a:29:11:08: cf:83:a4:80:f9:8a:5c:3c:0d:3e:3a:a8:8a:4b:0b:1b:d3:5e: c7:cc:b6:ac:c1:b1:35:a1:75:2e:a4:63:58:7f:ce:58:88:02: fe:f5:c5:8d:2c:a9:73:8e:b8:14:7c:ed:1e:ea:67:2f:1c:8c: cc:84:e8:65:2b:33:3d:08:66:7b:62:7c:6d:3f:1c:41:01:4c: 0e:28:84:95:18:c9:16:b0:58:10:c2:c0:b2:fb:84:d8:c2:59: 19:6f:ec:7d:39:a8:d7:54:cc:34:b8:cd:72:09:c9:04:d4:71: 9a:51:47:a5:85:c3:d1:b6:50:45:98:eb:81:06:d2:28:e5:fa: e8:8d:76:a3:d5:1b:1e:c6:f7:b4:eb:ad:b2:20:51:12:47:57: 56:c4:d7:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8Cqfp+AWIkK0KR4EJYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjhiOWU0Nzg1NmNiYmEwODJiN2FmNDI5N2ExYjcyM2Rh ZmM0MDIwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD EygzYjFmZDQyZjY3YTU0ZWNmM2RjZTY4ZTg5NDIyZGVkMDRlZGZkMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv32uJO0/DiuBw3zYtLnO3zewJHNw WuFKAvpJTs/xyqKftaMKsP7OoC6CwMzz85ntOKN0F/TL7OzxiCiDr2r45lcm1Ns/ SWz198gahb0QAH1+GI77olt4MZzDBp7o5SWr0MdvC/T22nJvHfqvJ2AnrqekEVLc HnD5IQz/dtseuvY47Lpd46nQNgmdBtmEtihrFhJp7vfDo7CJ5lavtovortchIpLC dEKFcR/ogU8wZStfwDbSUxkx6N6TEGbzSFMQMOAVz3MHgwIruN83Epda+opXO1zl U+Egv+++88+jTDbHi5isvKnzmCCPMKcjFDp/lFbI/rYt419HhN9LXIadtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsf1C9npU7PPc5o6JQi3tBO39ILMB8GA1UdIwQY MBaAFOD4ueR4Vsu6CCt69Cl6G3I9r8QCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUt YTU3OTY2MmYwOTUwLzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUtYTU3OTY2MmYwOTUw LzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhfbYrO2 iX67DJijB2CoRaaHRDv0GPmcRD5/7dG980RrfhF9QELHDptggugNX+YKr0ytL2Fu fBaxFgpFd5v363c+PjCIcBcCsGPDiI5a3bkLXplesmFIlrKHlV7pai3J2tHtn39J xGl6KREIz4OkgPmKXDwNPjqoiksLG9Nex8y2rMGxNaF1LqRjWH/OWIgC/vXFjSyp c464FHztHupnLxyMzIToZSszPQhme2J8bT8cQQFMDiiElRjJFrBYEMLAsvuE2MJZ GW/sfTmo11TMNLjNcgnJBNRxmlFHpYXD0bZQRZjrgQbSKOX66I12o9UbHsb3tOut siBREkdXVsTX/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:31 2025 by rpki-client