This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json) Hash identifier: Ct1iazrn4/cQHyvjg8/LgPFtPaO+2ibSda8uoO9uhGU= Subject key identifier: 08:0F:AF:EA:7B:E7:AE:97:8B:5F:6A:2A:A5:C2:08:36:B6:B0:07:1B Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad Certificate serial: 019AF3BFE7A60FAB3A3BACBAE1C8AAD17245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft Manifest number: 085E Signing time: Sat 06 Dec 2025 13:00:31 +0000 Manifest this update: Sat 06 Dec 2025 13:00:31 +0000 Manifest next update: Sun 07 Dec 2025 13:00:31 +0000 Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: myNdNcwhP7Z8zCj7eRH+KRWjTBcQJKJjKNfK2unHulI=) 2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e7:a6:0f:ab:3a:3b:ac:ba:e1:c8:aa:d1:72:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad Validity Not Before: Dec 6 13:00:31 2025 GMT Not After : Dec 7 13:00:31 2025 GMT Subject: CN=080fafea7be7ae978b5f6a2aa5c20836b6b0071b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fe:31:28:e7:7e:5d:34:d0:dd:bd:c0:23:13: a7:b4:6e:23:97:c1:69:7b:f4:71:3d:b3:1f:02:12: a2:63:e9:9a:d7:a5:86:d4:11:03:75:4c:96:2a:5f: 97:e6:27:76:45:0c:5b:0a:fe:a5:94:4d:0a:66:af: db:a9:b2:ea:4f:bd:23:01:d3:46:ce:5a:b1:33:66: 52:16:e9:ac:72:56:43:ec:e7:0a:8d:8b:87:3b:e4: 4a:1d:ec:71:2f:91:a5:85:43:18:39:7b:f4:f8:34: 1d:17:a7:e0:63:e4:7a:d3:04:4f:9f:99:88:d2:de: fe:6c:0c:a2:36:79:99:ba:b8:6b:eb:aa:d8:0d:ae: 1b:aa:4d:d6:6f:35:f0:63:ec:1c:ae:ad:62:97:11: 02:36:10:5e:b9:f1:5b:f6:cf:c1:e9:d5:c4:20:2c: 1e:40:e8:09:57:7b:92:a6:b9:db:33:81:5a:46:c7: 4e:c6:6b:b9:72:c1:cf:5f:da:a2:13:af:df:d0:73: 2f:04:65:13:e8:5d:c0:a8:24:e5:68:84:33:4e:b5: c9:7e:c2:b4:aa:53:76:eb:e1:a2:ef:7f:fa:49:f1: 4b:3e:91:d1:c5:81:54:3c:9a:8d:e7:a9:30:74:e4: 1a:58:6a:1d:4b:ee:ed:0a:ff:de:d9:f6:d5:e1:6e: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:AF:EA:7B:E7:AE:97:8B:5F:6A:2A:A5:C2:08:36:B6:B0:07:1B X509v3 Authority Key Identifier: keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a9:f2:a7:af:d7:f6:b3:d3:56:f0:7d:18:28:a9:b0:a2:cf: 6d:d5:ee:dc:fe:34:87:73:cc:d0:d1:80:85:74:30:0d:ef:53: c7:cb:8b:f2:e8:17:cb:7c:53:38:59:17:79:53:b6:36:7c:b6: e7:7a:ba:cd:aa:63:59:b2:63:d1:6e:94:98:2a:d9:23:62:fe: e5:d2:72:b7:98:48:f0:9e:0c:1c:44:3f:fb:08:80:2c:37:a3: 5f:5c:bf:63:bf:d5:32:f3:1c:0d:d6:33:ca:41:8d:72:e5:c8: 94:34:1f:6a:dd:32:b8:51:49:5e:24:9c:9e:89:49:38:e2:d3: 90:40:df:1c:42:73:00:70:7e:42:9b:5c:71:93:a3:27:7d:a4: 42:26:ef:72:80:6e:28:35:20:60:5c:5c:c2:9e:2a:1a:7a:b4: ef:a4:6f:f0:bd:75:5d:36:38:e1:35:c2:10:60:02:5c:f1:e5: cc:f3:33:cb:9e:90:f7:a6:9a:73:e4:9e:b7:4b:e7:50:95:86: ff:fd:49:91:5c:e6:d9:d6:cc:61:4e:36:8d:42:d4:56:f4:be: 61:92:b5:85:68:e0:88:79:3c:a5:71:65:6c:8e:44:8f:05:f2: 0a:bc:76:c6:09:c1:cb:8a:31:e0:b2:35:47:1f:1e:21:f4:0a: f1:3b:66:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+emD6s6O6y64ciq0XJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGY4ODk0ZjMwODE3MmFjZTkyZmJlNjA1MmVlYzIzODUz ZWFkYWQwHhcNMjUxMjA2MTMwMDMxWhcNMjUxMjA3MTMwMDMxWjAzMTEwLwYDVQQD EygwODBmYWZlYTdiZTdhZTk3OGI1ZjZhMmFhNWMyMDgzNmI2YjAwNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f4xKOd+XTTQ3b3AIxOntG4jl8Fp e/RxPbMfAhKiY+ma16WG1BEDdUyWKl+X5id2RQxbCv6llE0KZq/bqbLqT70jAdNG zlqxM2ZSFumsclZD7OcKjYuHO+RKHexxL5GlhUMYOXv0+DQdF6fgY+R60wRPn5mI 0t7+bAyiNnmZurhr66rYDa4bqk3WbzXwY+wcrq1ilxECNhBeufFb9s/B6dXEICwe QOgJV3uSprnbM4FaRsdOxmu5csHPX9qiE6/f0HMvBGUT6F3AqCTlaIQzTrXJfsK0 qlN26+Gi73/6SfFLPpHRxYFUPJqN56kwdOQaWGodS+7tCv/e2fbV4W5uSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgPr+p7566Xi19qKqXCCDa2sAcbMB8GA1UdIwQY MBaAFOMPiJTzCBcqzpL75gUu7COFPq2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTIt M2U2NjBkMDI1MmRiLzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTItM2U2NjBkMDI1MmRi LzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6nyp6/X 9rPTVvB9GCipsKLPbdXu3P40h3PM0NGAhXQwDe9Tx8uL8ugXy3xTOFkXeVO2Nny2 53q6zapjWbJj0W6UmCrZI2L+5dJyt5hI8J4MHEQ/+wiALDejX1y/Y7/VMvMcDdYz ykGNcuXIlDQfat0yuFFJXiScnolJOOLTkEDfHEJzAHB+QptccZOjJ32kQibvcoBu KDUgYFxcwp4qGnq076Rv8L11XTY44TXCEGACXPHlzPMzy56Q96aac+Set0vnUJWG //1JkVzm2dbMYU42jULUVvS+YZK1hWjgiHk8pXFlbI5EjwXyCrx2xgnBy4ox4LI1 Rx8eIfQK8TtmrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:29 2025 by rpki-client