This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json) Hash identifier: NZYoEsI0gKiGIp3SkdEgBTbBwkW28xu0n51soM/kNmU= Subject key identifier: 78:88:F6:C3:0D:F8:0D:96:DD:D8:7F:CD:C7:5E:54:8A:36:4B:67:67 Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18 Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018 Certificate serial: 019AF1D1A9897D0603D5F370B67DBE0A20DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft Manifest number: 10A0 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: 0zop/aKXXAEGQMKyz6sz0k7Awl2Sd9nSuykIh1NuI7c=) 2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:89:7d:06:03:d5:f3:70:b6:7d:be:0a:20:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=7888f6c30df80d96ddd87fcdc75e548a364b6767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:cc:4d:5d:05:fa:d9:bf:7c:42:34:5e:b6: c6:a6:03:e3:82:c6:74:d1:d2:ae:a9:c3:76:d6:5c: 7a:7f:2e:e0:0b:39:b8:ce:38:cc:1c:ab:93:64:77: 38:34:be:bb:58:ac:85:f6:e9:17:37:fb:14:6d:62: 39:fd:51:69:0d:49:57:43:47:ae:08:8d:50:12:1e: f6:3f:33:17:ba:71:c6:e4:8f:c0:1c:3d:ec:d7:51: 5a:90:5a:35:f9:f2:c1:09:ef:ea:12:35:83:e0:a2: eb:5f:d7:19:fa:2c:d7:c2:2a:2b:94:c7:c3:ca:5b: b5:f7:93:2f:80:fe:bf:c5:86:00:2f:ea:f3:51:f0: 8a:a6:0e:58:2c:53:e4:f2:0b:5d:a3:bd:65:6a:c4: 9b:75:29:ce:4a:20:86:26:62:e6:16:3c:06:d1:a9: 4c:02:1c:49:0e:b1:8d:73:89:a3:be:9b:2d:ac:14: 29:74:29:2c:5d:93:1c:50:80:31:56:7e:e9:d5:97: 1b:c0:81:39:41:c2:56:7b:db:25:49:aa:cb:35:ee: 32:6f:31:51:c7:87:77:57:95:09:c8:ef:90:91:dc: e2:c9:0b:a4:96:5f:cf:cf:31:72:d1:ac:aa:5c:ec: bb:bc:e1:c9:e6:49:21:4d:9c:d0:97:ca:cd:ac:f8: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:88:F6:C3:0D:F8:0D:96:DD:D8:7F:CD:C7:5E:54:8A:36:4B:67:67 X509v3 Authority Key Identifier: keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7b:f2:13:08:0e:4d:7c:8f:b9:f9:14:e2:e1:65:aa:42:b0: d0:d7:f1:fa:3a:ca:93:ad:02:da:ae:84:bc:80:6c:25:3f:62: c1:c6:9e:ed:00:2f:cd:b8:84:65:5d:4e:4e:cb:57:5d:09:cb: 28:40:bb:c1:e5:56:c9:6c:0d:f1:e9:26:6a:59:fe:cc:64:1b: 1b:1b:a1:15:28:be:59:a2:df:c5:71:03:46:c1:28:77:4d:cc: 1c:2f:cb:65:b8:16:15:85:18:a6:78:67:49:74:90:f6:b7:db: 73:9d:87:5d:57:64:d8:49:7b:ad:5a:9f:72:df:19:fe:e3:52: a6:71:dd:f1:fb:b4:3a:4a:eb:42:53:b5:84:69:dc:b7:eb:1d: b7:2b:a3:7b:47:4b:5e:ae:11:12:30:ad:93:c6:27:f6:6e:64: c5:ab:bb:5d:0c:2f:06:0e:c4:18:de:4a:6b:c5:09:74:70:21: 75:3f:2e:24:f7:68:7a:a5:53:bd:3d:ef:d6:62:1b:b9:3a:ba: fd:e8:9b:69:ac:09:9e:81:61:5e:3d:c9:f4:8f:45:cf:21:d5: 6f:04:d6:db:51:36:e4:db:a7:e3:73:90:98:3f:cb:9c:5b:2d: a9:76:31:b4:f6:69:5e:7b:29:16:da:63:af:af:fd:c2:16:e8: 59:8a:54:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0amJfQYD1fNwtn2+CiDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZWExNGQxMzQzYjk5MjUwNmJlZTZjM2Q5MGUxOWE2OTc5 OGIwMTgwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD Eyg3ODg4ZjZjMzBkZjgwZDk2ZGRkODdmY2RjNzVlNTQ4YTM2NGI2NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6vMTV0F+tm/fEI0XrbGpgPjgsZ0 0dKuqcN21lx6fy7gCzm4zjjMHKuTZHc4NL67WKyF9ukXN/sUbWI5/VFpDUlXQ0eu CI1QEh72PzMXunHG5I/AHD3s11FakFo1+fLBCe/qEjWD4KLrX9cZ+izXwiorlMfD ylu195MvgP6/xYYAL+rzUfCKpg5YLFPk8gtdo71lasSbdSnOSiCGJmLmFjwG0alM AhxJDrGNc4mjvpstrBQpdCksXZMcUIAxVn7p1ZcbwIE5QcJWe9slSarLNe4ybzFR x4d3V5UJyO+QkdziyQukll/PzzFy0ayqXOy7vOHJ5kkhTZzQl8rNrPhexwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiI9sMN+A2W3dh/zcdeVIo2S2dnMB8GA1UdIwQY MBaAFOPqFNE0O5klBr7mw9kOGaaXmLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQt ZDRhNGYzNDcxN2YwLzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQtZDRhNGYzNDcxN2Yw LzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3vyEwgO TXyPufkU4uFlqkKw0Nfx+jrKk60C2q6EvIBsJT9iwcae7QAvzbiEZV1OTstXXQnL KEC7weVWyWwN8ekmaln+zGQbGxuhFSi+WaLfxXEDRsEod03MHC/LZbgWFYUYpnhn SXSQ9rfbc52HXVdk2El7rVqfct8Z/uNSpnHd8fu0OkrrQlO1hGnct+sdtyuje0dL Xq4REjCtk8Yn9m5kxau7XQwvBg7EGN5Ka8UJdHAhdT8uJPdoeqVTvT3v1mIbuTq6 /eibaawJnoFhXj3J9I9FzyHVbwTW21E25Nun43OQmD/LnFstqXYxtPZpXnspFtpj r6/9whboWYpU2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:23 2025 by rpki-client