This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json) Hash identifier: SaKBrHIAtjQ8atAO+JxA8wPD169//RXmCNJ4vO8FXUY= Subject key identifier: 4F:DE:52:13:BA:9A:9C:1D:6D:FC:EF:37:A3:6F:57:37:F6:EE:82:A0 Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a Certificate serial: 019AF20927767D3D300DB6D42B440AEE8765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft Manifest number: 0D95 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=) 2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: vpcSJ/8s8gJjDwaX9aNd82rlze+9VuPPl4lGD/X/THU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:27:76:7d:3d:30:0d:b6:d4:2b:44:0a:ee:87:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=4fde5213ba9a9c1d6dfcef37a36f5737f6ee82a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:69:8f:07:74:27:05:e9:4d:83:ea:03:3b: de:be:eb:45:b8:ea:fa:d6:a5:d2:38:11:99:9a:f6: 08:e1:16:2c:01:ea:27:e6:70:e5:13:bc:61:ad:8d: 01:ef:1f:52:3e:da:3b:98:f5:eb:9b:44:d4:6f:69: fa:92:03:f8:bb:de:0a:40:48:e5:b2:0c:56:80:9c: ed:02:5a:f6:e7:91:ad:04:e6:97:1a:6f:e7:02:8a: d0:b9:c3:6a:e9:79:33:14:52:fe:e0:45:8f:46:7a: 00:40:07:69:ac:86:41:60:7e:e2:5d:dc:5e:e2:e9: 44:b8:b6:5e:dc:50:f1:79:78:dd:51:89:f8:8c:3e: a5:43:47:d0:13:88:1b:3c:e4:00:03:45:5e:80:48: 55:9c:dd:f9:e7:4e:65:c8:7f:f1:35:af:f4:b2:25: c3:ca:04:a8:62:0b:7b:7b:8e:5e:f2:c1:49:55:58: 0d:0b:c1:b0:3b:28:9c:d8:6f:84:7b:63:bb:36:7f: 3e:09:5c:78:fc:5d:e1:48:3c:10:64:8d:ce:cb:6c: 34:fb:aa:ee:ba:bf:30:e3:a6:40:23:47:14:b1:93: d6:66:2b:ec:29:1b:ac:a6:b6:f8:06:85:2a:9a:8b: fb:66:b8:cf:9d:c4:45:51:3a:4e:15:46:92:18:57: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DE:52:13:BA:9A:9C:1D:6D:FC:EF:37:A3:6F:57:37:F6:EE:82:A0 X509v3 Authority Key Identifier: keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f2:77:35:e4:2c:60:43:06:85:48:bd:95:ef:40:12:3e:67: ab:ae:8a:f9:da:17:4f:85:90:a8:c4:75:08:83:6d:1d:02:d2: bf:8e:fc:17:7a:3a:7b:9d:06:e7:45:f5:40:9c:42:b0:e3:47: 83:ed:b3:b0:82:cf:9b:97:ed:77:24:1b:07:25:2a:2c:b9:9f: 0b:38:c5:b1:d7:09:e2:ed:69:dc:db:01:c2:28:22:7f:86:a8: 61:0a:54:e3:4a:f1:2d:3b:af:60:eb:0b:a7:a4:7d:c9:29:a1: d7:ea:00:3f:41:3c:e1:05:4b:52:a5:ad:bc:e1:a7:8d:85:13: 2b:f7:ab:df:7a:7f:90:d0:83:b5:9d:80:46:f9:27:01:e9:53: 13:69:b1:b3:a7:4b:70:ff:55:d1:68:6b:96:b5:14:dd:3b:57: 5a:9e:ee:1a:47:eb:89:13:fc:ae:4d:4c:bf:79:30:ee:c7:19: a1:bd:06:f6:50:b6:b7:96:cf:b9:62:e3:1f:39:40:d2:b0:9a: e0:d3:1b:87:94:e1:77:b6:ec:1d:d9:58:9b:6e:13:66:2f:25: a9:f8:a2:4b:d7:58:5b:5d:9e:ce:b2:25:bf:91:71:a4:67:e9: 53:46:18:9e:7a:ee:b3:42:72:6e:97:0e:d6:e2:f8:0d:be:34: 83:31:32:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSd2fT0wDbbUK0QK7odlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMmUyMmNjMTU4NTllZDRhMDc4NGJmZDA4NTg0YjNjOGZi MjlmOWEwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD Eyg0ZmRlNTIxM2JhOWE5YzFkNmRmY2VmMzdhMzZmNTczN2Y2ZWU4MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBFpjwd0JwXpTYPqAzvevutFuOr6 1qXSOBGZmvYI4RYsAeon5nDlE7xhrY0B7x9SPto7mPXrm0TUb2n6kgP4u94KQEjl sgxWgJztAlr255GtBOaXGm/nAorQucNq6XkzFFL+4EWPRnoAQAdprIZBYH7iXdxe 4ulEuLZe3FDxeXjdUYn4jD6lQ0fQE4gbPOQAA0VegEhVnN35505lyH/xNa/0siXD ygSoYgt7e45e8sFJVVgNC8GwOyic2G+Ee2O7Nn8+CVx4/F3hSDwQZI3Oy2w0+6ru ur8w46ZAI0cUsZPWZivsKRusprb4BoUqmov7ZrjPncRFUTpOFUaSGFeFuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/eUhO6mpwdbfzvN6NvVzf27oKgMB8GA1UdIwQY MBaAFP4uIswVhZ7UoHhL/QhYSzyPsp+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQt ODA2MGM1MDNkODZlLzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQtODA2MGM1MDNkODZl LzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPJ3NeQs YEMGhUi9le9AEj5nq66K+doXT4WQqMR1CINtHQLSv478F3o6e50G50X1QJxCsONH g+2zsILPm5ftdyQbByUqLLmfCzjFsdcJ4u1p3NsBwigif4aoYQpU40rxLTuvYOsL p6R9ySmh1+oAP0E84QVLUqWtvOGnjYUTK/er33p/kNCDtZ2ARvknAelTE2mxs6dL cP9V0WhrlrUU3TtXWp7uGkfriRP8rk1Mv3kw7scZob0G9lC2t5bPuWLjHzlA0rCa 4NMbh5Thd7bsHdlYm24TZi8lqfiiS9dYW12ezrIlv5FxpGfpU0YYnnrus0JybpcO 1uL4Db40gzEyOA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:55 2025 by rpki-client