This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json) Hash identifier: 7HxKXCCeFStgBfbEcGNw5q1nydHVvyeYtlJhbn7JFu0= Subject key identifier: E4:AE:9E:9C:48:4F:AB:88:71:FC:5D:20:5F:18:2A:55:34:69:81:97 Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63 Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63 Certificate serial: 019AF352365A7A59A2942C436201618BA774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft Manifest number: 0A39 Signing time: Sat 06 Dec 2025 11:00:42 +0000 Manifest this update: Sat 06 Dec 2025 11:00:42 +0000 Manifest next update: Sun 07 Dec 2025 11:00:42 +0000 Files and hashes: 1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=) 2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: hf6rbuGY85N8ILzQ02MvZvvOPq/8KwE8f23gYjwoguA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:36:5a:7a:59:a2:94:2c:43:62:01:61:8b:a7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63 Validity Not Before: Dec 6 11:00:42 2025 GMT Not After : Dec 7 11:00:42 2025 GMT Subject: CN=e4ae9e9c484fab8871fc5d205f182a5534698197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:c6:9a:8c:dc:16:8a:1a:7c:ea:fe:bf:17: 90:5e:e1:c3:89:62:89:53:cb:c1:7b:cd:79:17:f4: 21:96:ce:af:de:4d:42:3f:56:30:a0:93:90:db:ae: 3e:b1:ab:5b:8b:1b:51:2b:06:d1:00:5d:a7:8c:2a: 17:7c:a3:de:db:88:a5:9c:73:f0:90:4d:7a:00:a9: d2:34:d1:15:4b:45:43:cc:f1:6e:07:13:c5:99:e3: f8:64:86:3b:a9:53:67:40:6c:6e:76:55:1b:80:8a: 6b:79:66:7f:aa:2e:50:88:7f:84:27:dd:53:59:c6: 83:f3:48:db:33:cc:a6:91:49:fa:4a:2b:c3:59:cc: cd:b3:a8:c7:ba:81:a9:84:95:2c:60:82:45:d3:9b: 98:f3:91:6c:26:67:a9:61:c6:af:4d:03:7e:c3:dd: b8:19:7d:c2:b8:5e:7f:c4:a4:8b:fa:2c:f1:d7:cf: 30:77:3e:79:c4:7a:8e:d4:79:1c:85:b0:86:a4:89: 7b:e5:cb:2d:47:89:f8:1c:13:eb:39:01:6d:10:ee: 54:40:12:47:24:50:ab:8a:1e:b1:33:c8:1a:fc:a9: d4:2a:91:78:36:88:51:a4:f8:46:5e:e5:f1:13:c4: 54:97:ce:78:15:c3:cd:20:e3:13:cb:cd:0b:bc:76: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AE:9E:9C:48:4F:AB:88:71:FC:5D:20:5F:18:2A:55:34:69:81:97 X509v3 Authority Key Identifier: keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f9:ab:73:ac:06:52:dd:0e:44:54:cd:4f:5f:f6:07:5d:71: b0:ca:69:95:f1:b5:10:3b:00:99:01:89:47:b6:af:83:d1:50: d9:73:48:c6:67:45:2a:c3:e9:54:ab:ce:0c:ef:ca:85:66:0b: 9e:bd:4d:d6:15:58:3d:8b:c5:7c:f6:3b:50:a3:0d:83:46:9b: 93:38:f9:aa:44:1e:ea:cc:d2:84:ec:38:27:59:60:9f:55:07: a0:75:f7:e5:57:24:5c:a6:4c:d7:c1:03:00:11:24:e0:ae:c6: 63:87:5f:28:c4:b6:23:8c:25:18:25:10:dd:a7:e6:d6:09:e6: 78:3e:ee:9e:aa:14:ea:c3:ee:20:f7:35:74:b7:8b:0a:6e:9d: 90:8a:31:10:d4:f7:bb:60:cc:f8:d8:64:8c:ea:c7:3b:d9:ec: 40:7e:c7:69:30:6e:fa:d4:2b:60:9c:f0:8f:e9:94:3f:5a:36: d1:8e:d6:9b:62:c8:57:85:cc:a4:b8:b0:8e:c9:2a:0a:74:ba: ef:4d:54:ce:df:f2:4f:9e:77:92:cc:b2:b1:3a:ad:42:5f:28: 7b:db:3b:e7:1e:90:a4:0e:8f:a1:b4:0c:ef:ab:56:7a:6b:d5: da:ce:a6:2c:9b:7d:c3:ae:de:d0:1c:8d:23:83:43:97:3d:e1: 61:33:c4:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjZaelmilCxDYgFhi6d0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZWJkYjY5YTMzZThmM2FmMzYzYWUxNDRmODUzNTM4ZTgw MzFiNjMwHhcNMjUxMjA2MTEwMDQyWhcNMjUxMjA3MTEwMDQyWjAzMTEwLwYDVQQD EyhlNGFlOWU5YzQ4NGZhYjg4NzFmYzVkMjA1ZjE4MmE1NTM0Njk4MTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+PGmozcFooafOr+vxeQXuHDiWKJ U8vBe815F/Qhls6v3k1CP1YwoJOQ264+satbixtRKwbRAF2njCoXfKPe24ilnHPw kE16AKnSNNEVS0VDzPFuBxPFmeP4ZIY7qVNnQGxudlUbgIpreWZ/qi5QiH+EJ91T WcaD80jbM8ymkUn6SivDWczNs6jHuoGphJUsYIJF05uY85FsJmepYcavTQN+w924 GX3CuF5/xKSL+izx188wdz55xHqO1HkchbCGpIl75cstR4n4HBPrOQFtEO5UQBJH JFCrih6xM8ga/KnUKpF4NohRpPhGXuXxE8RUl854FcPNIOMTy80LvHZ6swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSunpxIT6uIcfxdIF8YKlU0aYGXMB8GA1UdIwQY MBaAFODr22mjPo8682OuFE+FNTjoAxtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTkt ZDIzMTBiYmEwZTExLzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTktZDIzMTBiYmEwZTEx LzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvmrc6wG Ut0ORFTNT1/2B11xsMpplfG1EDsAmQGJR7avg9FQ2XNIxmdFKsPpVKvODO/KhWYL nr1N1hVYPYvFfPY7UKMNg0abkzj5qkQe6szShOw4J1lgn1UHoHX35VckXKZM18ED ABEk4K7GY4dfKMS2I4wlGCUQ3afm1gnmeD7unqoU6sPuIPc1dLeLCm6dkIoxENT3 u2DM+NhkjOrHO9nsQH7HaTBu+tQrYJzwj+mUP1o20Y7Wm2LIV4XMpLiwjskqCnS6 701Uzt/yT553ksyysTqtQl8oe9s75x6QpA6PobQM76tWemvV2s6mLJt9w67e0ByN I4NDlz3hYTPEFw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:10 2025 by rpki-client