This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json) Hash identifier: UHqu+e5e65phttsfjiKDX/im6y0viyE3nK7r5q7j5dE= Subject key identifier: DD:C2:2E:BF:40:C5:05:78:C9:9F:5D:D0:3F:4F:7F:C4:21:FC:3C:48 Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9 Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9 Certificate serial: 019AF540782F8D7EDB0C080D1D7C6C1FDC09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 20:00:34 +0000 Manifest this update: Sat 06 Dec 2025 20:00:34 +0000 Manifest next update: Sun 07 Dec 2025 20:00:34 +0000 Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: 7QvZYboDohxFHDVNVfmnSaojWQGeBe+QKBX+9eYziDg=) 2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:78:2f:8d:7e:db:0c:08:0d:1d:7c:6c:1f:dc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9 Validity Not Before: Dec 6 20:00:34 2025 GMT Not After : Dec 7 20:00:34 2025 GMT Subject: CN=ddc22ebf40c50578c99f5dd03f4f7fc421fc3c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:79:36:a1:1c:23:79:55:0b:b1:b6:1c:8b:b8: e7:3c:9a:f2:cb:34:e0:9f:ec:7b:35:5d:c5:d2:94: d5:21:3d:9b:e1:dd:8e:fc:1f:cd:42:16:d2:d4:43: 57:a1:f7:8a:b3:d5:7b:19:52:ee:4d:12:84:7e:70: f9:93:75:e7:d0:20:c1:0c:cd:67:d6:5c:ef:fb:8e: e8:1c:21:47:15:05:6d:5a:d3:3f:fc:ae:97:85:86: 48:88:b8:3c:38:70:97:13:4a:65:3c:f2:5a:7f:63: 00:c7:b5:bf:50:18:11:58:e8:3f:5a:42:26:50:88: 0d:71:e9:ce:6a:11:5a:e0:f9:84:3c:f8:46:f3:a8: 46:7b:2b:0a:56:d2:ff:85:6b:38:36:5b:2e:58:67: 04:e8:0b:22:12:cd:e2:50:b1:26:80:dd:39:c7:66: cc:7d:64:40:70:b9:b8:3d:17:b4:54:5e:c7:7e:e5: 00:21:a2:0e:ad:9f:4c:42:93:16:31:f5:f1:bc:d9: b8:22:aa:6a:f5:12:02:9e:ab:88:1b:d1:77:ec:83: f0:a1:b7:b1:f9:8e:cc:ea:2f:09:6e:87:fc:7e:33: 84:d3:34:5b:b9:c2:91:bc:e0:17:6b:69:6e:d6:ee: 0b:46:4d:bf:ac:2e:ef:14:00:9c:a6:83:9c:b7:3d: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C2:2E:BF:40:C5:05:78:C9:9F:5D:D0:3F:4F:7F:C4:21:FC:3C:48 X509v3 Authority Key Identifier: keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d8:6c:12:8e:57:8d:14:93:f8:bc:aa:c2:31:49:b2:8f:ea: 98:6e:e4:c2:f4:db:f5:91:7f:9c:a1:8e:f7:63:76:c0:d7:fc: fb:e4:08:73:ee:68:74:12:24:56:68:3f:cb:ec:ca:0c:e2:7d: cd:63:24:87:b0:f2:a9:8a:1f:b2:2e:33:ad:0a:5b:2a:95:4c: 17:90:db:ef:70:fb:44:bc:64:e7:0c:e2:ad:05:f5:27:62:81: 6b:9b:13:71:1f:30:74:85:5f:38:9d:f1:fe:d8:62:77:bc:0a: 3c:69:84:1e:9e:19:81:0c:7f:48:4f:b9:d2:4b:10:e8:13:ee: 3a:21:3f:17:34:5a:d1:0d:0c:60:eb:b0:cb:d3:7f:b6:62:b2: 88:aa:a5:38:63:e4:98:77:bf:8d:a6:fc:f0:23:f4:04:e9:79: 1b:ea:99:ce:58:e7:7a:96:54:77:73:63:77:93:aa:0b:1b:d0: 9b:0d:c4:3f:d0:15:cf:25:0a:a9:81:44:c2:a3:70:59:2d:8b: d4:13:ff:bf:b8:98:3a:81:c0:bd:eb:30:2a:c5:7c:ea:bd:2c: 11:49:bc:c3:07:58:85:35:31:96:8c:10:14:d0:b5:62:50:f2: 1b:e7:08:95:81:28:b9:69:7f:b8:e0:d2:cf:30:09:90:80:2f: ae:81:6b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QHgvjX7bDAgNHXxsH9wJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjQ0NWIwMGE4NjAwYjgzMzRjMWQzYWFkZjFlZjcxOTE0 ZTY4YzkwHhcNMjUxMjA2MjAwMDM0WhcNMjUxMjA3MjAwMDM0WjAzMTEwLwYDVQQD EyhkZGMyMmViZjQwYzUwNTc4Yzk5ZjVkZDAzZjRmN2ZjNDIxZmMzYzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHk2oRwjeVULsbYci7jnPJryyzTg n+x7NV3F0pTVIT2b4d2O/B/NQhbS1ENXofeKs9V7GVLuTRKEfnD5k3Xn0CDBDM1n 1lzv+47oHCFHFQVtWtM//K6XhYZIiLg8OHCXE0plPPJaf2MAx7W/UBgRWOg/WkIm UIgNcenOahFa4PmEPPhG86hGeysKVtL/hWs4NlsuWGcE6AsiEs3iULEmgN05x2bM fWRAcLm4PRe0VF7HfuUAIaIOrZ9MQpMWMfXxvNm4Iqpq9RICnquIG9F37IPwobex +Y7M6i8Jbof8fjOE0zRbucKRvOAXa2lu1u4LRk2/rC7vFACcpoOctz0qowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3CLr9AxQV4yZ9d0D9Pf8Qh/DxIMB8GA1UdIwQY MBaAFOK0RbAKhgC4M0wdOq3x73GRTmjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hOTFhZmUtOTY1MS00ZGUzLWFkODgt ZDgzOTNlMTg1NzMyLzEvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9hOTFhZmUtOTY1MS00ZGUzLWFkODgtZDgzOTNlMTg1NzMy LzEvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9hsEo5X jRST+LyqwjFJso/qmG7kwvTb9ZF/nKGO92N2wNf8++QIc+5odBIkVmg/y+zKDOJ9 zWMkh7DyqYofsi4zrQpbKpVMF5Db73D7RLxk5wzirQX1J2KBa5sTcR8wdIVfOJ3x /thid7wKPGmEHp4ZgQx/SE+50ksQ6BPuOiE/FzRa0Q0MYOuwy9N/tmKyiKqlOGPk mHe/jab88CP0BOl5G+qZzljnepZUd3Njd5OqCxvQmw3EP9AVzyUKqYFEwqNwWS2L 1BP/v7iYOoHAveswKsV86r0sEUm8wwdYhTUxlowQFNC1YlDyG+cIlYEouWl/uODS zzAJkIAvroFroA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:42 2025 by rpki-client