This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft File: 4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json) Hash identifier: 1Vd0rt8jZqOdB947Lg3mLvKCslUA45FxP8xClAj06sg= Subject key identifier: 3B:00:7B:F5:8E:3D:5A:9C:51:41:4D:1A:2F:57:F1:D6:9B:87:53:A5 Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3 Certificate issuer: /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3 Certificate serial: 019AF1647EB1872805DF2AEB1D05D3070D44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft Manifest number: 1049 Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: upvDg1bPV/wisID4T00RvcCGdglyGaX0nU0ybCBJe54=) 2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7e:b1:87:28:05:df:2a:eb:1d:05:d3:07:0d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3 Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=3b007bf58e3d5a9c51414d1a2f57f1d69b8753a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:c9:66:cd:4d:b5:81:fd:61:ed:d7:20:29: 47:0a:a1:3a:a6:c8:b4:8b:48:e3:2f:3d:7d:82:e1: d4:e2:1e:1b:3c:68:f6:ec:5f:0c:3a:9f:15:31:ad: 76:84:72:0a:65:a4:47:99:66:2c:c9:83:4d:ac:03: 2b:9d:1a:9f:6e:ab:d5:e9:d8:1e:b1:6f:37:ca:d1: 86:23:0f:c4:eb:3a:03:9a:07:e6:cf:0f:44:7e:42: 85:46:1d:79:d1:13:67:1c:61:3d:c4:f4:e1:74:cd: 0d:20:30:3f:82:9d:08:d3:d0:06:6f:cc:66:a8:91: cc:26:c1:98:d2:e0:1e:1e:af:e7:2c:8b:27:81:c7: fd:55:6b:f4:f3:99:13:0a:16:2e:8c:b2:29:a5:d9: 07:66:5f:99:97:28:b6:a9:37:9a:e1:6d:53:34:bb: ea:3d:a3:a8:f1:02:ed:9c:90:b9:cd:85:7e:90:ab: 47:38:42:b4:48:e8:37:6b:0d:47:15:fb:e2:c2:26: 04:f5:c8:b8:45:34:c6:7f:81:6a:b8:cc:08:89:fe: b1:d3:d7:1e:ee:1a:9d:37:24:1c:8f:4b:cf:f1:1b: f2:aa:05:8d:0d:3e:91:7b:5c:ee:e1:2e:8c:93:8a: ce:80:c4:24:a3:7b:bd:39:83:df:fc:94:e3:6c:a3: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:00:7B:F5:8E:3D:5A:9C:51:41:4D:1A:2F:57:F1:D6:9B:87:53:A5 X509v3 Authority Key Identifier: keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:58:74:d3:f4:61:2d:8c:07:0d:04:a0:68:ea:72:6c:60:52: 6a:c6:b4:87:2b:4d:39:b4:c6:a8:ec:e4:80:88:64:a0:1a:9b: 2b:b5:6d:71:a0:12:75:8f:7c:93:c4:6d:83:ae:13:65:9b:6a: 5b:1a:57:6d:e3:ad:21:d9:34:fe:59:a3:4f:e0:ac:14:f4:42: d7:a0:26:6e:74:4c:8a:44:72:56:48:bb:42:0a:2f:14:ed:73: f2:66:bc:52:12:f7:b6:fc:3d:28:e3:06:88:5c:2d:29:46:72: a0:37:eb:da:fa:8f:92:d3:6b:75:03:79:1c:f2:9a:4d:cc:86: 37:97:04:cb:d1:b2:b7:41:68:c7:c5:73:b2:2e:f4:22:03:62: d0:fa:4e:a1:bd:84:a7:13:a3:d1:d1:60:d1:29:cb:19:5c:34: 35:fe:53:88:f1:aa:ec:4f:82:d0:45:41:00:48:f1:62:7e:db: d9:c4:16:af:c7:79:85:05:66:4e:62:71:d8:4a:39:50:ee:21: 22:63:23:2f:15:1f:ea:ef:33:e9:7f:40:78:e6:79:5a:f2:fb: 21:9a:6a:8a:e8:a2:e9:1b:a2:14:93:0c:99:d9:53:c9:24:ee: e9:f2:e9:59:60:a9:24:02:8c:3f:d6:db:b6:18:89:b8:dd:64: 3a:6f:a9:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZH6xhygF3yrrHQXTBw1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmRjY2IyNDUwYTFhMDUzYzg5Y2MyMTNlNGFlOWI4NjQ3 ODJkZTMwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD EygzYjAwN2JmNThlM2Q1YTljNTE0MTRkMWEyZjU3ZjFkNjliODc1M2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3snJZs1NtYH9Ye3XIClHCqE6psi0 i0jjLz19guHU4h4bPGj27F8MOp8VMa12hHIKZaRHmWYsyYNNrAMrnRqfbqvV6dge sW83ytGGIw/E6zoDmgfmzw9EfkKFRh150RNnHGE9xPThdM0NIDA/gp0I09AGb8xm qJHMJsGY0uAeHq/nLIsngcf9VWv085kTChYujLIppdkHZl+Zlyi2qTea4W1TNLvq PaOo8QLtnJC5zYV+kKtHOEK0SOg3aw1HFfviwiYE9ci4RTTGf4FquMwIif6x09ce 7hqdNyQcj0vP8RvyqgWNDT6Re1zu4S6Mk4rOgMQko3u9OYPf/JTjbKPzCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsAe/WOPVqcUUFNGi9X8dabh1OlMB8GA1UdIwQY MBaAFOG9zLJFChoFPInMIT5K6bhkeC3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNThiZTktMTkyZC00YWU5LWI0YmQt ZWVkNTU2YWYyYzdmLzEvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zNThiZTktMTkyZC00YWU5LWI0YmQtZWVkNTU2YWYyYzdm LzEvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVh00/Rh LYwHDQSgaOpybGBSasa0hytNObTGqOzkgIhkoBqbK7VtcaASdY98k8Rtg64TZZtq WxpXbeOtIdk0/lmjT+CsFPRC16AmbnRMikRyVki7QgovFO1z8ma8UhL3tvw9KOMG iFwtKUZyoDfr2vqPktNrdQN5HPKaTcyGN5cEy9Gyt0Fox8Vzsi70IgNi0PpOob2E pxOj0dFg0SnLGVw0Nf5TiPGq7E+C0EVBAEjxYn7b2cQWr8d5hQVmTmJx2Eo5UO4h ImMjLxUf6u8z6X9AeOZ5WvL7IZpqiuii6RuiFJMMmdlTySTu6fLpWWCpJAKMP9bb thiJuN1kOm+pGA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:31 2025 by rpki-client