This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft File: 4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json) Hash identifier: oXBj0DjG5Oxwvx8rDQ7XdNnDoYulh1iRvQ1G0Zrth/k= Subject key identifier: 65:EC:33:2D:19:D6:1A:08:CE:B6:3B:9B:59:70:61:EA:AB:BF:B0:5A Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51 Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151 Certificate serial: 019AF3898155F895FFDC41E2AE869CE1C216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:06 +0000 Manifest this update: Sat 06 Dec 2025 12:01:06 +0000 Manifest next update: Sun 07 Dec 2025 12:01:06 +0000 Files and hashes: 1: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: 1i8Ya5KRxfFALk2ZQoCCa+VZqnq/6M5Ec621T+FmO+4=) 2: IcskwdSROKi9qZels4yHQYnddgE.roa (hash: vPtKorJ6NxT7CsrYyPVFrqYiL53IkN4t+VtNjaUnOjc=) 3: R1WYdjBFxaqOJXdmYl0VkK_31-A.roa (hash: jZxWD0uM9IaDgIRuAxwkdjeq40Xiof3RV5ZUg9OIXw4=) 4: UgQvx_lbsNuoPrOWEqQQU5trSo4.roa (hash: n18F2sXvjdyTqUjm8/utigztVnaPt5K+HXMDSCAPMDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:81:55:f8:95:ff:dc:41:e2:ae:86:9c:e1:c2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151 Validity Not Before: Dec 6 12:01:06 2025 GMT Not After : Dec 7 12:01:06 2025 GMT Subject: CN=65ec332d19d61a08ceb63b9b597061eaabbfb05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:67:05:df:33:e9:9a:c0:44:c5:27:1e:89: d2:d9:c4:1a:2f:b6:6f:a3:af:11:cc:f4:41:b4:78: 07:3c:49:10:3f:48:fd:04:c7:29:50:6d:5e:1a:50: af:d2:9f:ad:a2:bc:a1:28:25:bd:8c:17:6b:83:35: 66:9b:0b:fe:cd:d0:34:a4:77:d8:9c:c8:95:04:11: d3:4a:47:91:a2:de:29:8d:ff:bc:7f:51:4a:fe:d7: a4:b4:b1:2f:b5:9e:29:a0:f5:f2:22:9f:bc:9c:68: af:3f:77:1e:4b:65:eb:10:6b:4b:aa:c5:9c:3f:17: a0:ed:98:ad:ce:bb:71:7c:29:06:d7:fd:ca:2b:e8: 6c:83:4c:60:fa:83:c7:72:c5:d3:36:8a:ed:48:fa: 29:43:dd:02:6c:fb:51:d3:ca:f1:d7:04:0f:a4:91: ba:f7:13:13:af:29:55:7f:9f:bc:fd:18:8c:a5:86: 69:ec:29:5b:c2:ce:3c:27:b8:6b:7a:f2:c7:86:9b: 91:89:d7:5e:bf:0a:8f:2f:87:24:18:1c:89:28:f0: 19:cc:d8:2f:a7:c7:44:83:b8:ed:5b:b4:81:29:50: f6:d4:cd:b4:33:7e:24:45:f8:e5:09:c8:db:63:87: f4:11:ec:19:53:77:63:3b:72:a3:83:1d:77:4a:fd: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EC:33:2D:19:D6:1A:08:CE:B6:3B:9B:59:70:61:EA:AB:BF:B0:5A X509v3 Authority Key Identifier: keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ef:29:e0:e1:f3:41:ba:f7:45:9a:1e:2f:40:be:44:c1:81: 93:44:ad:e9:1b:f4:47:b8:df:94:6f:da:cd:2f:31:4d:a3:00: 43:56:e6:d3:83:0a:30:e1:e3:d0:52:e7:95:66:2f:a3:3c:c8: 59:c8:58:25:ef:53:d2:aa:82:fb:ee:06:78:b6:50:92:69:5f: fc:72:b8:b7:38:f4:47:56:7c:52:d2:2d:3e:38:5f:e0:a6:3a: 0f:9e:1f:c3:5f:a0:02:c0:d1:f7:a2:e5:50:3b:34:cc:94:12: 31:21:6f:71:ce:52:65:0a:dd:1b:f9:83:ce:b9:62:60:af:49: 29:6b:61:47:91:8f:d2:74:14:be:74:a1:52:db:ad:81:85:4b: f7:0d:98:d3:f8:9b:ec:85:ed:94:00:93:5c:ef:4c:6e:6f:f6: 48:9f:d4:77:72:44:ed:51:2c:cc:97:3e:6c:15:3c:d1:27:f8: 14:14:52:d3:7a:b8:dd:c5:af:8a:a9:b0:60:9b:a0:26:71:f9: da:d6:82:45:19:1d:64:c5:40:a4:91:81:fb:57:be:55:69:35: 24:16:3c:74:15:82:12:c6:05:70:c9:f1:03:23:fe:a6:4e:54: d0:93:c3:87:c4:dd:09:a0:f9:7d:f5:d6:97:ed:a1:05:78:83: 3d:ea:bc:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYFV+JX/3EHiroac4cIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwY2RlMmMxZmNlM2Q2ZmUyMTg1MzQ3ZGQ4OWRjZmQxM2Vi YmIxNTEwHhcNMjUxMjA2MTIwMTA2WhcNMjUxMjA3MTIwMTA2WjAzMTEwLwYDVQQD Eyg2NWVjMzMyZDE5ZDYxYTA4Y2ViNjNiOWI1OTcwNjFlYWFiYmZiMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrVnBd8z6ZrARMUnHonS2cQaL7Zv o68RzPRBtHgHPEkQP0j9BMcpUG1eGlCv0p+toryhKCW9jBdrgzVmmwv+zdA0pHfY nMiVBBHTSkeRot4pjf+8f1FK/tektLEvtZ4poPXyIp+8nGivP3ceS2XrEGtLqsWc Pxeg7ZitzrtxfCkG1/3KK+hsg0xg+oPHcsXTNortSPopQ90CbPtR08rx1wQPpJG6 9xMTrylVf5+8/RiMpYZp7Clbws48J7hrevLHhpuRiddevwqPL4ckGByJKPAZzNgv p8dEg7jtW7SBKVD21M20M34kRfjlCcjbY4f0EewZU3djO3Kjgx13Sv2XjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXsMy0Z1hoIzrY7m1lwYeqrv7BaMB8GA1UdIwQY MBaAFODN4sH849b+IYU0fdidz9E+u7FRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEt ZWNiMzEyNmZjOGVkLzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEtZWNiMzEyNmZjOGVk LzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+8p4OHz Qbr3RZoeL0C+RMGBk0St6Rv0R7jflG/azS8xTaMAQ1bm04MKMOHj0FLnlWYvozzI WchYJe9T0qqC++4GeLZQkmlf/HK4tzj0R1Z8UtItPjhf4KY6D54fw1+gAsDR96Ll UDs0zJQSMSFvcc5SZQrdG/mDzrliYK9JKWthR5GP0nQUvnShUtutgYVL9w2Y0/ib 7IXtlACTXO9Mbm/2SJ/Ud3JE7VEszJc+bBU80Sf4FBRS03q43cWviqmwYJugJnH5 2taCRRkdZMVApJGB+1e+VWk1JBY8dBWCEsYFcMnxAyP+pk5U0JPDh8TdCaD5ffXW l+2hBXiDPeq82Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:16:59 2025 by rpki-client