This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json) Hash identifier: qytEntAyQVouRpWvS+vUqInsReAlootDRXAZJTJUIHA= Subject key identifier: 94:6B:E1:93:FF:41:89:78:C1:60:65:F7:CD:4E:F7:76:EA:FD:5D:60 Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13 Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13 Certificate serial: 019AF38972DBAB4995EE241D95298E7C5C5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft Manifest number: 0C7C Signing time: Sat 06 Dec 2025 12:01:02 +0000 Manifest this update: Sat 06 Dec 2025 12:01:02 +0000 Manifest next update: Sun 07 Dec 2025 12:01:02 +0000 Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: i1vHqlM3azX0Iuv30AmUPahRa/OOSyTmYYd1UGk44yQ=) 2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:72:db:ab:49:95:ee:24:1d:95:29:8e:7c:5c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13 Validity Not Before: Dec 6 12:01:02 2025 GMT Not After : Dec 7 12:01:02 2025 GMT Subject: CN=946be193ff418978c16065f7cd4ef776eafd5d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:5b:4c:a4:8a:f8:95:29:97:5a:e9:74:ca: d5:71:bc:bf:b6:f5:26:aa:d9:00:43:03:7f:1c:52: 7a:5c:96:df:73:26:50:14:a7:de:2f:7e:ec:d5:d8: 30:8e:d3:e7:6f:89:59:24:00:5d:c1:c2:4d:8c:da: 36:36:03:62:e0:60:ce:1c:e2:98:38:d7:9b:fc:31: 08:bb:99:96:ab:6d:5f:ae:5f:b1:cf:88:74:fe:36: c6:65:1f:c1:6c:2c:6c:59:dd:8b:ef:b5:f9:24:5f: b9:43:24:4f:b4:45:e4:4d:25:47:19:db:84:f2:f3: b0:03:59:0e:db:76:7f:6d:08:22:80:a5:e2:63:bc: 21:fd:f6:b1:c4:e4:4d:9b:2d:0a:7c:3b:2e:1e:78: db:70:44:46:15:56:d7:b3:ce:6d:ff:7c:8d:99:d1: 00:a5:5c:79:24:17:f4:b8:96:2a:b2:bf:d9:0d:f6: 5e:31:67:0e:3c:90:eb:c7:37:d7:80:13:68:c0:f7: 1d:28:b0:82:58:99:82:0e:ba:51:18:a8:a8:dc:e3: 3a:33:24:b2:3d:70:46:0a:17:ce:f3:cc:e0:a4:65: bf:54:e8:a6:1f:92:6d:90:d3:91:55:92:d1:f1:95: bb:da:e6:48:31:84:e3:85:3d:80:c3:fe:da:23:16: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6B:E1:93:FF:41:89:78:C1:60:65:F7:CD:4E:F7:76:EA:FD:5D:60 X509v3 Authority Key Identifier: keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9f:83:e8:01:be:ad:f2:52:e3:97:f0:a5:60:51:f1:dc:37: ba:bf:b3:18:cb:db:4d:8b:f9:e8:6e:1d:86:b2:ed:c9:4b:06: 83:0d:b9:d4:d1:6f:ab:fc:b1:c8:8d:71:2a:6d:aa:e3:4e:51: 4a:57:bf:09:2a:de:9a:ab:32:8d:88:e1:df:f2:30:0d:12:97: fe:00:16:5e:e4:09:9e:45:6e:65:3f:3f:87:1f:f1:00:54:50: 43:80:11:45:fc:10:aa:de:0f:5b:dd:ae:e3:3b:b7:35:7f:d5: 06:33:d3:b3:58:e0:97:75:c4:04:86:74:49:25:bd:ba:81:69: 3a:de:b6:f3:4b:01:56:61:d9:69:ee:c3:09:f2:09:63:2a:a2: 61:76:dc:e7:e9:0e:ab:fa:e3:97:f9:6b:a1:6b:20:4f:e9:53: 0e:dc:38:ca:6f:6e:16:d7:f0:51:13:87:dc:ee:13:7c:12:bf: 58:84:22:b4:f5:26:46:b2:b6:6e:a7:b4:af:6a:1c:b7:30:89: 22:3c:94:b6:05:e9:91:0b:66:4d:19:25:d8:59:40:6e:d3:95: 48:55:6a:99:2a:85:fb:52:63:37:fe:f0:6c:90:5b:9c:bc:df: 63:c3:88:b8:64:67:f5:43:13:3e:21:12:b0:77:84:05:72:e0: 02:0c:93:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXLbq0mV7iQdlSmOfFxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOTAwZTU1OTZjMDgzNzQ5N2YxMTg5NDEwYjFlZDIyYWNk YjdlMTMwHhcNMjUxMjA2MTIwMTAyWhcNMjUxMjA3MTIwMTAyWjAzMTEwLwYDVQQD Eyg5NDZiZTE5M2ZmNDE4OTc4YzE2MDY1ZjdjZDRlZjc3NmVhZmQ1ZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRtbTKSK+JUpl1rpdMrVcby/tvUm qtkAQwN/HFJ6XJbfcyZQFKfeL37s1dgwjtPnb4lZJABdwcJNjNo2NgNi4GDOHOKY ONeb/DEIu5mWq21frl+xz4h0/jbGZR/BbCxsWd2L77X5JF+5QyRPtEXkTSVHGduE 8vOwA1kO23Z/bQgigKXiY7wh/faxxORNmy0KfDsuHnjbcERGFVbXs85t/3yNmdEA pVx5JBf0uJYqsr/ZDfZeMWcOPJDrxzfXgBNowPcdKLCCWJmCDrpRGKio3OM6MySy PXBGChfO88zgpGW/VOimH5JtkNORVZLR8ZW72uZIMYTjhT2Aw/7aIxaQwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRr4ZP/QYl4wWBl981O93bq/V1gMB8GA1UdIwQY MBaAFOGQDlWWwIN0l/EYlBCx7SKs234TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFpBT1ZaYkFnM1NYOFJpVUVMSHRJcXpiZmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wNmRiMzgtOTg4Ni00ZDcwLTg5MDQt MjdjYWIwYTYwMjY0LzEvNFpBT1ZaYkFnM1NYOFJpVUVMSHRJcXpiZmhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wNmRiMzgtOTg4Ni00ZDcwLTg5MDQtMjdjYWIwYTYwMjY0 LzEvNFpBT1ZaYkFnM1NYOFJpVUVMSHRJcXpiZmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASp+D6AG+ rfJS45fwpWBR8dw3ur+zGMvbTYv56G4dhrLtyUsGgw251NFvq/yxyI1xKm2q405R Sle/CSremqsyjYjh3/IwDRKX/gAWXuQJnkVuZT8/hx/xAFRQQ4ARRfwQqt4PW92u 4zu3NX/VBjPTs1jgl3XEBIZ0SSW9uoFpOt6280sBVmHZae7DCfIJYyqiYXbc5+kO q/rjl/lroWsgT+lTDtw4ym9uFtfwUROH3O4TfBK/WIQitPUmRrK2bqe0r2octzCJ IjyUtgXpkQtmTRkl2FlAbtOVSFVqmSqF+1JjN/7wbJBbnLzfY8OIuGRn9UMTPiES sHeEBXLgAgyT+A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:06 2025 by rpki-client