This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json) Hash identifier: 8gKFojXslZW+vNG/45qOZz4IW4GBR5h1j7Zk60I87c8= Subject key identifier: 88:42:2D:B9:82:2C:7E:EF:E0:1E:26:95:BF:8F:B7:D7:23:46:3F:C9 Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e Certificate serial: 019AF12CCFBE92CCF3C7C2F825DC11BB1D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft Manifest number: 05DB Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: w/VcD+mCdZF1PJVTnjLEeiywznL3ZtVW/42G76kPHGQ=) 2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cf:be:92:cc:f3:c7:c2:f8:25:dc:11:bb:1d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=88422db9822c7eefe01e2695bf8fb7d723463fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:c0:8c:b0:6b:e0:d1:4d:30:43:f0:2e:d3: 24:68:3c:40:77:3b:88:d5:6f:fd:86:cf:0f:30:56: 18:2d:09:1f:6d:e5:a3:7d:1a:de:c5:93:b1:81:06: 14:2a:f5:17:cd:5b:1c:5d:0a:6b:7c:40:49:6d:bf: 62:93:66:5f:7c:8a:44:5f:ba:b7:5a:db:7c:db:03: d9:af:65:bd:1f:21:62:9d:17:2f:6a:da:a3:97:77: bf:76:fd:e0:2c:cc:05:83:19:26:ee:94:c5:a2:8c: d4:36:d4:2e:9e:cb:f7:5d:16:5f:97:15:a2:79:31: 1e:6d:70:8b:ff:15:98:7e:e1:cb:ef:17:f2:30:55: 92:4f:57:40:06:96:55:88:50:8f:e0:15:fb:ea:28: 8b:f2:75:cd:3e:ca:b4:50:01:d2:a4:37:69:02:32: b7:d1:cd:52:48:28:6e:9b:fa:5c:aa:52:b9:9b:7b: 3f:74:03:b9:e7:10:7c:25:a0:76:aa:a3:ba:1d:b1: 15:2c:d3:f8:de:88:fc:75:32:41:1d:be:40:05:46: 97:13:65:f5:82:08:46:06:95:2d:0c:36:34:d1:4a: 7b:24:64:85:c3:d2:36:6c:3c:6b:db:cc:b4:c4:f8: 1a:42:24:b1:03:be:83:16:55:98:22:54:63:e4:13: d6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:2D:B9:82:2C:7E:EF:E0:1E:26:95:BF:8F:B7:D7:23:46:3F:C9 X509v3 Authority Key Identifier: keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8a:0b:c0:cb:ab:57:e8:46:ce:75:56:2f:f1:06:08:2f:20: 3e:60:05:64:9d:87:c4:54:c8:55:ee:b5:3c:35:07:81:67:45: 2b:6c:d2:b8:0c:80:5a:73:19:87:b5:e5:6b:66:07:92:7d:2a: 60:41:d2:08:c2:b1:cd:39:43:67:2a:ef:d1:e4:69:82:df:be: 5f:ed:b4:01:68:73:29:77:ff:36:35:3a:2d:4d:27:27:0c:a3: 61:e3:30:95:f9:e0:e9:14:57:36:10:9f:e1:29:ef:f5:b6:fa: 2c:01:fd:71:69:61:0c:a2:ad:f5:86:00:64:b3:f4:d5:85:1b: 47:d4:23:15:8f:f9:04:55:22:78:cb:25:30:4c:f9:f3:82:af: 03:de:cb:c1:d0:a3:8e:1f:56:76:10:eb:e0:42:f3:c4:6d:e9: 86:84:56:63:46:73:d0:85:a8:af:23:4d:e6:68:c8:02:f7:ef: 72:a8:3e:3f:02:88:57:94:62:3b:3d:8d:8f:92:07:d6:98:33: 1b:85:76:c3:54:a8:5c:77:16:28:e9:56:fb:ea:bc:8a:6f:4e: 79:42:bb:7d:94:2f:f7:da:cf:2d:75:06:db:9d:9c:50:a5:c7: f7:0c:39:9c:a3:c8:5c:45:7c:30:99:a0:b5:b4:f0:0b:d9:c0: 83:c0:d6:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLM++kszzx8L4JdwRux1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTVhMTdmNTBjMTM1YjE4NTFjZWMyYzc2YjBmZDcwZjlk Y2M3OWUwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD Eyg4ODQyMmRiOTgyMmM3ZWVmZTAxZTI2OTViZjhmYjdkNzIzNDYzZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF3AjLBr4NFNMEPwLtMkaDxAdzuI 1W/9hs8PMFYYLQkfbeWjfRrexZOxgQYUKvUXzVscXQprfEBJbb9ik2ZffIpEX7q3 Wtt82wPZr2W9HyFinRcvatqjl3e/dv3gLMwFgxkm7pTFoozUNtQunsv3XRZflxWi eTEebXCL/xWYfuHL7xfyMFWST1dABpZViFCP4BX76iiL8nXNPsq0UAHSpDdpAjK3 0c1SSChum/pcqlK5m3s/dAO55xB8JaB2qqO6HbEVLNP43oj8dTJBHb5ABUaXE2X1 gghGBpUtDDY00Up7JGSFw9I2bDxr28y0xPgaQiSxA76DFlWYIlRj5BPWuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhCLbmCLH7v4B4mlb+Pt9cjRj/JMB8GA1UdIwQY MBaAFOGloX9QwTWxhRzsLHaw/XD53MeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQt OTEzNTc1YzU4ZjRhLzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQtOTEzNTc1YzU4ZjRh LzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYoLwMur V+hGznVWL/EGCC8gPmAFZJ2HxFTIVe61PDUHgWdFK2zSuAyAWnMZh7Xla2YHkn0q YEHSCMKxzTlDZyrv0eRpgt++X+20AWhzKXf/NjU6LU0nJwyjYeMwlfng6RRXNhCf 4Snv9bb6LAH9cWlhDKKt9YYAZLP01YUbR9QjFY/5BFUieMslMEz584KvA97LwdCj jh9WdhDr4ELzxG3phoRWY0Zz0IWoryNN5mjIAvfvcqg+PwKIV5RiOz2Nj5IH1pgz G4V2w1SoXHcWKOlW++q8im9OeUK7fZQv99rPLXUG252cUKXH9ww5nKPIXEV8MJmg tbTwC9nAg8DWgw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:06 2025 by rpki-client