This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json) Hash identifier: 9Ua3N4ZFMzv4bTSzcSJ5CqJJmD9BoG9vvEMEzGbyeXc= Subject key identifier: 2D:83:32:76:60:6C:74:84:80:D7:82:7F:F9:D4:A3:6F:58:1D:E1:39 Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Certificate serial: 019AF76679FC47EF7C457682C2221DA12E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft Manifest number: 16F6 Signing time: Sun 07 Dec 2025 06:01:19 +0000 Manifest this update: Sun 07 Dec 2025 06:01:19 +0000 Manifest next update: Mon 08 Dec 2025 06:01:19 +0000 Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: TZN6iyW70Tk0VJj2Bzw/JfmZurdR31nvyyJ+On/Q4+Q=) 2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:79:fc:47:ef:7c:45:76:82:c2:22:1d:a1:2e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Validity Not Before: Dec 7 06:01:19 2025 GMT Not After : Dec 8 06:01:19 2025 GMT Subject: CN=2d833276606c748480d7827ff9d4a36f581de139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:16:bb:75:10:01:33:4e:05:e5:e2:50:35: 32:e8:62:c4:a8:d5:94:50:60:5d:2f:d9:84:b0:cb: 96:b0:e0:ea:b0:ff:8a:31:53:80:45:12:8c:79:b1: d0:bc:4f:47:a7:d2:5e:e4:e5:de:58:fe:e2:20:24: d5:0b:ea:83:2b:6d:e4:89:89:31:e2:f5:6b:9b:4e: 23:4f:f4:6c:14:4b:66:f0:c6:c3:ee:41:8c:1a:f1: ec:de:70:4a:dc:81:0e:38:04:a4:58:09:c3:ec:33: ca:45:84:75:4f:a6:3a:e7:aa:7f:94:31:9b:63:1a: b3:0a:0a:25:66:c7:b3:32:d6:40:27:4e:1e:95:0e: 6f:f9:50:e7:de:1b:38:59:a6:2c:b1:f6:29:c6:77: 1a:49:39:62:aa:1b:d0:6d:2f:db:b0:4f:1e:03:24: be:37:fd:14:e3:cf:2c:37:db:c3:6b:a8:98:1f:97: 2c:35:50:46:09:4a:70:e9:34:3c:bb:79:75:3c:08: c1:c4:96:6b:4c:56:34:24:cd:d0:2c:13:2b:fe:21: 0c:d3:29:3e:f4:e7:7f:61:f1:9d:52:2b:c9:19:59: 7b:ab:a4:16:ac:e8:ba:6d:dd:bc:93:92:51:f2:66: 2e:40:78:ee:2c:61:d0:b5:fe:5e:48:2a:31:01:c6: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:83:32:76:60:6C:74:84:80:D7:82:7F:F9:D4:A3:6F:58:1D:E1:39 X509v3 Authority Key Identifier: keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5f:fc:2d:4a:69:56:7f:1b:87:1a:61:cb:25:f2:30:68:f9: 82:8d:39:7a:82:67:4a:f9:64:57:10:03:eb:0a:ed:c1:05:68: ca:45:09:e5:5e:75:4f:97:78:a4:d8:00:3c:86:67:3c:c5:3a: be:7e:1e:9b:f1:7b:68:0d:3c:8a:95:26:f2:59:e2:cb:bc:92: af:7d:a3:fe:b5:cf:68:f7:91:4e:15:50:01:e6:08:53:41:ce: 14:51:5e:7a:1e:26:5b:27:4f:42:09:30:71:12:f9:d4:8c:10: 31:21:91:0e:6a:61:2f:b2:a6:82:05:b4:ea:82:00:f4:83:9a: 9c:e5:0a:4f:2a:7f:a4:6b:fb:06:53:2e:6a:c8:0b:d3:f7:01: 48:89:0c:2a:fc:f4:ce:4e:8a:ea:27:1c:a1:0b:37:12:86:8a: a3:99:8f:cf:22:33:3b:ed:10:76:9f:99:93:98:72:ef:9a:1a: 1e:3a:b2:07:7d:53:b0:a4:6b:c6:4f:b3:d3:20:cd:cd:9b:27: 95:bd:78:e8:ac:8b:24:b4:43:c5:6e:a8:6b:a4:34:87:d0:d8: e4:d1:2b:16:4c:5a:89:8e:64:03:92:fd:08:5f:1b:6f:2b:c9: 58:74:40:86:4c:cb:72:7b:96:6f:10:18:44:d7:03:67:70:7e: ca:03:7b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3Znn8R+98RXaCwiIdoS6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGFhZGMwNjk1NTVhMWFiZTAzMWZkMGEwMjgwNjljOGZi ODliMmIwHhcNMjUxMjA3MDYwMTE5WhcNMjUxMjA4MDYwMTE5WjAzMTEwLwYDVQQD EygyZDgzMzI3NjYwNmM3NDg0ODBkNzgyN2ZmOWQ0YTM2ZjU4MWRlMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeEWu3UQATNOBeXiUDUy6GLEqNWU UGBdL9mEsMuWsODqsP+KMVOARRKMebHQvE9Hp9Je5OXeWP7iICTVC+qDK23kiYkx 4vVrm04jT/RsFEtm8MbD7kGMGvHs3nBK3IEOOASkWAnD7DPKRYR1T6Y656p/lDGb YxqzCgolZsezMtZAJ04elQ5v+VDn3hs4WaYssfYpxncaSTliqhvQbS/bsE8eAyS+ N/0U488sN9vDa6iYH5csNVBGCUpw6TQ8u3l1PAjBxJZrTFY0JM3QLBMr/iEM0yk+ 9Od/YfGdUivJGVl7q6QWrOi6bd28k5JR8mYuQHjuLGHQtf5eSCoxAcbA7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2DMnZgbHSEgNeCf/nUo29YHeE5MB8GA1UdIwQY MBaAFOCKrcBpVVoavgMf0KAoBpyPuJsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQt OWE3MmQ5OTAzZWI4LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQtOWE3MmQ5OTAzZWI4 LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFl/8LUpp Vn8bhxphyyXyMGj5go05eoJnSvlkVxAD6wrtwQVoykUJ5V51T5d4pNgAPIZnPMU6 vn4em/F7aA08ipUm8lniy7ySr32j/rXPaPeRThVQAeYIU0HOFFFeeh4mWydPQgkw cRL51IwQMSGRDmphL7KmggW06oIA9IOanOUKTyp/pGv7BlMuasgL0/cBSIkMKvz0 zk6K6iccoQs3EoaKo5mPzyIzO+0Qdp+Zk5hy75oaHjqyB31TsKRrxk+z0yDNzZsn lb146KyLJLRDxW6oa6Q0h9DY5NErFkxaiY5kA5L9CF8bbyvJWHRAhkzLcnuWbxAY RNcDZ3B+ygN78w== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:12 2025 by rpki-client