This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json) Hash identifier: xTlqn+gp64L6FGbs0SqoSAnLYjAf7dACGRkulwVbumI= Subject key identifier: FC:AA:F6:AC:03:AB:8E:75:9E:EE:67:84:D6:69:DD:39:7F:06:7C:4D Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43 Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43 Certificate serial: 019AF1642DA168555E70BDDC725B7112774D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=) 2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: uZafcwZEdCWiZvtPpTAqNOyMMDlp0b8+r37bMKTgUes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2d:a1:68:55:5e:70:bd:dc:72:5b:71:12:77:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=fcaaf6ac03ab8e759eee6784d669dd397f067c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:69:6b:ff:a9:a7:b4:6c:3d:eb:35:9d:b7:85: 49:5f:98:68:1e:5a:fa:73:f1:ce:e6:74:37:19:6f: 35:06:6c:3f:80:5e:fc:b7:c6:e6:9f:c6:71:07:f6: fc:e9:4e:15:69:be:4f:d6:9a:dd:fa:45:66:82:2a: 62:19:b7:10:38:3f:7b:ba:5a:d8:16:43:dd:37:58: 36:e6:23:fd:03:72:e3:f9:93:2b:40:65:14:3a:3b: f9:2b:d8:6c:bf:8f:e6:db:02:19:6d:06:a1:8a:2b: 53:b3:76:f5:e9:2f:c7:25:f6:8f:41:28:e6:ac:f7: 6d:de:2a:fc:7e:b1:fd:da:f5:f2:c3:ba:c2:6f:0f: 4f:44:97:34:19:ce:36:2c:c4:b4:63:98:de:1d:45: c6:0b:cb:9a:07:d0:cb:ec:08:8d:74:7c:b3:86:c6: d2:05:33:43:c3:73:71:1e:47:3c:80:b5:1c:3c:51: 5e:86:a4:46:68:e9:4d:2e:c4:bb:18:ac:5d:57:8d: c5:d7:f5:53:00:b7:ec:b3:41:21:89:63:30:cb:38: f0:93:ed:b0:2d:76:fd:7b:6f:28:ab:6f:14:bd:10: ef:97:5c:af:d0:95:d8:56:e7:79:ad:8c:09:c5:47: 4d:47:8b:44:3b:af:de:a5:ec:68:e6:e1:da:1f:f2: ae:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AA:F6:AC:03:AB:8E:75:9E:EE:67:84:D6:69:DD:39:7F:06:7C:4D X509v3 Authority Key Identifier: keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:76:95:c6:af:e7:d8:ef:be:c6:12:0e:78:b8:f1:c4:9b:fc: f0:cf:3e:f9:68:f3:8a:33:54:4c:4e:a0:b8:57:d0:d1:e4:88: 79:46:a2:b9:39:4d:da:fc:97:b5:77:5f:6d:6a:b9:0d:6b:47: 8f:10:9c:43:85:41:1c:a2:e1:1d:20:d1:b5:f8:ef:50:f7:be: fc:7a:d8:c0:c4:29:f3:21:59:4e:da:2b:77:c7:67:12:d6:80: 9d:d9:95:41:3a:d8:8a:5e:2b:56:d8:52:c4:31:7b:58:d0:96: 37:62:2e:15:80:a0:08:42:de:7d:13:8a:12:29:b3:0a:27:46: e1:b6:9c:82:f6:47:bd:96:1f:51:7d:c5:06:00:f1:02:17:c9: e8:4e:16:01:bf:95:f7:94:58:89:8e:77:dc:2b:c5:7b:cc:4a: db:b9:7b:b2:1d:d7:49:d4:c8:ef:f3:ef:db:f9:b9:87:9c:97: cd:75:43:e0:5a:b7:40:d0:72:62:ea:3a:18:bf:f1:e3:1d:61: 2a:d6:18:5c:78:82:8b:cc:92:b8:4d:c6:4a:00:49:89:a2:45: e0:2a:b8:2b:8e:36:61:c9:18:c6:8f:d8:71:48:a7:a0:48:69: a5:94:34:55:14:6b:6e:49:51:9b:e4:38:40:09:f0:9a:d1:ee: 04:63:17:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC2haFVecL3ccltxEndNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzRlYzM5MzQ0OGQ4M2JmMTUxNWY0OTY3YTQ0ODA5OGU1 NWZiNDMwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EyhmY2FhZjZhYzAzYWI4ZTc1OWVlZTY3ODRkNjY5ZGQzOTdmMDY3YzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mlr/6mntGw96zWdt4VJX5hoHlr6 c/HO5nQ3GW81Bmw/gF78t8bmn8ZxB/b86U4Vab5P1prd+kVmgipiGbcQOD97ulrY FkPdN1g25iP9A3Lj+ZMrQGUUOjv5K9hsv4/m2wIZbQahiitTs3b16S/HJfaPQSjm rPdt3ir8frH92vXyw7rCbw9PRJc0Gc42LMS0Y5jeHUXGC8uaB9DL7AiNdHyzhsbS BTNDw3NxHkc8gLUcPFFehqRGaOlNLsS7GKxdV43F1/VTALfss0EhiWMwyzjwk+2w LXb9e28oq28UvRDvl1yv0JXYVud5rYwJxUdNR4tEO6/epexo5uHaH/KuxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyq9qwDq451nu5nhNZp3Tl/BnxNMB8GA1UdIwQY MBaAFOM07Dk0SNg78VFfSWekSAmOVftDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAt Y2RhYjE5YTNmZGViLzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAtY2RhYjE5YTNmZGVi LzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3aVxq/n 2O++xhIOeLjxxJv88M8++WjzijNUTE6guFfQ0eSIeUaiuTlN2vyXtXdfbWq5DWtH jxCcQ4VBHKLhHSDRtfjvUPe+/HrYwMQp8yFZTtord8dnEtaAndmVQTrYil4rVthS xDF7WNCWN2IuFYCgCELefROKEimzCidG4bacgvZHvZYfUX3FBgDxAhfJ6E4WAb+V 95RYiY533CvFe8xK27l7sh3XSdTI7/Pv2/m5h5yXzXVD4Fq3QNByYuo6GL/x4x1h KtYYXHiCi8ySuE3GSgBJiaJF4Cq4K442YckYxo/YcUinoEhppZQ0VRRrbklRm+Q4 QAnwmtHuBGMXfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:45 2025 by rpki-client