This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft File: 4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json) Hash identifier: gzP5KCFPrw+XDG1X3ugXx46TUzabiZsORBT5ZNmP8o8= Subject key identifier: CA:EF:28:AC:96:32:36:D4:1B:B0:AE:C0:96:79:47:2B:1F:88:41:2A Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3 Certificate issuer: /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3 Certificate serial: 019AF209142F0281F3A832CC21F50E956E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft Manifest number: 0AC1 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: vOV/U/ZX46PJgRe4rPOwAZWPuCatbX6uevhr0CZsy2k=) 2: uZUj605EbQuLLmDhIGYJBIbMOqc.roa (hash: 50VcK1tqnjE/JlOLPdg4sk24p7Wrw6D6UQSl3XM780U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:14:2f:02:81:f3:a8:32:cc:21:f5:0e:95:6e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3 Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=caef28ac963236d41bb0aec09679472b1f88412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:94:5c:a6:a1:d2:68:53:83:7a:1b:57:d5: e9:cc:eb:b9:9f:be:87:60:9d:6a:fe:f3:0a:ea:d7: 8c:b1:42:a9:ec:0e:e1:dc:d4:71:f4:c4:25:5a:bd: 52:2e:68:01:90:28:1b:22:16:1e:e0:9e:49:90:21: 8f:99:5a:c2:3c:bd:94:74:a4:f0:37:14:34:b0:43: 5c:ff:b3:0a:38:82:c9:5a:70:19:b3:aa:79:85:7f: b1:61:79:fc:28:2b:33:ff:33:1a:ca:91:96:d5:16: 19:c2:83:39:12:28:21:b9:06:db:54:88:e3:a9:1c: a3:82:fb:22:5c:b2:5e:f6:e5:15:52:0e:8f:b5:b1: da:2e:b1:f2:c0:9e:1f:10:de:6c:d4:c2:eb:74:6c: ba:52:3c:66:22:ba:0f:ed:6c:08:8c:f3:0e:b3:44: d2:dd:5c:fb:1c:58:6d:8b:db:86:4c:ed:23:9f:ea: 4e:e4:38:4a:25:9d:0c:be:2e:7f:b8:f4:a6:30:98: 23:09:7c:cf:ed:60:64:9f:e8:6b:0a:01:6a:41:a2: 46:30:29:cc:e6:fc:1a:a9:07:1d:d3:42:ec:89:4c: 66:d3:56:25:ce:ec:bb:1f:87:c1:a0:53:95:3a:31: 71:23:47:fb:2c:b8:54:e0:90:3a:7a:30:aa:49:70: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EF:28:AC:96:32:36:D4:1B:B0:AE:C0:96:79:47:2B:1F:88:41:2A X509v3 Authority Key Identifier: keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:13:63:9c:53:b8:6e:91:b8:48:88:9a:a1:3d:fa:b6:de:f2: 73:9f:47:7b:b5:7d:27:83:3d:72:56:2d:5d:77:80:83:9b:80: 56:08:82:e2:d2:ef:6d:f8:a6:a8:08:78:3e:1f:8a:9c:fb:ec: b2:7b:88:bc:10:a5:f6:93:cc:9d:12:e8:99:f4:1f:0a:a6:e2: 50:5f:95:66:20:13:45:58:53:8f:4c:b9:60:73:15:53:d9:21: 21:f3:a7:c5:02:c2:99:e0:5d:03:91:58:b0:8e:d7:7c:3f:45: d9:8a:fa:d9:17:6e:01:bf:fb:51:41:51:25:f2:64:a8:27:d0: 14:08:45:5a:21:8c:94:0b:6d:0a:2c:f0:b5:be:f0:48:64:6b: 85:ee:8c:53:d7:b1:97:72:98:62:a3:ce:f7:1b:24:28:b2:b6: f4:8b:cd:50:94:be:c3:0e:31:64:90:aa:05:17:75:5b:19:42: 26:5a:b3:ab:db:c2:9f:ab:ad:c9:b5:94:ec:d9:7a:7b:63:77: 47:34:0b:c8:7e:ad:83:a9:ea:c2:d5:d8:d0:57:33:03:11:dc: c2:fc:52:27:88:af:67:98:8e:c7:38:b6:15:01:e1:e7:3f:e0: f5:f6:fd:ef:e9:92:8a:10:86:b5:94:40:da:2f:17:30:59:b9: db:96:79:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRQvAoHzqDLMIfUOlW45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2E1MzA1Mzg0MWU2MmYzNzg3MzAyYmQzYjNkYzE3YWU4 MzQ3YTMwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD EyhjYWVmMjhhYzk2MzIzNmQ0MWJiMGFlYzA5Njc5NDcyYjFmODg0MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotKUXKah0mhTg3obV9XpzOu5n76H YJ1q/vMK6teMsUKp7A7h3NRx9MQlWr1SLmgBkCgbIhYe4J5JkCGPmVrCPL2UdKTw NxQ0sENc/7MKOILJWnAZs6p5hX+xYXn8KCsz/zMaypGW1RYZwoM5EighuQbbVIjj qRyjgvsiXLJe9uUVUg6PtbHaLrHywJ4fEN5s1MLrdGy6UjxmIroP7WwIjPMOs0TS 3Vz7HFhti9uGTO0jn+pO5DhKJZ0Mvi5/uPSmMJgjCXzP7WBkn+hrCgFqQaJGMCnM 5vwaqQcd00LsiUxm01Ylzuy7H4fBoFOVOjFxI0f7LLhU4JA6ejCqSXCX2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrvKKyWMjbUG7CuwJZ5RysfiEEqMB8GA1UdIwQY MBaAFOJ6UwU4QeYvN4cwK9Oz3Beug0ejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWIt Y2FlZGJkNzE0MGU5LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWItY2FlZGJkNzE0MGU5 LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhNjnFO4 bpG4SIiaoT36tt7yc59He7V9J4M9clYtXXeAg5uAVgiC4tLvbfimqAh4Ph+KnPvs snuIvBCl9pPMnRLomfQfCqbiUF+VZiATRVhTj0y5YHMVU9khIfOnxQLCmeBdA5FY sI7XfD9F2Yr62RduAb/7UUFRJfJkqCfQFAhFWiGMlAttCizwtb7wSGRrhe6MU9ex l3KYYqPO9xskKLK29IvNUJS+ww4xZJCqBRd1WxlCJlqzq9vCn6utybWU7Nl6e2N3 RzQLyH6tg6nqwtXY0FczAxHcwvxSJ4ivZ5iOxzi2FQHh5z/g9fb97+mSihCGtZRA 2i8XMFm525Z5uw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:39 2025 by rpki-client