This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json) Hash identifier: 9BmPmb6c6vMsRktk5FFbGB20wr4dStTB76cLZuQFboc= Subject key identifier: F1:C3:54:71:AD:A2:42:0B:DF:6B:C2:62:56:F6:84:C1:8E:A9:48:FE Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be Certificate serial: 019AF3F712FD23024F77A09426039C7061D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 14:00:46 +0000 Manifest this update: Sat 06 Dec 2025 14:00:46 +0000 Manifest next update: Sun 07 Dec 2025 14:00:46 +0000 Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: tvDOK/fPHjB2ulC3PC0/7CMif83J3++KicyFyw+cbKo=) 2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:12:fd:23:02:4f:77:a0:94:26:03:9c:70:61:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be Validity Not Before: Dec 6 14:00:46 2025 GMT Not After : Dec 7 14:00:46 2025 GMT Subject: CN=f1c35471ada2420bdf6bc26256f684c18ea948fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:9a:25:2b:4b:e9:f7:9b:9a:20:f6:38:27: 43:75:ae:df:f7:bf:1a:9d:4c:05:fb:8f:1d:68:59: 35:98:b7:a2:1f:fe:59:63:85:6b:78:b6:29:66:c6: 32:4e:cc:d9:4d:bc:56:91:34:26:50:96:e5:2c:75: 13:ff:97:2c:31:8e:9b:d9:a2:21:94:76:9e:8f:85: 8a:81:06:3a:ec:f5:bb:d3:6a:a1:6a:50:6b:50:81: db:a4:d4:c8:56:60:f0:14:bf:04:dc:a2:77:6a:87: fc:08:7d:9b:ed:d0:6d:9d:1b:f0:7f:f5:19:15:3c: 98:b3:68:b7:bb:9a:19:89:71:6b:97:32:ef:ab:01: 1d:10:f4:5c:43:1c:c3:d1:fb:ba:63:01:f8:65:df: 77:10:4e:e0:73:e0:9e:1e:ca:5f:cb:75:49:81:28: b4:8d:04:e2:a8:3b:01:54:bd:55:a6:28:3e:03:c5: 8e:37:11:ab:9e:16:c0:f3:f8:7f:82:51:f1:d3:57: 40:59:97:37:4a:85:9f:1c:d9:aa:28:c9:49:05:ab: c2:6d:0e:52:e8:ed:7f:7e:c0:1c:2f:d9:3b:25:19: 97:55:0a:4a:49:fc:8a:5d:85:ef:3d:a2:50:20:6b: 49:61:ca:dc:07:67:db:25:45:94:47:b1:ce:5b:c7: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C3:54:71:AD:A2:42:0B:DF:6B:C2:62:56:F6:84:C1:8E:A9:48:FE X509v3 Authority Key Identifier: keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:61:c9:cb:c5:67:91:35:e9:e4:50:cf:4b:d2:c2:95:db:7c: d7:4e:66:c7:54:51:50:f6:30:80:fb:23:db:4b:46:dd:5b:40: 65:82:10:72:32:1d:1b:20:c5:8d:ab:25:79:a6:e5:a1:72:39: d9:fe:fa:d1:a4:7b:78:99:a9:16:51:8b:68:8e:8c:3b:fb:52: 89:81:9f:ab:6e:d7:52:cc:27:6f:cb:e8:d5:54:29:68:04:b0: fb:77:61:99:19:23:b7:fd:ba:88:b2:d7:ac:4f:43:48:83:1c: 7a:f6:ee:8b:8f:9f:04:7f:ef:b8:8e:54:d8:4c:c6:67:e5:3d: df:89:8f:ae:f6:72:c3:93:86:dc:4d:ea:f4:f5:ae:54:77:36: fa:d9:d8:7c:12:f8:7d:7c:d6:20:95:5f:50:67:94:e9:e1:23: 95:b2:06:65:d6:bd:51:5d:c2:ee:63:33:73:6d:81:29:1f:5e: 5a:f8:da:50:a3:ae:ff:f7:c5:e8:91:e4:e7:05:4c:5b:d4:7e: 57:9c:c6:95:e7:08:5a:de:1e:5f:ef:09:94:b9:31:97:8b:a7: 37:dd:10:ca:02:ed:08:fc:f0:7f:86:86:37:b6:83:1d:ad:93: f4:70:29:8b:5c:fd:86:9e:f1:2e:f8:4a:4a:b7:56:2d:78:f8: de:f1:bf:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xL9IwJPd6CUJgOccGHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjg5MzQwMjgzNzk0NDg5ZTQxYWM4NmFhZmE0NDE0Zjhh NGQ2YmUwHhcNMjUxMjA2MTQwMDQ2WhcNMjUxMjA3MTQwMDQ2WjAzMTEwLwYDVQQD EyhmMWMzNTQ3MWFkYTI0MjBiZGY2YmMyNjI1NmY2ODRjMThlYTk0OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwuaJStL6febmiD2OCdDda7f978a nUwF+48daFk1mLeiH/5ZY4VreLYpZsYyTszZTbxWkTQmUJblLHUT/5csMY6b2aIh lHaej4WKgQY67PW702qhalBrUIHbpNTIVmDwFL8E3KJ3aof8CH2b7dBtnRvwf/UZ FTyYs2i3u5oZiXFrlzLvqwEdEPRcQxzD0fu6YwH4Zd93EE7gc+CeHspfy3VJgSi0 jQTiqDsBVL1Vpig+A8WONxGrnhbA8/h/glHx01dAWZc3SoWfHNmqKMlJBavCbQ5S 6O1/fsAcL9k7JRmXVQpKSfyKXYXvPaJQIGtJYcrcB2fbJUWUR7HOW8c2HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHDVHGtokIL32vCYlb2hMGOqUj+MB8GA1UdIwQY MBaAFOBok0AoN5RInkGshqr6RBT4pNa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYt N2JmYWViMTk1NDQ1LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYtN2JmYWViMTk1NDQ1 LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGHJy8Vn kTXp5FDPS9LCldt8105mx1RRUPYwgPsj20tG3VtAZYIQcjIdGyDFjasleabloXI5 2f760aR7eJmpFlGLaI6MO/tSiYGfq27XUswnb8vo1VQpaASw+3dhmRkjt/26iLLX rE9DSIMcevbui4+fBH/vuI5U2EzGZ+U934mPrvZyw5OG3E3q9PWuVHc2+tnYfBL4 fXzWIJVfUGeU6eEjlbIGZda9UV3C7mMzc22BKR9eWvjaUKOu//fF6JHk5wVMW9R+ V5zGlecIWt4eX+8JlLkxl4unN90QygLtCPzwf4aGN7aDHa2T9HApi1z9hp7xLvhK SrdWLXj43vG/Ww== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:41 2025 by rpki-client