This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft File: 4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json) Hash identifier: q53s8nQ9v1ZXIt3X4Q+kyt7F4XixieLeMu2IJD5CdFA= Subject key identifier: DE:6F:FB:DF:CB:4F:5A:B1:11:26:52:78:73:5F:3A:44:49:FC:6A:6C Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4 Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4 Certificate serial: 019AF6C0EDD96BC1628A065E5DB34C51CFCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft Manifest number: 0174 Signing time: Sun 07 Dec 2025 03:00:30 +0000 Manifest this update: Sun 07 Dec 2025 03:00:30 +0000 Manifest next update: Mon 08 Dec 2025 03:00:30 +0000 Files and hashes: 1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: dOlSgF+7D6Xz1Lr0OKLmeJqWkRaXovvvA2GPG4iJScE=) 2: OcyVVi-jBM0G3opoob8aVpqeL7k.roa (hash: Lmj/ERqEQsOvuljDrquPNBuk7nAamhzs4Ctv+M+OeMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c0:ed:d9:6b:c1:62:8a:06:5e:5d:b3:4c:51:cf:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4 Validity Not Before: Dec 7 03:00:30 2025 GMT Not After : Dec 8 03:00:30 2025 GMT Subject: CN=de6ffbdfcb4f5ab111265278735f3a4449fc6a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:69:a8:35:c6:e2:93:56:3e:fb:23:70:16: a2:46:e6:38:e8:c5:39:09:3c:de:5b:18:d8:8b:b2: 2f:df:12:62:03:fd:dd:53:bd:5e:89:de:a4:28:45: f4:03:c4:f6:34:b4:9b:d3:07:7b:7b:1a:20:91:03: e2:f3:ed:18:47:5b:fc:31:2d:f5:7f:4e:f3:88:46: 8c:d4:56:71:9b:24:2c:fc:99:80:4f:dd:37:19:19: 82:6a:e1:f4:2d:87:a7:dd:dd:1a:9c:2b:d2:06:33: b9:2f:21:a3:83:58:a4:15:b2:fa:eb:d7:cb:e3:91: 8e:db:86:79:97:be:73:c8:f5:cb:5d:4c:05:84:cd: 14:c1:b8:d3:7b:47:65:16:b2:05:0e:86:07:44:b3: 84:85:a6:a1:3e:6c:f4:4c:6b:70:69:9b:e4:6c:1f: e7:21:cf:c2:94:4f:7d:d0:72:92:cb:02:fd:9e:95: dd:6b:1a:9a:ac:b9:6a:ec:f9:60:cf:15:76:86:7e: 16:76:03:1c:3e:04:92:3b:a7:c4:47:88:54:d3:ca: 01:12:5e:cb:c6:e5:cb:7a:76:89:c1:3c:fc:0f:ad: cb:8c:67:7d:0f:51:33:1a:e9:bc:56:df:dd:59:cc: 54:62:ed:06:99:96:55:4f:99:05:dc:55:08:b6:d7: 3b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6F:FB:DF:CB:4F:5A:B1:11:26:52:78:73:5F:3A:44:49:FC:6A:6C X509v3 Authority Key Identifier: keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c3:87:52:ed:9e:85:d4:d7:1c:20:0f:13:77:26:2d:20:ec: b0:46:d0:ff:6f:ad:8a:a3:55:28:0c:79:9d:b4:38:ed:52:42: 80:b2:eb:26:c7:be:55:db:6f:24:e6:be:02:49:9a:90:fc:cb: 30:f1:f3:6b:a3:7f:4d:cb:25:6d:b8:6a:09:72:67:07:7d:74: 99:ba:cd:b1:12:b1:ef:f1:76:61:32:a7:18:dc:a6:30:d0:76: 67:44:f6:64:23:33:a3:21:e1:85:4f:13:f3:b2:96:89:f5:44: eb:df:59:95:6c:b1:40:ec:c2:c1:1b:08:e3:59:e9:f4:e0:da: 6b:0a:8d:44:13:ac:e6:67:0a:59:5a:ee:f1:39:be:13:02:5f: dd:90:eb:d1:39:ac:d7:3a:4e:ee:09:a2:31:34:9d:2f:02:88: e2:68:b3:ef:89:96:2f:96:44:ec:4c:9a:30:76:74:d5:8e:2f: 13:88:97:1d:98:90:7d:36:16:d8:f6:28:c3:57:b1:5a:e9:a3: 57:2e:88:11:0e:51:29:79:ad:d2:a9:c5:41:cb:e2:b8:00:55: 22:c4:ba:7b:be:d8:b7:73:d8:6d:41:3d:8a:4b:29:cd:c0:9f: c7:55:1b:7a:3a:03:02:46:4a:95:46:fc:3f:f5:5c:21:3f:3b: 11:42:08:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wO3Za8FiigZeXbNMUc/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMWNlNmI3ZGQ5YTZhYzBiMzI0YmE1YWQ4NzNiMGFmNDZh MzkyZDQwHhcNMjUxMjA3MDMwMDMwWhcNMjUxMjA4MDMwMDMwWjAzMTEwLwYDVQQD EyhkZTZmZmJkZmNiNGY1YWIxMTEyNjUyNzg3MzVmM2E0NDQ5ZmM2YTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJxpqDXG4pNWPvsjcBaiRuY46MU5 CTzeWxjYi7Iv3xJiA/3dU71eid6kKEX0A8T2NLSb0wd7exogkQPi8+0YR1v8MS31 f07ziEaM1FZxmyQs/JmAT903GRmCauH0LYen3d0anCvSBjO5LyGjg1ikFbL669fL 45GO24Z5l75zyPXLXUwFhM0UwbjTe0dlFrIFDoYHRLOEhaahPmz0TGtwaZvkbB/n Ic/ClE990HKSywL9npXdaxqarLlq7PlgzxV2hn4WdgMcPgSSO6fER4hU08oBEl7L xuXLenaJwTz8D63LjGd9D1EzGum8Vt/dWcxUYu0GmZZVT5kF3FUIttc77wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5v+9/LT1qxESZSeHNfOkRJ/GpsMB8GA1UdIwQY MBaAFOEc5rfdmmrAsyS6WthzsK9Go5LUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYt ZTU5MGU2YjRjZDBlLzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYtZTU5MGU2YjRjZDBl LzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsOHUu2e hdTXHCAPE3cmLSDssEbQ/2+tiqNVKAx5nbQ47VJCgLLrJse+VdtvJOa+AkmakPzL MPHza6N/TcslbbhqCXJnB310mbrNsRKx7/F2YTKnGNymMNB2Z0T2ZCMzoyHhhU8T 87KWifVE699ZlWyxQOzCwRsI41np9ODaawqNRBOs5mcKWVru8Tm+EwJf3ZDr0Tms 1zpO7gmiMTSdLwKI4miz74mWL5ZE7EyaMHZ01Y4vE4iXHZiQfTYW2PYow1exWumj Vy6IEQ5RKXmt0qnFQcviuABVIsS6e77Yt3PYbUE9ikspzcCfx1UbejoDAkZKlUb8 P/VcIT87EUIIgg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:10 2025 by rpki-client