This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json) Hash identifier: DdgHeGTr4XVC4B7CwbmOkcxeSb1Ww+eW6GbkDwYBJUo= Subject key identifier: 49:97:32:63:2A:11:C9:7B:FB:0C:67:65:BB:98:82:EB:AF:7D:21:0A Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef Certificate serial: 019AF1D1D229AB35F54F375583FA4402B874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft Manifest number: 0C74 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: 66xHvoWvNcHO4VZEqT73cMo9k6pPl/eX0gkBP4E1Vug=) 2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d2:29:ab:35:f5:4f:37:55:83:fa:44:02:b8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=499732632a11c97bfb0c6765bb9882ebaf7d210a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:4f:3c:50:79:1e:06:22:a4:54:9b:fd:c7: b4:c7:14:e3:a3:f4:23:05:e3:da:bc:97:ac:88:53: 28:ae:25:86:70:ab:e1:d2:81:b8:24:3d:6c:09:61: 30:95:dd:93:78:6f:6e:7e:f6:e0:49:59:6d:5b:70: cc:a9:bd:8b:1e:08:5b:ba:15:de:d4:27:ff:b3:d2: ea:95:32:eb:bc:eb:fd:2f:4a:48:66:99:0d:a3:5a: 60:1b:78:29:e4:91:e2:df:a8:b5:de:f3:7f:2b:a5: 66:69:ac:db:4f:dc:28:ef:74:d2:c9:67:bf:9c:36: 60:88:f3:1b:cc:89:1c:82:14:81:61:25:52:93:ff: f0:29:58:89:f1:1a:90:67:98:b9:a3:90:4e:82:c6: 5c:1e:a4:30:0b:87:d7:22:2d:41:c9:4e:45:ce:fa: a6:f1:4f:9b:91:de:04:db:96:76:ac:5e:9d:5c:5e: c0:f0:0b:55:aa:38:da:53:d7:c6:ab:27:63:ec:74: 99:3e:f5:a8:7d:31:33:30:ac:d8:c2:7e:29:13:59: 9b:ca:57:a8:56:b6:b7:e9:58:80:4c:d6:f0:e1:42: f4:5c:35:74:d3:54:3e:f0:75:99:8a:31:7d:50:d7: 3e:96:77:b9:29:82:30:f7:39:c8:55:4f:ca:c2:ac: 87:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:97:32:63:2A:11:C9:7B:FB:0C:67:65:BB:98:82:EB:AF:7D:21:0A X509v3 Authority Key Identifier: keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0f:ae:2c:49:bf:2b:00:47:9a:a8:8a:72:30:01:a7:df:d3: 68:1f:39:84:12:4e:23:8c:8b:11:13:4f:e9:e9:90:b9:02:fc: a8:5c:05:8b:b5:24:6b:b8:dc:79:59:f2:e4:ef:6a:2b:01:fb: e0:2c:c2:3f:6c:0a:55:6d:2f:a0:b0:d8:e5:7a:ab:23:aa:53: 73:f0:9e:b5:c7:7e:6a:49:59:c7:44:1c:88:c9:28:de:cf:f8: f9:d6:f6:54:24:40:e0:a5:07:f0:84:fc:42:b2:a4:9e:6c:79: 48:7a:fc:2a:5a:b2:af:33:d1:a2:74:3a:2c:ff:93:11:d2:28: c3:34:6d:8c:a3:a0:35:06:1e:d5:62:87:c3:76:07:0d:4c:4e: 49:f9:3c:28:87:ce:97:a6:9d:c4:8c:7c:ed:2a:5f:ec:27:63: 79:74:2c:9b:90:56:e6:51:40:07:fb:d4:8c:fe:5c:e2:a9:b1: 66:20:c8:ce:66:7e:c0:57:78:07:25:10:25:42:94:62:be:99: 46:e2:dd:36:34:fd:c9:16:13:7a:29:63:0c:dc:d8:de:6f:52: 82:c4:5c:04:67:c0:d9:a4:8f:39:97:a3:75:1d:c3:72:04:a4: 0a:07:07:78:79:d0:ee:8e:e2:8b:78:6b:49:a7:75:a9:f0:30: 41:5d:e3:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dIpqzX1TzdVg/pEArh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWYxOTZkZDdlZGQxMTMxZDAyMjBmZGI3NzcxMjI2MjFi YmJkZWYwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD Eyg0OTk3MzI2MzJhMTFjOTdiZmIwYzY3NjViYjk4ODJlYmFmN2QyMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43lPPFB5HgYipFSb/ce0xxTjo/Qj BePavJesiFMoriWGcKvh0oG4JD1sCWEwld2TeG9ufvbgSVltW3DMqb2LHghbuhXe 1Cf/s9LqlTLrvOv9L0pIZpkNo1pgG3gp5JHi36i13vN/K6VmaazbT9wo73TSyWe/ nDZgiPMbzIkcghSBYSVSk//wKViJ8RqQZ5i5o5BOgsZcHqQwC4fXIi1ByU5Fzvqm 8U+bkd4E25Z2rF6dXF7A8AtVqjjaU9fGqydj7HSZPvWofTEzMKzYwn4pE1mbyleo Vra36ViATNbw4UL0XDV001Q+8HWZijF9UNc+lne5KYIw9znIVU/KwqyHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmXMmMqEcl7+wxnZbuYguuvfSEKMB8GA1UdIwQY MBaAFOAfGW3X7dETHQIg/bd3EiYhu73vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEI4WmJkZnQwUk1kQWlEOXQzY1NKaUc3dmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85NjhhODUtMDFkMy00YjBjLWI5MjAt NjZjYmY4NzZhYjNlLzEvNEI4WmJkZnQwUk1kQWlEOXQzY1NKaUc3dmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85NjhhODUtMDFkMy00YjBjLWI5MjAtNjZjYmY4NzZhYjNl LzEvNEI4WmJkZnQwUk1kQWlEOXQzY1NKaUc3dmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiA+uLEm/ KwBHmqiKcjABp9/TaB85hBJOI4yLERNP6emQuQL8qFwFi7Uka7jceVny5O9qKwH7 4CzCP2wKVW0voLDY5XqrI6pTc/Cetcd+aklZx0QciMko3s/4+db2VCRA4KUH8IT8 QrKknmx5SHr8KlqyrzPRonQ6LP+TEdIowzRtjKOgNQYe1WKHw3YHDUxOSfk8KIfO l6adxIx87Spf7CdjeXQsm5BW5lFAB/vUjP5c4qmxZiDIzmZ+wFd4ByUQJUKUYr6Z RuLdNjT9yRYTeiljDNzY3m9SgsRcBGfA2aSPOZejdR3DcgSkCgcHeHnQ7o7ii3hr Sad1qfAwQV3jvw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:48 2025 by rpki-client