This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft File: 4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json) Hash identifier: kVdBy6W5YNwrIaaIXZ8FkUCfx3Stv6xryheUZxuNzAU= Subject key identifier: C4:DF:28:82:6B:BD:52:EB:11:4E:2D:22:C0:94:36:11:93:DD:49:32 Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Certificate serial: 019AF352CCE71EC0A371C07FBD3EEEDFAECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft Manifest number: D4 Signing time: Sat 06 Dec 2025 11:01:21 +0000 Manifest this update: Sat 06 Dec 2025 11:01:21 +0000 Manifest next update: Sun 07 Dec 2025 11:01:21 +0000 Files and hashes: 1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: mnSxBd7NTurV3pVjZvwHyMoGBRoHufWVoqmWmUk7ORA=) 2: HI7B1jr-szIvsbzfV6wrZqk3kpw.roa (hash: nW/JeadW697758rAda0qBRczYN3xljyyCO9Qys1RCMU=) 3: uF6s_hWqOyMm0beoSVdz1ofj_2U.roa (hash: sqABMRSLhInMQI+0EZuydVNxHulBTRCcnZGrhwhVSWA=) 4: yRXQpBuW1Pb2FFdzFa5o9VdREJ4.roa (hash: s9ixFSMI7GWSkeLxQmBgssbeEOKAKZsZGKgkyxXA67A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:cc:e7:1e:c0:a3:71:c0:7f:bd:3e:ee:df:ae:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Validity Not Before: Dec 6 11:01:21 2025 GMT Not After : Dec 7 11:01:21 2025 GMT Subject: CN=c4df28826bbd52eb114e2d22c094361193dd4932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:4c:35:f3:b0:98:fa:94:0f:eb:78:45:14: b4:ad:cd:85:63:83:73:a8:27:8b:d0:54:eb:a4:fc: 2e:15:8b:95:f9:81:0f:f0:d8:8a:73:ee:cd:d5:f2: fd:c9:b2:96:6a:f1:44:3a:b9:88:42:00:69:54:69: 1c:8a:14:99:66:5e:30:46:72:89:eb:45:26:47:50: 20:fe:f2:9c:e6:b1:58:e0:f0:c4:a9:97:5f:66:14: c6:e4:2e:74:33:cb:d8:b4:08:bc:d0:42:2b:1f:e1: d8:69:66:9e:b8:24:b2:fa:c7:56:9d:ea:fd:9f:a2: 26:0a:46:eb:a1:a7:c0:a1:8e:e6:1c:91:65:c1:ec: 3b:30:42:24:97:1c:c1:49:4c:59:0a:99:fa:63:f7: 78:64:ae:e8:26:5f:32:4d:dd:d2:44:63:89:29:b4: 29:da:31:f7:5e:e1:09:58:e2:bd:c6:5d:56:9b:ce: ea:3c:49:93:1f:4d:54:ed:ce:b0:73:54:65:ff:6f: 37:77:48:32:de:1d:56:70:c3:08:71:b4:42:52:99: 4a:8f:d8:8c:b8:46:93:af:9c:a4:70:93:27:fc:aa: f1:fe:b6:0b:0e:b5:54:90:47:0e:74:36:fb:43:d4: e4:55:70:27:1c:38:88:e6:8f:0a:50:e5:28:3b:8f: e1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DF:28:82:6B:BD:52:EB:11:4E:2D:22:C0:94:36:11:93:DD:49:32 X509v3 Authority Key Identifier: keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a7:75:c2:1e:38:3b:fb:97:e5:d5:1e:b6:7a:3c:a8:ed:fd: 78:e9:cd:98:b6:53:d3:64:66:3a:76:88:a7:b4:73:10:65:e9: f3:0a:b7:57:4a:44:ac:94:56:d7:8c:df:12:82:3f:db:0c:cf: ae:a3:7a:6e:2d:e5:55:e0:6a:e7:8f:33:fb:6a:a6:ed:77:05: 7f:17:21:be:7c:ff:5a:4e:78:28:ac:d5:12:2c:a7:e0:25:10: 54:75:8a:0b:e8:99:b3:55:3b:05:be:b1:89:8b:b8:ca:2a:65: 33:bd:36:36:4e:5d:eb:8e:3b:06:48:3f:d1:93:d7:c6:ed:c1: 70:47:c9:5b:ed:16:bc:be:ea:06:32:0f:de:da:a9:91:64:d2: 70:ff:4c:db:85:fd:b3:b0:b4:c7:bc:d7:cd:34:85:af:93:91: d0:e6:2e:0c:3f:19:b1:a8:64:d2:19:68:c7:4a:17:21:eb:54: 08:64:84:23:af:62:85:0b:af:9c:0b:2e:62:fa:28:85:ee:92: 4b:13:73:52:b6:1b:d5:a7:7d:e5:c8:75:2d:b1:de:e8:f9:39: 85:dd:fd:45:6f:0a:fc:91:31:63:81:ff:ed:11:63:5c:dc:e9: 60:1d:ed:b0:f8:ba:2a:dc:59:5b:53:dc:35:5c:26:ab:47:59: 91:7a:f4:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsznHsCjccB/vT7u367LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjgyODYzZTk5ODdhOWViODY2OGJhMDdjOTZjOTlhMWIy ZGZlNjkwHhcNMjUxMjA2MTEwMTIxWhcNMjUxMjA3MTEwMTIxWjAzMTEwLwYDVQQD EyhjNGRmMjg4MjZiYmQ1MmViMTE0ZTJkMjJjMDk0MzYxMTkzZGQ0OTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsRMNfOwmPqUD+t4RRS0rc2FY4Nz qCeL0FTrpPwuFYuV+YEP8NiKc+7N1fL9ybKWavFEOrmIQgBpVGkcihSZZl4wRnKJ 60UmR1Ag/vKc5rFY4PDEqZdfZhTG5C50M8vYtAi80EIrH+HYaWaeuCSy+sdWner9 n6ImCkbroafAoY7mHJFlwew7MEIklxzBSUxZCpn6Y/d4ZK7oJl8yTd3SRGOJKbQp 2jH3XuEJWOK9xl1Wm87qPEmTH01U7c6wc1Rl/283d0gy3h1WcMMIcbRCUplKj9iM uEaTr5ykcJMn/Krx/rYLDrVUkEcOdDb7Q9TkVXAnHDiI5o8KUOUoO4/hUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTfKIJrvVLrEU4tIsCUNhGT3UkyMB8GA1UdIwQY MBaAFOFoKGPpmHqeuGaLoHyWyZobLf5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2It M2JkYTM1MzljNmJjLzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2ItM2JkYTM1MzljNmJj LzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6d1wh44 O/uX5dUetno8qO39eOnNmLZT02RmOnaIp7RzEGXp8wq3V0pErJRW14zfEoI/2wzP rqN6bi3lVeBq548z+2qm7XcFfxchvnz/Wk54KKzVEiyn4CUQVHWKC+iZs1U7Bb6x iYu4yiplM702Nk5d6447Bkg/0ZPXxu3BcEfJW+0WvL7qBjIP3tqpkWTScP9M24X9 s7C0x7zXzTSFr5OR0OYuDD8Zsahk0hlox0oXIetUCGSEI69ihQuvnAsuYvoohe6S SxNzUrYb1ad95ch1LbHe6Pk5hd39RW8K/JExY4H/7RFjXNzpYB3tsPi6KtxZW1Pc NVwmq0dZkXr09w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:41:51 2025 by rpki-client