This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json) Hash identifier: KECfIsCvz1W01Y4lLbpY9cBZDp3ROmeAZOfGWubqotg= Subject key identifier: CF:18:67:CD:53:55:CF:A9:E1:6F:06:FB:3B:67:24:5A:64:63:45:40 Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Certificate serial: 019AF50977F300362064572B076868356EC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:00:29 +0000 Manifest this update: Sat 06 Dec 2025 19:00:29 +0000 Manifest next update: Sun 07 Dec 2025 19:00:29 +0000 Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=) 2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: X89EqBnHPukhFhBndUzwsmc9NAQqLvoDlO1kgdZ03/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:77:f3:00:36:20:64:57:2b:07:68:68:35:6e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Validity Not Before: Dec 6 19:00:29 2025 GMT Not After : Dec 7 19:00:29 2025 GMT Subject: CN=cf1867cd5355cfa9e16f06fb3b67245a64634540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:50:5d:03:7f:2c:f2:fa:50:df:8d:f0:3d:b3: df:45:28:f3:24:bb:74:7b:22:73:89:54:1c:a3:7f: d7:b6:41:7c:79:d6:32:87:f0:60:27:a1:bd:45:6e: ad:7a:41:9b:32:b2:d9:94:a1:8b:65:9a:24:85:f4: 7e:a7:b5:92:3b:db:24:7d:fe:d9:57:69:a2:50:5d: 8f:04:24:bd:a4:0f:5b:60:dd:35:c6:ba:fe:27:51: 1c:e8:c9:1f:ca:b7:b7:f6:6b:e3:a8:c5:65:ef:3f: 06:a4:21:38:2b:97:af:0f:70:96:04:05:6e:87:05: 47:24:e4:cb:b2:31:92:51:4c:8d:b6:cc:21:72:ac: 14:bf:4e:f0:15:d6:56:50:03:c3:d0:83:04:a9:8b: 49:60:c3:00:1c:bd:81:00:17:cb:d1:e7:59:b9:1a: 59:a3:ed:80:be:26:8a:ac:55:44:77:1f:30:fe:c2: de:08:ca:33:37:f2:e3:a9:6e:0f:18:b7:74:d5:7f: 2a:97:ca:d8:44:18:ca:e0:ae:7c:93:c1:22:16:1b: 79:ce:ec:7e:ec:70:26:0e:07:77:e7:61:67:07:f8: 90:a1:e9:01:d4:92:28:d0:47:8f:d4:3a:c8:b7:61: a9:50:60:a3:c1:c9:46:43:ca:2b:a9:60:02:dd:00: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:18:67:CD:53:55:CF:A9:E1:6F:06:FB:3B:67:24:5A:64:63:45:40 X509v3 Authority Key Identifier: keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:aa:59:53:36:04:21:65:0a:41:47:f3:6a:f1:60:ba:3a:a9: f5:da:c2:a0:47:16:55:95:4f:c7:41:72:a8:43:d5:40:88:55: be:4b:bc:ba:7d:b8:83:95:26:43:eb:e8:44:5f:47:9f:33:1b: 47:2c:8f:f7:87:c8:0c:4e:87:6b:68:b1:2b:3a:ee:ed:db:8d: 14:7c:a4:84:83:18:d2:70:c1:8f:81:7a:b6:d4:dd:1f:d3:41: a3:a3:45:45:39:75:93:42:ca:04:bf:9a:9d:1f:9a:34:7b:f2: cf:eb:72:53:2a:50:32:01:8e:08:93:23:d2:1e:2e:69:ff:f7: 75:bf:3e:83:d5:84:88:96:e0:2d:31:12:af:05:e2:e6:64:d3: ad:e4:63:01:86:fb:99:a0:d3:83:cb:94:9c:49:e1:f6:eb:75: 55:19:62:63:cb:fa:23:59:2c:67:32:cc:c6:ec:bf:ad:ff:59: 46:cf:7b:92:09:17:71:88:02:bf:7a:40:61:0b:28:6f:5d:00: 73:31:14:1a:d2:ae:a0:3e:d7:a5:8b:8e:39:e9:60:30:5c:2d: 21:2d:06:19:0b:53:c5:63:84:e7:cd:9d:81:8e:9f:10:04:fd: fa:6a:7b:9f:e2:14:b8:6b:3a:a0:17:56:4d:dc:c8:e0:78:ef: a7:9a:9f:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CXfzADYgZFcrB2hoNW7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl ZjExMDIwHhcNMjUxMjA2MTkwMDI5WhcNMjUxMjA3MTkwMDI5WjAzMTEwLwYDVQQD EyhjZjE4NjdjZDUzNTVjZmE5ZTE2ZjA2ZmIzYjY3MjQ1YTY0NjM0NTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lBdA38s8vpQ343wPbPfRSjzJLt0 eyJziVQco3/XtkF8edYyh/BgJ6G9RW6tekGbMrLZlKGLZZokhfR+p7WSO9skff7Z V2miUF2PBCS9pA9bYN01xrr+J1Ec6Mkfyre39mvjqMVl7z8GpCE4K5evD3CWBAVu hwVHJOTLsjGSUUyNtswhcqwUv07wFdZWUAPD0IMEqYtJYMMAHL2BABfL0edZuRpZ o+2AviaKrFVEdx8w/sLeCMozN/LjqW4PGLd01X8ql8rYRBjK4K58k8EiFht5zux+ 7HAmDgd352FnB/iQoekB1JIo0EeP1DrIt2GpUGCjwclGQ8orqWAC3QDojwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8YZ81TVc+p4W8G+ztnJFpkY0VAMB8GA1UdIwQY MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6pZUzYE IWUKQUfzavFgujqp9drCoEcWVZVPx0FyqEPVQIhVvku8un24g5UmQ+voRF9HnzMb RyyP94fIDE6Ha2ixKzru7duNFHykhIMY0nDBj4F6ttTdH9NBo6NFRTl1k0LKBL+a nR+aNHvyz+tyUypQMgGOCJMj0h4uaf/3db8+g9WEiJbgLTESrwXi5mTTreRjAYb7 maDTg8uUnEnh9ut1VRliY8v6I1ksZzLMxuy/rf9ZRs97kgkXcYgCv3pAYQsob10A czEUGtKuoD7XpYuOOelgMFwtIS0GGQtTxWOE582dgY6fEAT9+mp7n+IUuGs6oBdW TdzI4Hjvp5qfNw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:43 2025 by rpki-client