This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json) Hash identifier: ZdpIs1fnXP61O1fkMEXg4GNYRw/gtHARshvDfHlreck= Subject key identifier: CF:E0:A0:CC:3E:FF:20:06:31:57:35:9F:0F:CC:C0:73:C1:F0:1F:3B Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2 Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2 Certificate serial: 019B281BC6425D1DDA414D86AD9BDE205538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft Manifest number: 0733 Signing time: Tue 16 Dec 2025 17:01:07 +0000 Manifest this update: Tue 16 Dec 2025 17:01:07 +0000 Manifest next update: Wed 17 Dec 2025 17:01:07 +0000 Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: GUc3+ytjPVy4XTejw+F6ll2QzGk5wdb6XbKJc3mZ8RQ=) 2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:c6:42:5d:1d:da:41:4d:86:ad:9b:de:20:55:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2 Validity Not Before: Dec 16 17:01:07 2025 GMT Not After : Dec 17 17:01:07 2025 GMT Subject: CN=cfe0a0cc3eff20063157359f0fccc073c1f01f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:61:91:0d:7a:c7:e0:b9:59:c7:e6:98:74: 6f:84:22:98:1b:3e:cd:da:2e:c3:8f:6f:f0:9d:0a: 91:34:5f:b3:8f:6a:f8:30:f9:23:26:ac:fe:cf:af: b0:92:23:db:be:7f:81:72:a4:bf:a2:c2:d1:cd:5d: c7:33:f7:11:22:e7:a8:fc:09:a4:58:6f:56:5f:8e: d1:b6:c8:11:48:8c:1a:b6:de:99:c2:6e:34:20:94: db:07:c4:0d:0c:c4:90:4a:f8:ad:8c:ce:36:ef:74: 96:e3:41:67:d8:07:dd:95:12:3c:a0:36:34:d7:9b: 0f:32:87:06:3a:0f:63:2e:23:6c:f0:47:73:50:fc: c6:e6:e0:b2:6a:0f:4e:ad:de:88:18:fd:e5:33:e0: 9b:a2:a0:d7:bb:c1:83:ce:a8:7d:1e:b8:cc:ec:e5: 0d:e3:a6:c8:e5:97:c1:82:2f:29:16:0b:d6:91:78: fb:c3:c9:62:b3:f4:72:38:62:d2:b0:f7:29:af:77: 7c:3c:6e:93:7c:27:17:16:14:72:c2:4a:d0:e2:78: 87:6c:f9:bf:79:dc:32:6a:f5:36:9b:87:86:08:e6: f9:50:0b:36:52:ee:c8:f4:ba:4a:26:59:03:9d:54: 23:7e:10:d5:46:67:dc:90:83:b6:45:0b:c8:9a:57: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:A0:CC:3E:FF:20:06:31:57:35:9F:0F:CC:C0:73:C1:F0:1F:3B X509v3 Authority Key Identifier: keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:64:12:3c:e4:2b:af:9d:75:8c:9e:a3:2b:f6:60:1f:35:5c: c0:fb:87:46:33:6b:91:ce:06:5f:c7:c0:cc:fa:fe:f7:3b:c6: e7:38:4a:c5:12:8a:4d:bb:f2:ed:d2:7b:91:c0:1c:29:cd:6b: 47:61:84:ba:c5:fd:17:3c:d2:1f:24:e4:44:e4:aa:b6:95:d6: dd:33:ca:27:98:29:9c:5a:60:58:57:90:96:bb:ac:9a:f7:4e: 35:ec:1d:74:a5:90:1c:58:dd:81:4a:6f:78:19:81:68:3a:e4: 9b:4d:a3:50:5f:98:79:9b:49:85:0f:3c:45:7b:1a:59:6c:e1: 0f:43:9f:11:1e:0f:50:74:0f:d0:fd:2b:a1:6a:c7:eb:41:f8: 25:47:c1:3b:5d:26:fb:ee:08:d1:93:c8:ac:66:08:15:8a:bc: a7:43:9a:4f:7b:f9:dd:b1:b5:e9:b2:56:a9:e4:80:f2:63:c3: 82:df:89:7e:2c:60:cc:d5:71:62:f7:9c:2c:6d:d3:8c:8a:ae: ec:25:16:97:76:e6:99:60:e5:64:53:29:31:5d:cb:18:ea:10: 12:13:50:2a:46:f1:cb:9d:a5:10:e7:ce:d7:12:d8:15:d3:b0: a0:35:bf:5e:3c:36:48:26:d0:78:2b:4b:4b:53:ba:96:bb:82: 80:76:d9:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG8ZCXR3aQU2GrZveIFU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOGE4NmNjYmY1NjdiZDlhMjgyZmRkZjc1ZjBiN2Y1NTQy MjIyZDIwHhcNMjUxMjE2MTcwMTA3WhcNMjUxMjE3MTcwMTA3WjAzMTEwLwYDVQQD EyhjZmUwYTBjYzNlZmYyMDA2MzE1NzM1OWYwZmNjYzA3M2MxZjAxZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuthkQ16x+C5WcfmmHRvhCKYGz7N 2i7Dj2/wnQqRNF+zj2r4MPkjJqz+z6+wkiPbvn+BcqS/osLRzV3HM/cRIueo/Amk WG9WX47RtsgRSIwatt6Zwm40IJTbB8QNDMSQSvitjM4273SW40Fn2AfdlRI8oDY0 15sPMocGOg9jLiNs8EdzUPzG5uCyag9Ord6IGP3lM+CboqDXu8GDzqh9HrjM7OUN 46bI5ZfBgi8pFgvWkXj7w8lis/RyOGLSsPcpr3d8PG6TfCcXFhRywkrQ4niHbPm/ edwyavU2m4eGCOb5UAs2Uu7I9LpKJlkDnVQjfhDVRmfckIO2RQvImleYDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/goMw+/yAGMVc1nw/MwHPB8B87MB8GA1UdIwQY MBaAFOKKhsy/VnvZooL933Xwt/VUIiLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGIt NmQ3NjUwY2EzZDA0LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGItNmQ3NjUwY2EzZDA0 LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGQSPOQr r511jJ6jK/ZgHzVcwPuHRjNrkc4GX8fAzPr+9zvG5zhKxRKKTbvy7dJ7kcAcKc1r R2GEusX9FzzSHyTkROSqtpXW3TPKJ5gpnFpgWFeQlrusmvdONewddKWQHFjdgUpv eBmBaDrkm02jUF+YeZtJhQ88RXsaWWzhD0OfER4PUHQP0P0roWrH60H4JUfBO10m ++4I0ZPIrGYIFYq8p0OaT3v53bG16bJWqeSA8mPDgt+JfixgzNVxYvecLG3TjIqu 7CUWl3bmmWDlZFMpMV3LGOoQEhNQKkbxy52lEOfO1xLYFdOwoDW/Xjw2SCbQeCtL S1O6lruCgHbZKA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:20:10 2025 by rpki-client