This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json) Hash identifier: o2u0Umnq+FJlQ/U00twGjCE8+40elsv2p5RjwJQUl1Q= Subject key identifier: 6A:05:DC:4D:13:4D:57:54:5D:51:91:F2:EB:3E:10:04:41:BF:02:5F Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34 Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034 Certificate serial: 019AF766C2C4D734A960B283E0B7597B1E74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 06:01:38 +0000 Manifest this update: Sun 07 Dec 2025 06:01:38 +0000 Manifest next update: Mon 08 Dec 2025 06:01:38 +0000 Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: QoN2f7SY5BwaBBSL2yFKGcbKSdV64r2A9xLfw54c4l8=) 2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:c2:c4:d7:34:a9:60:b2:83:e0:b7:59:7b:1e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034 Validity Not Before: Dec 7 06:01:38 2025 GMT Not After : Dec 8 06:01:38 2025 GMT Subject: CN=6a05dc4d134d57545d5191f2eb3e100441bf025f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:ab:cd:5d:61:ad:2d:38:b2:ed:59:68:69: 5f:34:7d:68:b1:02:4a:ac:ba:b6:f3:d4:e9:1d:e8: 9c:ec:bb:0d:ce:82:22:e4:6b:0b:54:19:be:0b:f4: b6:03:23:a9:01:93:77:aa:79:64:11:fd:a9:2a:b3: e5:79:76:5f:d1:5c:c8:47:77:b4:b0:35:19:ee:4a: 7e:5e:8b:19:28:00:ee:3f:ef:1c:9f:14:fc:8b:1c: 54:60:2e:25:7f:02:57:ed:df:1c:5e:51:8c:cf:99: cd:a8:e3:4a:3b:27:fd:09:dc:ea:15:2c:53:3a:06: 13:b0:62:45:72:ba:84:58:9a:ec:ea:ee:ff:f6:85: d1:bf:df:83:f9:d9:d3:6d:17:32:73:e4:9f:fe:bf: bb:f7:c5:b1:78:0f:15:95:84:1d:de:f9:fe:85:14: 8c:af:7a:9f:0d:0e:2e:6c:9a:3b:a4:94:75:6c:b7: 9b:50:20:60:92:7e:7c:52:35:cd:6a:89:1e:2c:d4: 81:15:64:da:33:19:83:d4:bd:88:9d:42:65:3f:7f: 11:60:dc:21:3e:a7:ff:4d:1b:f7:12:1d:b9:3e:46: dd:47:23:65:38:d7:fa:8c:6c:5f:d2:33:9c:d8:00: 2f:55:d7:09:3d:60:e9:3a:3a:1c:82:29:c9:35:33: a6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:05:DC:4D:13:4D:57:54:5D:51:91:F2:EB:3E:10:04:41:BF:02:5F X509v3 Authority Key Identifier: keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fe:62:05:9c:12:57:b7:a1:18:fc:8d:35:c2:87:00:28:c6: 50:52:26:90:6a:4a:0a:e0:b6:99:bd:aa:57:58:8e:d8:62:a7: 24:f5:31:92:4c:01:47:e9:25:cc:74:44:fd:28:96:d4:61:59: 98:e1:f4:8b:ac:aa:45:70:0c:ed:b5:52:82:8f:03:0d:72:dc: e9:a2:af:b3:30:57:20:f3:81:53:1f:89:7a:83:00:e0:22:d0: 03:28:60:63:7a:db:a3:59:27:8b:34:6e:38:90:22:d1:04:61: a6:33:4c:49:88:a0:13:d8:ad:84:32:b0:0e:2c:ba:a6:40:8e: 75:8d:c1:e5:c6:48:ad:9a:9b:74:ce:2d:02:b8:56:12:48:cf: 08:ec:37:d2:db:87:8b:6a:f0:2f:73:d0:14:7c:53:89:c1:a8: bd:cf:82:7a:53:f5:cb:43:b0:99:80:73:3d:91:5e:46:f1:6f: 7e:98:a3:eb:6c:24:73:59:41:dc:d9:10:f5:c7:84:06:5c:42: c4:d3:1e:f8:7b:d3:af:2e:51:78:20:90:14:2e:d9:f8:04:67: 3a:ad:57:10:a5:94:0f:d6:fb:cf:67:40:d1:e9:58:05:88:ea: 87:24:f8:79:94:c9:92:69:1a:30:6b:d8:59:9d:56:a7:4b:83: 7f:02:dd:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZsLE1zSpYLKD4LdZex50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzY4MTZlMGEzYTJmNjE2YzNhYTc3YTM2YjRjYWY3YTky MjQwMzQwHhcNMjUxMjA3MDYwMTM4WhcNMjUxMjA4MDYwMTM4WjAzMTEwLwYDVQQD Eyg2YTA1ZGM0ZDEzNGQ1NzU0NWQ1MTkxZjJlYjNlMTAwNDQxYmYwMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt42rzV1hrS04su1ZaGlfNH1osQJK rLq289TpHeic7LsNzoIi5GsLVBm+C/S2AyOpAZN3qnlkEf2pKrPleXZf0VzIR3e0 sDUZ7kp+XosZKADuP+8cnxT8ixxUYC4lfwJX7d8cXlGMz5nNqONKOyf9CdzqFSxT OgYTsGJFcrqEWJrs6u7/9oXRv9+D+dnTbRcyc+Sf/r+798WxeA8VlYQd3vn+hRSM r3qfDQ4ubJo7pJR1bLebUCBgkn58UjXNaokeLNSBFWTaMxmD1L2InUJlP38RYNwh Pqf/TRv3Eh25PkbdRyNlONf6jGxf0jOc2AAvVdcJPWDpOjocginJNTOmLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoF3E0TTVdUXVGR8us+EARBvwJfMB8GA1UdIwQY MBaAFOLGgW4KOi9hbDqneja0yvepIkA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEt MjAyYzUxNzIwYWI3LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEtMjAyYzUxNzIwYWI3 LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACP5iBZwS V7ehGPyNNcKHACjGUFImkGpKCuC2mb2qV1iO2GKnJPUxkkwBR+klzHRE/SiW1GFZ mOH0i6yqRXAM7bVSgo8DDXLc6aKvszBXIPOBUx+JeoMA4CLQAyhgY3rbo1knizRu OJAi0QRhpjNMSYigE9ithDKwDiy6pkCOdY3B5cZIrZqbdM4tArhWEkjPCOw30tuH i2rwL3PQFHxTicGovc+CelP1y0OwmYBzPZFeRvFvfpij62wkc1lB3NkQ9ceEBlxC xNMe+HvTry5ReCCQFC7Z+ARnOq1XEKWUD9b7z2dA0elYBYjqhyT4eZTJkmkaMGvY WZ1Wp0uDfwLdjw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:12 2025 by rpki-client