This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json) Hash identifier: YfhVn2w51dDTwnVEvNU9GxenYLsb+3yM1VE/1ho70PY= Subject key identifier: B4:25:88:77:81:0B:D4:D1:4B:EA:20:CD:63:33:ED:38:BB:4D:AA:76 Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c Certificate serial: 019AF4654C9B1DA8193EB06F96B585A4B02F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft Manifest number: 11FA Signing time: Sat 06 Dec 2025 16:01:10 +0000 Manifest this update: Sat 06 Dec 2025 16:01:10 +0000 Manifest next update: Sun 07 Dec 2025 16:01:10 +0000 Files and hashes: 1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: hd5jNaZQQfxVrH4HwKY41tBqpc+JhZIlqD2+MMe2uQA=) 2: MQ8RZspaKkEig8cCCF7-zec3ZHI.roa (hash: TWPrc2azmEsVYvz4zvYsbEnxkist2uhLkvy3lSkFipY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:4c:9b:1d:a8:19:3e:b0:6f:96:b5:85:a4:b0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c Validity Not Before: Dec 6 16:01:10 2025 GMT Not After : Dec 7 16:01:10 2025 GMT Subject: CN=b4258877810bd4d14bea20cd6333ed38bb4daa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:52:26:1d:3e:fd:8b:37:3e:51:8c:d8:63: 4b:8d:10:4d:2f:cd:56:fd:98:ce:76:5f:61:76:ff: dc:eb:a2:1f:52:e9:74:11:c9:8d:70:52:0e:c9:a1: bd:31:df:a7:0f:85:7e:52:e6:c1:15:f3:de:1e:1d: c8:bc:a8:d9:b8:e4:19:00:cc:48:f5:2e:9b:31:82: 55:96:8c:c2:ca:8d:53:47:01:23:69:3d:57:f8:c8: 46:64:68:9c:12:8e:a2:fb:62:24:0f:de:8f:d8:21: 5c:e1:1b:ef:93:48:5b:9b:ac:a8:c5:46:62:eb:11: 24:8b:bd:08:9d:d1:2c:51:54:0a:0f:0d:5f:48:4a: 41:94:71:12:5a:2f:61:fb:8e:65:07:cf:7a:a7:36: da:a4:86:c1:27:47:24:2c:a0:77:6d:ed:15:9a:11: fb:0b:92:37:f1:0a:6e:8d:74:1b:be:85:63:f3:d6: b9:91:2b:7e:49:c8:da:cc:4b:e6:14:a0:cc:7e:91: de:03:e6:f0:5c:df:2b:9c:f9:50:6a:d7:7a:3f:3c: 02:ad:c0:74:36:9e:56:7d:69:64:56:57:71:fe:22: 54:f0:e3:08:4f:cc:25:ce:29:15:fc:9f:38:b0:2d: 3d:58:f1:8d:29:e5:a6:3b:9b:a3:14:9d:8e:0e:17: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:88:77:81:0B:D4:D1:4B:EA:20:CD:63:33:ED:38:BB:4D:AA:76 X509v3 Authority Key Identifier: keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:12:d3:3e:53:a4:b1:36:6e:16:05:1f:3b:c7:3c:36:7f:c0: 03:d9:7d:53:c2:37:6c:ab:df:07:e7:bc:70:6a:99:dc:67:26: f3:28:0d:40:ed:cc:b3:42:0c:e5:22:8c:d9:2d:29:bd:1b:35: 78:22:77:0a:eb:eb:9d:c3:bf:b3:e2:d9:cc:a5:82:eb:83:18: 66:dc:eb:6c:4e:08:81:28:52:8b:1b:e5:ef:c9:b7:5b:93:2e: c9:fc:13:f0:29:ff:db:0f:62:12:57:dd:24:5f:8e:f8:fd:7f: 19:46:e0:aa:8b:02:5a:01:d4:19:77:b7:d7:e8:2d:64:31:a4: 8c:0e:24:1d:89:23:5c:93:b5:ce:b2:da:0c:5f:9e:73:40:0f: 5a:de:8c:82:47:75:08:c4:ea:d5:61:00:19:14:46:e9:4e:c4: bc:51:58:13:d3:2f:c9:43:b8:ea:04:93:2d:59:ee:87:cf:07: 0a:a8:3a:61:9b:d9:89:a3:d5:af:c6:41:96:1c:ae:63:6a:d1: a3:e2:d7:b8:23:ef:a2:a5:00:e0:41:34:00:b5:82:65:2e:68: 98:4c:6f:eb:72:51:d9:9d:87:81:d8:4c:dd:ff:03:a6:2a:f0: 4d:9d:9a:c0:19:7d:c0:ef:a1:22:3d:70:65:eb:14:7e:66:98: 12:d3:8f:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUybHagZPrBvlrWFpLAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2E3NDYzMGE4NDI0Y2NkNWY1YmIwZjYwMjIwODk0NTI3 ZDczMmMwHhcNMjUxMjA2MTYwMTEwWhcNMjUxMjA3MTYwMTEwWjAzMTEwLwYDVQQD EyhiNDI1ODg3NzgxMGJkNGQxNGJlYTIwY2Q2MzMzZWQzOGJiNGRhYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+dSJh0+/Ys3PlGM2GNLjRBNL81W /ZjOdl9hdv/c66IfUul0EcmNcFIOyaG9Md+nD4V+UubBFfPeHh3IvKjZuOQZAMxI 9S6bMYJVlozCyo1TRwEjaT1X+MhGZGicEo6i+2IkD96P2CFc4Rvvk0hbm6yoxUZi 6xEki70IndEsUVQKDw1fSEpBlHESWi9h+45lB896pzbapIbBJ0ckLKB3be0VmhH7 C5I38QpujXQbvoVj89a5kSt+ScjazEvmFKDMfpHeA+bwXN8rnPlQatd6PzwCrcB0 Np5WfWlkVldx/iJU8OMIT8wlzikV/J84sC09WPGNKeWmO5ujFJ2ODhecAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQliHeBC9TRS+ogzWMz7Ti7Tap2MB8GA1UdIwQY MBaAFOI6dGMKhCTM1fW7D2AiCJRSfXMsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2It OTZhYjIxNjk2OTc0LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2ItOTZhYjIxNjk2OTc0 LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRLTPlOk sTZuFgUfO8c8Nn/AA9l9U8I3bKvfB+e8cGqZ3Gcm8ygNQO3Ms0IM5SKM2S0pvRs1 eCJ3CuvrncO/s+LZzKWC64MYZtzrbE4IgShSixvl78m3W5MuyfwT8Cn/2w9iElfd JF+O+P1/GUbgqosCWgHUGXe31+gtZDGkjA4kHYkjXJO1zrLaDF+ec0APWt6Mgkd1 CMTq1WEAGRRG6U7EvFFYE9MvyUO46gSTLVnuh88HCqg6YZvZiaPVr8ZBlhyuY2rR o+LXuCPvoqUA4EE0ALWCZS5omExv63JR2Z2HgdhM3f8DpirwTZ2awBl9wO+hIj1w ZesUfmaYEtOPBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:49:34 2025 by rpki-client