This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json) Hash identifier: Myf9fPxtFNhOkFspzTFIBkQqBJhlJQ0GbM6kWsXp6/s= Subject key identifier: 17:15:82:03:98:03:51:07:21:EB:F1:AF:A2:3A:D0:6A:93:49:95:B2 Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26 Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26 Certificate serial: 019AF2AD92EEE732E7C8554C29540D7F1C9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft Manifest number: 0332 Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=) 2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: DtAw4Muyq2dZ8hKX7tddKzblSvCUFduHWXEgEGB5HaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:92:ee:e7:32:e7:c8:55:4c:29:54:0d:7f:1c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=171582039803510721ebf1afa23ad06a934995b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:d6:7d:e6:38:d0:85:38:29:2d:f6:f5:fe: 39:a0:af:ee:df:73:d5:0c:80:1e:81:8c:26:90:eb: 0e:9f:8b:7b:32:82:fb:4a:0f:96:35:f7:2b:8e:61: eb:ba:50:c5:4a:4d:25:d8:71:cd:e8:69:a2:e0:cf: 3e:e6:7a:67:ae:eb:95:ca:71:eb:9b:50:bc:c8:d1: 87:23:a9:4a:b5:99:43:39:47:a2:80:a1:46:99:e2: 34:37:f8:26:e9:fc:4a:ae:e1:36:58:a7:82:a9:0e: 33:f8:07:66:23:8b:ac:d2:f4:e1:d0:3e:a4:a4:76: 30:1c:85:f1:12:97:42:9b:9e:c6:30:8a:a7:fb:10: 64:c8:3b:b4:76:6c:73:6f:0c:51:79:17:e8:b3:10: 91:f2:bd:8e:81:9d:99:22:e0:00:d4:c0:51:5a:b1: 93:7f:3f:d5:30:00:8c:c4:12:c2:ff:d4:f3:d3:d0: f9:c6:94:70:ea:96:de:fa:51:23:d6:ab:85:86:2a: 9b:8b:32:be:43:8f:13:50:17:af:40:2c:ae:8b:c2: 95:f3:ac:9d:c3:27:ff:07:54:9c:6e:69:81:43:44: 17:03:71:43:56:80:43:a5:0f:58:d7:c3:0f:ee:22: a0:58:04:27:1f:ab:e3:46:fc:8e:39:51:21:71:fe: 1a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:82:03:98:03:51:07:21:EB:F1:AF:A2:3A:D0:6A:93:49:95:B2 X509v3 Authority Key Identifier: keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:47:30:ed:72:2d:81:66:23:0d:c3:99:74:c5:e0:22:1d:2c: ae:aa:dd:17:d7:e9:3e:5d:35:b5:1d:4f:b4:6a:83:2d:8d:09: 25:df:03:b7:b2:fe:0b:69:0a:7b:a2:80:18:23:12:21:82:aa: f7:39:33:30:6c:1c:84:2d:32:88:d5:2b:a6:36:77:f7:7d:1a: d6:c2:fc:1b:99:c6:df:e3:39:92:89:cf:98:75:cc:de:d1:13: 7e:b0:9c:ea:9a:67:4f:77:c4:c7:90:ba:00:28:40:33:bd:b5: ff:3c:be:d7:8c:9a:e1:a1:e3:7c:d9:36:6a:f7:75:8a:9a:3e: 2e:84:4a:49:f5:1d:b3:3c:22:9f:5d:ed:56:ab:b6:15:25:cc: 19:e4:fa:0c:29:a9:9d:6d:a1:0c:6b:36:4e:23:64:ed:1c:a5: 3a:12:50:fc:d2:a1:0a:db:b9:d7:48:e7:3a:e8:3b:e6:3f:53: 06:a3:49:c2:f1:bd:91:78:ee:fc:58:01:01:a9:55:a8:59:2a: 6e:c9:72:34:28:4b:2f:e6:cc:ae:fd:7b:91:b7:07:62:fe:00: 31:af:32:aa:87:9d:a4:39:f7:15:fb:87:d8:ed:53:07:9c:27: 61:64:1f:77:9a:06:96:79:64:7e:b1:03:f3:91:d8:af:f7:9a: ba:f4:42:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZLu5zLnyFVMKVQNfxybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZWUzZjM4MjA3M2YyYzNlNGZjY2ZmY2EzODRjNWIwY2Q4 MjZjMjYwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD EygxNzE1ODIwMzk4MDM1MTA3MjFlYmYxYWZhMjNhZDA2YTkzNDk5NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHPWfeY40IU4KS329f45oK/u33PV DIAegYwmkOsOn4t7MoL7Sg+WNfcrjmHrulDFSk0l2HHN6Gmi4M8+5npnruuVynHr m1C8yNGHI6lKtZlDOUeigKFGmeI0N/gm6fxKruE2WKeCqQ4z+AdmI4us0vTh0D6k pHYwHIXxEpdCm57GMIqn+xBkyDu0dmxzbwxReRfosxCR8r2OgZ2ZIuAA1MBRWrGT fz/VMACMxBLC/9Tz09D5xpRw6pbe+lEj1quFhiqbizK+Q48TUBevQCyui8KV86yd wyf/B1ScbmmBQ0QXA3FDVoBDpQ9Y18MP7iKgWAQnH6vjRvyOOVEhcf4adQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcVggOYA1EHIevxr6I60GqTSZWyMB8GA1UdIwQY MBaAFH/uPzggc/LD5PzP/KOExbDNgmwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgt Y2NiZmE3MzQyNGE3LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgtY2NiZmE3MzQyNGE3 LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEcw7XIt gWYjDcOZdMXgIh0srqrdF9fpPl01tR1PtGqDLY0JJd8Dt7L+C2kKe6KAGCMSIYKq 9zkzMGwchC0yiNUrpjZ3930a1sL8G5nG3+M5konPmHXM3tETfrCc6ppnT3fEx5C6 AChAM721/zy+14ya4aHjfNk2avd1ipo+LoRKSfUdszwin13tVqu2FSXMGeT6DCmp nW2hDGs2TiNk7RylOhJQ/NKhCtu510jnOug75j9TBqNJwvG9kXju/FgBAalVqFkq bslyNChLL+bMrv17kbcHYv4AMa8yqoedpDn3FfuH2O1TB5wnYWQfd5oGlnlkfrED 85HYr/eauvRCmw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:17:31 2025 by rpki-client