This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json) Hash identifier: M9IFfYeoP7SOVIVYlngDxqI9peDfgRa4rhQcOFyuaYM= Subject key identifier: 8B:C3:53:B1:C6:AE:D6:7D:D8:3D:ED:5D:37:1F:CD:BD:22:4D:CD:E0 Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Certificate serial: 019AF19B43228BE36E39DE0AD04239D9E46A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft Manifest number: 0E6F Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: ZB1CbP2ZGzHhw4AND5+x/AE10o90MDLgzvl/apcDtYc=) 2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=) 3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:43:22:8b:e3:6e:39:de:0a:d0:42:39:d9:e4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=8bc353b1c6aed67dd83ded5d371fcdbd224dcde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:ab:a2:2e:96:bf:a8:e5:8c:c3:95:0d:1f: 61:ce:ef:46:77:43:1e:ec:de:05:89:f6:97:96:56: 4b:b4:ee:a3:76:cb:c1:2b:9e:f9:1a:3f:33:81:68: db:8e:77:e5:97:a4:ca:a5:08:60:1f:13:d0:92:3f: da:08:83:c5:e7:27:bd:29:02:8a:56:fa:08:7e:fe: 2e:7f:e2:60:40:92:2e:11:0e:0c:6a:34:72:61:52: 34:64:07:97:f2:2d:28:c7:a7:2d:a5:1e:dd:5d:82: 76:23:af:26:c1:24:b2:7d:23:93:f1:bf:1e:07:a3: 02:d1:d2:5e:bc:e2:7e:9b:dc:db:46:f7:9a:3e:66: 90:3f:5f:7a:a1:93:fc:95:71:59:43:f6:28:81:28: 87:33:ad:c9:86:1f:98:1e:4d:69:94:81:65:a6:1e: 47:58:a0:04:1f:b2:35:9f:eb:ff:36:27:a5:82:b5: 48:47:52:46:57:f1:6a:ad:ed:76:61:9e:c9:03:91: 6d:f8:06:98:8e:eb:7e:ea:00:5e:6c:da:64:b5:61: 50:0d:36:40:5e:21:b0:45:3d:d9:e0:90:f7:62:2f: c4:f8:ee:7d:62:9f:31:3a:08:23:e3:77:b0:36:5a: 30:19:a8:40:19:ad:b0:ff:40:20:cc:05:7e:eb:5a: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C3:53:B1:C6:AE:D6:7D:D8:3D:ED:5D:37:1F:CD:BD:22:4D:CD:E0 X509v3 Authority Key Identifier: keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:41:bb:56:ad:be:54:92:4d:d6:6e:f5:62:20:ec:e9:16:b0: 40:ba:58:c1:eb:33:e2:60:e9:2a:7a:bd:ab:07:e2:6d:c1:d0: 5c:c9:89:8e:38:4a:ff:57:c5:71:03:b8:a5:4b:11:f2:21:09: 39:41:91:70:aa:4a:75:78:d0:38:63:8a:40:79:3f:cc:56:e8: 3e:eb:b4:d7:f0:78:a4:44:b6:14:19:06:c9:5f:41:1f:db:6d: a8:21:b9:4e:6e:df:4a:c8:5a:ed:88:0d:4a:56:9f:42:bf:9e: 67:3f:51:c2:bd:d6:3f:ea:1f:5e:ad:0c:c4:5d:a8:ec:a5:ae: 80:69:01:8b:a5:e9:25:25:6c:c7:7a:11:91:df:a0:f3:b8:39: 87:7a:ce:f0:1d:92:ad:8d:48:27:bf:30:0e:55:79:d7:ee:e6: 30:0d:05:cb:30:9e:f8:39:04:56:13:12:c0:57:e1:e6:b1:80: 79:b5:80:15:82:8c:ca:3e:fd:af:68:f5:b7:9f:d1:48:a6:5d: d2:33:a5:ce:b4:2e:85:ac:64:1a:6c:0e:c7:a5:49:6f:1f:4f: 05:47:e4:df:de:10:19:3d:6c:38:0c:03:dc:08:72:e3:53:d5: 7c:98:37:49:f5:8c:f0:fc:46:5e:0a:0b:86:06:e4:de:96:1c: bf:2d:1c:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0Mii+NuOd4K0EI52eRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0 MmY1MGQwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD Eyg4YmMzNTNiMWM2YWVkNjdkZDgzZGVkNWQzNzFmY2RiZDIyNGRjZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQOroi6Wv6jljMOVDR9hzu9Gd0Me 7N4FifaXllZLtO6jdsvBK575Gj8zgWjbjnfll6TKpQhgHxPQkj/aCIPF5ye9KQKK VvoIfv4uf+JgQJIuEQ4MajRyYVI0ZAeX8i0ox6ctpR7dXYJ2I68mwSSyfSOT8b8e B6MC0dJevOJ+m9zbRveaPmaQP196oZP8lXFZQ/YogSiHM63Jhh+YHk1plIFlph5H WKAEH7I1n+v/NielgrVIR1JGV/Fqre12YZ7JA5Ft+AaYjut+6gBebNpktWFQDTZA XiGwRT3Z4JD3Yi/E+O59Yp8xOggj43ewNlowGahAGa2w/0AgzAV+61rkswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvDU7HGrtZ92D3tXTcfzb0iTc3gMB8GA1UdIwQY MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkG7Vq2+ VJJN1m71YiDs6RawQLpYwesz4mDpKnq9qwfibcHQXMmJjjhK/1fFcQO4pUsR8iEJ OUGRcKpKdXjQOGOKQHk/zFboPuu01/B4pES2FBkGyV9BH9ttqCG5Tm7fSsha7YgN SlafQr+eZz9Rwr3WP+ofXq0MxF2o7KWugGkBi6XpJSVsx3oRkd+g87g5h3rO8B2S rY1IJ78wDlV51+7mMA0FyzCe+DkEVhMSwFfh5rGAebWAFYKMyj79r2j1t5/RSKZd 0jOlzrQuhaxkGmwOx6VJbx9PBUfk394QGT1sOAwD3Ahy41PVfJg3SfWM8PxGXgoL hgbk3pYcvy0csw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:31 2025 by rpki-client