This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json) Hash identifier: uNWtGwlfJrF4G97d2//piUVgy5HjpeOlzbRaaYeFfxk= Subject key identifier: 91:13:78:D9:79:12:21:B5:95:E1:35:5C:AF:8E:96:2B:79:16:26:3F Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Certificate serial: 019AF19B0A7FDDFDC243E6C3A5048C154D9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: ZpNY4A6Hw87PVTgFt6FQaNRzMIxfAphOgB1jWme2eCk=) 2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=) 3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0a:7f:dd:fd:c2:43:e6:c3:a5:04:8c:15:4d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=911378d9791221b595e1355caf8e962b7916263f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:3e:26:96:93:70:98:ff:b9:e5:01:1e:63: 59:00:04:de:75:c7:49:90:8f:a6:95:eb:33:46:78: 88:3d:55:b2:7b:81:3c:81:82:b9:d8:ce:0d:6f:09: 14:02:e1:b1:55:c3:7b:09:e1:96:85:ad:7e:11:1a: 72:3f:a1:5e:67:d6:7d:e2:88:91:5a:92:62:17:46: b8:af:9d:ee:7a:b3:f4:2c:ed:01:11:98:4b:e2:e8: 85:c3:c1:65:4f:af:de:68:42:52:5b:e0:a7:13:35: 37:db:34:52:43:54:13:dd:a3:b0:ba:99:e0:60:3c: 94:a3:95:ae:90:a5:8b:84:8d:be:8f:e7:c1:48:45: 04:ce:6d:1c:29:a0:f2:7f:a9:3e:92:c0:6e:74:c6: e9:95:c1:ad:bf:bf:da:5e:16:c1:e9:6f:d1:b5:06: 1e:61:ee:58:80:be:3d:8c:1b:77:70:14:b9:20:53: e4:d3:2d:6c:4d:e4:0a:c2:57:a4:d0:dd:d2:9a:58: 14:88:46:d0:b9:a1:a8:fe:7d:fb:24:66:f8:c9:7d: 61:ed:3c:fa:55:13:df:87:3f:c0:80:4d:37:34:c3: f2:95:29:62:ec:bb:05:83:1b:31:57:8e:4a:22:fc: 25:c5:5d:bb:98:96:c2:7a:2a:29:3e:d6:58:55:0d: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:13:78:D9:79:12:21:B5:95:E1:35:5C:AF:8E:96:2B:79:16:26:3F X509v3 Authority Key Identifier: keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:fd:e9:0d:49:a5:22:b2:a7:42:9e:dd:8f:2e:2f:4f:d1:55: bc:13:7d:71:1a:d9:7d:eb:3d:c5:0e:fd:32:c0:8c:95:b2:41: 75:e8:d0:aa:6d:a5:fe:35:cf:61:ac:93:d5:69:27:26:f2:ca: bc:de:a7:55:16:83:e5:33:33:97:cb:d6:84:04:fc:8a:01:71: 98:0d:b2:0b:a1:10:34:50:98:45:35:88:20:cd:a6:d2:5a:14: 0d:94:9b:89:6d:25:26:ab:6e:7d:0c:77:b0:fd:b3:a7:20:31: 9f:b0:40:08:15:a7:79:08:2f:2b:e7:52:9f:71:d8:8d:6d:4e: 94:5c:4d:bb:cf:c0:9b:38:20:46:78:3d:65:d8:78:e6:d6:3a: ba:5b:a5:9c:5c:8f:5f:b4:9c:c8:81:5d:d8:c0:32:df:f6:4f: 7e:a7:bf:3d:14:97:8f:f9:c0:d7:53:70:e2:c6:19:de:91:e4: 9e:b8:56:f2:f6:4c:79:05:ec:15:10:4c:b9:68:e1:71:83:2b: 5a:31:c9:9e:16:9e:f0:5c:c7:76:48:74:7b:96:cc:9b:38:9a: cf:30:b7:8e:3c:ce:c5:bf:f5:43:b0:94:51:67:91:08:ba:70: 34:7d:86:e1:7e:82:27:5e:94:f1:e1:d7:0e:5e:2c:16:7f:79: 39:a7:2d:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwp/3f3CQ+bDpQSMFU2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy ODRiYzQwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD Eyg5MTEzNzhkOTc5MTIyMWI1OTVlMTM1NWNhZjhlOTYyYjc5MTYyNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLI+JpaTcJj/ueUBHmNZAATedcdJ kI+mleszRniIPVWye4E8gYK52M4NbwkUAuGxVcN7CeGWha1+ERpyP6FeZ9Z94oiR WpJiF0a4r53uerP0LO0BEZhL4uiFw8FlT6/eaEJSW+CnEzU32zRSQ1QT3aOwupng YDyUo5WukKWLhI2+j+fBSEUEzm0cKaDyf6k+ksBudMbplcGtv7/aXhbB6W/RtQYe Ye5YgL49jBt3cBS5IFPk0y1sTeQKwlek0N3SmlgUiEbQuaGo/n37JGb4yX1h7Tz6 VRPfhz/AgE03NMPylSli7LsFgxsxV45KIvwlxV27mJbCeiopPtZYVQ1puQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJETeNl5EiG1leE1XK+Olit5FiY/MB8GA1UdIwQY MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt NmFjZDIxZDRiYWY4LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4 LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyf3pDUml IrKnQp7djy4vT9FVvBN9cRrZfes9xQ79MsCMlbJBdejQqm2l/jXPYayT1WknJvLK vN6nVRaD5TMzl8vWhAT8igFxmA2yC6EQNFCYRTWIIM2m0loUDZSbiW0lJqtufQx3 sP2zpyAxn7BACBWneQgvK+dSn3HYjW1OlFxNu8/AmzggRng9Zdh45tY6ululnFyP X7ScyIFd2MAy3/ZPfqe/PRSXj/nA11Nw4sYZ3pHknrhW8vZMeQXsFRBMuWjhcYMr WjHJnhae8FzHdkh0e5bMmziazzC3jjzOxb/1Q7CUUWeRCLpwNH2G4X6CJ16U8eHX Dl4sFn95OactZg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:14 2025 by rpki-client