This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json) Hash identifier: L/EOBXxx7+AMAQ9I27bHPksfStfmxwN/gnsdFh32FuQ= Subject key identifier: A6:63:47:08:92:5F:FE:D8:B7:F1:0D:F0:40:60:D3:54:41:27:EB:89 Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Certificate serial: 019AF2AD62101DC0DA204685490A0A0B320A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft Manifest number: 01A4 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: lc+97//sWZ20f3nJNe7ip6UNR3s39CHOe+5+QbNhGpY=) 2: L18LfUdDFMe4UbMpcGQhNbyBBFA.roa (hash: qvvnhzQads/EsFKpKYrOSE0oyBJYg5HQKOC8BoIIN9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:62:10:1d:c0:da:20:46:85:49:0a:0a:0b:32:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=a6634708925ffed8b7f10df04060d3544127eb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:8c:4a:2f:9a:3b:0e:22:8d:3e:01:a9:d4: 27:8e:41:e8:42:91:6d:8f:f3:39:02:4c:72:0d:8b: 11:93:c7:30:ae:94:c8:3f:a9:c3:68:8c:be:75:40: e1:2f:be:d1:d1:6e:3c:94:10:7c:ec:b5:6f:98:40: 07:3d:35:10:c3:0b:7c:4d:95:f1:8c:06:6e:50:b2: 53:77:67:2c:52:ad:20:01:fd:df:e6:e9:36:cb:f7: 21:81:4e:fa:3d:b3:cd:a4:65:55:8c:58:61:73:35: d7:91:c5:ba:64:50:3f:fb:2d:3b:d0:2d:83:68:ea: 44:e9:12:79:75:4b:cb:7b:c3:85:89:a6:31:4e:11: 37:5f:54:40:8b:c5:9d:ac:42:78:36:a1:51:fa:3a: f2:96:75:f5:d1:e1:62:40:5b:3d:f6:1c:46:ee:2b: 53:cf:13:6f:df:7c:16:c6:80:1c:45:7a:a8:12:5d: d1:dd:dd:87:5b:68:44:ce:91:36:61:45:6b:ae:3f: e3:75:fe:2d:50:25:fb:48:4f:ef:24:03:56:b2:62: da:7c:70:e6:22:7b:30:78:eb:be:1f:05:a8:1c:1f: 6d:22:ad:a2:eb:1f:74:f7:4d:92:3e:a7:03:1a:51: 0d:15:b7:ef:1f:82:6f:e4:e7:13:e5:ff:c3:46:38: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:63:47:08:92:5F:FE:D8:B7:F1:0D:F0:40:60:D3:54:41:27:EB:89 X509v3 Authority Key Identifier: keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:52:58:80:dd:5a:05:a7:00:ac:37:a2:ea:d9:4a:4b:fd:4e: 26:29:9a:8c:02:d3:59:fc:ae:d9:c0:36:fe:c7:36:df:d9:d5: a5:d9:e4:2e:a1:6e:31:01:7a:f7:73:36:fd:63:ab:0c:1e:47: 60:22:7c:b9:00:41:8b:bd:30:72:e5:8e:f5:ea:b2:76:d4:2f: 18:49:54:04:00:b1:e6:f9:fc:5b:99:2b:9b:0f:ed:be:35:b4: a3:b0:64:29:f0:c0:84:17:94:67:b3:1a:d0:30:ef:d1:97:74: 88:b3:cc:2d:99:0e:1f:e1:4f:61:79:94:02:55:fb:92:dc:72: 47:ad:f0:1f:22:4e:f9:de:43:bd:26:88:55:66:f4:21:31:f8: 94:f7:33:a1:65:70:93:2c:51:96:9b:cb:8f:62:13:8f:6a:d4: 04:7b:91:e6:3d:ca:2f:1c:0d:b9:e0:7b:44:f3:f2:1b:4e:6a: 76:99:97:c0:2b:24:99:e9:20:97:6b:18:be:55:80:0c:66:20: d6:a0:77:1c:99:02:1d:58:c7:1e:5a:d3:ab:89:3f:2c:e0:bf: cf:9b:f7:be:e0:85:c9:3c:24:3b:07:f0:96:2b:26:29:ee:09: 84:74:48:71:a7:fe:c7:37:90:f3:78:53:f1:52:60:22:cd:14: 67:70:57:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWIQHcDaIEaFSQoKCzIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZTFiZjUzZWJlZDdiNTQ4MDg2ZjRhZjY4MDM0NTQwZjIw YTc4ZWMwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD EyhhNjYzNDcwODkyNWZmZWQ4YjdmMTBkZjA0MDYwZDM1NDQxMjdlYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO2MSi+aOw4ijT4BqdQnjkHoQpFt j/M5AkxyDYsRk8cwrpTIP6nDaIy+dUDhL77R0W48lBB87LVvmEAHPTUQwwt8TZXx jAZuULJTd2csUq0gAf3f5uk2y/chgU76PbPNpGVVjFhhczXXkcW6ZFA/+y070C2D aOpE6RJ5dUvLe8OFiaYxThE3X1RAi8WdrEJ4NqFR+jrylnX10eFiQFs99hxG7itT zxNv33wWxoAcRXqoEl3R3d2HW2hEzpE2YUVrrj/jdf4tUCX7SE/vJANWsmLafHDm InsweOu+HwWoHB9tIq2i6x90902SPqcDGlENFbfvH4Jv5OcT5f/DRjhu/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZjRwiSX/7Yt/EN8EBg01RBJ+uJMB8GA1UdIwQY MBaAFODhv1Pr7XtUgIb0r2gDRUDyCnjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUt MmM5Njc5YWNlOWIxLzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUtMmM5Njc5YWNlOWIx LzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1JYgN1a BacArDei6tlKS/1OJimajALTWfyu2cA2/sc239nVpdnkLqFuMQF693M2/WOrDB5H YCJ8uQBBi70wcuWO9eqydtQvGElUBACx5vn8W5krmw/tvjW0o7BkKfDAhBeUZ7Ma 0DDv0Zd0iLPMLZkOH+FPYXmUAlX7ktxyR63wHyJO+d5DvSaIVWb0ITH4lPczoWVw kyxRlpvLj2ITj2rUBHuR5j3KLxwNueB7RPPyG05qdpmXwCskmekgl2sYvlWADGYg 1qB3HJkCHVjHHlrTq4k/LOC/z5v3vuCFyTwkOwfwlismKe4JhHRIcaf+xzeQ83hT 8VJgIs0UZ3BXqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:35 2025 by rpki-client