This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json) Hash identifier: qFniiT2dQMVzPmBAtGd2pDRgmROBt+xhMCmkOkqbtgE= Subject key identifier: 8E:1F:05:B5:C5:7D:CB:95:A2:49:A5:26:BE:57:08:39:41:5F:E1:CC Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90 Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790 Certificate serial: 019AF19AFF959CA6CC096519EBB6F35D123C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft Manifest number: 1348 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=) 2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: vDPLubEFhP4a0G9y08ZkQ0WZEBvwSty+KRXLA4QdpnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ff:95:9c:a6:cc:09:65:19:eb:b6:f3:5d:12:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=8e1f05b5c57dcb95a249a526be570839415fe1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:ba:13:43:97:75:7c:9a:5f:c1:ad:13:30: c5:a5:1b:b9:a6:c7:85:8e:b8:33:71:48:b5:0b:12: e0:c9:f5:6c:a3:45:10:8d:c0:76:2a:a7:2c:f8:67: cf:b5:d4:f8:51:04:cd:26:80:1a:c6:4f:0f:71:b6: a2:d3:5a:27:a1:cf:77:1f:d6:c4:6d:ed:97:90:e5: 05:ad:b1:dd:46:2e:1d:ec:b3:28:1c:f6:ba:4b:b5: 0f:a6:0e:c4:3d:1c:ef:64:c7:cb:bd:71:3d:be:c7: d9:ff:f8:54:2b:b3:7b:76:54:64:48:2e:3f:3e:01: c6:d7:24:da:f8:77:78:ac:5f:6a:e0:11:eb:b2:3f: 04:25:90:30:d5:10:ea:be:d8:0f:c3:f4:e2:89:a4: be:f1:66:87:df:d9:90:27:77:cb:6d:cc:68:d0:f6: d1:95:99:90:05:ca:f3:0c:77:8b:d6:e9:19:e3:14: 98:b5:3c:5d:2c:15:7e:70:e4:69:a0:05:77:b7:12: dc:cf:d8:6f:54:c4:c5:63:bd:f4:68:e0:d6:73:9f: ca:a4:9c:8b:9f:12:df:fc:bd:cd:4d:14:ad:0e:32: 62:26:da:36:19:de:ac:91:03:3c:f5:2a:05:18:5a: 5d:43:86:70:53:c4:65:fd:bb:aa:2b:5b:0d:12:1c: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:05:B5:C5:7D:CB:95:A2:49:A5:26:BE:57:08:39:41:5F:E1:CC X509v3 Authority Key Identifier: keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:48:9a:09:c2:6f:6c:26:27:44:96:f8:1b:cc:07:25:f7:45: df:f7:af:dd:4f:8e:36:da:3c:87:3a:e3:c7:31:9e:05:23:0b: 8a:07:10:43:c2:3e:9e:9c:d5:66:90:b2:b3:90:58:1c:98:e1: 7f:db:0c:e5:3b:f0:4c:76:cd:6b:68:64:cc:a9:c5:38:b9:c2: 57:92:62:76:4c:b7:cf:19:27:6b:b3:b5:f4:03:d1:3f:c1:4e: 94:3f:54:99:4c:3c:c2:3e:25:6a:ea:9c:1f:9b:1b:75:9e:b5: ed:af:f2:5d:8f:a7:2c:18:3e:c9:6b:58:6a:93:8b:a5:b6:31: 2f:4f:10:d3:5a:85:f2:9f:3d:a2:88:79:20:1a:01:99:91:14: 6f:45:63:34:32:5d:47:e9:7d:8e:c7:ef:3b:06:2e:23:3c:a6: ee:7d:1b:d5:c1:07:9f:de:44:66:84:f6:c8:e8:a0:ce:75:c6: 55:ed:f9:98:1e:ee:e8:99:56:8a:8d:14:03:7c:81:eb:f7:fa: 18:35:c2:6a:7f:12:df:da:90:fa:3c:14:e4:ac:47:f6:9d:c8: ac:6a:9e:74:35:1d:e3:b4:39:6b:5f:cc:f7:35:dc:99:19:e5: 47:7f:3d:4c:81:fb:69:da:ed:d6:1a:77:7b:f8:15:5c:dc:bb: 0b:39:71:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv+VnKbMCWUZ67bzXRI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZGFjMTUwODQ4MzI1ZjBmNzI1ODcwNjRmOGFiYTM3YzVm ZjM3OTAwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD Eyg4ZTFmMDViNWM1N2RjYjk1YTI0OWE1MjZiZTU3MDgzOTQxNWZlMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxge6E0OXdXyaX8GtEzDFpRu5pseF jrgzcUi1CxLgyfVso0UQjcB2Kqcs+GfPtdT4UQTNJoAaxk8Pcbai01onoc93H9bE be2XkOUFrbHdRi4d7LMoHPa6S7UPpg7EPRzvZMfLvXE9vsfZ//hUK7N7dlRkSC4/ PgHG1yTa+Hd4rF9q4BHrsj8EJZAw1RDqvtgPw/TiiaS+8WaH39mQJ3fLbcxo0PbR lZmQBcrzDHeL1ukZ4xSYtTxdLBV+cORpoAV3txLcz9hvVMTFY730aODWc5/KpJyL nxLf/L3NTRStDjJiJto2Gd6skQM89SoFGFpdQ4ZwU8Rl/buqK1sNEhxF4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4fBbXFfcuVokmlJr5XCDlBX+HMMB8GA1UdIwQY MBaAFOLawVCEgyXw9yWHBk+KujfF/zeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUt M2I5ZTNjNTNiYWIwLzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUtM2I5ZTNjNTNiYWIw LzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkiaCcJv bCYnRJb4G8wHJfdF3/ev3U+ONto8hzrjxzGeBSMLigcQQ8I+npzVZpCys5BYHJjh f9sM5TvwTHbNa2hkzKnFOLnCV5Jidky3zxkna7O19APRP8FOlD9UmUw8wj4lauqc H5sbdZ617a/yXY+nLBg+yWtYapOLpbYxL08Q01qF8p89ooh5IBoBmZEUb0VjNDJd R+l9jsfvOwYuIzym7n0b1cEHn95EZoT2yOigznXGVe35mB7u6JlWio0UA3yB6/f6 GDXCan8S39qQ+jwU5KxH9p3IrGqedDUd47Q5a1/M9zXcmRnlR389TIH7adrt1hp3 e/gVXNy7Czlx/w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:43 2025 by rpki-client