This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json) Hash identifier: 5tYYsbZGxnp6yj2Tzt1mtwH0OZFENes+btMX5Cx3Ou8= Subject key identifier: FB:F5:57:4A:1A:88:2A:44:EB:4B:22:ED:31:3C:A8:B1:26:12:61:EF Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2 Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2 Certificate serial: 019AF38A0B79502B9D51D88C9F2C4C66A56B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 12:01:41 +0000 Manifest this update: Sat 06 Dec 2025 12:01:41 +0000 Manifest next update: Sun 07 Dec 2025 12:01:41 +0000 Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: 9sLbumtVBxC7lC6IXauUyrYPqQxMXQODUDIAIV0oKC4=) 2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=) 3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:0b:79:50:2b:9d:51:d8:8c:9f:2c:4c:66:a5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2 Validity Not Before: Dec 6 12:01:41 2025 GMT Not After : Dec 7 12:01:41 2025 GMT Subject: CN=fbf5574a1a882a44eb4b22ed313ca8b1261261ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:99:1d:c6:bd:31:70:0f:54:b1:e0:6b:16: a3:94:db:c1:98:29:4d:9d:5d:5c:d9:b1:b4:77:d5: 84:c1:08:bf:1d:4b:0c:46:a5:f5:c4:40:26:cc:76: 1f:23:fa:e4:4a:d4:e7:03:e1:23:10:86:43:37:fc: 37:46:0e:f4:71:1f:1a:80:20:e9:4e:81:6a:f8:78: aa:54:7c:5a:86:69:a5:09:ef:49:2c:f5:8a:bf:06: 40:a1:41:6f:c0:ec:a8:0c:56:92:9d:29:a0:d8:00: 1c:b5:61:b3:1f:43:9b:97:26:69:b0:6c:4c:96:3d: 32:0b:16:33:fb:1e:c6:c4:a5:8b:37:c2:e1:88:a3: 3a:53:98:6b:d2:af:61:21:2b:78:63:e3:6f:c7:54: a5:91:b3:2e:de:30:a1:51:15:60:5d:92:ba:9d:b6: 36:39:8f:1a:d0:25:7f:d4:a9:73:01:03:f1:75:33: 3c:c2:26:27:dd:23:a5:ae:5a:14:04:40:01:e4:1b: 2e:da:ed:09:28:39:89:ce:36:4f:ac:14:ef:a9:78: 21:ea:0d:24:f2:61:f2:2f:19:f5:96:ad:e7:0d:c9: 6e:9c:42:6c:f8:9c:2e:43:34:62:17:ee:81:54:e2: 15:04:60:21:25:95:6c:4e:bf:f9:57:6b:b0:34:fc: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F5:57:4A:1A:88:2A:44:EB:4B:22:ED:31:3C:A8:B1:26:12:61:EF X509v3 Authority Key Identifier: keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:11:90:49:d3:e2:72:3d:64:44:c0:c1:37:5c:92:27:11:a5: 58:3b:05:ec:9c:61:9b:b0:fc:87:07:ed:63:f5:ef:76:8b:b6: 39:57:38:7d:15:8b:92:38:5d:37:17:a1:53:9f:70:82:0c:d8: d9:7f:12:06:0d:7a:0e:03:d8:7e:09:31:90:fc:bb:68:3b:01: c4:02:6d:bb:03:43:9b:94:f5:91:06:ab:65:06:af:30:4b:f0: e5:89:75:94:45:3a:56:1c:12:20:f1:ff:9a:b8:7e:22:d6:76: 09:7e:3e:d3:76:d0:7f:99:be:45:67:64:cd:a1:b1:ea:63:52: 3f:c7:af:f8:85:8b:fc:7b:07:78:1d:d0:34:4c:21:56:1b:86: 47:65:64:b4:ed:f3:35:4f:01:af:11:78:17:42:56:cd:08:40: 31:7f:1b:23:d7:7d:ba:d2:da:c3:a2:ae:78:32:bc:70:49:82: 83:62:59:aa:73:c9:a1:dd:50:f1:20:d4:b7:ca:22:72:3e:76: 3c:61:13:fd:f9:f0:44:22:a5:1d:dc:84:97:88:3c:09:dd:9a: 72:ea:c1:b5:5e:17:16:e0:52:48:d8:c2:7d:0e:9d:f3:e8:4d: fc:0c:cd:1e:a7:a2:cd:18:1e:88:7c:e7:54:f7:62:fc:77:c9: ef:d3:fa:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigt5UCudUdiMnyxMZqVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDU0YzQ1NmNlNjhiYThmZWNhZDU0MmFhYjk2MTBiMWVj YzEyZTIwHhcNMjUxMjA2MTIwMTQxWhcNMjUxMjA3MTIwMTQxWjAzMTEwLwYDVQQD EyhmYmY1NTc0YTFhODgyYTQ0ZWI0YjIyZWQzMTNjYThiMTI2MTI2MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6uZHca9MXAPVLHgaxajlNvBmClN nV1c2bG0d9WEwQi/HUsMRqX1xEAmzHYfI/rkStTnA+EjEIZDN/w3Rg70cR8agCDp ToFq+HiqVHxahmmlCe9JLPWKvwZAoUFvwOyoDFaSnSmg2AActWGzH0OblyZpsGxM lj0yCxYz+x7GxKWLN8LhiKM6U5hr0q9hISt4Y+Nvx1SlkbMu3jChURVgXZK6nbY2 OY8a0CV/1KlzAQPxdTM8wiYn3SOlrloUBEAB5Bsu2u0JKDmJzjZPrBTvqXgh6g0k 8mHyLxn1lq3nDclunEJs+JwuQzRiF+6BVOIVBGAhJZVsTr/5V2uwNPyYaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv1V0oaiCpE60si7TE8qLEmEmHvMB8GA1UdIwQY MBaAFOJFTEVs5ouo/srVQqq5YQsezBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQt OWY5N2IwZmM0ODMyLzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQtOWY5N2IwZmM0ODMy LzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghGQSdPi cj1kRMDBN1ySJxGlWDsF7Jxhm7D8hwftY/Xvdou2OVc4fRWLkjhdNxehU59wggzY 2X8SBg16DgPYfgkxkPy7aDsBxAJtuwNDm5T1kQarZQavMEvw5Yl1lEU6VhwSIPH/ mrh+ItZ2CX4+03bQf5m+RWdkzaGx6mNSP8ev+IWL/HsHeB3QNEwhVhuGR2VktO3z NU8BrxF4F0JWzQhAMX8bI9d9utLaw6KueDK8cEmCg2JZqnPJod1Q8SDUt8oicj52 PGET/fnwRCKlHdyEl4g8Cd2acurBtV4XFuBSSNjCfQ6d8+hN/AzNHqeizRgeiHzn VPdi/HfJ79P6vA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:53 2025 by rpki-client