This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json) Hash identifier: 3R/Ugq9z+tvhIBq3v7vWdGHssQozkVOyzqM6b6nTjlg= Subject key identifier: 22:72:66:3A:3B:12:3B:13:14:81:93:9A:E9:1B:3A:42:AE:72:EB:1E Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc Certificate serial: 019AF12EDAB713BDB49B52C3A5C224EA3071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft Manifest number: 09C8 Signing time: Sat 06 Dec 2025 01:02:50 +0000 Manifest this update: Sat 06 Dec 2025 01:02:50 +0000 Manifest next update: Sun 07 Dec 2025 01:02:50 +0000 Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: 4POpWcbpqkaeTZ5wPI0zAt2VazJQpzckm7o23H4UEVY=) 2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:da:b7:13:bd:b4:9b:52:c3:a5:c2:24:ea:30:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc Validity Not Before: Dec 6 01:02:50 2025 GMT Not After : Dec 7 01:02:50 2025 GMT Subject: CN=2272663a3b123b131481939ae91b3a42ae72eb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:3d:db:a2:8d:4d:5a:f9:d0:06:b5:50:0f: 1e:67:78:9a:75:68:09:9d:7f:63:ff:ec:b5:a2:67: 71:ad:f2:51:68:de:d9:38:d9:a9:da:c8:a3:65:53: 98:a0:0d:80:c3:dc:cc:39:91:3f:37:24:5b:04:7a: 22:73:e9:6a:ed:0a:9c:55:77:e1:ca:66:dc:0b:7a: 72:c1:ae:89:ad:43:e4:f7:2c:c1:e4:4d:13:ef:be: 98:6e:07:2b:88:6b:01:13:af:67:52:9c:d0:57:3f: 0c:8e:3d:d3:ec:8a:7f:10:c5:2f:3f:ec:7e:20:94: b1:82:9b:71:41:0b:3c:0f:29:2a:20:c5:f9:18:2c: 10:ec:4b:d7:cb:8c:04:bf:4b:62:c6:e1:fc:35:e3: 32:e8:de:1a:39:39:69:24:3d:70:c5:09:ca:3d:b7: 2a:ea:91:43:7a:ac:56:1b:59:3d:26:6c:6b:d3:f6: 7a:12:f1:d0:77:12:1d:36:a8:70:3c:7a:79:81:d1: 50:fb:ec:41:e8:a4:7e:ae:24:bd:c6:58:ec:89:ff: fa:83:61:36:5d:61:7f:43:2c:2d:42:7e:ad:a5:de: e9:6b:b3:76:e3:a7:0b:5d:bb:e9:1b:0d:5a:ab:89: d7:12:aa:5c:e9:5c:6e:4d:ce:07:bb:e7:5b:b3:58: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:66:3A:3B:12:3B:13:14:81:93:9A:E9:1B:3A:42:AE:72:EB:1E X509v3 Authority Key Identifier: keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0a:be:ae:9b:25:26:aa:e4:cf:ee:e6:7d:70:85:29:b8:a1: 03:34:5d:b0:0b:c5:fe:01:1c:06:26:59:41:4b:37:ea:d6:72: ba:7e:4f:d1:11:4d:35:24:1a:80:26:a1:fe:33:97:d2:f8:57: 64:7c:59:dc:1b:9a:44:30:48:a3:e6:03:24:d8:06:21:9f:d6: b9:51:64:bf:2a:21:a5:03:2e:7e:ed:04:6e:a7:78:8c:0f:c8: 7f:64:bd:5d:90:d6:e5:56:0b:e4:cf:69:65:94:3f:e3:12:61: 0a:58:11:7b:01:14:98:ab:69:09:4a:87:70:12:ee:4d:a7:0a: 43:e3:f5:b8:ed:19:0c:8d:2d:cc:dd:5e:f0:ee:49:11:6c:1a: 09:35:b4:63:87:73:52:ec:99:20:3b:59:6b:2d:77:a3:a0:95: fb:ef:c7:94:b5:26:3f:22:bf:06:d5:3a:65:e7:4f:29:56:7c: 2f:7f:b9:02:79:bb:bf:42:8d:01:df:33:bb:59:1c:ae:8e:8e: 7c:02:37:44:b3:80:b9:3e:d6:8d:79:09:c1:2e:a8:f4:66:c8: 95:99:03:b8:f0:27:c8:79:a9:08:4c:39:12:9b:15:dc:2d:43: ba:ce:fe:52:a5:67:88:ec:6f:92:c1:df:21:c0:35:99:e3:81: 16:84:a3:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtq3E720m1LDpcIk6jBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxN2ExYTYyMjQ4ZGY4NzkxMzNjMDczYWQ1NjJhZDAzYTJi OTJmZGMwHhcNMjUxMjA2MDEwMjUwWhcNMjUxMjA3MDEwMjUwWjAzMTEwLwYDVQQD EygyMjcyNjYzYTNiMTIzYjEzMTQ4MTkzOWFlOTFiM2E0MmFlNzJlYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBA926KNTVr50Aa1UA8eZ3iadWgJ nX9j/+y1omdxrfJRaN7ZONmp2sijZVOYoA2Aw9zMOZE/NyRbBHoic+lq7QqcVXfh ymbcC3pywa6JrUPk9yzB5E0T776YbgcriGsBE69nUpzQVz8Mjj3T7Ip/EMUvP+x+ IJSxgptxQQs8DykqIMX5GCwQ7EvXy4wEv0tixuH8NeMy6N4aOTlpJD1wxQnKPbcq 6pFDeqxWG1k9Jmxr0/Z6EvHQdxIdNqhwPHp5gdFQ++xB6KR+riS9xljsif/6g2E2 XWF/QywtQn6tpd7pa7N246cLXbvpGw1aq4nXEqpc6VxuTc4Hu+dbs1jIhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJyZjo7EjsTFIGTmukbOkKucuseMB8GA1UdIwQY MBaAFOF6GmIkjfh5EzwHOtVirQOiuS/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2Qt NWZkYzg3ZTZkMmEwLzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2QtNWZkYzg3ZTZkMmEw LzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgq+rpsl Jqrkz+7mfXCFKbihAzRdsAvF/gEcBiZZQUs36tZyun5P0RFNNSQagCah/jOX0vhX ZHxZ3BuaRDBIo+YDJNgGIZ/WuVFkvyohpQMufu0Ebqd4jA/If2S9XZDW5VYL5M9p ZZQ/4xJhClgRewEUmKtpCUqHcBLuTacKQ+P1uO0ZDI0tzN1e8O5JEWwaCTW0Y4dz UuyZIDtZay13o6CV++/HlLUmPyK/BtU6ZedPKVZ8L3+5Anm7v0KNAd8zu1kcro6O fAI3RLOAuT7WjXkJwS6o9GbIlZkDuPAnyHmpCEw5EpsV3C1Dus7+UqVniOxvksHf IcA1meOBFoSjNg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:34 2025 by rpki-client