This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json) Hash identifier: lIoZ5H5HkfVlly5ia1eZBjnkTZW2ZFoB5dacb3isags= Subject key identifier: 02:C2:C5:F8:43:E2:E2:DD:05:D2:6A:49:27:B5:02:70:D4:90:CD:B4 Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b Certificate serial: 019AF509CBC05EF0C3F7E302377D13D7D110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft Manifest number: 0E75 Signing time: Sat 06 Dec 2025 19:00:51 +0000 Manifest this update: Sat 06 Dec 2025 19:00:51 +0000 Manifest next update: Sun 07 Dec 2025 19:00:51 +0000 Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: Eb1HJVnycRN3W/77L9n58Rdwo+uyugo+FsTSwBZ4dyo=) 2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:cb:c0:5e:f0:c3:f7:e3:02:37:7d:13:d7:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b Validity Not Before: Dec 6 19:00:51 2025 GMT Not After : Dec 7 19:00:51 2025 GMT Subject: CN=02c2c5f843e2e2dd05d26a4927b50270d490cdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:b1:a3:f2:f4:38:77:f1:02:cb:b9:4c:60: fe:ce:7c:e2:26:b4:35:b9:58:ad:6d:70:84:5f:20: f8:98:63:db:77:a6:bb:76:20:0a:19:73:40:db:96: 7e:a7:1f:1b:41:19:80:a7:bf:df:de:93:74:68:d5: 70:ab:2a:54:ff:04:93:5a:88:0f:14:f0:d3:b4:3e: 6f:b4:d5:56:2e:5d:57:b7:cb:58:f8:2b:57:c6:4c: 4c:eb:57:80:04:79:c4:30:63:1d:69:f4:2d:f9:e4: 4b:6b:9a:fb:5b:85:83:54:bb:a9:ad:41:ba:51:e4: 30:a8:cf:e5:3a:e2:bd:23:06:dd:2e:2c:5b:21:80: 99:da:d8:25:c1:10:28:5b:dc:ab:ba:b9:fd:bf:0e: af:96:93:57:6a:18:b1:a0:54:c9:04:cb:b3:64:b9: 46:1a:42:00:f3:84:00:e0:6d:32:9a:18:79:af:47: 9f:d3:81:28:5f:d5:1f:59:8b:1e:9a:ca:84:38:70: aa:7c:9d:22:f8:32:61:b2:7f:07:48:96:5d:62:02: 00:86:ac:e2:ea:84:a7:a8:c2:53:00:96:a4:08:83: a1:9f:7b:33:a7:82:59:f4:b6:e3:91:e0:0f:7d:1e: d0:a3:d6:5e:d5:64:6c:37:0d:ce:f7:95:a2:82:9c: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C2:C5:F8:43:E2:E2:DD:05:D2:6A:49:27:B5:02:70:D4:90:CD:B4 X509v3 Authority Key Identifier: keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:da:40:1a:7c:fc:74:c7:75:3a:e9:2b:f1:9b:4f:ec:1f:10: 38:c5:ca:de:61:98:86:f2:f1:e6:51:f1:be:a4:45:2f:db:53: 94:f7:39:a7:bb:02:fe:d7:2e:01:b9:e3:ab:84:59:69:47:36: 50:14:f4:de:6b:a2:04:88:ce:4d:fd:95:b0:bd:d5:54:4e:5b: a9:6d:dc:66:5e:a9:3f:e3:01:0c:6b:2f:83:17:5d:da:62:17: f3:56:95:85:4c:39:87:94:5c:c0:43:40:ea:e7:3c:1e:77:84: c3:4a:96:25:86:c9:41:2a:f9:32:96:02:cd:df:34:10:57:c2: 5d:a9:b0:99:0c:bb:5c:87:8c:20:f7:a7:33:a3:26:8f:58:68: e9:f8:32:4a:43:eb:18:bc:cf:9e:2d:36:e7:66:b4:8a:83:52: be:bf:d5:6a:99:60:7d:47:8a:d3:45:c6:4c:5f:3f:b1:58:3c: 21:5e:5c:32:11:b9:b2:1a:03:29:27:89:8c:40:3f:48:f3:0a: 2d:b5:34:c5:fb:ce:30:0e:f2:76:be:18:18:90:df:d4:2e:c3: 3c:a1:67:26:13:e2:32:55:2d:ab:43:af:bb:eb:2c:56:da:5e: 38:4d:1e:8b:10:8e:0f:f7:05:e1:57:66:f2:40:fa:62:4f:43: e2:b2:a1:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcvAXvDD9+MCN30T19EQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMGUzODA1YTFiNGY1YjYxY2ZlNzMwMTBlODM4YzJmMGQy NWI0NGIwHhcNMjUxMjA2MTkwMDUxWhcNMjUxMjA3MTkwMDUxWjAzMTEwLwYDVQQD EygwMmMyYzVmODQzZTJlMmRkMDVkMjZhNDkyN2I1MDI3MGQ0OTBjZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj+xo/L0OHfxAsu5TGD+znziJrQ1 uVitbXCEXyD4mGPbd6a7diAKGXNA25Z+px8bQRmAp7/f3pN0aNVwqypU/wSTWogP FPDTtD5vtNVWLl1Xt8tY+CtXxkxM61eABHnEMGMdafQt+eRLa5r7W4WDVLuprUG6 UeQwqM/lOuK9IwbdLixbIYCZ2tglwRAoW9yrurn9vw6vlpNXahixoFTJBMuzZLlG GkIA84QA4G0ymhh5r0ef04EoX9UfWYsemsqEOHCqfJ0i+DJhsn8HSJZdYgIAhqzi 6oSnqMJTAJakCIOhn3szp4JZ9LbjkeAPfR7Qo9Ze1WRsNw3O95WigpwB5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALCxfhD4uLdBdJqSSe1AnDUkM20MB8GA1UdIwQY MBaAFOIOOAWhtPW2HP5zAQ6DjC8NJbRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEt YmQzZTdhZGRlOGRlLzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEtYmQzZTdhZGRlOGRl LzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdpAGnz8 dMd1Oukr8ZtP7B8QOMXK3mGYhvLx5lHxvqRFL9tTlPc5p7sC/tcuAbnjq4RZaUc2 UBT03muiBIjOTf2VsL3VVE5bqW3cZl6pP+MBDGsvgxdd2mIX81aVhUw5h5RcwENA 6uc8HneEw0qWJYbJQSr5MpYCzd80EFfCXamwmQy7XIeMIPenM6Mmj1ho6fgySkPr GLzPni0252a0ioNSvr/VaplgfUeK00XGTF8/sVg8IV5cMhG5shoDKSeJjEA/SPMK LbU0xfvOMA7ydr4YGJDf1C7DPKFnJhPiMlUtq0Ovu+ssVtpeOE0eixCOD/cF4Vdm 8kD6Yk9D4rKhxw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:10 2025 by rpki-client