This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json) Hash identifier: fU5qnDmaSgA104f3WVQay5Te9pbthjkMtdvoS3Ys1BU= Subject key identifier: EA:F2:E3:CD:EA:05:4E:A6:C8:86:93:C6:95:0F:E3:E0:93:40:43:FE Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Certificate serial: 019AF31B4AD44E94218FFF73412051C35267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft Manifest number: 12F9 Signing time: Sat 06 Dec 2025 10:00:43 +0000 Manifest this update: Sat 06 Dec 2025 10:00:43 +0000 Manifest next update: Sun 07 Dec 2025 10:00:43 +0000 Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: jnk9eKA9vFnJiJbuqcHsPQENqRC2BjBnuJ6RvXApxcc=) 2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:4a:d4:4e:94:21:8f:ff:73:41:20:51:c3:52:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Validity Not Before: Dec 6 10:00:43 2025 GMT Not After : Dec 7 10:00:43 2025 GMT Subject: CN=eaf2e3cdea054ea6c88693c6950fe3e0934043fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:16:eb:f7:c3:17:ad:fa:f8:55:f0:73:13: 13:bd:2f:51:2d:7a:6d:ed:e2:a8:64:8a:29:df:2a: b6:23:16:e7:4f:78:6c:8f:cd:e5:8c:71:0a:f3:67: 5e:c3:57:54:ae:37:82:61:01:1f:48:bd:4f:e9:ec: 0a:03:f1:dc:22:c2:30:cf:5e:8f:f0:50:24:fa:1c: e5:a3:d2:a2:a2:0c:ae:45:91:92:8e:6f:f7:5b:09: 9e:ff:ed:b0:ee:2c:d9:fb:99:1e:f0:87:9f:7a:75: 16:f7:8b:17:52:b0:c1:91:f1:1f:e7:6e:3d:24:b6: 44:65:99:93:d4:98:59:eb:1e:d6:c7:4a:b3:c0:d9: f2:5b:55:c3:b7:a8:ff:02:6d:ef:4e:dd:0a:e3:22: 57:00:d6:f0:e1:e2:62:8c:02:80:fe:b3:3b:73:8b: 43:48:e0:a9:c5:e7:59:27:de:fb:00:6d:88:ab:1c: 19:cd:11:cb:a8:d8:e4:e9:60:f2:83:48:e7:09:82: b1:74:d1:cd:2e:ee:d1:e0:92:9c:13:23:56:f8:ab: e2:b1:a6:97:62:1a:33:de:29:b9:99:1b:ca:a0:24: 4c:55:bf:4d:69:83:1e:9d:19:8a:53:73:94:ac:2c: ee:ed:78:58:08:da:d0:6b:c1:da:61:31:48:36:ca: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F2:E3:CD:EA:05:4E:A6:C8:86:93:C6:95:0F:E3:E0:93:40:43:FE X509v3 Authority Key Identifier: keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:66:63:a4:98:16:e2:45:0d:4a:09:c4:d8:97:7e:6d:92:4f: 3d:51:62:79:30:f6:91:c4:a3:b1:95:dc:6d:f0:61:49:59:b1: 51:46:e4:bd:8c:bd:16:5a:16:da:a6:78:15:d6:24:f7:95:77: ef:de:e9:c9:7f:f6:e3:05:38:cd:4c:b3:d6:a8:d0:fb:d3:6c: 9c:b4:7a:9f:6f:c0:54:15:ed:2e:a1:d6:0c:62:dc:25:ea:51: d9:85:09:8e:d2:6f:fb:d4:bd:3f:a2:e5:61:27:f2:00:86:59: ec:5f:91:2a:97:32:49:e7:60:bc:a1:70:e2:51:38:47:18:5c: fc:0b:87:9d:c3:bc:0d:b1:83:3b:fa:e6:d2:e8:6c:c6:21:64: 6c:a1:d0:02:0e:33:e3:a3:94:8f:69:1a:e6:12:e7:f8:8e:a2: 4d:fb:f8:41:bf:95:e2:80:18:b8:1d:ee:55:28:ee:ae:16:b2: 04:e0:a3:1d:e4:92:d9:c7:68:c3:bb:f4:f2:36:59:fa:e8:bf: d1:83:34:e9:37:b8:e6:a9:9d:c9:5b:e0:6d:6f:bf:3b:60:a5: 71:69:18:f6:ea:ca:bf:81:a2:13:ca:b1:34:24:fd:f0:1c:fe: 06:9d:36:80:c7:7b:a5:78:1a:9c:fb:fc:a5:55:1f:41:68:f8: 45:db:1a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0rUTpQhj/9zQSBRw1JnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh OTgyMzEwHhcNMjUxMjA2MTAwMDQzWhcNMjUxMjA3MTAwMDQzWjAzMTEwLwYDVQQD EyhlYWYyZTNjZGVhMDU0ZWE2Yzg4NjkzYzY5NTBmZTNlMDkzNDA0M2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUwW6/fDF636+FXwcxMTvS9RLXpt 7eKoZIop3yq2IxbnT3hsj83ljHEK82dew1dUrjeCYQEfSL1P6ewKA/HcIsIwz16P 8FAk+hzlo9KiogyuRZGSjm/3Wwme/+2w7izZ+5ke8IefenUW94sXUrDBkfEf5249 JLZEZZmT1JhZ6x7Wx0qzwNnyW1XDt6j/Am3vTt0K4yJXANbw4eJijAKA/rM7c4tD SOCpxedZJ977AG2IqxwZzRHLqNjk6WDyg0jnCYKxdNHNLu7R4JKcEyNW+KvisaaX Yhoz3im5mRvKoCRMVb9NaYMenRmKU3OUrCzu7XhYCNrQa8HaYTFINsrQdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOry483qBU6myIaTxpUP4+CTQEP+MB8GA1UdIwQY MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWZjpJgW 4kUNSgnE2Jd+bZJPPVFieTD2kcSjsZXcbfBhSVmxUUbkvYy9FloW2qZ4FdYk95V3 797pyX/24wU4zUyz1qjQ+9NsnLR6n2/AVBXtLqHWDGLcJepR2YUJjtJv+9S9P6Ll YSfyAIZZ7F+RKpcySedgvKFw4lE4Rxhc/AuHncO8DbGDO/rm0uhsxiFkbKHQAg4z 46OUj2ka5hLn+I6iTfv4Qb+V4oAYuB3uVSjurhayBOCjHeSS2cdow7v08jZZ+ui/ 0YM06Te45qmdyVvgbW+/O2ClcWkY9urKv4GiE8qxNCT98Bz+Bp02gMd7pXganPv8 pVUfQWj4RdsadQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:29 2025 by rpki-client