This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json) Hash identifier: XkADAFDiy8sZOBsYarakfcTpGSHGtabK4txrzfe+LnQ= Subject key identifier: 04:E4:80:60:98:E7:C0:FA:5F:A8:8E:9E:D2:A5:8D:5D:EE:32:7E:F1 Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e Certificate serial: 019AF2AD45FCEE8747BAD49DAA3B073DB620 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft Manifest number: 0DB5 Signing time: Sat 06 Dec 2025 08:00:33 +0000 Manifest this update: Sat 06 Dec 2025 08:00:33 +0000 Manifest next update: Sun 07 Dec 2025 08:00:33 +0000 Files and hashes: 1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: RGzW0Mz/LsfnZyhG7zJO8pigs1N/gQTnE54sFkKGhf8=) 2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=) 3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=) 4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:45:fc:ee:87:47:ba:d4:9d:aa:3b:07:3d:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e Validity Not Before: Dec 6 08:00:33 2025 GMT Not After : Dec 7 08:00:33 2025 GMT Subject: CN=04e4806098e7c0fa5fa88e9ed2a58d5dee327ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:af:ac:92:20:f5:04:10:93:52:9e:81:62: 7f:bf:43:34:9e:4c:67:9a:2f:9c:76:7a:41:c1:4f: d0:54:f1:a6:72:86:84:b6:c0:50:03:60:c5:4a:7c: 60:8e:eb:12:ec:19:30:5c:07:b4:48:e8:ac:25:e0: 27:08:67:7e:82:2e:6c:60:c7:1f:8f:1c:d4:4d:d6: 56:73:f6:bf:92:da:84:b2:1d:ba:63:67:7b:24:b8: e9:5e:93:e5:ec:47:b4:92:0c:83:0b:88:1b:e4:55: de:bb:81:5c:1d:7d:07:80:49:be:a6:d3:68:60:c8: e1:6a:f2:cc:b7:de:04:56:85:d1:dd:20:09:87:95: e1:cf:34:9e:f9:75:41:fa:9e:c3:4d:6b:0f:80:e4: f9:65:27:d9:8a:47:64:23:31:6d:16:20:da:29:cd: c1:9b:14:48:47:c7:bb:39:a9:c1:89:17:17:f0:9a: 9e:88:5f:7d:0a:5d:27:1c:d8:ed:cc:db:a9:81:72: a9:d6:31:af:06:fb:4b:9c:d3:52:c5:04:53:2a:48: 08:bc:0f:6b:78:1e:cd:e3:19:ca:e2:ce:2b:73:57: d9:45:c6:8c:3c:31:ef:08:51:dd:54:80:a8:30:0f: 9c:c5:1a:99:2d:c0:58:26:ca:27:a3:67:4e:29:c7: 1c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E4:80:60:98:E7:C0:FA:5F:A8:8E:9E:D2:A5:8D:5D:EE:32:7E:F1 X509v3 Authority Key Identifier: keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:15:af:c3:75:c8:26:c7:ff:cf:ed:2b:f6:e8:65:af:53:32: 68:a9:14:85:9d:57:5e:42:77:6d:e9:1e:bd:3d:df:04:48:07: aa:06:1a:6e:8e:99:30:f1:35:0b:a5:1a:b5:a4:29:82:46:f4: b6:b5:7e:a6:8a:29:e4:f1:bc:2c:af:4f:04:58:c3:58:f2:25: 71:09:2e:97:89:ae:ab:c3:62:74:f2:e6:75:92:04:e7:90:db: 88:98:ec:6e:c5:d5:16:2a:25:22:88:23:ad:72:08:a1:56:ad: 85:e5:15:52:6d:e1:8c:45:24:91:a9:24:17:25:05:62:32:d9: af:35:a2:97:d2:3c:f9:74:84:b5:e8:bc:7b:55:80:d0:09:c3: f8:ae:a8:e5:b7:20:9f:5a:bd:48:59:f5:44:51:16:7a:ae:45: 29:41:7d:2e:d9:5a:36:06:d4:19:2d:f9:62:7c:db:b8:d7:05: 01:65:4c:32:13:bc:af:9d:f3:8e:f3:ea:1e:d1:3c:c2:ea:b2: 54:d6:bb:1e:01:2f:c3:12:cc:b2:19:71:c4:93:fd:7a:70:5f: 42:8b:5e:bd:b2:bb:2d:69:cc:dc:b7:89:bb:7e:bc:62:ee:9c: 59:f8:71:9f:46:d0:a8:74:1c:94:93:37:c7:1f:f2:48:28:01: d8:10:48:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUX87odHutSdqjsHPbYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3 OTNlMmUwHhcNMjUxMjA2MDgwMDMzWhcNMjUxMjA3MDgwMDMzWjAzMTEwLwYDVQQD EygwNGU0ODA2MDk4ZTdjMGZhNWZhODhlOWVkMmE1OGQ1ZGVlMzI3ZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y6vrJIg9QQQk1KegWJ/v0M0nkxn mi+cdnpBwU/QVPGmcoaEtsBQA2DFSnxgjusS7BkwXAe0SOisJeAnCGd+gi5sYMcf jxzUTdZWc/a/ktqEsh26Y2d7JLjpXpPl7Ee0kgyDC4gb5FXeu4FcHX0HgEm+ptNo YMjhavLMt94EVoXR3SAJh5XhzzSe+XVB+p7DTWsPgOT5ZSfZikdkIzFtFiDaKc3B mxRIR8e7OanBiRcX8JqeiF99Cl0nHNjtzNupgXKp1jGvBvtLnNNSxQRTKkgIvA9r eB7N4xnK4s4rc1fZRcaMPDHvCFHdVICoMA+cxRqZLcBYJsono2dOKcccuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATkgGCY58D6X6iOntKljV3uMn7xMB8GA1UdIwQY MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt MDJlYjlhNDEyNjM3LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3 LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRWvw3XI Jsf/z+0r9uhlr1MyaKkUhZ1XXkJ3bekevT3fBEgHqgYabo6ZMPE1C6UataQpgkb0 trV+poop5PG8LK9PBFjDWPIlcQkul4muq8NidPLmdZIE55DbiJjsbsXVFiolIogj rXIIoVatheUVUm3hjEUkkakkFyUFYjLZrzWil9I8+XSEtei8e1WA0AnD+K6o5bcg n1q9SFn1RFEWeq5FKUF9LtlaNgbUGS35YnzbuNcFAWVMMhO8r53zjvPqHtE8wuqy VNa7HgEvwxLMshlxxJP9enBfQotevbK7LWnM3LeJu368Yu6cWfhxn0bQqHQclJM3 xx/ySCgB2BBIpA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:09 2025 by rpki-client