This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json) Hash identifier: +QY28lR0yKOZ7Lgx2FkNORtsa/szRluOUtP0VkSoh60= Subject key identifier: E0:65:B6:9C:05:D6:0D:CC:7F:FB:9D:94:C9:49:E0:31:60:09:06:78 Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002 Certificate serial: 019AF464F62E3FB95D7E3D8F5F07B398DB06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft Manifest number: 0B22 Signing time: Sat 06 Dec 2025 16:00:48 +0000 Manifest this update: Sat 06 Dec 2025 16:00:48 +0000 Manifest next update: Sun 07 Dec 2025 16:00:48 +0000 Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: tNOkU+BIWk1ap+YMTO73cxZQ8utnjc6C3Xz2siG25Bg=) 2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f6:2e:3f:b9:5d:7e:3d:8f:5f:07:b3:98:db:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002 Validity Not Before: Dec 6 16:00:48 2025 GMT Not After : Dec 7 16:00:48 2025 GMT Subject: CN=e065b69c05d60dcc7ffb9d94c949e03160090678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c6:9e:34:d5:0b:2f:c8:68:61:55:87:d0:0b: d3:83:80:87:9e:cf:07:c9:92:db:8a:05:a1:2a:c1: 95:04:d8:d1:91:64:5a:6c:51:f5:5a:96:16:27:2c: 0f:98:be:bf:4b:d0:f3:cc:63:38:36:21:b1:53:eb: e7:6f:30:98:23:82:26:f2:53:13:25:92:fa:d3:f4: 09:74:bb:51:8a:a9:e6:c8:db:8d:ae:02:d9:4d:f8: 5e:0d:cd:18:5f:9e:50:a5:0b:da:7e:77:2e:e4:f5: 02:52:df:9e:14:3a:ed:88:77:bf:75:12:aa:72:3f: 5e:22:5e:0c:ee:b7:f4:eb:c0:80:38:77:a9:f0:22: 81:19:46:39:a8:09:7d:69:f3:43:df:41:d9:01:77: d0:b3:ef:71:f3:ba:56:50:72:69:7e:4f:b4:92:1a: c0:52:3a:79:df:cb:4f:20:3f:b5:00:9a:fc:6e:03: 49:b9:00:fe:b3:d0:89:2e:3c:10:72:d1:b5:ab:ec: 5f:14:f2:d0:0c:f6:d2:97:fa:9d:b5:61:00:b3:3e: 9b:6d:11:a6:22:cb:e2:e3:af:ef:7c:d3:35:76:6c: 8b:55:e8:3c:ba:8d:c8:ab:f0:b4:fa:18:fc:9c:9b: 6c:3a:37:7a:52:ef:3b:6d:91:0c:95:0f:22:e2:42: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:65:B6:9C:05:D6:0D:CC:7F:FB:9D:94:C9:49:E0:31:60:09:06:78 X509v3 Authority Key Identifier: keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:03:3b:79:15:99:e2:c7:60:ed:71:91:4e:8d:47:c1:21:92: 7f:83:2e:c5:96:e4:59:80:04:2e:9b:e0:2f:77:7d:9b:df:b0: 25:5c:8f:9e:c6:d8:ef:4a:5c:8c:96:2f:6b:66:9d:95:ce:fa: be:fc:4c:02:4f:3d:dc:59:94:ba:30:e1:19:fc:46:ef:c9:78: 72:3f:4e:73:c0:22:74:83:4b:79:85:6e:ca:d4:89:83:95:c2: 0e:3e:ca:7b:8c:d5:b9:85:da:2e:89:2a:f4:fb:a8:b9:01:1c: 05:9c:78:5c:f8:0b:46:e5:1f:73:6c:ba:fb:80:28:fd:77:41: 47:20:71:7b:a0:13:01:6c:b2:ee:19:d8:5e:07:80:0e:e9:4d: 5a:9e:74:bb:01:41:5c:0d:57:67:f1:91:fd:b3:0c:fb:79:49: 51:6c:28:c0:18:a5:78:d6:f1:c8:7d:4e:c8:65:8c:12:97:af: 73:e1:b7:12:02:d1:ec:96:65:00:9d:c3:25:97:e8:e5:20:4f: 76:21:7d:06:28:2d:e8:13:cd:a5:e1:4a:42:c6:22:03:19:87: 8b:a9:85:19:77:5a:1c:0e:3a:7f:f9:ad:de:e4:18:40:e2:3f: 68:ae:3d:c4:cd:af:65:82:1c:84:07:91:e4:ba:be:c5:99:cb: f0:19:a4:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPYuP7ldfj2PXwezmNsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAwMjkyYzJhMTA2MmJiMzI5ODBhM2M0NDNmZmYzODNh NDEwMDIwHhcNMjUxMjA2MTYwMDQ4WhcNMjUxMjA3MTYwMDQ4WjAzMTEwLwYDVQQD EyhlMDY1YjY5YzA1ZDYwZGNjN2ZmYjlkOTRjOTQ5ZTAzMTYwMDkwNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MaeNNULL8hoYVWH0AvTg4CHns8H yZLbigWhKsGVBNjRkWRabFH1WpYWJywPmL6/S9DzzGM4NiGxU+vnbzCYI4Im8lMT JZL60/QJdLtRiqnmyNuNrgLZTfheDc0YX55QpQvafncu5PUCUt+eFDrtiHe/dRKq cj9eIl4M7rf068CAOHep8CKBGUY5qAl9afND30HZAXfQs+9x87pWUHJpfk+0khrA Ujp538tPID+1AJr8bgNJuQD+s9CJLjwQctG1q+xfFPLQDPbSl/qdtWEAsz6bbRGm Isvi46/vfNM1dmyLVeg8uo3Iq/C0+hj8nJtsOjd6Uu87bZEMlQ8i4kImVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBltpwF1g3Mf/udlMlJ4DFgCQZ4MB8GA1UdIwQY MBaAFOCgApLCoQYrsymAo8RD//ODpBACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQt M2I2NGNjMzM2Yzc5LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQtM2I2NGNjMzM2Yzc5 LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgM7eRWZ 4sdg7XGRTo1HwSGSf4MuxZbkWYAELpvgL3d9m9+wJVyPnsbY70pcjJYva2adlc76 vvxMAk893FmUujDhGfxG78l4cj9Oc8AidINLeYVuytSJg5XCDj7Ke4zVuYXaLokq 9PuouQEcBZx4XPgLRuUfc2y6+4Ao/XdBRyBxe6ATAWyy7hnYXgeADulNWp50uwFB XA1XZ/GR/bMM+3lJUWwowBileNbxyH1OyGWMEpevc+G3EgLR7JZlAJ3DJZfo5SBP diF9Bigt6BPNpeFKQsYiAxmHi6mFGXdaHA46f/mt3uQYQOI/aK49xM2vZYIchAeR 5Lq+xZnL8BmkQg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:43:51 2025 by rpki-client