This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json) Hash identifier: bz5ALKCUka4FkmtpBLvsIpVov3PT5CETN0MwLdflI0g= Subject key identifier: C3:91:A3:F4:59:13:B2:33:B6:9E:23:2D:C6:4E:C4:D6:9E:EB:8E:58 Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23 Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323 Certificate serial: 019AF1D2223BEAAC6707AA39AF2190009CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft Manifest number: 0EFA Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: B6o3ZrxnmUVwkjmjdSla3OcPr73E9cC/INVh90PiPWw=) 2: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (hash: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:22:3b:ea:ac:67:07:aa:39:af:21:90:00:9c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323 Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=c391a3f45913b233b69e232dc64ec4d69eeb8e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:a7:c1:19:a0:02:78:0b:03:c9:6d:55:0d: f5:8f:30:59:71:dd:90:51:bb:7a:37:35:de:44:bc: 6a:57:0d:d5:a2:1c:cb:77:c4:32:21:0e:87:c8:78: 82:7c:51:36:b4:54:d9:eb:dc:e3:18:1e:21:e0:5d: 6b:3c:ca:24:b9:d1:4e:c2:5f:9d:f8:3b:dd:23:b8: 54:95:59:d3:00:ea:e6:3d:f1:d1:2b:04:92:cb:0f: 7e:36:ee:cb:11:23:3c:f7:d7:e6:b2:92:3a:5d:0a: 57:04:58:b7:6d:59:45:c3:6d:69:39:d9:5c:7a:5f: 1d:bf:04:54:fa:a1:47:30:ac:51:6a:69:b6:70:24: cb:3f:32:ad:a8:ba:98:16:c1:0e:99:2d:82:3e:e3: 47:b7:b6:8e:05:f5:eb:05:fc:11:84:24:c1:5d:72: 54:c1:7c:db:6c:2c:0d:5c:94:06:6b:ea:5a:7b:3d: 5f:a0:f8:77:af:e0:75:30:f1:fb:b6:ea:c5:9d:dc: 8f:74:80:49:63:b6:bc:87:32:bd:8c:7b:6e:60:f6: 5c:87:5f:d7:22:26:f8:22:87:79:36:00:2a:c9:e9: b1:53:c7:af:9a:05:95:eb:69:82:ff:b1:61:13:32: f6:e4:4b:bb:98:88:39:78:71:61:b3:63:9c:9c:35: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:91:A3:F4:59:13:B2:33:B6:9E:23:2D:C6:4E:C4:D6:9E:EB:8E:58 X509v3 Authority Key Identifier: keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a0:b5:df:88:b5:19:d3:b2:5b:c1:dd:75:fa:ae:24:96:0f: fe:30:47:de:29:d8:db:9d:4b:71:41:14:0c:e8:a7:a9:60:0e: 2a:f8:a1:00:72:39:48:dd:dc:c7:88:78:7a:04:87:a1:69:c5: e3:6b:27:aa:4f:23:5c:6f:0d:81:a0:6c:9f:85:65:3e:7b:1a: 54:e0:85:f9:89:8d:a1:07:7d:e9:0f:9c:8b:27:80:24:48:f9: 1b:87:ae:c2:7d:8a:01:2c:cb:1d:09:17:58:96:93:a3:31:4f: 16:dc:9e:f8:ef:cf:e0:fb:be:e6:3a:ab:cd:3e:8a:10:a4:87: 8a:a1:1d:36:29:61:17:24:df:4e:bd:64:4e:82:b9:22:07:aa: a1:76:6e:3d:69:02:03:76:69:95:ac:34:37:18:49:1a:c4:b2: 8f:36:29:24:85:d0:e1:f6:1a:b8:7f:39:84:aa:17:fa:22:d9: 9c:04:e3:89:44:56:d9:0c:eb:84:b5:25:38:e9:64:f5:06:63: c2:94:9a:ff:59:dd:71:af:a8:1b:d9:ff:69:69:b8:af:fc:65: 2a:5a:d8:25:ec:18:ed:de:0d:92:3b:dd:0d:33:8a:16:da:fb: 39:52:94:e0:d5:78:8c:79:98:30:a3:92:c9:2e:7e:56:2c:ac: 70:04:7f:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iI76qxnB6o5ryGQAJzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGEzMjI3OGNlN2I0Y2IyMDVkZmNjYWQ3ODYwMTRhM2Iw YWUzMjMwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD EyhjMzkxYTNmNDU5MTNiMjMzYjY5ZTIzMmRjNjRlYzRkNjllZWI4ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq+nwRmgAngLA8ltVQ31jzBZcd2Q Ubt6NzXeRLxqVw3VohzLd8QyIQ6HyHiCfFE2tFTZ69zjGB4h4F1rPMokudFOwl+d +DvdI7hUlVnTAOrmPfHRKwSSyw9+Nu7LESM899fmspI6XQpXBFi3bVlFw21pOdlc el8dvwRU+qFHMKxRamm2cCTLPzKtqLqYFsEOmS2CPuNHt7aOBfXrBfwRhCTBXXJU wXzbbCwNXJQGa+paez1foPh3r+B1MPH7turFndyPdIBJY7a8hzK9jHtuYPZch1/X Iib4Iod5NgAqyemxU8evmgWV62mC/7FhEzL25Eu7mIg5eHFhs2OcnDUwCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMORo/RZE7Iztp4jLcZOxNae645YMB8GA1UdIwQY MBaAFOJKMieM57TLIF38yteGAUo7CuMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjct NzdhYjA1ZTBjZjYyLzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjctNzdhYjA1ZTBjZjYy LzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6C134i1 GdOyW8HddfquJJYP/jBH3inY251LcUEUDOinqWAOKvihAHI5SN3cx4h4egSHoWnF 42snqk8jXG8NgaBsn4VlPnsaVOCF+YmNoQd96Q+ciyeAJEj5G4euwn2KASzLHQkX WJaTozFPFtye+O/P4Pu+5jqrzT6KEKSHiqEdNilhFyTfTr1kToK5IgeqoXZuPWkC A3Zplaw0NxhJGsSyjzYpJIXQ4fYauH85hKoX+iLZnATjiURW2QzrhLUlOOlk9QZj wpSa/1ndca+oG9n/aWm4r/xlKlrYJewY7d4NkjvdDTOKFtr7OVKU4NV4jHmYMKOS yS5+ViyscAR/Ew== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:22 2025 by rpki-client