This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json) Hash identifier: GXW3DV3489+HvdgR4jm4p+ITxmVz29NnyaPP8czPUbI= Subject key identifier: 04:6D:8E:8D:03:90:BB:E5:C1:0F:1F:A2:F4:EE:C5:41:0C:BC:5A:40 Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d Certificate serial: 019AF50A19903B60D4C85681B71FA82787DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft Manifest number: 1736 Signing time: Sat 06 Dec 2025 19:01:11 +0000 Manifest this update: Sat 06 Dec 2025 19:01:11 +0000 Manifest next update: Sun 07 Dec 2025 19:01:11 +0000 Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: CT5RoQ8ttR6AOqecsFeujJajQsp6HaG2J2RQvZoKINQ=) 2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:19:90:3b:60:d4:c8:56:81:b7:1f:a8:27:87:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d Validity Not Before: Dec 6 19:01:11 2025 GMT Not After : Dec 7 19:01:11 2025 GMT Subject: CN=046d8e8d0390bbe5c10f1fa2f4eec5410cbc5a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:3d:f8:49:65:0b:2f:61:09:b2:4e:83:96:d3: 66:d6:de:50:a5:0d:fe:fd:e9:c8:01:65:56:45:79: 86:5c:a6:72:de:9d:f3:1b:e9:44:9b:e6:d8:f6:29: a3:06:da:ec:7d:81:78:37:d4:1a:d1:48:8f:1e:60: cc:3e:9f:2d:1f:b4:3c:3a:3d:5f:bd:db:33:5d:06: 4c:78:63:7a:a8:df:93:af:a6:1c:df:dd:4c:d2:e2: 9a:52:18:49:68:4e:7d:99:48:65:fc:b2:43:65:d5: 15:75:54:f4:64:dc:cb:7e:e5:7c:3f:7b:40:7a:e7: 46:b3:de:74:c3:7d:68:62:6b:42:b8:c6:9b:86:08: be:ef:fc:1f:23:6c:d3:72:5e:08:6f:82:11:99:ff: 9c:e1:b8:c6:8c:93:f2:a7:ab:2d:be:58:62:81:74: a7:71:c7:d3:75:59:b2:e6:09:ed:c1:4a:d4:8e:2f: 5d:21:ee:14:bf:1b:a2:5b:a4:5a:6a:de:eb:22:e7: 80:0a:ac:65:4c:a2:18:2a:a2:41:af:c0:34:20:29: d2:f4:7d:4a:9f:64:a5:d8:c0:0c:d3:cf:fe:08:da: f9:37:b4:2a:6d:cf:cc:1c:68:a2:82:a7:47:ec:5c: 41:97:45:cd:05:2f:d5:59:06:6a:61:8d:99:43:d1: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6D:8E:8D:03:90:BB:E5:C1:0F:1F:A2:F4:EE:C5:41:0C:BC:5A:40 X509v3 Authority Key Identifier: keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2a:46:aa:91:cb:23:a0:9f:fb:69:97:e4:a6:80:1c:34:e3: 27:05:d2:92:df:09:ce:c7:8e:ba:33:4b:99:f3:8f:b0:18:60: 98:64:27:72:33:76:08:cd:00:c7:ec:30:4e:ec:33:71:c1:88: 99:9b:3c:22:85:d5:10:39:87:d6:80:6e:b6:e7:17:a0:3b:55: 50:1e:3a:fc:ae:00:40:88:10:ee:88:14:ef:1b:fe:b6:66:1b: d6:dc:f4:68:63:a0:db:98:43:58:cb:a5:eb:a5:4d:db:81:de: 0d:39:09:83:ad:64:e1:fc:7c:c6:77:a1:90:e2:3d:ae:40:18: db:d4:5b:7f:c7:97:51:0b:ed:50:86:e4:23:32:7a:70:44:51: 6d:47:d8:5c:11:58:2e:5c:e6:2b:db:71:21:77:2e:d5:77:07: 65:04:91:45:5f:45:5f:d1:23:fc:bc:5d:46:9b:1d:39:da:29: fc:05:1b:66:c6:d0:13:c3:67:27:d5:f0:84:5c:ce:66:13:1f: 62:4b:ed:11:74:a3:9c:7d:8b:3b:e8:ce:aa:f8:f2:26:6f:c9: eb:08:b9:89:ed:ea:21:e3:d6:e5:b6:33:08:b8:0d:c3:7b:98: 61:4e:14:e9:92:30:6f:90:52:09:4a:8f:48:cd:04:32:1f:48: 17:b6:69:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChmQO2DUyFaBtx+oJ4fdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYmJjNzA2N2Y4YTdjNTdkNjg2ZDY3NWViNDY4ZTk5Yjg2 YmQ2MmQwHhcNMjUxMjA2MTkwMTExWhcNMjUxMjA3MTkwMTExWjAzMTEwLwYDVQQD EygwNDZkOGU4ZDAzOTBiYmU1YzEwZjFmYTJmNGVlYzU0MTBjYmM1YTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/D34SWULL2EJsk6DltNm1t5QpQ3+ /enIAWVWRXmGXKZy3p3zG+lEm+bY9imjBtrsfYF4N9Qa0UiPHmDMPp8tH7Q8Oj1f vdszXQZMeGN6qN+Tr6Yc391M0uKaUhhJaE59mUhl/LJDZdUVdVT0ZNzLfuV8P3tA eudGs950w31oYmtCuMabhgi+7/wfI2zTcl4Ib4IRmf+c4bjGjJPyp6stvlhigXSn ccfTdVmy5gntwUrUji9dIe4UvxuiW6Raat7rIueACqxlTKIYKqJBr8A0ICnS9H1K n2Sl2MAM08/+CNr5N7Qqbc/MHGiigqdH7FxBl0XNBS/VWQZqYY2ZQ9GojQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARtjo0DkLvlwQ8fovTuxUEMvFpAMB8GA1UdIwQY MBaAFOK7xwZ/inxX1obWdetGjpm4a9YtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUt MWRhMmFjYzc2ZTExLzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUtMWRhMmFjYzc2ZTEx LzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCpGqpHL I6Cf+2mX5KaAHDTjJwXSkt8JzseOujNLmfOPsBhgmGQncjN2CM0Ax+wwTuwzccGI mZs8IoXVEDmH1oButucXoDtVUB46/K4AQIgQ7ogU7xv+tmYb1tz0aGOg25hDWMul 66VN24HeDTkJg61k4fx8xnehkOI9rkAY29Rbf8eXUQvtUIbkIzJ6cERRbUfYXBFY LlzmK9txIXcu1XcHZQSRRV9FX9Ej/LxdRpsdOdop/AUbZsbQE8NnJ9XwhFzOZhMf YkvtEXSjnH2LO+jOqvjyJm/J6wi5ie3qIePW5bYzCLgNw3uYYU4U6ZIwb5BSCUqP SM0EMh9IF7Zp1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:47 2025 by rpki-client