This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json) Hash identifier: sHeOMuyK1/SDRnLIZQh7TKUEZDeNdxpB4s04uNvNcI0= Subject key identifier: 9D:75:91:85:AC:04:69:1A:B2:F5:0C:5C:15:A0:8F:C2:44:28:23:21 Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86 Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86 Certificate serial: 019AF08846C2085BDB4C4932FE3760A84412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft Manifest number: 1767 Signing time: Fri 05 Dec 2025 22:00:53 +0000 Manifest this update: Fri 05 Dec 2025 22:00:53 +0000 Manifest next update: Sat 06 Dec 2025 22:00:53 +0000 Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: r9rdndZGfwHwBcMH/aaOYtY39XLU5jkeE0RaM4W+7qw=) 2: LKQwgiepoVu5_u8taIAcRutuJ-s.roa (hash: g/2UuKpKO1KSqMbVUrFxetjbdTbJKbXQ9uje0qgEhYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:46:c2:08:5b:db:4c:49:32:fe:37:60:a8:44:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86 Validity Not Before: Dec 5 22:00:53 2025 GMT Not After : Dec 6 22:00:53 2025 GMT Subject: CN=9d759185ac04691ab2f50c5c15a08fc244282321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:34:a8:ce:d1:69:51:fb:d2:a4:41:7f:32: 31:40:da:d6:68:3f:2a:8c:7b:59:6d:0e:be:55:ae: 13:47:f5:cf:77:39:30:65:b4:37:a9:7f:e0:4f:0b: fb:8b:b9:5e:f1:f6:92:a3:60:e3:77:69:c8:24:87: 4a:7e:a5:87:6e:b8:70:52:8b:a6:f3:13:6c:23:a3: 78:ae:91:c5:b6:98:1a:9f:eb:92:af:b5:dd:7f:c9: 84:21:b2:6b:d3:f9:4a:67:0f:f8:0e:7d:14:3c:ad: fd:20:6a:e3:50:b9:59:1a:94:65:da:9c:31:b5:98: c3:5b:18:09:4d:f4:b5:5b:b5:a9:95:9b:7c:bb:d5: 53:25:34:c5:24:8b:6f:9b:41:ac:39:9e:36:73:ea: 7f:f2:cc:4b:25:ff:8f:ac:85:cb:92:6a:fb:d1:09: fd:30:c0:97:1a:35:ab:cf:91:10:ed:39:3c:59:55: a4:e9:6f:ff:a9:a0:9b:39:12:ac:e4:8e:e9:37:e2: 23:1f:07:e9:6e:30:bf:c1:9a:74:c5:57:02:52:70: b3:fe:3a:aa:b8:da:da:2e:7d:da:0a:b1:3a:4b:83: 3d:3f:55:b4:04:9e:b2:e2:aa:19:4d:0f:c7:3d:42: 2b:6f:9b:bd:82:ac:20:7b:c7:bb:5a:f1:04:d9:f8: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:75:91:85:AC:04:69:1A:B2:F5:0C:5C:15:A0:8F:C2:44:28:23:21 X509v3 Authority Key Identifier: keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a6:7d:de:42:03:30:03:a9:ac:88:13:08:1d:f4:43:e7:ac: 06:04:2c:ee:c7:4b:10:94:7b:29:f4:53:da:20:e7:0e:a2:d3: 48:10:12:e1:cc:14:65:1a:57:f3:77:1f:17:60:7b:a4:fd:eb: 6f:8d:52:70:73:c3:2e:29:66:65:82:15:d0:c5:da:71:26:91: a8:13:61:13:2f:3c:1a:db:93:ac:a9:9d:ab:5d:5c:a3:47:f1: af:f6:ea:65:64:ca:5f:64:e4:8f:49:e6:ce:35:c7:0d:97:55: 72:37:ef:1d:f8:cb:79:a8:f5:4a:c0:df:cd:16:4a:86:27:5d: 58:fa:4a:18:23:35:0e:3b:26:0a:19:d1:92:f5:05:27:7a:de: 80:a2:20:8a:f0:30:c9:d6:6f:75:ea:e7:8a:4e:60:fb:a1:c1: c2:67:24:37:d0:d1:79:6e:33:5f:33:af:84:63:36:93:ec:6a: 3d:91:ac:86:b5:bd:1a:3f:5d:a0:68:1b:df:db:e8:22:54:f6: 30:eb:a1:7f:db:d5:b3:1c:27:e1:37:41:9d:b5:61:79:47:ca: 8c:a8:37:cc:47:71:cf:a3:b3:63:32:5f:4e:c2:c9:0a:df:21: 72:6e:23:6f:47:27:52:68:4f:e5:ad:d3:e5:03:61:91:4b:0c: dc:c3:e9:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEbCCFvbTEky/jdgqEQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMjgwYzYzNTJhMGJmYmI3OWQyNDljODg3NWVkMTg2ZWNj ZThhODYwHhcNMjUxMjA1MjIwMDUzWhcNMjUxMjA2MjIwMDUzWjAzMTEwLwYDVQQD Eyg5ZDc1OTE4NWFjMDQ2OTFhYjJmNTBjNWMxNWEwOGZjMjQ0MjgyMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zk0qM7RaVH70qRBfzIxQNrWaD8q jHtZbQ6+Va4TR/XPdzkwZbQ3qX/gTwv7i7le8faSo2Djd2nIJIdKfqWHbrhwUoum 8xNsI6N4rpHFtpgan+uSr7Xdf8mEIbJr0/lKZw/4Dn0UPK39IGrjULlZGpRl2pwx tZjDWxgJTfS1W7WplZt8u9VTJTTFJItvm0GsOZ42c+p/8sxLJf+PrIXLkmr70Qn9 MMCXGjWrz5EQ7Tk8WVWk6W//qaCbORKs5I7pN+IjHwfpbjC/wZp0xVcCUnCz/jqq uNraLn3aCrE6S4M9P1W0BJ6y4qoZTQ/HPUIrb5u9gqwge8e7WvEE2fgbqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ11kYWsBGkasvUMXBWgj8JEKCMhMB8GA1UdIwQY MBaAFOMoDGNSoL+7edJJyIde0YbszoqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQt ZWYwYjgyMTg5NDQ0LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQtZWYwYjgyMTg5NDQ0 LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaZ93kID MAOprIgTCB30Q+esBgQs7sdLEJR7KfRT2iDnDqLTSBAS4cwUZRpX83cfF2B7pP3r b41ScHPDLilmZYIV0MXacSaRqBNhEy88GtuTrKmdq11co0fxr/bqZWTKX2Tkj0nm zjXHDZdVcjfvHfjLeaj1SsDfzRZKhiddWPpKGCM1DjsmChnRkvUFJ3regKIgivAw ydZvdernik5g+6HBwmckN9DReW4zXzOvhGM2k+xqPZGshrW9Gj9doGgb39voIlT2 MOuhf9vVsxwn4TdBnbVheUfKjKg3zEdxz6OzYzJfTsLJCt8hcm4jb0cnUmhP5a3T 5QNhkUsM3MPpPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:56 2025 by rpki-client