This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json) Hash identifier: 6M8wyD11bCLXym5OnZWXFk4xWcb6SeV//RBH0vgUoSk= Subject key identifier: 5D:BF:01:CE:AE:0C:3C:8A:38:C0:7D:A8:F8:F3:2E:3C:1D:77:BC:3F Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71 Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71 Certificate serial: 019AF1645AC3B7712D5D7D64723B6C6FD278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: RWkXtS4h57coovgxbNUmjUnLrm5UW2cvrILmwTfOZFI=) 2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5a:c3:b7:71:2d:5d:7d:64:72:3b:6c:6f:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71 Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=5dbf01ceae0c3c8a38c07da8f8f32e3c1d77bc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:93:60:06:04:46:d8:15:eb:07:d2:5c:12: 50:87:d9:04:16:a0:f2:41:de:24:bd:b7:3b:bd:6a: aa:ff:c2:0d:e3:81:b1:7c:e3:5d:fb:89:07:e0:31: eb:dd:02:c7:ce:bd:d2:39:f4:bc:1e:a5:7e:e3:82: 94:d3:87:f4:54:1a:ec:23:7d:cf:fe:f1:07:63:aa: 70:5d:4a:f0:fe:94:8f:20:1a:14:69:55:d8:d4:b8: 3d:9f:4b:86:e3:e8:ac:d7:99:51:2e:e1:3b:7a:d4: 15:32:9f:67:fa:a4:31:8a:4c:87:20:45:ab:81:b3: 51:b8:57:f3:b9:25:23:ee:00:ed:e6:08:a4:1a:5e: d8:97:4c:5e:bc:6e:7a:c1:3c:a6:e3:d9:83:ed:7f: 87:f8:7b:02:9a:8b:26:df:94:75:1b:12:6a:94:16: af:98:b3:6a:b5:fb:41:44:f8:12:1b:dc:ca:bb:05: dc:1f:e6:70:1b:01:aa:f9:60:f3:a3:c3:2c:02:1e: 45:05:5e:fc:45:c6:05:49:22:81:bd:23:29:12:45: 53:ad:9e:bd:cd:3d:f1:e1:82:d2:64:de:ad:74:86: 20:78:64:17:80:b8:01:52:fd:f3:a6:52:3a:6c:44: 44:38:72:86:ba:75:56:70:4b:2a:b7:e1:a4:46:63: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:01:CE:AE:0C:3C:8A:38:C0:7D:A8:F8:F3:2E:3C:1D:77:BC:3F X509v3 Authority Key Identifier: keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4a:f2:25:31:7c:57:f5:c7:89:63:db:d0:55:cb:1d:6f:08: 0b:f5:16:28:e8:dc:3d:68:6f:8d:ca:7c:42:7c:86:be:89:76: f7:58:82:58:68:79:cb:ba:79:37:bd:ba:70:50:25:28:fe:41: 9f:3b:65:69:0c:4b:a9:71:c4:f7:b0:1b:87:72:64:24:3d:9d: e7:ea:1d:17:b6:ff:66:d9:92:16:8b:50:5a:a4:5a:da:20:c8: a9:31:04:1d:5c:23:db:8c:18:dc:4a:bc:73:6f:bc:a4:bd:3b: 45:56:88:8d:2a:8d:b7:d7:06:d9:3d:2a:08:bd:a9:bd:78:01: e3:c2:d9:5c:3a:00:58:9e:d8:ec:4e:9b:fa:3a:b2:2a:32:00: 70:45:a0:2c:22:d2:a9:78:7c:16:3f:ef:31:59:05:29:ec:4a: 33:67:3d:ae:47:f0:76:82:1e:74:30:52:0d:b3:48:a4:3e:f8: a7:62:29:cf:45:ca:43:48:3b:7d:9a:30:2b:8c:35:10:6e:38: c0:c4:95:2c:05:c1:35:34:5d:aa:3d:2c:ef:2d:a9:e3:15:4f: 07:58:03:be:6c:ef:0b:0d:05:15:5d:1f:6c:46:35:3c:06:e6: e0:c6:74:ca:a3:e8:5a:34:0f:88:6b:4d:70:b2:1e:9c:e0:84: 1c:6e:bf:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFrDt3EtXX1kcjtsb9J4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwN2UwMDhkNmVkMjM4OGFkMzFiNzQyMjQyMzE1MmE5MmE1 NGRlNzEwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD Eyg1ZGJmMDFjZWFlMGMzYzhhMzhjMDdkYThmOGYzMmUzYzFkNzdiYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpiTYAYERtgV6wfSXBJQh9kEFqDy Qd4kvbc7vWqq/8IN44GxfONd+4kH4DHr3QLHzr3SOfS8HqV+44KU04f0VBrsI33P /vEHY6pwXUrw/pSPIBoUaVXY1Lg9n0uG4+is15lRLuE7etQVMp9n+qQxikyHIEWr gbNRuFfzuSUj7gDt5gikGl7Yl0xevG56wTym49mD7X+H+HsCmosm35R1GxJqlBav mLNqtftBRPgSG9zKuwXcH+ZwGwGq+WDzo8MsAh5FBV78RcYFSSKBvSMpEkVTrZ69 zT3x4YLSZN6tdIYgeGQXgLgBUv3zplI6bEREOHKGunVWcEsqt+GkRmOxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2/Ac6uDDyKOMB9qPjzLjwdd7w/MB8GA1UdIwQY MBaAFOB+AI1u0jiK0xt0IkIxUqkqVN5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQt MjcyNzI0N2FmMjEwLzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQtMjcyNzI0N2FmMjEw LzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEryJTF8 V/XHiWPb0FXLHW8IC/UWKOjcPWhvjcp8QnyGvol291iCWGh5y7p5N726cFAlKP5B nztlaQxLqXHE97Abh3JkJD2d5+odF7b/ZtmSFotQWqRa2iDIqTEEHVwj24wY3Eq8 c2+8pL07RVaIjSqNt9cG2T0qCL2pvXgB48LZXDoAWJ7Y7E6b+jqyKjIAcEWgLCLS qXh8Fj/vMVkFKexKM2c9rkfwdoIedDBSDbNIpD74p2Ipz0XKQ0g7fZowK4w1EG44 wMSVLAXBNTRdqj0s7y2p4xVPB1gDvmzvCw0FFV0fbEY1PAbm4MZ0yqPoWjQPiGtN cLIenOCEHG6/pg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:54 2025 by rpki-client