This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json) Hash identifier: iJQGvbNjGwNHs0xQeQRHWblbsZ3qWFVWbeuIu6N/Acw= Subject key identifier: DB:78:EC:4D:72:E3:20:95:EE:B8:5C:DC:46:4D:11:9E:FF:71:16:1B Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Certificate serial: 019AF389F5BBAACFE3AAFE863DC95CF3E837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft Manifest number: 0BC4 Signing time: Sat 06 Dec 2025 12:01:36 +0000 Manifest this update: Sat 06 Dec 2025 12:01:36 +0000 Manifest next update: Sun 07 Dec 2025 12:01:36 +0000 Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: qUUKGq8Snv4RugZ1M//srcbNCEzPmeYPAlP8zYnAes8=) 2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=) 3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f5:bb:aa:cf:e3:aa:fe:86:3d:c9:5c:f3:e8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Validity Not Before: Dec 6 12:01:36 2025 GMT Not After : Dec 7 12:01:36 2025 GMT Subject: CN=db78ec4d72e32095eeb85cdc464d119eff71161b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:24:60:a9:8b:bd:17:9b:90:fd:d2:60:55: 10:b4:ed:b3:07:92:cf:42:d1:5e:34:e2:23:a2:7e: a1:b4:d2:cf:e1:fe:7e:08:01:c2:db:a6:21:89:34: 51:93:f1:3b:4c:7b:8c:b6:44:cb:24:45:04:cd:06: f4:6d:59:4f:7d:11:1c:29:ef:2b:0e:0c:73:71:b5: 17:c4:80:26:06:b1:fa:2b:9d:2b:11:18:32:83:71: 96:cc:b3:c0:bd:e1:65:74:e5:69:ff:bf:9f:c8:41: d8:fa:ea:2a:8c:a2:2e:4f:34:72:b7:c3:69:4f:4e: 6d:be:2f:45:a8:ef:cb:28:12:18:7d:9f:69:2a:79: 6e:90:e7:6e:16:87:f2:71:81:ae:14:6d:d2:78:b5: 79:9b:98:09:12:7f:00:8a:63:cd:29:09:19:f5:3a: ba:fd:82:2d:06:2b:bf:23:21:66:f3:8f:76:32:30: d5:fc:de:1f:90:16:01:2b:b6:42:42:7c:54:dc:8e: aa:a0:93:bf:be:b5:b9:c8:16:3c:3a:85:1a:f3:c1: c5:4d:71:a4:e8:2a:97:e6:74:5f:3e:99:de:43:df: 50:98:dc:40:e7:1c:c0:48:4f:ab:27:25:1f:64:58: 00:12:f4:83:6a:10:12:2d:45:35:d5:74:cf:ca:7c: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:78:EC:4D:72:E3:20:95:EE:B8:5C:DC:46:4D:11:9E:FF:71:16:1B X509v3 Authority Key Identifier: keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:38:5a:01:1f:98:54:87:dd:51:86:d7:98:8b:7d:4b:22:e3: 1e:59:55:11:a5:22:71:a0:2f:f9:85:43:27:4e:67:90:80:8b: 93:b8:bc:40:d8:f1:57:71:59:07:92:4b:e1:bc:44:1c:13:08: 8a:8b:41:d4:35:14:60:4a:ce:ed:60:ef:c6:8c:83:2a:54:4d: 27:02:69:74:af:4d:af:19:32:c1:09:31:62:70:98:10:59:51: 4a:52:09:fb:78:49:8f:fd:04:0c:f8:a6:b6:00:84:83:00:db: e9:36:95:83:f8:e5:10:1e:22:83:8b:82:46:63:9f:2d:04:3a: c7:89:7f:a4:3f:9b:aa:e5:86:c0:25:c3:a4:75:22:dd:d7:4a: 37:95:1d:8d:18:4c:87:3b:df:31:00:bb:89:a0:9d:35:51:42: 46:5c:38:65:ce:b6:96:23:03:1e:91:56:59:40:fa:52:31:66: 94:34:30:ba:ef:c7:ad:50:df:bc:34:b2:be:c3:20:87:ca:d6: ea:9a:ba:e2:e3:6b:e5:13:35:9f:ec:f2:d7:6b:21:e8:95:3d: 18:b1:74:67:32:3e:2c:de:b9:ef:14:a5:28:fa:a7:93:ce:ae: d3:ca:4c:18:b5:5d:03:92:c7:43:0a:08:68:01:67:70:7d:07: 41:75:65:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifW7qs/jqv6GPclc8+g3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOGNkOTQ0MDU1MmU3ZGFiOWNkNTYzMWQ0YWI4NzI0NTE1 MzViN2EwHhcNMjUxMjA2MTIwMTM2WhcNMjUxMjA3MTIwMTM2WjAzMTEwLwYDVQQD EyhkYjc4ZWM0ZDcyZTMyMDk1ZWViODVjZGM0NjRkMTE5ZWZmNzExNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEMkYKmLvRebkP3SYFUQtO2zB5LP QtFeNOIjon6htNLP4f5+CAHC26YhiTRRk/E7THuMtkTLJEUEzQb0bVlPfREcKe8r DgxzcbUXxIAmBrH6K50rERgyg3GWzLPAveFldOVp/7+fyEHY+uoqjKIuTzRyt8Np T05tvi9FqO/LKBIYfZ9pKnlukOduFofycYGuFG3SeLV5m5gJEn8AimPNKQkZ9Tq6 /YItBiu/IyFm8492MjDV/N4fkBYBK7ZCQnxU3I6qoJO/vrW5yBY8OoUa88HFTXGk 6CqX5nRfPpneQ99QmNxA5xzASE+rJyUfZFgAEvSDahASLUU11XTPynwFgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt47E1y4yCV7rhc3EZNEZ7/cRYbMB8GA1UdIwQY MBaAFNOM2UQFUufauc1WMdSrhyRRU1t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMt N2M2NWE4NTJmMDkyLzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMtN2M2NWE4NTJmMDky LzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjhaAR+Y VIfdUYbXmIt9SyLjHllVEaUicaAv+YVDJ05nkICLk7i8QNjxV3FZB5JL4bxEHBMI iotB1DUUYErO7WDvxoyDKlRNJwJpdK9NrxkywQkxYnCYEFlRSlIJ+3hJj/0EDPim tgCEgwDb6TaVg/jlEB4ig4uCRmOfLQQ6x4l/pD+bquWGwCXDpHUi3ddKN5UdjRhM hzvfMQC7iaCdNVFCRlw4Zc62liMDHpFWWUD6UjFmlDQwuu/HrVDfvDSyvsMgh8rW 6pq64uNr5RM1n+zy12sh6JU9GLF0ZzI+LN657xSlKPqnk86u08pMGLVdA5LHQwoI aAFncH0HQXVlmg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:08:00 2025 by rpki-client