This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json) Hash identifier: gm4d3SbUqPEqL5Ym9O8rYhWNPF2etO0QnipLom27uGU= Subject key identifier: 0B:39:B5:2F:6B:E6:D0:F1:A2:B6:22:8B:F3:BD:E8:74:F4:01:27:D4 Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da Certificate serial: 019AF49BD1434F8AA2715D4CD8757609842A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft Manifest number: 1293 Signing time: Sat 06 Dec 2025 17:00:43 +0000 Manifest this update: Sat 06 Dec 2025 17:00:43 +0000 Manifest next update: Sun 07 Dec 2025 17:00:43 +0000 Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: WYxL7PrFTmKLcbDDkNg1J6ZL48oqq17LHqE8NJ2rz3o=) 2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d1:43:4f:8a:a2:71:5d:4c:d8:75:76:09:84:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da Validity Not Before: Dec 6 17:00:43 2025 GMT Not After : Dec 7 17:00:43 2025 GMT Subject: CN=0b39b52f6be6d0f1a2b6228bf3bde874f40127d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:cb:bd:ce:d3:a8:21:e8:12:9f:1f:20:32: 25:3b:7d:ce:4e:ee:5c:68:16:10:7d:44:41:7a:c3: 62:ad:4a:f6:28:c0:a2:fd:59:0c:93:41:c3:93:1e: 71:51:ff:95:f8:f7:e8:05:d7:25:35:3c:5a:43:2e: 06:84:35:fd:37:50:8a:ea:44:61:cc:39:84:5e:4b: 8c:91:63:6b:fa:55:71:bd:c7:ef:c7:7e:d1:07:7e: 44:78:b3:f9:bc:c1:eb:d6:60:92:74:9d:c5:d6:7b: cc:f3:14:9f:6c:ee:fd:ef:1e:92:5b:3e:cf:26:37: 8d:ad:c4:31:e6:d5:81:59:e9:6f:37:27:8a:4c:17: bb:97:b9:3c:b3:b6:2e:50:ef:9d:a9:c2:2a:d3:d5: 60:94:80:75:49:8d:fc:98:78:12:ed:31:4a:29:67: e8:11:6a:2b:f2:f6:af:a8:3b:55:4d:36:a9:ca:40: 6b:68:95:29:39:6e:77:50:d9:8f:a7:4e:62:ea:15: a1:18:1f:e2:f9:af:1f:d2:98:51:b0:9b:de:66:5f: f6:8e:35:58:29:01:21:d2:a7:5a:22:0a:42:30:58: 6a:5c:1b:d8:72:1e:26:61:d1:c2:32:c0:2f:c8:da: 2b:c0:0a:e0:38:58:e3:5a:a0:e2:b9:88:72:ff:c9: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:39:B5:2F:6B:E6:D0:F1:A2:B6:22:8B:F3:BD:E8:74:F4:01:27:D4 X509v3 Authority Key Identifier: keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d6:0a:ad:13:f9:4a:f4:bb:d4:24:4e:b9:ea:f2:9a:ec:4f: 10:02:44:ff:29:e1:51:ac:6f:91:e6:d2:02:05:f3:ec:23:19: f2:fd:28:01:6e:d2:35:98:81:bd:f1:e3:d5:29:df:8e:f3:2e: 55:d8:84:97:e7:d9:8a:87:bf:e9:09:4c:ec:55:ce:54:63:c2: ae:3b:50:b4:f7:b0:f7:2e:65:72:1d:1c:3a:ac:29:46:a1:d0: ce:66:30:06:ca:ab:d0:ac:e5:ca:56:00:da:01:9b:8d:f9:32: fe:f4:92:4d:3a:c9:d7:e7:e4:41:58:dc:af:da:9a:a1:8f:21: b5:cc:44:3b:99:04:19:79:5d:74:08:0b:6c:18:b0:d2:7e:30: 74:21:37:d0:9e:d9:4a:d4:49:64:20:fb:e2:b1:61:0e:19:3d: 05:df:d6:56:86:fd:79:0d:8a:99:f9:50:57:84:6e:ec:38:6a: de:7f:98:9c:ec:bf:55:8a:29:75:7f:40:40:7e:fc:98:e5:7f: 4f:57:92:82:f9:ec:57:c0:a4:b5:ac:29:c6:ac:fc:74:bf:29: e1:39:67:ff:a9:6a:c1:b8:1a:3a:a0:d6:bc:2b:d5:61:95:55: a1:d7:e2:24:45:8a:4d:66:f8:a5:c3:a4:56:62:ba:a9:4d:26: a7:9b:92:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9FDT4qicV1M2HV2CYQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw NmYzZGEwHhcNMjUxMjA2MTcwMDQzWhcNMjUxMjA3MTcwMDQzWjAzMTEwLwYDVQQD EygwYjM5YjUyZjZiZTZkMGYxYTJiNjIyOGJmM2JkZTg3NGY0MDEyN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt27Lvc7TqCHoEp8fIDIlO33OTu5c aBYQfURBesNirUr2KMCi/VkMk0HDkx5xUf+V+PfoBdclNTxaQy4GhDX9N1CK6kRh zDmEXkuMkWNr+lVxvcfvx37RB35EeLP5vMHr1mCSdJ3F1nvM8xSfbO797x6SWz7P JjeNrcQx5tWBWelvNyeKTBe7l7k8s7YuUO+dqcIq09VglIB1SY38mHgS7TFKKWfo EWor8vavqDtVTTapykBraJUpOW53UNmPp05i6hWhGB/i+a8f0phRsJveZl/2jjVY KQEh0qdaIgpCMFhqXBvYch4mYdHCMsAvyNorwArgOFjjWqDiuYhy/8kkPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs5tS9r5tDxorYii/O96HT0ASfUMB8GA1UdIwQY MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt MGNmNzRiZTMwM2ZmLzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNYKrRP5 SvS71CROuerymuxPEAJE/ynhUaxvkebSAgXz7CMZ8v0oAW7SNZiBvfHj1SnfjvMu VdiEl+fZioe/6QlM7FXOVGPCrjtQtPew9y5lch0cOqwpRqHQzmYwBsqr0KzlylYA 2gGbjfky/vSSTTrJ1+fkQVjcr9qaoY8htcxEO5kEGXlddAgLbBiw0n4wdCE30J7Z StRJZCD74rFhDhk9Bd/WVob9eQ2KmflQV4Ru7Dhq3n+YnOy/VYopdX9AQH78mOV/ T1eSgvnsV8Cktawpxqz8dL8p4Tln/6lqwbgaOqDWvCvVYZVVodfiJEWKTWb4pcOk VmK6qU0mp5uSyg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:27 2025 by rpki-client