This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft File: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json) Hash identifier: KKXmFzM7TdjZsFE83tGkkp53DqQmog3hU+0nUwEtmNk= Subject key identifier: C4:9C:5E:23:BC:D0:E0:10:5D:EB:EF:FD:C5:18:D4:7F:A5:CE:F7:E1 Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4 Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4 Certificate serial: 019AF1D1A24BE5DAC9B0C1EC4F9CC2DC3339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft Manifest number: 0461 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: x+yHNDsFqAUY3EqsBf7GIeVM68/QJmF+6KkJNzIBEy8=) 2: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (hash: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a2:4b:e5:da:c9:b0:c1:ec:4f:9c:c2:dc:33:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4 Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=c49c5e23bcd0e0105debeffdc518d47fa5cef7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:51:53:3c:36:3d:26:4f:b1:3a:bd:99:9c: 49:0b:45:64:56:42:52:8f:28:14:2d:fd:dd:16:88: f5:d3:67:ad:b7:1b:9f:29:a2:19:77:b8:f8:05:b3: 97:99:f1:61:c3:f3:d6:1d:c8:81:91:a8:bc:d3:c7: f3:ba:84:c5:15:4d:4d:dd:5d:c7:f4:9b:8a:4d:31: c3:88:72:9e:e1:12:c3:6f:b3:6d:4d:32:3d:d8:2b: b1:d8:89:a4:31:15:07:38:c1:e1:97:3f:28:13:35: 2e:cd:2e:6d:c3:2b:cd:d2:d1:2f:42:6c:07:a7:86: 39:02:71:d8:12:d2:cc:51:ac:8e:75:7a:32:b3:7c: cf:c4:8b:55:6d:6f:68:f1:ee:0b:b1:1b:0c:86:44: ad:b8:38:36:26:c7:da:71:81:61:16:70:a8:3d:10: 36:03:89:2a:63:3c:02:54:82:dc:19:8a:b0:fa:8b: 3f:04:81:5f:2b:08:e0:4c:a1:ea:42:ea:36:df:2b: 3a:44:c6:f4:b6:6e:e2:8d:28:6d:75:e3:0d:1e:ec: 78:87:05:f2:c6:9e:a3:17:f8:61:41:89:c3:06:72: 4a:14:97:61:64:37:a7:b3:d9:26:e4:9a:46:2f:66: c1:15:63:55:e8:b4:29:90:91:bf:e0:04:ca:23:da: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9C:5E:23:BC:D0:E0:10:5D:EB:EF:FD:C5:18:D4:7F:A5:CE:F7:E1 X509v3 Authority Key Identifier: keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:76:b6:58:51:99:56:8b:f6:1a:3a:62:97:2e:8b:d7:f8:7b: da:d8:64:06:91:43:82:96:8c:1e:97:73:19:68:80:77:dc:79: 8f:0c:a3:3a:f5:49:bd:a9:d7:9e:17:3b:ce:a7:12:2a:6e:e0: 99:ad:9e:d7:b2:58:aa:13:0f:8f:b2:72:44:ab:49:cf:9f:32: 11:e0:4a:4f:a8:38:33:f9:d0:a3:08:34:05:9a:80:50:1e:e1: f8:0b:97:a8:bc:14:48:cf:1c:86:c0:e1:d8:99:13:a0:0e:2b: b8:88:c3:d0:00:6f:35:b9:ab:7e:82:fd:4e:37:6d:4c:f2:9a: ce:0b:46:d6:d4:65:ca:05:bf:46:1e:8c:04:38:34:d0:1a:4e: ef:18:2a:93:3b:73:fe:2f:e4:61:3b:b3:af:59:ad:63:7c:fc: 85:ea:cb:4a:56:e7:57:26:04:8f:2d:87:1b:6f:38:39:1f:da: 25:4d:2d:45:4f:26:3e:e6:15:b4:9b:96:27:8c:7a:89:17:17: 20:12:6d:fc:aa:29:f5:78:04:13:d3:67:b0:12:02:b6:44:4a: 5d:00:7c:17:02:41:b8:84:46:6e:37:a6:13:94:ee:10:0d:32: 38:ee:24:e4:7c:f6:1a:a7:79:82:c4:54:3a:a0:38:1d:b2:25: a5:9b:44:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aJL5drJsMHsT5zC3DM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODAyZWE4ZjljZTgwMmI1N2JiYmFiNzhlMzA5NzkzN2Zm YTExYzQwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EyhjNDljNWUyM2JjZDBlMDEwNWRlYmVmZmRjNTE4ZDQ3ZmE1Y2VmN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9BRUzw2PSZPsTq9mZxJC0VkVkJS jygULf3dFoj102ettxufKaIZd7j4BbOXmfFhw/PWHciBkai808fzuoTFFU1N3V3H 9JuKTTHDiHKe4RLDb7NtTTI92Cux2ImkMRUHOMHhlz8oEzUuzS5twyvN0tEvQmwH p4Y5AnHYEtLMUayOdXoys3zPxItVbW9o8e4LsRsMhkStuDg2JsfacYFhFnCoPRA2 A4kqYzwCVILcGYqw+os/BIFfKwjgTKHqQuo23ys6RMb0tm7ijShtdeMNHux4hwXy xp6jF/hhQYnDBnJKFJdhZDens9km5JpGL2bBFWNV6LQpkJG/4ATKI9pTtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMScXiO80OAQXevv/cUY1H+lzvfhMB8GA1UdIwQY MBaAFNOALqj5zoArV7u6t44wl5N/+hHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NzAyZTctNGJmMS00MDdlLWJhZmUt ZmFkMjFmZjI5ZTJiLzEvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84NzAyZTctNGJmMS00MDdlLWJhZmUtZmFkMjFmZjI5ZTJi LzEvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHa2WFGZ Vov2Gjpily6L1/h72thkBpFDgpaMHpdzGWiAd9x5jwyjOvVJvanXnhc7zqcSKm7g ma2e17JYqhMPj7JyRKtJz58yEeBKT6g4M/nQowg0BZqAUB7h+AuXqLwUSM8chsDh 2JkToA4ruIjD0ABvNbmrfoL9TjdtTPKazgtG1tRlygW/Rh6MBDg00BpO7xgqkztz /i/kYTuzr1mtY3z8herLSlbnVyYEjy2HG284OR/aJU0tRU8mPuYVtJuWJ4x6iRcX IBJt/Kop9XgEE9NnsBICtkRKXQB8FwJBuIRGbjemE5TuEA0yOO4k5Hz2Gqd5gsRU OqA4HbIlpZtEWA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:08 2025 by rpki-client