This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json) Hash identifier: YHPlFL+CzBXhUp7wuuyhLaLbv0cvjB3zr1WdyPD+fSk= Subject key identifier: 7D:F7:43:A8:4A:6A:2A:E5:5A:33:BB:D3:6C:F5:37:C1:2F:B6:B6:2B Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41 Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41 Certificate serial: 019AF0884B7BC267CA1359F45539C5CBA88D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft Manifest number: 039E Signing time: Fri 05 Dec 2025 22:00:55 +0000 Manifest this update: Fri 05 Dec 2025 22:00:55 +0000 Manifest next update: Sat 06 Dec 2025 22:00:55 +0000 Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: te2QVaVeTsh61ZUmCGeFqOUb+qkTOPcvjwh2GRlSaY0=) 2: tfMhyoCAwef_h-Z6sHOqruchZBw.roa (hash: Vm4p9lWk+dyS8xUI43ELEZzmPF8LCOKJ52R2v1+j6j0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:4b:7b:c2:67:ca:13:59:f4:55:39:c5:cb:a8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41 Validity Not Before: Dec 5 22:00:55 2025 GMT Not After : Dec 6 22:00:55 2025 GMT Subject: CN=7df743a84a6a2ae55a33bbd36cf537c12fb6b62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:9f:7b:3e:d0:74:4a:eb:90:33:88:5f:21: 47:c7:b4:0e:4e:9f:50:83:96:2c:af:55:0b:17:d8: 0f:26:2f:ef:62:84:ef:1e:9d:9d:ed:00:d5:04:f9: 3e:30:f0:3c:2f:51:ec:7a:a2:1c:50:38:28:60:d2: a8:bc:c3:9e:9c:88:8d:14:f4:cb:fc:58:e1:ac:84: 0d:45:d5:f1:be:40:ed:b7:97:b2:4d:68:e3:f4:e4: 0e:c1:60:6f:6c:75:f1:8d:1f:b8:86:46:b8:a4:1d: 79:28:0e:cc:4f:53:a2:55:74:f5:30:a0:f9:3c:35: 52:b0:ed:66:c0:37:67:b5:f2:95:03:a0:80:13:e8: fb:12:05:2b:fd:5d:35:ed:ef:b2:92:d3:b9:8e:ec: f2:f6:0f:19:4c:1c:b2:ca:eb:e0:be:00:bf:e2:5c: 97:d0:47:e9:af:1b:24:70:16:d0:a7:19:11:2e:61: 88:cc:ed:5b:31:9b:57:10:6a:db:ff:3f:24:ee:a0: 13:58:fe:c8:32:f3:28:4c:89:58:ba:18:73:76:18: 30:f2:e7:72:d0:37:2a:c5:d7:a5:0f:d1:78:e3:90: 5e:33:57:0c:7e:7a:a3:ac:80:fa:0b:a2:cd:ab:02: a0:65:50:26:8d:34:99:91:60:72:fe:17:05:7e:67: 23:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F7:43:A8:4A:6A:2A:E5:5A:33:BB:D3:6C:F5:37:C1:2F:B6:B6:2B X509v3 Authority Key Identifier: keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:94:39:12:9f:58:9c:2a:35:14:c7:e9:ee:ce:23:3b:3f:81: 2f:0a:0e:2d:04:95:1b:1a:fb:59:b0:ae:6a:13:d6:af:d0:a3: b2:2c:b7:8c:0d:4f:07:88:50:84:9b:18:0b:df:20:03:2c:2e: 57:2c:d2:1d:81:ea:75:64:1c:ae:83:1c:9b:f5:43:f9:ef:a9: 31:e8:a9:71:29:f4:3e:54:23:4e:bb:e9:79:2a:da:2d:5f:70: f5:e7:54:9f:07:67:cc:fc:4d:1e:f9:22:1e:f0:62:f4:7f:9c: 65:75:b7:fe:dd:3a:17:83:20:6e:58:33:02:ba:4a:01:bd:fa: af:71:bb:ac:22:a7:74:9c:5a:78:cf:cb:da:83:52:fa:dc:b2: a2:69:65:17:0a:07:32:ce:8b:cf:61:15:5d:d4:3d:55:9b:3b: ba:c3:3e:ab:6e:91:57:4d:98:5a:bb:9f:89:20:16:dc:56:3f: 85:73:54:d1:5f:68:5f:cb:79:a5:e9:33:ab:7c:d9:10:99:47: 12:51:db:2f:d6:3b:40:22:43:18:f8:d7:42:4e:c8:52:39:f6: c4:28:f8:ce:7c:f5:d2:90:6d:9c:3f:b3:4d:3a:25:bc:11:2c: 13:a1:e2:9d:e2:b7:53:9e:1c:27:90:a2:79:42:fc:4c:d9:7b: f1:a3:29:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEt7wmfKE1n0VTnFy6iNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWEzYmFlNDhjOTU1NjYzMTRkNjBlZmE4ODlmM2Q2NWY5 YmRkNDEwHhcNMjUxMjA1MjIwMDU1WhcNMjUxMjA2MjIwMDU1WjAzMTEwLwYDVQQD Eyg3ZGY3NDNhODRhNmEyYWU1NWEzM2JiZDM2Y2Y1MzdjMTJmYjZiNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyGfez7QdErrkDOIXyFHx7QOTp9Q g5Ysr1ULF9gPJi/vYoTvHp2d7QDVBPk+MPA8L1HseqIcUDgoYNKovMOenIiNFPTL /FjhrIQNRdXxvkDtt5eyTWjj9OQOwWBvbHXxjR+4hka4pB15KA7MT1OiVXT1MKD5 PDVSsO1mwDdntfKVA6CAE+j7EgUr/V017e+yktO5juzy9g8ZTByyyuvgvgC/4lyX 0EfprxskcBbQpxkRLmGIzO1bMZtXEGrb/z8k7qATWP7IMvMoTIlYuhhzdhgw8udy 0DcqxdelD9F445BeM1cMfnqjrID6C6LNqwKgZVAmjTSZkWBy/hcFfmcjHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH33Q6hKairlWjO702z1N8EvtrYrMB8GA1UdIwQY MBaAFOGaO65IyVVmMU1g76iJ89Zfm91BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDIt OTE4NGE5MWI4YWUxLzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDItOTE4NGE5MWI4YWUx LzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpQ5Ep9Y nCo1FMfp7s4jOz+BLwoOLQSVGxr7WbCuahPWr9Cjsiy3jA1PB4hQhJsYC98gAywu VyzSHYHqdWQcroMcm/VD+e+pMeipcSn0PlQjTrvpeSraLV9w9edUnwdnzPxNHvki HvBi9H+cZXW3/t06F4MgblgzArpKAb36r3G7rCKndJxaeM/L2oNS+tyyomllFwoH Ms6Lz2EVXdQ9VZs7usM+q26RV02YWrufiSAW3FY/hXNU0V9oX8t5pekzq3zZEJlH ElHbL9Y7QCJDGPjXQk7IUjn2xCj4znz10pBtnD+zTTolvBEsE6HineK3U54cJ5Ci eUL8TNl78aMpNA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:45 2025 by rpki-client