This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json) Hash identifier: I47B4FeVacfVeTIQb2NdYXB79K/5/YbvdZffnt2XQNU= Subject key identifier: DB:40:87:42:ED:68:02:8E:3F:C8:30:71:C0:74:BD:F5:D9:2D:0B:03 Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Certificate serial: 019AF5AE75A0301DD6F81DE0BA2805919070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft Manifest number: 0B90 Signing time: Sat 06 Dec 2025 22:00:42 +0000 Manifest this update: Sat 06 Dec 2025 22:00:42 +0000 Manifest next update: Sun 07 Dec 2025 22:00:42 +0000 Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: z2TBoZHFCLMj2ac9OAIEYGc1YTe8LQ6DDwcU5bDo3uI=) 2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:75:a0:30:1d:d6:f8:1d:e0:ba:28:05:91:90:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Validity Not Before: Dec 6 22:00:42 2025 GMT Not After : Dec 7 22:00:42 2025 GMT Subject: CN=db408742ed68028e3fc83071c074bdf5d92d0b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:eb:d8:65:3f:52:c9:21:a3:79:da:5a:00:0f: 15:02:dc:21:b7:2d:f5:a3:b4:be:ff:cd:79:1b:b3: 75:0d:1b:d7:8d:b3:8a:f0:22:88:4f:dc:d4:3c:b7: 43:81:5d:5d:93:9c:86:74:d1:d3:fe:55:12:a0:98: b5:fe:7d:f8:05:64:08:89:74:52:dd:2b:df:a5:50: f2:8b:87:fc:94:6f:22:90:ac:0f:1e:7b:cf:37:ad: c0:a2:19:87:5f:13:79:e9:5b:ab:34:1a:6b:5c:36: 21:fe:3c:a2:13:40:c9:2e:94:00:a1:64:51:49:49: 72:03:39:ef:97:d1:2f:ff:21:8f:8a:ce:e2:74:9f: b3:1c:35:9d:0b:32:ca:bb:79:25:78:49:4e:1c:0d: d3:69:b7:50:75:0b:8f:b3:50:8f:7c:ea:db:8a:27: ac:80:e5:13:ce:95:09:a6:20:63:45:8c:3a:01:34: 85:a6:7a:04:72:ba:8d:0a:37:35:8a:02:d7:51:55: a8:25:44:b1:7b:6a:25:17:fc:c3:11:a5:d9:6b:be: 1e:38:03:2f:17:63:e3:2a:2c:ce:27:74:1c:7c:6b: df:c6:00:f4:c3:d4:1b:38:05:15:ec:75:c8:9b:92: 4d:fc:3c:8e:70:48:e3:a2:b6:52:19:f0:83:0d:ac: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:40:87:42:ED:68:02:8E:3F:C8:30:71:C0:74:BD:F5:D9:2D:0B:03 X509v3 Authority Key Identifier: keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:76:bc:50:0d:5c:67:06:1b:82:6c:51:9a:7f:ac:ed:2a:4f: be:0a:a1:a5:c6:bc:a1:57:38:db:f6:8b:d0:9b:a9:ab:71:93: 9c:d7:17:fd:39:e7:9c:fa:22:1a:62:74:22:ea:b5:9d:19:4e: fb:07:d9:d2:a4:d3:a1:59:d7:b1:b7:40:1d:ae:c8:cd:95:49: 8f:96:6c:3c:4f:8c:9c:83:e7:fd:23:6c:48:26:68:9b:2b:a3: 9e:d2:33:23:d5:98:53:c0:05:0f:43:73:ac:80:b8:41:0f:c9: 2a:bf:af:f7:09:a5:98:a0:9e:ac:46:76:60:1e:92:0a:6b:85: ad:f7:f6:1a:27:01:be:08:fa:d2:de:b9:a4:51:b2:3f:a3:10: 46:59:db:dc:b0:e3:2b:8e:be:bb:de:ff:bb:4c:84:de:32:ca: c8:7b:75:90:ce:23:84:52:f8:59:58:6d:03:af:5c:9f:cb:02: b6:24:a2:18:71:f9:00:e1:ef:79:ce:fe:74:c9:b4:e2:26:6b: b1:9f:cb:34:da:6e:20:80:2f:26:6d:b0:11:b8:5c:1b:d3:d9: 59:00:56:f1:73:fc:c7:ac:e2:c0:7d:19:16:f0:64:9d:f6:3f: ad:d9:0a:fe:d7:75:15:eb:e0:71:b9:fa:97:30:f4:69:39:7b: 54:67:7b:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rnWgMB3W+B3guigFkZBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWFhM2VmZjQ3NWIwMTBiZGU0MTU0ZjNiZDQ3NDNhN2Mw YmFlNTUwHhcNMjUxMjA2MjIwMDQyWhcNMjUxMjA3MjIwMDQyWjAzMTEwLwYDVQQD EyhkYjQwODc0MmVkNjgwMjhlM2ZjODMwNzFjMDc0YmRmNWQ5MmQwYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+vYZT9SySGjedpaAA8VAtwhty31 o7S+/815G7N1DRvXjbOK8CKIT9zUPLdDgV1dk5yGdNHT/lUSoJi1/n34BWQIiXRS 3SvfpVDyi4f8lG8ikKwPHnvPN63AohmHXxN56VurNBprXDYh/jyiE0DJLpQAoWRR SUlyAznvl9Ev/yGPis7idJ+zHDWdCzLKu3kleElOHA3TabdQdQuPs1CPfOrbiies gOUTzpUJpiBjRYw6ATSFpnoEcrqNCjc1igLXUVWoJUSxe2olF/zDEaXZa74eOAMv F2PjKizOJ3QcfGvfxgD0w9QbOAUV7HXIm5JN/DyOcEjjorZSGfCDDayPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtAh0LtaAKOP8gwccB0vfXZLQsDMB8GA1UdIwQY MBaAFOAao+/0dbAQveQVTzvUdDp8C65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2Ut M2QwY2Q5ODYxOTBmLzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2UtM2QwY2Q5ODYxOTBm LzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3a8UA1c ZwYbgmxRmn+s7SpPvgqhpca8oVc42/aL0Jupq3GTnNcX/TnnnPoiGmJ0Iuq1nRlO +wfZ0qTToVnXsbdAHa7IzZVJj5ZsPE+MnIPn/SNsSCZomyujntIzI9WYU8AFD0Nz rIC4QQ/JKr+v9wmlmKCerEZ2YB6SCmuFrff2GicBvgj60t65pFGyP6MQRlnb3LDj K46+u97/u0yE3jLKyHt1kM4jhFL4WVhtA69cn8sCtiSiGHH5AOHvec7+dMm04iZr sZ/LNNpuIIAvJm2wEbhcG9PZWQBW8XP8x6ziwH0ZFvBknfY/rdkK/td1Fevgcbn6 lzD0aTl7VGd71g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:15 2025 by rpki-client