This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json) Hash identifier: +HdjFkyQkBjyEsE1UNqN7r+1rVJLXTpnTHUsfebnMw8= Subject key identifier: A8:AC:F5:F3:61:4C:90:F7:29:F1:7F:BE:43:61:2B:DA:6A:24:DF:89 Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7 Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7 Certificate serial: 019AF12DF0657C21BB10D1EA849E5C798A48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft Manifest number: 065D Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: /3mvR60UmnJPu4ZmXKa7AQnTPrj7REgW+S9L375zZFo=) 2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f0:65:7c:21:bb:10:d1:ea:84:9e:5c:79:8a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7 Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=a8acf5f3614c90f729f17fbe43612bda6a24df89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:d3:14:6e:99:8d:3a:f5:d6:9e:90:c4:6e: d7:7b:20:7f:d7:ac:ea:d4:cd:02:ad:20:7d:28:ed: 54:c3:d2:98:a9:e1:7c:5a:3f:ef:73:3a:7c:f3:c4: 6d:97:b3:35:2b:2a:f1:0a:c9:b8:38:12:1a:3e:45: 73:53:9f:db:51:3a:4b:19:15:87:f1:17:11:78:3e: 94:1b:e5:8f:15:0d:af:1d:54:17:e5:d2:97:9d:a8: 48:35:c3:f0:26:5a:7a:c1:d3:44:d9:84:47:6f:db: c5:8d:e7:dd:d5:2a:79:62:3a:f4:fe:38:35:4d:8d: 7c:c2:be:eb:05:b9:a2:26:6e:87:ba:b7:d3:74:a6: 82:6b:17:bb:0c:ec:f1:78:10:f7:7e:e6:89:b5:ba: 47:36:82:2d:c5:38:62:40:e7:10:d1:eb:c3:46:76: 76:b1:13:08:c9:ec:93:eb:0d:aa:2c:f1:da:b7:8a: 5a:10:65:4b:4f:f6:43:3a:f5:85:48:e8:fc:25:e1: ef:aa:ce:2a:0c:69:56:dc:26:bf:d1:e0:df:e9:55: 28:c4:6c:a8:9a:2b:3c:53:87:c2:b0:8d:04:a8:6a: b5:94:a2:6c:3d:9f:ee:55:49:b0:3e:3b:af:f6:f0: ff:fd:03:76:a6:7e:16:92:18:d7:90:4e:87:8a:42: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:F5:F3:61:4C:90:F7:29:F1:7F:BE:43:61:2B:DA:6A:24:DF:89 X509v3 Authority Key Identifier: keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:df:32:7b:9c:11:05:33:c0:b8:1f:48:df:27:c6:2a:0d:d4: fc:49:a9:d9:25:cb:72:36:ac:37:db:d2:b7:e4:25:40:16:d8: 1c:56:e9:c8:02:34:0a:0f:d1:85:79:bb:bc:ab:ab:86:54:46: 57:34:af:9f:6a:cf:df:57:49:64:49:3d:4e:e9:f3:be:a5:93: 76:ad:8c:1f:37:75:a8:13:61:9d:49:ad:28:23:5a:1a:2a:8b: a5:24:ad:f1:84:dd:4c:82:a3:e3:ef:29:a9:cb:ea:00:4b:e2: df:0f:86:49:10:0e:8e:90:f2:52:d6:e0:b9:e9:89:f6:78:72: a9:9f:cf:7c:e2:4c:47:3d:b1:99:98:49:98:cc:91:36:df:e5: 42:14:75:63:59:58:f5:d8:46:ef:a1:c2:31:4f:87:8e:2a:63: 9a:15:d8:2f:a6:c6:1e:a9:33:3b:d7:e2:0d:e5:9f:08:3a:b1: 2a:a8:a9:d1:78:53:91:11:62:ab:1c:c9:9d:f7:5e:47:d1:f3: b4:27:ca:35:d6:4e:6b:60:d3:a6:cd:1d:10:af:c6:7a:b9:ad: 45:23:6b:a9:e0:f4:fd:14:92:5b:5a:b8:f8:4d:16:4b:62:b9: 8a:31:1e:5b:42:98:3c:af:49:59:24:df:20:54:1a:ab:39:f3: 33:20:d6:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfBlfCG7ENHqhJ5ceYpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYjUwOTY3MmI5ZDk5OGI0NjQ5Y2MzNzZhODI5ODc5ZTZm ZWFjYTcwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD EyhhOGFjZjVmMzYxNGM5MGY3MjlmMTdmYmU0MzYxMmJkYTZhMjRkZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxXTFG6ZjTr11p6QxG7XeyB/16zq 1M0CrSB9KO1Uw9KYqeF8Wj/vczp888Rtl7M1KyrxCsm4OBIaPkVzU5/bUTpLGRWH 8RcReD6UG+WPFQ2vHVQX5dKXnahINcPwJlp6wdNE2YRHb9vFjefd1Sp5Yjr0/jg1 TY18wr7rBbmiJm6HurfTdKaCaxe7DOzxeBD3fuaJtbpHNoItxThiQOcQ0evDRnZ2 sRMIyeyT6w2qLPHat4paEGVLT/ZDOvWFSOj8JeHvqs4qDGlW3Ca/0eDf6VUoxGyo mis8U4fCsI0EqGq1lKJsPZ/uVUmwPjuv9vD//QN2pn4WkhjXkE6HikLcgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKis9fNhTJD3KfF/vkNhK9pqJN+JMB8GA1UdIwQY MBaAFOG1CWcrnZmLRknMN2qCmHnm/qynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4Zjkt M2VjNTIyNzcxZjQwLzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4ZjktM2VjNTIyNzcxZjQw LzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOt8ye5wR BTPAuB9I3yfGKg3U/Emp2SXLcjasN9vSt+QlQBbYHFbpyAI0Cg/RhXm7vKurhlRG VzSvn2rP31dJZEk9TunzvqWTdq2MHzd1qBNhnUmtKCNaGiqLpSSt8YTdTIKj4+8p qcvqAEvi3w+GSRAOjpDyUtbguemJ9nhyqZ/PfOJMRz2xmZhJmMyRNt/lQhR1Y1lY 9dhG76HCMU+HjipjmhXYL6bGHqkzO9fiDeWfCDqxKqip0XhTkRFiqxzJnfdeR9Hz tCfKNdZOa2DTps0dEK/GermtRSNrqeD0/RSSW1q4+E0WS2K5ijEeW0KYPK9JWSTf IFQaqznzMyDWnA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:29 2025 by rpki-client