This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json) Hash identifier: uvwO+SfxyeiJNqUv7CPlAK1vcp8H0+Bn73+Tm/DoE+g= Subject key identifier: DF:C1:A5:96:0F:57:8D:99:72:6A:34:4D:FE:77:71:B3:A7:B8:67:A2 Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d Certificate serial: 019AF31C9037B71BDF8F04D68CD7F30D7494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft Manifest number: 8D Signing time: Sat 06 Dec 2025 10:02:06 +0000 Manifest this update: Sat 06 Dec 2025 10:02:06 +0000 Manifest next update: Sun 07 Dec 2025 10:02:06 +0000 Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: jQWTw+EOOh21uJ84fa6V9Hmf9wVDJNEMxItkRJ0lN28=) 2: NxyC245LfoIGu7NVTJi-_dDCgvs.roa (hash: Suj+SVX/zjejO/imh+c1lgrmaGy+Ijth/7DtIkk94wQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:90:37:b7:1b:df:8f:04:d6:8c:d7:f3:0d:74:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d Validity Not Before: Dec 6 10:02:06 2025 GMT Not After : Dec 7 10:02:06 2025 GMT Subject: CN=dfc1a5960f578d99726a344dfe7771b3a7b867a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:1b:a3:f8:00:02:11:2f:7f:4d:92:5e:37: a2:b2:94:79:94:b9:5c:81:86:36:ea:db:7e:70:b2: 56:08:e4:5f:46:c4:5a:65:93:11:48:fb:df:62:f4: c2:16:a9:a1:a3:9e:36:4c:d0:b2:95:ab:ec:56:ee: 23:ad:18:2e:f8:92:22:9b:11:81:ca:f3:76:55:6d: 1f:9c:8a:4a:a9:23:33:63:34:b4:34:d2:44:84:54: 0c:25:ac:ae:bb:01:e3:c1:46:95:7a:94:9d:c6:60: 16:a2:17:73:64:fc:a3:1b:32:6b:86:a9:fc:e5:b5: 04:db:ec:03:ac:ae:b3:92:14:30:cc:a6:22:64:61: 73:f4:6c:31:d4:65:ff:d2:67:dc:41:d6:a0:66:50: 2e:50:14:c4:00:4c:f6:3b:d9:1e:a7:84:ef:b4:1e: a4:87:67:cf:36:61:af:cc:72:1a:5f:71:e8:aa:24: 12:ff:61:63:16:35:a2:bc:eb:ad:a5:41:35:23:20: a3:54:40:61:f1:e2:a5:55:57:bd:da:5a:ec:01:ee: 9e:99:53:d4:99:df:9c:0e:8b:70:11:bd:ff:82:26: 00:f0:c7:c0:ec:6f:45:27:54:ac:3a:5a:88:e7:e6: ee:dd:07:ee:17:87:20:0a:81:61:05:b0:bd:20:20: 90:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C1:A5:96:0F:57:8D:99:72:6A:34:4D:FE:77:71:B3:A7:B8:67:A2 X509v3 Authority Key Identifier: keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:9e:0d:da:b3:bd:b6:64:06:6b:c3:df:5e:e3:d0:62:74:1d: 76:f7:d5:4f:e3:06:be:61:d3:a6:e9:83:58:e6:ad:e0:40:63: 7b:f7:f1:a6:d2:07:e6:02:09:c0:b9:f6:eb:8d:a4:55:bd:30: 0e:50:db:77:91:e1:9e:87:9c:54:fa:c5:3a:b6:65:4d:02:46: f1:c1:6a:0d:a5:de:03:d7:b1:74:50:ab:31:db:a6:df:08:a2: 37:c7:c5:bf:11:a4:4d:39:d3:b3:b8:71:e9:fb:b5:fa:c1:d1: f1:ce:33:f0:cd:e0:ca:d8:f3:9d:d9:5e:6a:5c:81:67:ab:0e: a0:e2:d7:fd:d6:e2:b9:ea:bc:0e:bd:be:fd:a6:f1:fa:55:a2: 85:f1:7a:3d:ea:df:0a:74:0f:51:d8:75:6d:ab:ed:d7:0a:f5: 6f:28:3b:f9:c1:2a:81:94:46:ea:64:ff:22:50:69:db:2c:af: aa:36:ba:51:c3:fa:31:aa:b2:c7:a0:6b:6a:21:e6:2e:d7:73: 46:d5:ef:82:52:37:35:cc:c2:e8:49:88:b4:2b:07:09:50:8b: 5f:11:bb:5c:9c:15:44:07:03:8d:50:d3:56:ad:99:04:42:52: b1:06:9d:cc:a7:cd:48:05:42:5d:26:9f:2a:97:5a:7c:39:51: 25:53:c1:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJA3txvfjwTWjNfzDXSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWMwMTBlOTUwMTVjMjEyMzY0MWQzMzEyMGE3ZTljOTAw ODAwMmQwHhcNMjUxMjA2MTAwMjA2WhcNMjUxMjA3MTAwMjA2WjAzMTEwLwYDVQQD EyhkZmMxYTU5NjBmNTc4ZDk5NzI2YTM0NGRmZTc3NzFiM2E3Yjg2N2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDgbo/gAAhEvf02SXjeispR5lLlc gYY26tt+cLJWCORfRsRaZZMRSPvfYvTCFqmho542TNCylavsVu4jrRgu+JIimxGB yvN2VW0fnIpKqSMzYzS0NNJEhFQMJayuuwHjwUaVepSdxmAWohdzZPyjGzJrhqn8 5bUE2+wDrK6zkhQwzKYiZGFz9Gwx1GX/0mfcQdagZlAuUBTEAEz2O9kep4TvtB6k h2fPNmGvzHIaX3HoqiQS/2FjFjWivOutpUE1IyCjVEBh8eKlVVe92lrsAe6emVPU md+cDotwEb3/giYA8MfA7G9FJ1SsOlqI5+bu3QfuF4cgCoFhBbC9ICCQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/BpZYPV42Zcmo0Tf53cbOnuGeiMB8GA1UdIwQY MBaAFOMcAQ6VAVwhI2QdMxIKfpyQCAAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1Mjkt YjQ3ZTc0ZWQ0ZTdlLzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1MjktYjQ3ZTc0ZWQ0ZTdl LzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx54N2rO9 tmQGa8PfXuPQYnQddvfVT+MGvmHTpumDWOat4EBje/fxptIH5gIJwLn2642kVb0w DlDbd5HhnoecVPrFOrZlTQJG8cFqDaXeA9exdFCrMdum3wiiN8fFvxGkTTnTs7hx 6fu1+sHR8c4z8M3gytjzndlealyBZ6sOoOLX/dbiueq8Dr2+/abx+lWihfF6Perf CnQPUdh1bavt1wr1byg7+cEqgZRG6mT/IlBp2yyvqja6UcP6Maqyx6BraiHmLtdz RtXvglI3NczC6EmItCsHCVCLXxG7XJwVRAcDjVDTVq2ZBEJSsQadzKfNSAVCXSaf KpdafDlRJVPBsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:30:57 2025 by rpki-client