This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json) Hash identifier: 4aVSZZgccY9XdGlkUgiDF3+neIhyWnSgx/hGWbIMMCs= Subject key identifier: 4D:99:D5:CD:60:E2:D3:CE:B8:2D:33:B2:38:20:48:5A:3F:89:A3:BA Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77 Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177 Certificate serial: 019AF31D674D036190ADA496E0552C8A9C0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft Manifest number: 03C5 Signing time: Sat 06 Dec 2025 10:03:01 +0000 Manifest this update: Sat 06 Dec 2025 10:03:01 +0000 Manifest next update: Sun 07 Dec 2025 10:03:01 +0000 Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=) 2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: iVawSmeJtVaejyvsYEnHVAKq/uSdo8Njtxu4XeHVzVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:67:4d:03:61:90:ad:a4:96:e0:55:2c:8a:9c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177 Validity Not Before: Dec 6 10:03:01 2025 GMT Not After : Dec 7 10:03:01 2025 GMT Subject: CN=4d99d5cd60e2d3ceb82d33b23820485a3f89a3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:12:aa:72:66:17:2d:09:fa:a7:db:e8:9b: f1:8b:06:05:d7:08:81:f2:3d:38:f0:6f:00:e2:79: bd:d5:83:5d:8d:7d:28:4c:4a:6f:a1:83:99:8f:b2: 05:9d:2c:19:c2:cb:57:80:69:54:bd:e6:1e:ae:d1: 8a:68:c9:d9:04:5a:21:87:a0:4d:bb:e4:c8:ef:91: 17:3a:65:52:0e:df:ed:7b:c7:9e:89:50:91:6e:18: 4a:62:d1:b0:dd:e2:b2:66:73:58:7c:f5:5e:56:39: 2c:d5:33:43:f9:96:f6:30:b4:9a:e8:82:6f:64:f2: 9f:27:b7:3b:01:fa:27:26:10:7d:35:24:06:ff:7f: 89:7f:37:45:29:c8:c2:4d:1d:fd:bc:a9:06:6c:b0: 7b:54:c8:62:29:41:bf:a2:46:5b:87:53:b6:cf:0d: b0:aa:2d:98:68:4f:92:e8:cc:60:ad:12:e9:05:ba: 79:bf:2e:27:ce:24:8b:8a:8e:e6:a9:d3:6f:48:0f: 17:fa:fa:21:a9:3a:61:b0:c0:3d:62:3b:f1:34:4f: e9:59:ac:c1:3c:46:ce:68:75:80:a4:18:66:17:1c: 2f:28:bd:b4:b5:d7:16:37:8d:84:97:73:08:20:e0: 73:cd:40:60:8e:c4:75:ec:d6:96:d5:9c:2e:71:7b: d7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:99:D5:CD:60:E2:D3:CE:B8:2D:33:B2:38:20:48:5A:3F:89:A3:BA X509v3 Authority Key Identifier: keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b0:59:6c:74:74:33:77:a4:32:b8:9d:63:8d:b7:e6:5c:fb: 05:46:50:fa:76:92:ae:85:a7:e4:76:72:d2:d6:88:32:62:9f: 2b:aa:cc:3c:09:06:49:5b:7e:ce:60:d6:62:8f:13:38:1b:e8: 90:bf:98:5d:f7:03:c7:a0:0e:54:ca:97:8d:5f:9f:87:12:39: 6f:20:f3:73:16:05:2e:2c:8e:56:46:fa:9a:7e:0b:88:49:a8: fd:84:9d:31:ce:e1:6e:2d:19:74:a5:8f:7c:6b:16:46:c5:c6: 91:d4:ae:23:3f:d5:3c:61:41:68:71:46:48:f6:88:81:76:5a: 52:85:7d:bc:d0:a0:71:2d:e9:30:08:69:3d:8d:ad:ee:1b:c6: fe:7e:3f:de:06:78:16:57:9e:1e:11:69:b2:28:60:36:0f:79: a9:da:09:42:b1:6a:ee:3d:e9:4a:c2:4f:27:98:3b:f0:ef:fd: eb:c2:67:10:1b:94:77:ec:47:84:91:8b:46:ee:64:5f:d7:a3: 9f:9d:7c:23:21:da:0d:17:a4:ae:6a:e3:02:5a:63:2c:19:5f: 8a:a5:24:7c:6e:f7:00:47:39:3d:13:d8:4f:77:24:f0:1f:dd: b0:60:b3:f3:93:ea:53:0a:ca:3b:28:9b:c2:14:2e:e4:f8:73: 98:38:66:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWdNA2GQraSW4FUsipwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjQ2OTJhOTI5MWYyYzY3YjU2Y2MxNWRhNGQzMTAxMjAy MzAxNzcwHhcNMjUxMjA2MTAwMzAxWhcNMjUxMjA3MTAwMzAxWjAzMTEwLwYDVQQD Eyg0ZDk5ZDVjZDYwZTJkM2NlYjgyZDMzYjIzODIwNDg1YTNmODlhM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR0SqnJmFy0J+qfb6JvxiwYF1wiB 8j048G8A4nm91YNdjX0oTEpvoYOZj7IFnSwZwstXgGlUveYertGKaMnZBFohh6BN u+TI75EXOmVSDt/te8eeiVCRbhhKYtGw3eKyZnNYfPVeVjks1TND+Zb2MLSa6IJv ZPKfJ7c7AfonJhB9NSQG/3+JfzdFKcjCTR39vKkGbLB7VMhiKUG/okZbh1O2zw2w qi2YaE+S6MxgrRLpBbp5vy4nziSLio7mqdNvSA8X+vohqTphsMA9YjvxNE/pWazB PEbOaHWApBhmFxwvKL20tdcWN42El3MIIOBzzUBgjsR17NaW1ZwucXvXawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2Z1c1g4tPOuC0zsjggSFo/iaO6MB8GA1UdIwQY MBaAFOK0aSqSkfLGe1bMFdpNMQEgIwF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEt YzI2NGI3NWI2Yjc4LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEtYzI2NGI3NWI2Yjc4 LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyLBZbHR0 M3ekMridY4235lz7BUZQ+naSroWn5HZy0taIMmKfK6rMPAkGSVt+zmDWYo8TOBvo kL+YXfcDx6AOVMqXjV+fhxI5byDzcxYFLiyOVkb6mn4LiEmo/YSdMc7hbi0ZdKWP fGsWRsXGkdSuIz/VPGFBaHFGSPaIgXZaUoV9vNCgcS3pMAhpPY2t7hvG/n4/3gZ4 FleeHhFpsihgNg95qdoJQrFq7j3pSsJPJ5g78O/968JnEBuUd+xHhJGLRu5kX9ej n518IyHaDRekrmrjAlpjLBlfiqUkfG73AEc5PRPYT3ck8B/dsGCz85PqUwrKOyib whQu5PhzmDhmvA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:54 2025 by rpki-client