This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json) Hash identifier: RpWzseLt++LmxwLI4AVuvao7fA4XgxFmNdPzow6/dHc= Subject key identifier: 6C:E0:4C:6D:18:3D:7C:9B:68:DA:53:2F:AF:64:36:F8:6F:BB:80:38 Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be Certificate serial: 019AF38A1253820211F79E0C8A858618B255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft Manifest number: 16A0 Signing time: Sat 06 Dec 2025 12:01:43 +0000 Manifest this update: Sat 06 Dec 2025 12:01:43 +0000 Manifest next update: Sun 07 Dec 2025 12:01:43 +0000 Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: 0uOX4WKFlhsS063Y+Nx23NxfmlHu3CbI4BZddz3sy1c=) 2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:12:53:82:02:11:f7:9e:0c:8a:85:86:18:b2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be Validity Not Before: Dec 6 12:01:43 2025 GMT Not After : Dec 7 12:01:43 2025 GMT Subject: CN=6ce04c6d183d7c9b68da532faf6436f86fbb8038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c3:f9:fc:dc:33:b1:19:6b:65:93:03:e6:c4: 7e:4b:37:db:80:98:db:d5:cc:fe:17:b7:b8:df:d8: 95:58:55:2c:2e:cf:d8:d2:df:e2:6d:3d:f9:4f:39: 84:34:d6:b1:b5:d2:a1:14:15:09:43:1d:8b:3c:84: 54:54:7f:c6:46:6a:4e:85:a3:a0:09:eb:9c:4a:d4: 81:f6:78:63:07:4c:e6:38:46:5f:e9:10:34:1d:22: 86:30:97:b6:e6:f1:e4:07:6d:6b:96:7d:67:76:eb: a6:7b:22:0c:16:70:d7:ad:0b:31:ae:38:78:35:17: bb:ab:48:58:09:c0:ce:31:30:8a:e2:1f:07:4b:4c: cd:73:62:4a:d9:a4:4b:58:d6:76:f4:fa:2c:05:5c: 63:a9:78:4a:10:bc:d7:9b:35:04:e8:33:fd:5d:8d: dc:4f:6a:00:c7:01:f7:59:5d:c6:c7:3c:4d:7d:97: 0e:84:52:6b:de:cd:c3:59:15:89:43:bc:b7:d9:63: c7:b0:7f:ab:13:f4:35:77:d9:4a:9a:9f:9d:a0:c5: 01:ef:bd:36:c5:9a:65:5c:89:b5:47:f6:80:08:52: 85:64:8f:46:94:18:8d:a2:88:09:7b:8f:1b:77:a4: aa:eb:d4:8b:de:99:ed:8c:28:ef:ba:3a:f5:74:43: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E0:4C:6D:18:3D:7C:9B:68:DA:53:2F:AF:64:36:F8:6F:BB:80:38 X509v3 Authority Key Identifier: keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bb:3a:99:3d:fc:8a:30:36:6d:fc:c1:fc:3e:6d:cd:76:c7: a0:7c:ce:44:9e:c2:6b:4d:f0:90:7f:20:57:8b:9b:7e:20:5e: 64:ed:88:22:90:63:ee:63:b2:3e:af:a8:d4:9e:de:2b:1a:85: 26:e0:7a:02:f6:f0:a1:37:1c:16:36:91:91:ed:85:d6:58:ee: a0:e1:b0:f1:2c:35:f3:08:a7:5a:e6:e1:a2:01:c9:b2:b8:e8: 0d:9f:c8:9a:d4:7d:12:f5:7c:42:44:9a:ee:a9:57:dd:68:9a: dc:4b:8e:85:41:3b:bf:c2:20:39:17:63:3d:3b:4c:a4:51:0e: 61:5f:06:d2:5b:15:f2:99:6c:8a:37:f2:b4:9a:05:4f:d8:75: 09:dc:64:33:d6:11:d3:e2:fe:a7:79:04:0f:e5:60:5a:a7:7f: 98:2b:ea:29:6b:b9:2d:5a:e1:f8:70:6e:35:1f:38:4a:79:01: 3c:e1:0c:f3:4d:93:2d:24:c2:68:b1:9e:a6:2f:f6:3a:d5:23: 95:d2:44:53:d8:6c:d6:df:03:df:5a:31:b3:00:24:d1:98:4d: a9:60:dc:b0:06:86:ea:ac:35:e8:e2:ff:87:cd:36:05:d9:5c: 29:67:17:b1:91:99:dc:25:1a:87:9b:63:8e:87:6e:86:06:90: e6:13:a5:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihJTggIR954MioWGGLJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3 MWE2YmUwHhcNMjUxMjA2MTIwMTQzWhcNMjUxMjA3MTIwMTQzWjAzMTEwLwYDVQQD Eyg2Y2UwNGM2ZDE4M2Q3YzliNjhkYTUzMmZhZjY0MzZmODZmYmI4MDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcP5/NwzsRlrZZMD5sR+SzfbgJjb 1cz+F7e439iVWFUsLs/Y0t/ibT35TzmENNaxtdKhFBUJQx2LPIRUVH/GRmpOhaOg CeucStSB9nhjB0zmOEZf6RA0HSKGMJe25vHkB21rln1nduumeyIMFnDXrQsxrjh4 NRe7q0hYCcDOMTCK4h8HS0zNc2JK2aRLWNZ29PosBVxjqXhKELzXmzUE6DP9XY3c T2oAxwH3WV3GxzxNfZcOhFJr3s3DWRWJQ7y32WPHsH+rE/Q1d9lKmp+doMUB7702 xZplXIm1R/aACFKFZI9GlBiNoogJe48bd6Sq69SL3pntjCjvujr1dEOJjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzgTG0YPXybaNpTL69kNvhvu4A4MB8GA1UdIwQY MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7s6mT38 ijA2bfzB/D5tzXbHoHzORJ7Ca03wkH8gV4ubfiBeZO2IIpBj7mOyPq+o1J7eKxqF JuB6AvbwoTccFjaRke2F1ljuoOGw8Sw18winWubhogHJsrjoDZ/ImtR9EvV8QkSa 7qlX3Wia3EuOhUE7v8IgORdjPTtMpFEOYV8G0lsV8plsijfytJoFT9h1CdxkM9YR 0+L+p3kED+VgWqd/mCvqKWu5LVrh+HBuNR84SnkBPOEM802TLSTCaLGepi/2OtUj ldJEU9hs1t8D31oxswAk0ZhNqWDcsAaG6qw16OL/h802BdlcKWcXsZGZ3CUah5tj joduhgaQ5hOlww== -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:59 2025 by rpki-client