This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json) Hash identifier: jYemVwPJW+27Bw/hzp5WT8QWP8SJWm3fM/KbMUn+MM4= Subject key identifier: F7:DD:DA:05:1B:64:21:19:27:5C:33:A5:B8:B9:49:EB:53:AF:1C:5D Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Certificate serial: 019AF5098ADFAF51741094ED19FD23576D9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:00:34 +0000 Manifest this update: Sat 06 Dec 2025 19:00:34 +0000 Manifest next update: Sun 07 Dec 2025 19:00:34 +0000 Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: k/sECEgU9qMyufKEEsQ/fOdR4j9iv9N9wSo9IP1/mKM=) 2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8a:df:af:51:74:10:94:ed:19:fd:23:57:6d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Validity Not Before: Dec 6 19:00:34 2025 GMT Not After : Dec 7 19:00:34 2025 GMT Subject: CN=f7ddda051b642119275c33a5b8b949eb53af1c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:b1:e9:66:71:b2:2d:ee:ea:20:c3:43:fa: ac:23:66:a9:97:6a:08:fe:ed:88:f2:e3:8f:9e:27: 17:07:2c:a0:90:4d:79:0b:ab:c4:c3:0a:7f:69:ea: f2:ef:f8:1e:47:01:ea:a9:ab:3b:5d:80:37:e5:b2: fe:b6:9f:14:ab:c4:9a:96:29:cf:15:c0:7c:bb:f0: c9:77:49:e0:fa:08:1f:a8:12:f1:21:fb:2b:de:a2: f6:5c:d7:63:e7:0d:0e:4c:42:87:23:07:d3:c6:8a: ad:78:94:66:68:5f:47:d1:83:30:f9:63:ee:d3:1a: 21:26:e6:81:f3:88:fd:65:e7:28:30:0e:b0:64:d5: 77:e3:a7:a4:b4:52:b9:10:74:25:4c:c2:82:7e:4a: 32:92:2f:f5:85:2e:0f:8c:29:b7:8e:44:a1:81:cd: d3:73:72:3e:6a:a8:57:28:3d:ed:d9:b8:cd:cf:de: 60:b5:3e:59:6c:13:57:ad:34:73:77:01:bd:5e:70: 22:17:59:4f:e9:1b:88:97:4e:a2:ab:b7:64:1b:68: b8:88:78:dc:b1:98:28:82:ff:6c:00:57:de:ea:bd: 87:46:49:e6:8e:87:96:4a:7e:01:35:0c:af:25:84: cc:08:f0:68:d6:05:f5:11:4a:74:18:34:2c:b3:cb: 46:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:DA:05:1B:64:21:19:27:5C:33:A5:B8:B9:49:EB:53:AF:1C:5D X509v3 Authority Key Identifier: keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:30:37:45:d2:8d:8f:56:e3:34:ff:22:88:97:e1:c6:cc:9b: 1b:d8:45:9a:61:99:12:d2:b8:ce:bd:7e:17:75:fc:fe:40:36: 3c:2c:5b:47:b7:73:bc:9b:a7:15:64:35:87:8f:c2:d9:ff:18: 9c:74:c6:eb:c0:61:c1:b0:6a:22:a4:9d:51:b8:68:90:30:02: 98:42:7d:3b:38:43:c0:4b:40:0e:a1:41:5e:95:29:94:45:49: 2f:01:dd:20:9a:d2:16:02:b9:5e:b7:c5:78:d3:72:ce:21:b4: 80:87:00:8b:fe:95:58:ae:a6:1c:30:40:58:d6:c6:72:dd:cf: 19:18:30:91:65:01:d7:4d:cc:bc:c4:53:5f:31:00:79:da:87: f0:4e:4b:46:20:2d:06:b4:4c:80:68:81:d9:67:27:9d:10:27: c2:1e:68:a9:65:2d:18:ea:76:d3:ac:11:1d:67:63:45:88:74: bb:1f:f1:8a:26:fe:84:05:0e:b2:cc:a3:a6:7b:61:86:f9:a0: c5:b9:6e:dc:c0:fb:a2:13:ba:23:02:dc:2f:14:a7:d0:e0:c1: 10:01:c8:6d:d7:a9:fc:4f:89:6b:27:14:56:84:99:4f:d8:ca: 6c:5b:9b:1f:01:55:9d:18:ea:11:a2:f6:e8:35:a9:10:39:66: 60:de:b3:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYrfr1F0EJTtGf0jV22aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDc1NjkwZDM5YzgzMDE4MGIzZjU1YzQ5ZDE0MGEyYTA0 ZDM5MTcwHhcNMjUxMjA2MTkwMDM0WhcNMjUxMjA3MTkwMDM0WjAzMTEwLwYDVQQD EyhmN2RkZGEwNTFiNjQyMTE5Mjc1YzMzYTViOGI5NDllYjUzYWYxYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7ux6WZxsi3u6iDDQ/qsI2apl2oI /u2I8uOPnicXByygkE15C6vEwwp/aery7/geRwHqqas7XYA35bL+tp8Uq8SalinP FcB8u/DJd0ng+ggfqBLxIfsr3qL2XNdj5w0OTEKHIwfTxoqteJRmaF9H0YMw+WPu 0xohJuaB84j9ZecoMA6wZNV346ektFK5EHQlTMKCfkoyki/1hS4PjCm3jkShgc3T c3I+aqhXKD3t2bjNz95gtT5ZbBNXrTRzdwG9XnAiF1lP6RuIl06iq7dkG2i4iHjc sZgogv9sAFfe6r2HRknmjoeWSn4BNQyvJYTMCPBo1gX1EUp0GDQss8tGcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfd2gUbZCEZJ1wzpbi5SetTrxxdMB8GA1UdIwQY MBaAFOHXVpDTnIMBgLP1XEnRQKKgTTkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUt YjlhMzZlYjllZTIxLzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUtYjlhMzZlYjllZTIx LzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjA3RdKN j1bjNP8iiJfhxsybG9hFmmGZEtK4zr1+F3X8/kA2PCxbR7dzvJunFWQ1h4/C2f8Y nHTG68BhwbBqIqSdUbhokDACmEJ9OzhDwEtADqFBXpUplEVJLwHdIJrSFgK5XrfF eNNyziG0gIcAi/6VWK6mHDBAWNbGct3PGRgwkWUB103MvMRTXzEAedqH8E5LRiAt BrRMgGiB2WcnnRAnwh5oqWUtGOp206wRHWdjRYh0ux/xiib+hAUOssyjpnthhvmg xblu3MD7ohO6IwLcLxSn0ODBEAHIbdep/E+JaycUVoSZT9jKbFubHwFVnRjqEaL2 6DWpEDlmYN6zHg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:21 2025 by rpki-client