This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json) Hash identifier: oGXihPAqUOp1innH2TL3so4l6mTQ8aDQ+DAlUoK/Oek= Subject key identifier: C0:72:39:64:F1:D9:91:D0:53:B5:1C:FD:AA:22:2C:23:47:E4:0D:CF Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17 Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17 Certificate serial: 019AF276D64835B75B5D9FF19D0FD3CF2F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:05 +0000 Manifest this update: Sat 06 Dec 2025 07:01:05 +0000 Manifest next update: Sun 07 Dec 2025 07:01:05 +0000 Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=) 2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: TYpbw3/vJZLVeXkBYy/UavaHsfL/UzPklmzn11O+ga4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d6:48:35:b7:5b:5d:9f:f1:9d:0f:d3:cf:2f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17 Validity Not Before: Dec 6 07:01:05 2025 GMT Not After : Dec 7 07:01:05 2025 GMT Subject: CN=c0723964f1d991d053b51cfdaa222c2347e40dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:4d:9f:8e:91:71:0a:da:a0:92:32:e6:62: 35:e7:0a:da:3b:d3:61:92:ba:0a:5e:75:36:57:ae: a7:08:3e:06:a2:f0:f9:08:58:0d:9e:4e:d0:fb:6e: 3e:d1:8b:6b:cc:eb:40:42:e7:2a:11:a3:64:13:78: f6:3a:ee:91:3a:3b:85:26:75:85:5e:b8:36:d1:41: 9d:ad:5c:19:10:af:33:8f:cb:ca:9d:90:f5:97:80: af:23:2b:68:49:f6:a5:ae:e1:b7:1c:86:26:0c:e1: 4a:66:5a:b4:84:a6:2f:20:9c:13:f2:3f:0c:f8:48: 70:65:3b:c1:fc:6a:77:2c:92:6d:89:9a:e3:2a:03: ea:b4:e4:a0:3b:c2:b2:78:74:69:a0:7f:21:84:84: f9:52:7d:a6:b5:50:d4:28:fa:66:59:23:91:f3:26: 02:a9:f9:32:ef:25:b5:97:1c:9d:01:1e:df:28:e5: 87:fd:d6:11:db:d2:95:18:98:3b:bc:d1:28:46:e5: fb:a0:b5:88:83:89:1b:28:a5:58:19:b1:09:34:93: f0:dd:f9:cb:6a:af:33:e8:12:64:3a:be:a4:49:5f: 42:66:9a:62:08:ad:1e:b4:9a:fa:de:6a:8f:71:7f: 70:70:60:31:fd:a8:6f:14:d8:37:8e:3d:39:74:b8: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:72:39:64:F1:D9:91:D0:53:B5:1C:FD:AA:22:2C:23:47:E4:0D:CF X509v3 Authority Key Identifier: keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0a:1c:86:f9:5f:f9:61:f3:04:56:8c:8b:dd:9e:73:cd:2f: 62:b0:dd:c5:48:e4:36:cb:6f:dd:b0:12:bd:39:d4:42:cf:02: 79:42:ac:5b:cd:8f:ba:73:1c:d8:2f:85:62:19:3b:7c:aa:8f: a1:31:53:82:73:21:3d:e0:be:1f:ca:55:b8:eb:ab:e9:af:ec: f8:2f:de:9f:60:e2:63:67:ec:c5:00:37:1a:5b:8a:a6:a6:fc: 59:f7:8c:c1:59:87:b1:f9:bf:4e:77:b1:bb:16:3a:35:6b:74: 91:73:a6:c5:f0:cf:ce:7a:85:39:0f:58:da:6f:d0:d7:eb:f9: 11:e8:0b:1e:7b:36:45:50:5b:71:37:1c:b0:2c:64:0b:30:fd: 2b:c6:cf:d7:85:b1:29:62:ab:2e:10:87:13:a2:fa:5d:d3:82: b1:0b:a9:e1:86:4f:52:c8:44:4c:ab:87:f8:69:6d:fe:10:b6: bf:cb:96:bf:2e:a3:6e:ef:ab:6a:7a:15:e2:cf:d1:66:62:32: fb:74:55:61:87:59:7d:93:57:b5:2a:1c:b5:05:4b:54:c1:8b: 92:06:0c:be:0d:38:a4:e4:3a:eb:f9:9a:cc:fb:01:f0:33:e9: 83:74:f5:5a:0e:ad:b8:a6:fc:b6:ac:bf:ea:c8:49:da:b0:34: 3c:a6:47:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtZINbdbXZ/xnQ/Tzy+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2 OGVmMTcwHhcNMjUxMjA2MDcwMTA1WhcNMjUxMjA3MDcwMTA1WjAzMTEwLwYDVQQD EyhjMDcyMzk2NGYxZDk5MWQwNTNiNTFjZmRhYTIyMmMyMzQ3ZTQwZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy29Nn46RcQraoJIy5mI15wraO9Nh kroKXnU2V66nCD4GovD5CFgNnk7Q+24+0YtrzOtAQucqEaNkE3j2Ou6ROjuFJnWF Xrg20UGdrVwZEK8zj8vKnZD1l4CvIytoSfalruG3HIYmDOFKZlq0hKYvIJwT8j8M +EhwZTvB/Gp3LJJtiZrjKgPqtOSgO8KyeHRpoH8hhIT5Un2mtVDUKPpmWSOR8yYC qfky7yW1lxydAR7fKOWH/dYR29KVGJg7vNEoRuX7oLWIg4kbKKVYGbEJNJPw3fnL aq8z6BJkOr6kSV9CZppiCK0etJr63mqPcX9wcGAx/ahvFNg3jj05dLhXvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMByOWTx2ZHQU7Uc/aoiLCNH5A3PMB8GA1UdIwQY MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3 LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgochvlf +WHzBFaMi92ec80vYrDdxUjkNstv3bASvTnUQs8CeUKsW82PunMc2C+FYhk7fKqP oTFTgnMhPeC+H8pVuOur6a/s+C/en2DiY2fsxQA3GluKpqb8WfeMwVmHsfm/Tnex uxY6NWt0kXOmxfDPznqFOQ9Y2m/Q1+v5EegLHns2RVBbcTccsCxkCzD9K8bP14Wx KWKrLhCHE6L6XdOCsQup4YZPUshETKuH+Glt/hC2v8uWvy6jbu+ranoV4s/RZmIy +3RVYYdZfZNXtSoctQVLVMGLkgYMvg04pOQ66/mazPsB8DPpg3T1Wg6tuKb8tqy/ 6shJ2rA0PKZH2A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:00:51 2025 by rpki-client