This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json) Hash identifier: T8cyMTWlxU2gcQNvve77TXAurGU4Whx1TM/xmshL3ZQ= Subject key identifier: A2:C0:26:BF:19:7D:50:F5:B5:A1:F7:B0:2A:DC:F3:DF:4A:C5:74:3B Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a Certificate serial: 019AF2ADAEBD83FE2943F1E97D99613FC210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft Manifest number: 1260 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: mbsayE4EWevO/GMqta2Lt5/FZV8JolDpjs/r8kxAnR8=) 2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ae:bd:83:fe:29:43:f1:e9:7d:99:61:3f:c2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=a2c026bf197d50f5b5a1f7b02adcf3df4ac5743b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:d2:cf:1a:41:4f:a7:07:ad:34:57:b7:8a: 83:96:04:6a:1f:69:30:a5:d6:02:88:69:30:60:7a: 57:db:20:60:db:42:4e:71:fe:d0:e5:89:36:ea:7a: 5a:0c:b0:e4:43:d9:7a:05:3f:12:24:0e:33:d6:92: ae:12:7b:60:ba:1c:51:d2:5a:cd:d5:9b:77:53:a0: ab:cc:f7:16:2a:29:17:6b:4d:55:a3:ea:33:71:78: 7b:40:7c:36:16:04:17:a9:2d:4e:dd:9a:a8:32:13: 03:50:7f:d1:1c:68:38:c6:04:f5:0d:e3:a1:37:0b: b1:31:f1:df:e8:bd:9a:c1:18:94:8a:6c:9c:f8:94: 6c:03:76:26:4c:aa:b2:7e:86:5c:cf:dd:6d:c6:8f: ca:bd:83:bd:6e:c7:39:7c:93:d3:bc:9f:35:67:e7: 65:71:aa:74:14:5c:82:5e:b4:11:14:7d:c0:f3:f5: 79:91:b1:4a:01:71:b1:45:5a:2f:a9:d3:32:d5:73: 6b:39:8e:39:b6:87:f5:1f:71:37:a3:2a:d9:60:e9: 55:66:6d:52:ed:34:e7:54:32:bc:b4:e5:0d:7a:10: 78:66:9b:12:d5:d5:c8:cd:74:84:87:74:24:1c:7d: 92:c6:2d:2f:c1:fd:be:96:d1:be:5b:cc:e1:be:9c: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C0:26:BF:19:7D:50:F5:B5:A1:F7:B0:2A:DC:F3:DF:4A:C5:74:3B X509v3 Authority Key Identifier: keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:50:5a:7c:9b:86:fb:0a:a9:9b:ab:cf:3c:c0:e8:56:4f:9e: 2c:cb:55:00:5d:ea:13:18:77:0d:0a:00:02:3c:9b:46:f7:98: 5c:d1:5a:74:91:36:5c:68:d4:68:ed:72:4c:be:98:ed:e0:9b: 83:bd:bd:18:ca:c6:bc:32:ce:e1:7f:8f:50:15:db:8e:a5:48: 7a:4c:ae:8c:08:73:e0:61:da:33:ea:bf:79:c1:c2:7d:0a:3a: 89:dd:7d:b8:58:d3:26:69:7d:10:fd:6a:cd:1e:04:49:7b:ed: 7a:36:78:c3:c9:d5:33:52:47:1b:b0:7c:82:38:70:9c:13:0c: 9e:73:bf:cb:2b:b6:f1:30:8e:f0:08:9d:6d:26:65:db:64:dd: 3a:24:5a:72:97:90:f1:41:dc:7f:ef:9d:f8:96:9f:c6:07:5c: 52:0f:9b:41:fc:7c:d0:62:64:77:fc:6f:fa:81:5f:0b:0c:7b: c2:32:25:fd:3f:b3:91:f5:6e:0a:df:2d:70:65:4f:9c:e2:80: 21:b5:54:35:5e:6c:5c:af:99:60:a9:9a:12:ba:ec:58:94:42: 63:79:0f:0c:a2:90:5c:27:b8:26:af:9e:cb:ff:94:98:83:b0: ba:47:bf:02:3f:b3:bb:d7:93:d2:0c:ab:4a:e1:57:05:1c:40: fa:8f:27:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra69g/4pQ/HpfZlhP8IQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyODRlM2QyZjFhMjFjODJiYmIzZDY2Zjc2ZjBiZDkzMzM1 MTNjOWEwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EyhhMmMwMjZiZjE5N2Q1MGY1YjVhMWY3YjAyYWRjZjNkZjRhYzU3NDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HfSzxpBT6cHrTRXt4qDlgRqH2kw pdYCiGkwYHpX2yBg20JOcf7Q5Yk26npaDLDkQ9l6BT8SJA4z1pKuEntguhxR0lrN 1Zt3U6CrzPcWKikXa01Vo+ozcXh7QHw2FgQXqS1O3ZqoMhMDUH/RHGg4xgT1DeOh NwuxMfHf6L2awRiUimyc+JRsA3YmTKqyfoZcz91txo/KvYO9bsc5fJPTvJ81Z+dl cap0FFyCXrQRFH3A8/V5kbFKAXGxRVovqdMy1XNrOY45tof1H3E3oyrZYOlVZm1S 7TTnVDK8tOUNehB4ZpsS1dXIzXSEh3QkHH2Sxi0vwf2+ltG+W8zhvpz03QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLAJr8ZfVD1taH3sCrc899KxXQ7MB8GA1UdIwQY MBaAFOKE49LxohyCu7PWb3bwvZMzUTyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgt OTAxYTM3M2RmMDgwLzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgtOTAxYTM3M2RmMDgw LzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1BafJuG +wqpm6vPPMDoVk+eLMtVAF3qExh3DQoAAjybRveYXNFadJE2XGjUaO1yTL6Y7eCb g729GMrGvDLO4X+PUBXbjqVIekyujAhz4GHaM+q/ecHCfQo6id19uFjTJml9EP1q zR4ESXvtejZ4w8nVM1JHG7B8gjhwnBMMnnO/yyu28TCO8AidbSZl22TdOiRacpeQ 8UHcf++d+JafxgdcUg+bQfx80GJkd/xv+oFfCwx7wjIl/T+zkfVuCt8tcGVPnOKA IbVUNV5sXK+ZYKmaErrsWJRCY3kPDKKQXCe4Jq+ey/+UmIOwuke/Aj+zu9eT0gyr SuFXBRxA+o8nWg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:02 2025 by rpki-client