This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft File: 4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json) Hash identifier: k2sLjxJU51pFXlu9aTVuoqH4sSEVwZ38Mx1IgkMeevQ= Subject key identifier: D1:35:40:06:CC:9A:07:73:B3:80:53:FE:A6:30:1C:AE:6D:FB:E1:DC Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33 Certificate serial: 019AF31B30C4A7F199115507A53A3C784E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft Manifest number: 0C2D Signing time: Sat 06 Dec 2025 10:00:36 +0000 Manifest this update: Sat 06 Dec 2025 10:00:36 +0000 Manifest next update: Sun 07 Dec 2025 10:00:36 +0000 Files and hashes: 1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: 8SKFjnZp4K6QJlmMK3xGidGSgZEEzOovKpWMbbRl/E8=) 2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=) 3: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=) 4: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=) 5: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=) 6: uwL3ypGLb_CaISyODq46_j9FKrM.roa (hash: xCrbMi0hxh88kUV/oxrokW/pEF8foYlLuuOWDjfscJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:30:c4:a7:f1:99:11:55:07:a5:3a:3c:78:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Validity Not Before: Dec 6 10:00:36 2025 GMT Not After : Dec 7 10:00:36 2025 GMT Subject: CN=d1354006cc9a0773b38053fea6301cae6dfbe1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:62:39:cf:b8:67:d4:a5:cf:96:d6:6a:14: 47:ca:ed:32:fa:70:fb:b2:c2:1a:47:6f:fe:10:72: 47:f7:69:66:3a:c7:1c:7c:0c:17:0c:a8:72:aa:77: bd:5f:88:79:f2:0b:7e:52:a6:5f:f4:57:d1:c2:3a: b8:84:92:8b:8b:64:9e:cf:57:57:08:e9:c6:9e:23: a9:ca:f6:33:26:38:27:0d:ca:c5:3e:93:a2:54:8d: 10:8d:8d:32:4e:e6:34:e6:cf:7b:68:aa:39:c3:2c: b0:24:0f:f1:82:47:62:0b:4c:57:89:45:85:52:9f: 5a:35:66:7a:b7:9d:32:92:8f:cc:12:5e:2e:88:26: a2:d7:67:37:40:09:bb:a7:0a:5e:8d:92:bd:e8:64: a9:ec:6e:51:30:47:0d:a3:84:56:72:e9:38:95:53: fb:f2:29:dd:54:0b:72:f1:58:08:6c:1a:79:9c:ca: 49:bc:6e:0f:8a:f9:66:e1:07:46:e3:cc:0e:1c:fb: 57:1d:d4:f5:1d:d3:e9:76:c3:f1:a0:24:b9:cd:6e: 4a:d8:89:40:50:6b:f9:8a:04:1a:43:2e:b7:f3:f8: c2:41:ed:e1:18:59:0f:c6:9c:87:58:c2:8f:fe:21: 25:bb:36:4e:36:4d:9c:25:08:01:02:b7:b9:0b:1d: d8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:35:40:06:CC:9A:07:73:B3:80:53:FE:A6:30:1C:AE:6D:FB:E1:DC X509v3 Authority Key Identifier: keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4e:c9:a8:de:28:81:93:0f:2f:f3:c1:4f:b8:e5:ef:84:36: 0c:30:33:96:2e:d8:bb:ca:63:2c:a8:71:b8:c1:09:1b:b3:2e: 58:45:7c:dc:09:38:91:c1:a2:dd:36:e9:76:5a:66:2e:2a:0a: 4d:21:7d:6f:e8:48:00:0a:24:56:7e:8f:11:bf:b9:04:c0:a7: ca:7b:e1:ef:ba:0a:c1:5d:94:ff:8e:4b:04:7d:9d:c9:6d:b5: 9c:f5:c4:f2:6f:8b:59:d8:e0:4a:0d:7c:63:94:b8:f5:b7:37: 06:a7:b8:58:9c:68:a3:0f:dd:55:de:fe:58:f2:ec:b9:89:1f: c8:b2:e1:38:19:79:06:7b:a6:3f:b5:3a:d2:db:1b:d0:02:e5: c3:dd:3a:3a:d0:6a:db:28:33:0c:a0:21:13:f8:4e:eb:72:81: 96:3c:78:4b:c5:79:41:9b:72:f0:fc:2e:23:e7:21:5a:d1:15: 46:17:22:f3:66:8a:34:5c:cb:23:80:85:07:64:50:96:a3:46: dd:8b:3f:df:90:f2:34:62:0b:19:64:90:53:41:1d:b6:2a:48: 8a:2e:55:09:2b:9a:65:44:53:a1:4a:68:3f:3c:e5:0c:01:c0: 44:44:ea:fc:13:e9:c1:8e:cf:16:33:d9:29:1e:24:b0:36:36: b3:2b:74:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzDEp/GZEVUHpTo8eE5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4 YTdiMzMwHhcNMjUxMjA2MTAwMDM2WhcNMjUxMjA3MTAwMDM2WjAzMTEwLwYDVQQD EyhkMTM1NDAwNmNjOWEwNzczYjM4MDUzZmVhNjMwMWNhZTZkZmJlMWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpliOc+4Z9Slz5bWahRHyu0y+nD7 ssIaR2/+EHJH92lmOsccfAwXDKhyqne9X4h58gt+UqZf9FfRwjq4hJKLi2Sez1dX COnGniOpyvYzJjgnDcrFPpOiVI0QjY0yTuY05s97aKo5wyywJA/xgkdiC0xXiUWF Up9aNWZ6t50yko/MEl4uiCai12c3QAm7pwpejZK96GSp7G5RMEcNo4RWcuk4lVP7 8indVAty8VgIbBp5nMpJvG4Pivlm4QdG48wOHPtXHdT1HdPpdsPxoCS5zW5K2IlA UGv5igQaQy638/jCQe3hGFkPxpyHWMKP/iEluzZONk2cJQgBAre5Cx3YFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE1QAbMmgdzs4BT/qYwHK5t++HcMB8GA1UdIwQY MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt MjFjNTg0NzBiOGQyLzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa07JqN4o gZMPL/PBT7jl74Q2DDAzli7Yu8pjLKhxuMEJG7MuWEV83Ak4kcGi3TbpdlpmLioK TSF9b+hIAAokVn6PEb+5BMCnynvh77oKwV2U/45LBH2dyW21nPXE8m+LWdjgSg18 Y5S49bc3Bqe4WJxoow/dVd7+WPLsuYkfyLLhOBl5BnumP7U60tsb0ALlw906OtBq 2ygzDKAhE/hO63KBljx4S8V5QZty8PwuI+chWtEVRhci82aKNFzLI4CFB2RQlqNG 3Ys/35DyNGILGWSQU0EdtipIii5VCSuaZURToUpoPzzlDAHARETq/BPpwY7PFjPZ KR4ksDY2syt0Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:03:33 2025 by rpki-client