This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json) Hash identifier: 5dADXwyRnPA3Hl5veriby0oXG4dEp5ys1Y7vnE37HGY= Subject key identifier: D0:0F:98:31:DA:82:B5:13:15:3D:E6:BF:07:82:E8:3F:68:B7:8A:A7 Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019AF12D0740F2C0EAF2A2111950F53E3FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: 2l-u740cwo47no9UP24NaXclLws.roa (hash: lM2rzN2C7SnAMTBRoCC3QdlWciIf9zSS8vEa3CZyUHk=) 2: 7OMM7nKZt_he9r9qnYLaR7A9yvE.roa (hash: s/s5R2RRwPyGIflp9u/tBPAIhDVamsTdpkVlXald7JE=) 3: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: oqPw74cowKnqdXpBoDJqZIdowL48OsV/sRWgxjzIdYo=) 4: Yoh0Lyzmd5QIYTDSCnlkZK_GSDc.roa (hash: XFUC5N/kHKMoQLlS0Teo7ZsoW42gAN7BH2Jkjl6Ik+E=) 5: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:07:40:f2:c0:ea:f2:a2:11:19:50:f5:3e:3f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=d00f9831da82b513153de6bf0782e83f68b78aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:34:96:fb:8e:38:10:08:e7:f9:92:52:13: a9:a5:e8:86:15:9d:51:5b:dd:2c:ef:79:17:16:d3: 55:2e:d4:13:82:92:d7:58:6b:93:73:c9:5d:91:c9: 23:93:01:92:a8:a7:49:3b:ec:35:0a:f2:9f:bc:5c: ec:81:ff:94:0a:b0:a4:b1:54:ea:27:51:f3:0f:b5: 2c:d4:41:6a:99:b8:b9:4f:b9:d0:1c:20:44:22:d7: 15:05:78:cf:b9:a5:49:0e:0d:50:f5:1d:d9:83:59: c8:9c:1b:49:3f:54:53:90:dc:9b:c6:06:ee:e9:53: d5:be:f0:cc:64:0e:27:49:22:72:05:7b:95:b0:88: 8e:83:8d:ce:77:e4:02:aa:d2:af:24:96:e9:f0:85: 50:83:67:e2:ea:47:9d:1f:d4:23:e2:b7:ce:24:f5: 69:73:28:e9:99:ef:64:3f:9a:12:c5:b8:da:bf:c1: 78:d4:bf:d6:37:bd:1d:ea:90:22:e0:67:68:6e:34: c7:5d:98:ce:78:7f:32:cd:8c:e9:b8:43:b6:e0:a7: c3:b4:f2:84:76:c2:3f:1e:e5:fc:ae:f6:1a:13:ff: 84:18:9c:69:1b:b2:f5:52:c0:70:5e:a5:b8:99:20: f7:e7:ce:91:12:e9:d0:ed:e4:c0:5c:2e:6e:24:ea: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0F:98:31:DA:82:B5:13:15:3D:E6:BF:07:82:E8:3F:68:B7:8A:A7 X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:42:a8:14:72:bb:60:23:14:e3:a2:01:9c:54:36:c7:bd:78: 6f:3d:69:a8:2d:8e:97:b8:a4:eb:bd:25:5a:9c:03:b6:4d:9d: 71:76:9e:4d:5a:66:87:12:7d:85:82:9a:b8:8f:d6:32:23:30: 97:1a:83:8f:44:9c:75:1e:47:dc:e0:51:3a:fe:b5:ee:86:0f: fc:f8:90:b1:f8:80:e2:7e:b0:ea:63:50:0e:4d:1f:24:33:ec: f0:d9:6d:25:ce:c4:e5:42:ab:0b:63:de:63:9e:0b:79:d7:80: c8:b8:d0:2c:b6:c6:5f:38:26:f3:c9:36:75:73:ff:5c:b4:0b: b5:00:e4:94:14:e1:eb:29:7d:ac:bf:95:83:cc:91:60:7a:f8: 8b:d2:b7:be:80:10:50:04:f6:c8:f1:e7:ae:e1:23:a6:82:45: 3f:42:f6:f8:f3:73:e4:b9:70:02:1f:bb:e0:38:f2:df:5a:e0: 9e:c2:86:db:9e:6a:0d:74:80:ab:cd:3c:c6:64:e7:40:1a:52: 51:a5:fd:c1:0a:10:15:00:31:5b:20:07:a1:ab:36:27:33:e5: 0b:14:dd:8b:0a:aa:de:bf:c7:56:8d:a1:f2:f7:66:db:a0:db: 5f:b3:5f:86:ad:fa:8c:41:a9:3a:74:c3:9e:38:ac:64:e5:f9: 58:15:83:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQdA8sDq8qIRGVD1Pj/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EyhkMDBmOTgzMWRhODJiNTEzMTUzZGU2YmYwNzgyZTgzZjY4Yjc4YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06U0lvuOOBAI5/mSUhOppeiGFZ1R W90s73kXFtNVLtQTgpLXWGuTc8ldkckjkwGSqKdJO+w1CvKfvFzsgf+UCrCksVTq J1HzD7Us1EFqmbi5T7nQHCBEItcVBXjPuaVJDg1Q9R3Zg1nInBtJP1RTkNybxgbu 6VPVvvDMZA4nSSJyBXuVsIiOg43Od+QCqtKvJJbp8IVQg2fi6kedH9Qj4rfOJPVp cyjpme9kP5oSxbjav8F41L/WN70d6pAi4GdobjTHXZjOeH8yzYzpuEO24KfDtPKE dsI/HuX8rvYaE/+EGJxpG7L1UsBwXqW4mSD3586REunQ7eTAXC5uJOqeUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAPmDHagrUTFT3mvweC6D9ot4qnMB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkKoFHK7 YCMU46IBnFQ2x714bz1pqC2Ol7ik670lWpwDtk2dcXaeTVpmhxJ9hYKauI/WMiMw lxqDj0ScdR5H3OBROv617oYP/PiQsfiA4n6w6mNQDk0fJDPs8NltJc7E5UKrC2Pe Y54LedeAyLjQLLbGXzgm88k2dXP/XLQLtQDklBTh6yl9rL+Vg8yRYHr4i9K3voAQ UAT2yPHnruEjpoJFP0L2+PNz5LlwAh+74Djy31rgnsKG255qDXSAq808xmTnQBpS UaX9wQoQFQAxWyAHoas2JzPlCxTdiwqq3r/HVo2h8vdm26DbX7Nfhq36jEGpOnTD njisZOX5WBWDNA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:28:55 2025 by rpki-client