This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json) Hash identifier: ZaUQ75Hk/LHsNeGjZ4b9Htv1ekGOgH+vmkxbYzJgRAc= Subject key identifier: A4:D0:A7:48:C1:D5:15:67:34:4A:5F:0B:60:E4:38:CA:7F:35:05:1D Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Certificate serial: 019AF276F4D2B80E8FDA0A9AFDD4102ACF8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft Manifest number: 1022 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: pcmmKqyg+yclrsQOANT1sfKOdRSwoJKlkaq1CAWQBto=) 2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=) 3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=) 4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f4:d2:b8:0e:8f:da:0a:9a:fd:d4:10:2a:cf:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=a4d0a748c1d51567344a5f0b60e438ca7f35051d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:87:d0:f2:87:47:79:ae:bc:74:b8:45:19: a2:dc:09:8e:73:b7:0c:88:d2:e1:4a:2c:97:c2:9b: f0:72:7a:16:d5:a0:db:6c:d8:3a:f9:e1:cf:43:59: 41:fc:eb:db:10:14:7c:bd:62:98:1c:e2:a7:95:66: d0:90:5e:0a:6a:c4:2c:93:6b:72:8e:66:db:cd:ee: 8c:d7:00:ee:78:c4:66:5a:d4:b7:e2:af:eb:e8:f7: a0:40:e7:0e:f8:1c:f0:42:bb:ac:77:74:2b:09:c9: 58:44:1e:60:33:27:8b:25:df:10:a9:f3:af:19:b0: f3:1e:0f:00:36:1a:84:2a:0d:1f:25:c6:46:7c:4d: 12:46:0a:22:aa:52:1e:25:50:42:79:b5:8a:b4:03: c2:f3:1d:75:c7:cf:49:eb:f2:7d:7a:75:21:d7:94: da:0a:8b:96:61:3b:3f:1b:d2:e8:16:35:74:1f:2b: 2b:60:67:25:fb:6d:4d:b4:27:42:9b:2a:7e:e0:8e: c1:64:f7:94:77:07:17:ad:46:fc:c0:8d:68:99:8a: e0:1e:6a:fd:1b:54:c4:06:d3:47:a4:32:bd:c6:df: 2c:fb:ac:84:01:9b:6d:75:a2:e5:d9:48:56:0e:d9: 14:fa:69:f8:95:4a:8b:3d:86:8c:97:9c:a2:c8:92: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D0:A7:48:C1:D5:15:67:34:4A:5F:0B:60:E4:38:CA:7F:35:05:1D X509v3 Authority Key Identifier: keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a1:ba:f4:d5:6e:1a:15:96:78:bc:c5:5e:44:44:a2:bd:58: a8:fc:dd:a9:56:8c:fd:55:60:a6:24:a4:37:48:db:65:f7:55: c0:d0:76:88:e5:11:3a:f7:61:0d:33:73:2a:b6:e1:98:4b:e2: 07:0f:6b:f1:b3:ce:33:c4:17:70:06:80:aa:ad:e6:20:a1:04: d9:05:02:22:83:04:94:55:0a:29:1e:01:19:7e:9e:40:de:72: 6c:a5:53:1d:f1:4f:5e:a9:da:93:f7:0b:fb:1e:0e:e2:84:00: 32:15:17:89:fe:ec:e5:37:5b:3c:ef:65:82:f9:50:73:f3:ed: 2f:12:8b:41:64:c6:fb:94:55:1d:17:b9:c7:69:30:d6:6f:e5: 23:ce:8f:41:23:8e:17:cf:e9:07:d4:bd:dd:a3:46:69:86:2b: 29:74:41:1b:6a:67:99:87:a2:cd:ef:a6:b1:e2:22:60:23:e7: e5:24:c9:bc:2d:5b:69:ae:a7:46:01:a7:54:e2:ac:b7:6c:0b: 4e:43:0b:cb:b8:6c:01:a6:06:49:85:38:ae:46:71:c7:40:c5: 66:47:2e:c0:ee:df:91:2e:a1:7f:b2:c2:01:93:4f:49:b4:2d: 02:e8:9c:db:57:cd:d9:c1:12:8c:28:3d:83:35:12:c8:a1:5c: 3e:82:fc:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvTSuA6P2gqa/dQQKs+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx ZmI0ZjIwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EyhhNGQwYTc0OGMxZDUxNTY3MzQ0YTVmMGI2MGU0MzhjYTdmMzUwNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgKH0PKHR3muvHS4RRmi3AmOc7cM iNLhSiyXwpvwcnoW1aDbbNg6+eHPQ1lB/OvbEBR8vWKYHOKnlWbQkF4KasQsk2ty jmbbze6M1wDueMRmWtS34q/r6PegQOcO+BzwQrusd3QrCclYRB5gMyeLJd8QqfOv GbDzHg8ANhqEKg0fJcZGfE0SRgoiqlIeJVBCebWKtAPC8x11x89J6/J9enUh15Ta CouWYTs/G9LoFjV0HysrYGcl+21NtCdCmyp+4I7BZPeUdwcXrUb8wI1omYrgHmr9 G1TEBtNHpDK9xt8s+6yEAZttdaLl2UhWDtkU+mn4lUqLPYaMl5yiyJIY5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTQp0jB1RVnNEpfC2DkOMp/NQUdMB8GA1UdIwQY MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6G69NVu GhWWeLzFXkREor1YqPzdqVaM/VVgpiSkN0jbZfdVwNB2iOUROvdhDTNzKrbhmEvi Bw9r8bPOM8QXcAaAqq3mIKEE2QUCIoMElFUKKR4BGX6eQN5ybKVTHfFPXqnak/cL +x4O4oQAMhUXif7s5TdbPO9lgvlQc/PtLxKLQWTG+5RVHRe5x2kw1m/lI86PQSOO F8/pB9S93aNGaYYrKXRBG2pnmYeize+mseIiYCPn5STJvC1baa6nRgGnVOKst2wL TkMLy7hsAaYGSYU4rkZxx0DFZkcuwO7fkS6hf7LCAZNPSbQtAuic21fN2cESjCg9 gzUSyKFcPoL8zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:19 2025 by rpki-client