This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft File: 4BtODyogHPQwBI4kgWSzLt30Pa4.mft (raw, json) Hash identifier: 2D4zfIjFDheNCi2xJFgAIJxpUmXnkFYXWUXJA9MiOlI= Subject key identifier: B5:E0:2B:06:73:BF:C0:1B:69:F8:E1:E7:BA:43:C9:DA:6C:4F:7F:4C Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE Certificate issuer: /CN=e01b4e0f2a201cf430048e248164b32eddf43dae Certificate serial: 019AF19BAF1997C8983521A3B0044BC24369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft Manifest number: 0206 Signing time: Sat 06 Dec 2025 03:01:43 +0000 Manifest this update: Sat 06 Dec 2025 03:01:43 +0000 Manifest next update: Sun 07 Dec 2025 03:01:43 +0000 Files and hashes: 1: 4BtODyogHPQwBI4kgWSzLt30Pa4.crl (hash: dKaPccYYfVMdOseb/J1RrUW8jGB0+j41WlJudaUKAH4=) 2: KJS8V64pslKuMWFI7cvlulnThJM.roa (hash: TuhgricsSHQzRyANiX5wlopuZuXjn8vfdfEA+WHjVoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:af:19:97:c8:98:35:21:a3:b0:04:4b:c2:43:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae Validity Not Before: Dec 6 03:01:43 2025 GMT Not After : Dec 7 03:01:43 2025 GMT Subject: CN=b5e02b0673bfc01b69f8e1e7ba43c9da6c4f7f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:bb:23:b6:ef:ba:55:57:cf:ff:05:7a:0e: cd:a8:22:2d:63:80:00:93:8e:e4:0c:8e:9d:a7:01: 82:29:7b:11:19:3c:d6:cd:15:db:59:b8:67:e9:53: 53:e3:de:c5:89:8e:a1:c0:50:a4:d9:15:3b:10:ab: e9:1e:ba:42:9d:d0:a0:65:9a:25:62:84:f9:25:36: 05:bb:99:93:fa:55:40:68:59:c1:af:63:e4:48:a6: e8:bf:88:2a:9b:c1:f2:f6:00:65:a5:e6:71:87:d8: 85:e4:2f:c4:a8:35:e5:1e:dc:d0:b1:3e:b4:12:b9: c0:d2:ca:91:26:97:08:bc:fc:cf:74:ce:a5:4b:01: 01:4d:7d:39:6b:1a:0f:8a:3b:8c:a0:6e:40:50:2b: a5:7c:6b:0e:55:76:b7:68:db:f8:3c:f7:0d:ea:a6: 9f:e9:10:62:ed:fa:9f:23:bb:36:82:34:c5:c0:c4: 29:63:d8:fd:28:aa:70:60:31:e4:58:0d:1f:b5:3c: 4d:27:67:44:d4:9f:b6:21:9c:12:77:72:83:bd:71: 3c:9e:9a:a6:46:d8:0d:7b:0c:9b:fd:50:2d:c0:6e: c4:ef:f3:99:dd:07:10:f8:8f:9d:f3:1c:51:26:08: b5:ff:cd:0c:c6:88:45:46:8f:46:73:e1:65:be:58: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E0:2B:06:73:BF:C0:1B:69:F8:E1:E7:BA:43:C9:DA:6C:4F:7F:4C X509v3 Authority Key Identifier: keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5a:26:4c:36:49:cf:72:92:21:be:8e:a6:cd:bf:30:ba:30: ea:c7:c3:44:c0:63:1f:bd:62:6f:de:4b:66:af:3f:4e:60:e8: 0c:9c:be:1b:fa:1a:70:4b:a6:10:65:a9:22:66:b2:66:fc:d4: a7:08:58:9a:43:16:8b:6c:93:6a:da:78:ca:a4:2c:11:11:9d: b9:b2:d4:90:d4:7a:9f:66:8b:6c:dc:72:e1:8b:a7:1c:5c:ba: d0:55:21:c4:b5:e6:15:7e:f0:4a:c5:e3:36:10:a3:3f:00:c0: 50:ee:fa:8d:ea:1c:6a:5d:ba:93:47:47:dc:18:9f:99:27:7e: ea:27:3d:8d:1f:7e:26:76:4c:cf:7f:5f:c5:3e:de:95:b4:15: fb:b3:29:1a:b1:b9:31:77:34:0e:3e:34:b0:0d:a8:fe:01:f1: 23:93:78:4c:21:73:84:92:94:cd:86:84:a8:7c:ec:e5:f5:81: 12:3a:e0:9f:3d:48:14:de:94:bf:66:22:00:86:02:6d:e9:fc: 67:25:6a:0f:f0:6a:80:26:a6:33:ce:8e:75:e8:35:d0:0e:6a: cb:e0:bc:68:42:2b:2d:7f:f2:00:a9:a2:3a:44:03:01:80:38: b9:4d:53:92:e9:08:36:30:52:c1:1e:a9:eb:b5:ba:0d:0b:4f: f6:b1:b2:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm68Zl8iYNSGjsARLwkNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWI0ZTBmMmEyMDFjZjQzMDA0OGUyNDgxNjRiMzJlZGRm NDNkYWUwHhcNMjUxMjA2MDMwMTQzWhcNMjUxMjA3MDMwMTQzWjAzMTEwLwYDVQQD EyhiNWUwMmIwNjczYmZjMDFiNjlmOGUxZTdiYTQzYzlkYTZjNGY3ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXy7I7bvulVXz/8Feg7NqCItY4AA k47kDI6dpwGCKXsRGTzWzRXbWbhn6VNT497FiY6hwFCk2RU7EKvpHrpCndCgZZol YoT5JTYFu5mT+lVAaFnBr2PkSKbov4gqm8Hy9gBlpeZxh9iF5C/EqDXlHtzQsT60 ErnA0sqRJpcIvPzPdM6lSwEBTX05axoPijuMoG5AUCulfGsOVXa3aNv4PPcN6qaf 6RBi7fqfI7s2gjTFwMQpY9j9KKpwYDHkWA0ftTxNJ2dE1J+2IZwSd3KDvXE8npqm RtgNewyb/VAtwG7E7/OZ3QcQ+I+d8xxRJgi1/80MxohFRo9Gc+Flvlh6nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXgKwZzv8Abafjh57pDydpsT39MMB8GA1UdIwQY MBaAFOAbTg8qIBz0MASOJIFksy7d9D2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYzJjY2MtOGNiZC00YmVmLTk0MWQt YzYxNWY5OTEwZmZjLzEvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYzJjY2MtOGNiZC00YmVmLTk0MWQtYzYxNWY5OTEwZmZj LzEvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1omTDZJ z3KSIb6Ops2/MLow6sfDRMBjH71ib95LZq8/TmDoDJy+G/oacEumEGWpImayZvzU pwhYmkMWi2yTatp4yqQsERGdubLUkNR6n2aLbNxy4YunHFy60FUhxLXmFX7wSsXj NhCjPwDAUO76jeocal26k0dH3BifmSd+6ic9jR9+JnZMz39fxT7elbQV+7MpGrG5 MXc0Dj40sA2o/gHxI5N4TCFzhJKUzYaEqHzs5fWBEjrgnz1IFN6Uv2YiAIYCben8 ZyVqD/BqgCamM86Odeg10A5qy+C8aEIrLX/yAKmiOkQDAYA4uU1TkukINjBSwR6p 67W6DQtP9rGyMw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:53 2025 by rpki-client