This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json) Hash identifier: ywaFxwF8jh24QXOPap0kvQsPGnZXPSheG9fPfBAHYCA= Subject key identifier: 4E:60:2C:51:5C:BA:5B:87:84:63:E8:AA:28:E1:5D:BF:5B:19:FF:BF Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90 Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390 Certificate serial: 019AF2773D79AAD55F3BA453D3A70C4857B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft Manifest number: 1070 Signing time: Sat 06 Dec 2025 07:01:32 +0000 Manifest this update: Sat 06 Dec 2025 07:01:32 +0000 Manifest next update: Sun 07 Dec 2025 07:01:32 +0000 Files and hashes: 1: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: 22AJhRqxe0Swih/hvX5rCUdn5AqxoQ72RpubyoZ22Tg=) 2: qGecERglbMsiHMQJoiUSFGALt-E.roa (hash: yLMKR6LctC/w2fvLTclquZCs4hF15ArbhdOh5oCoDz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3d:79:aa:d5:5f:3b:a4:53:d3:a7:0c:48:57:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390 Validity Not Before: Dec 6 07:01:32 2025 GMT Not After : Dec 7 07:01:32 2025 GMT Subject: CN=4e602c515cba5b878463e8aa28e15dbf5b19ffbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:a9:38:2f:0d:1c:a6:1a:d4:08:53:17:46: 7c:a9:d4:99:93:00:66:25:f7:9f:bb:c2:ed:20:b5: 38:e9:5f:25:0c:b7:27:ec:3d:fb:5c:70:da:b3:1c: 29:99:77:a9:b6:c8:49:59:ec:8d:21:de:8a:95:e0: f2:af:f9:a6:1e:67:6a:f1:8c:96:a3:74:fe:7a:5b: 11:79:ce:cd:1e:ee:c3:00:9b:dd:3f:f7:81:9f:f7: 96:44:cf:e8:10:c4:3b:b9:55:01:8b:2e:f5:f9:c9: f8:b7:f6:53:e7:ff:46:79:c5:d6:40:e3:5a:72:ad: bc:b2:f4:7a:b4:36:31:12:4a:f3:09:2a:ef:14:50: ca:8a:e2:7c:e3:f7:6e:20:ba:d2:94:d7:c6:cb:9b: 7b:91:cc:0f:7b:20:0d:7c:15:d9:3f:91:e2:0d:9d: 79:8c:75:19:ac:6a:51:47:42:e7:ae:7a:3e:49:75: 04:44:be:e7:b7:ef:15:8a:19:ef:3e:65:e0:3b:5c: 91:ad:2e:64:7e:4d:26:da:b0:53:84:f8:90:e0:24: 4b:22:a3:56:04:3e:13:e0:05:93:4d:de:0b:0e:07: 94:02:ea:29:8a:a9:08:0c:92:68:ab:89:45:b4:5c: ab:a1:53:f8:83:0f:7b:1d:86:1d:6f:46:02:fb:c7: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:60:2C:51:5C:BA:5B:87:84:63:E8:AA:28:E1:5D:BF:5B:19:FF:BF X509v3 Authority Key Identifier: keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3c:01:77:db:ca:a3:69:2b:a0:9f:9d:1d:2f:59:d7:bf:29: e5:93:5e:38:5e:51:a3:a5:e5:6d:a7:4d:14:b7:e2:e7:c2:f3: 36:21:85:71:9b:ec:7d:11:3d:bb:f8:3a:ef:5b:c9:80:aa:0e: 2a:e8:88:57:8d:4b:3d:07:a5:0d:bb:65:42:71:3d:58:62:13: 44:ce:7e:33:86:84:2c:72:2f:54:9c:b2:f3:d5:f0:2f:f4:46: e8:cc:ce:0b:0b:bb:33:08:ec:15:d1:64:0e:e8:92:1b:b6:b1: 8b:97:c5:47:bd:e6:82:0e:14:a7:14:17:50:f5:69:2f:e0:7b: 45:9f:40:b0:1b:f4:24:1e:58:2e:5b:62:16:e7:fd:37:ee:aa: ef:bc:ce:df:f5:d1:a2:b1:14:f3:da:4f:49:82:3a:f0:b5:46: f1:d7:1e:4d:eb:51:0c:46:f9:ac:26:36:be:13:00:82:a3:0c: 4c:d5:62:7d:ef:31:de:37:7a:c2:65:f6:ed:17:17:a6:e3:8d: 66:4e:7a:84:e9:a4:ac:1e:3a:7b:ba:79:0e:56:3b:50:24:78: f5:29:a5:ea:9e:eb:ab:9c:76:ee:96:19:16:1d:14:53:0d:55: 3e:51:06:2c:d4:f4:57:e9:1a:2e:03:1e:9f:e5:3c:e1:29:c5: bc:8f:dc:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydz15qtVfO6RT06cMSFe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIwOGIxMjljNTNlODdjM2YwZDBlZDFiY2E4NTczMDE0 MGYzOTAwHhcNMjUxMjA2MDcwMTMyWhcNMjUxMjA3MDcwMTMyWjAzMTEwLwYDVQQD Eyg0ZTYwMmM1MTVjYmE1Yjg3ODQ2M2U4YWEyOGUxNWRiZjViMTlmZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndqpOC8NHKYa1AhTF0Z8qdSZkwBm Jfefu8LtILU46V8lDLcn7D37XHDasxwpmXeptshJWeyNId6KleDyr/mmHmdq8YyW o3T+elsRec7NHu7DAJvdP/eBn/eWRM/oEMQ7uVUBiy71+cn4t/ZT5/9GecXWQONa cq28svR6tDYxEkrzCSrvFFDKiuJ84/duILrSlNfGy5t7kcwPeyANfBXZP5HiDZ15 jHUZrGpRR0Lnrno+SXUERL7nt+8VihnvPmXgO1yRrS5kfk0m2rBThPiQ4CRLIqNW BD4T4AWTTd4LDgeUAuopiqkIDJJoq4lFtFyroVP4gw97HYYdb0YC+8dpxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5gLFFculuHhGPoqijhXb9bGf+/MB8GA1UdIwQY MBaAFP+CCLEpxT6Hw/DQ7RvKhXMBQPOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMt NDAxNTNjNWQwYTQ3LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMtNDAxNTNjNWQwYTQ3 LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODwBd9vK o2kroJ+dHS9Z178p5ZNeOF5Ro6XlbadNFLfi58LzNiGFcZvsfRE9u/g671vJgKoO KuiIV41LPQelDbtlQnE9WGITRM5+M4aELHIvVJyy89XwL/RG6MzOCwu7MwjsFdFk DuiSG7axi5fFR73mgg4UpxQXUPVpL+B7RZ9AsBv0JB5YLltiFuf9N+6q77zO3/XR orEU89pPSYI68LVG8dceTetRDEb5rCY2vhMAgqMMTNVife8x3jd6wmX27RcXpuON Zk56hOmkrB46e7p5DlY7UCR49Sml6p7rq5x27pYZFh0UUw1VPlEGLNT0V+kaLgMe n+U84SnFvI/cWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:04 2025 by rpki-client