This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json) Hash identifier: rmZQWR9LFBVscR1vAqOEPwlRtim3Jn+Rr4sk/2iytF8= Subject key identifier: 5A:F1:73:17:53:21:D3:5F:FA:2D:59:36:A7:B8:33:30:90:1F:29:EC Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc Certificate serial: 019AF19B4272E0E1330E6807545DF1B0E75A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=) 2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: rcFkc363Sv/hk95528YDbglm7fNW5eAQvqMsAb12THY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:42:72:e0:e1:33:0e:68:07:54:5d:f1:b0:e7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=5af173175321d35ffa2d5936a7b83330901f29ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:d2:e9:ba:db:86:e0:16:bf:af:06:f7:04: a2:38:95:a1:08:21:37:40:f3:97:9c:51:c8:3f:27: 57:0a:f2:7a:3e:fa:fc:da:f7:bf:57:bf:d8:40:4f: f9:e9:bd:41:70:c5:e4:25:06:b2:c9:8d:3f:f8:18: cb:63:dd:51:95:3c:19:9b:1f:de:de:3e:70:0a:6f: 70:8c:06:bd:6f:27:27:87:a5:58:60:5d:41:92:29: cd:29:dd:4e:e1:27:8f:ad:a4:c0:53:74:ce:14:27: 57:ff:50:25:38:86:f8:fe:3c:0e:e5:de:d8:16:f0: 5e:9f:3a:a7:04:2f:8b:f8:63:0d:ae:1f:00:f9:e1: 65:80:0a:07:c7:2a:33:bc:cb:c9:b6:fa:ff:e6:1c: 63:c1:c8:60:55:09:5b:a5:9a:04:b9:94:a0:83:02: da:47:94:0a:4c:3f:1e:30:34:c5:33:bc:1c:89:a8: 0d:70:84:65:af:33:3c:25:26:eb:78:e7:c3:83:ee: a7:77:b7:6d:c0:df:1e:e0:58:46:aa:8f:35:4e:82: 85:e4:75:cc:2e:e1:2b:f4:85:88:14:71:0b:d5:49: ab:98:5e:d5:61:c6:fc:47:e6:59:b7:a4:40:80:21: 1f:86:e8:88:c1:d8:a5:66:c7:e1:e6:73:25:c7:7a: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F1:73:17:53:21:D3:5F:FA:2D:59:36:A7:B8:33:30:90:1F:29:EC X509v3 Authority Key Identifier: keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f1:ec:e6:c9:c8:d1:b3:fe:8c:78:09:07:49:46:d4:30:c0: 93:8f:04:bb:3a:94:1e:f0:fe:8f:ad:79:86:5f:69:54:09:76: 11:66:27:cf:74:d2:8b:87:c2:04:21:ca:00:7c:16:87:08:aa: b3:3f:78:ce:0a:a2:37:d3:d5:27:ac:13:59:e0:15:2e:c5:5f: cc:6f:eb:69:bb:79:c3:32:c3:b0:75:37:de:94:ef:d9:51:48: f5:69:23:b1:b5:3c:10:42:5d:60:15:e0:d6:aa:9d:a7:54:fa: 32:4d:20:f7:21:82:f1:1b:e0:e8:df:42:ce:4e:5d:a0:2e:85: 62:31:8f:1b:1e:e7:fd:2e:2e:fc:1c:a3:31:6f:41:30:0b:5f: 64:8f:63:2d:ba:72:18:6f:f1:29:63:67:be:69:0c:e8:48:44: 20:51:5f:7a:e3:8d:10:76:ba:29:d4:8a:d2:41:58:32:44:bf: ac:82:cd:9e:39:b3:7e:6e:6c:50:5a:0d:3b:78:b4:4f:71:35: 71:9b:0b:b5:0c:34:0b:f7:2c:02:be:bb:ac:c5:ee:e2:64:2a: 05:d4:b1:0e:48:10:d0:18:1b:06:3c:2d:79:a9:df:1b:92:96: 87:06:dc:c8:b6:92:37:00:a8:b4:c2:70:91:4f:7a:6a:f0:c0: 08:23:75:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0Jy4OEzDmgHVF3xsOdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOTZjNDMzNjQwMDNlYzNmN2Y3YzZlYTgxNTdiOGE1MGY0 NDBlY2MwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD Eyg1YWYxNzMxNzUzMjFkMzVmZmEyZDU5MzZhN2I4MzMzMDkwMWYyOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz/S6brbhuAWv68G9wSiOJWhCCE3 QPOXnFHIPydXCvJ6Pvr82ve/V7/YQE/56b1BcMXkJQayyY0/+BjLY91RlTwZmx/e 3j5wCm9wjAa9bycnh6VYYF1BkinNKd1O4SePraTAU3TOFCdX/1AlOIb4/jwO5d7Y FvBenzqnBC+L+GMNrh8A+eFlgAoHxyozvMvJtvr/5hxjwchgVQlbpZoEuZSggwLa R5QKTD8eMDTFM7wciagNcIRlrzM8JSbreOfDg+6nd7dtwN8e4FhGqo81ToKF5HXM LuEr9IWIFHEL1UmrmF7VYcb8R+ZZt6RAgCEfhuiIwdilZsfh5nMlx3pG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrxcxdTIdNf+i1ZNqe4MzCQHynsMB8GA1UdIwQY MBaAFOCWxDNkAD7D9/fG6oFXuKUPRA7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2Ut M2E4NWVlNGM4OWJjLzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2UtM2E4NWVlNGM4OWJj LzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/Hs5snI 0bP+jHgJB0lG1DDAk48EuzqUHvD+j615hl9pVAl2EWYnz3TSi4fCBCHKAHwWhwiq sz94zgqiN9PVJ6wTWeAVLsVfzG/rabt5wzLDsHU33pTv2VFI9WkjsbU8EEJdYBXg 1qqdp1T6Mk0g9yGC8Rvg6N9Czk5doC6FYjGPGx7n/S4u/ByjMW9BMAtfZI9jLbpy GG/xKWNnvmkM6EhEIFFfeuONEHa6KdSK0kFYMkS/rILNnjmzfm5sUFoNO3i0T3E1 cZsLtQw0C/csAr67rMXu4mQqBdSxDkgQ0BgbBjwteanfG5KWhwbcyLaSNwCotMJw kU96avDACCN1AA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:09 2025 by rpki-client