This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json) Hash identifier: IqABwERgQFl5AVYkFwzD6GA9c5sIV+H8GKajywNCqkQ= Subject key identifier: B8:0A:7F:00:F6:3E:F0:20:DE:C2:2A:F3:40:09:B0:D4:55:DA:32:6C Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c Certificate serial: 019AF2AE07E0945E38A22735876087C3C6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft Manifest number: 0FFF Signing time: Sat 06 Dec 2025 08:01:22 +0000 Manifest this update: Sat 06 Dec 2025 08:01:22 +0000 Manifest next update: Sun 07 Dec 2025 08:01:22 +0000 Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=) 2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: 1dTDEsGv3sJ3ozVcMnzASrgk7czwonTDaF5K5qVOWfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ae:07:e0:94:5e:38:a2:27:35:87:60:87:c3:c6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c Validity Not Before: Dec 6 08:01:22 2025 GMT Not After : Dec 7 08:01:22 2025 GMT Subject: CN=b80a7f00f63ef020dec22af34009b0d455da326c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:96:29:e4:e9:49:4e:ab:05:60:f9:7d:64: d2:d2:e7:e8:7d:1f:cb:e4:27:a2:76:75:b6:15:60: cc:15:52:b3:fd:e8:76:08:1f:3c:5a:6b:de:50:e9: c1:26:e1:fa:b8:01:71:44:02:02:4f:52:20:ca:e2: 23:9e:0a:5b:55:fb:08:03:a4:f7:91:9f:d4:22:6a: 49:8a:5d:22:54:25:ef:17:5b:fa:78:8a:85:0d:05: bb:66:27:75:18:b9:9b:2b:4a:f6:86:de:bc:fc:d5: 9d:f9:a2:64:35:fa:45:50:96:2a:35:4d:aa:73:d3: 2b:12:89:4b:89:34:d2:ce:32:69:a9:0e:19:bd:22: 3d:b3:05:68:eb:08:75:f0:ad:77:9d:75:3d:2c:8f: d2:ef:c5:e4:2a:09:de:c4:c0:b0:7e:a6:13:6d:7a: 69:77:8e:23:a5:78:9f:96:e2:b5:e2:a9:48:0f:d1: c3:f8:10:ad:87:02:cb:1b:89:c1:e1:b4:99:38:90: ed:d0:4b:f5:b5:05:8e:34:1f:07:9c:98:51:8f:dc: c0:27:1e:c5:05:f5:39:81:17:25:79:9f:13:04:9d: e6:68:32:23:3d:0d:93:1e:4b:bc:b4:9c:62:da:00: 83:0d:c3:eb:0e:68:e7:b1:94:87:43:54:c1:9b:c2: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0A:7F:00:F6:3E:F0:20:DE:C2:2A:F3:40:09:B0:D4:55:DA:32:6C X509v3 Authority Key Identifier: keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4e:16:cc:83:9f:67:f4:51:22:dd:87:70:1a:9b:46:5f:4f: c0:70:9a:cf:29:e6:03:26:55:d9:d3:4e:aa:e4:4f:f4:c8:3c: 25:7f:37:f5:62:c1:ae:ec:cc:4d:d8:f1:6f:b5:8a:c9:21:e8: 25:87:e7:2e:cc:18:1f:99:7a:23:f8:b8:a3:6c:73:a6:59:82: ea:09:b6:1d:ce:fa:a6:ac:33:f0:69:a5:38:7c:b1:a4:82:f9: c0:1d:99:32:24:7f:1f:e0:54:33:73:b3:e7:6e:37:5a:4d:fa: b2:ec:e8:96:1f:01:aa:eb:22:48:41:f4:72:0c:49:ba:fd:1d: 1f:ac:0f:c9:de:f4:a4:e4:3f:df:ba:48:47:8a:c7:fe:f7:94: a1:a2:06:d4:62:d3:62:de:8d:e4:da:e6:10:66:3f:56:21:e3: 16:23:63:2e:1e:0b:d6:fc:3c:5b:19:ad:95:50:1b:ca:fc:6e: 32:6f:05:16:5e:0e:96:55:8c:a2:6f:a1:4d:ea:3a:d7:be:ba: 0a:56:fa:cf:ab:ab:b0:49:9c:f0:bf:b6:43:46:55:8f:96:b4: 52:d6:98:41:af:36:df:57:7b:b9:30:13:0a:0f:7a:c2:e6:33: ac:30:82:73:77:31:84:d8:88:97:8a:0e:d8:47:e0:9e:eb:4f: 6c:21:56:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrgfglF44oic1h2CHw8bPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzODQyNDFhZGU1ZjI2MWFjOGVjZTg0M2U1ZTdkYjdlZTEw OGUzM2MwHhcNMjUxMjA2MDgwMTIyWhcNMjUxMjA3MDgwMTIyWjAzMTEwLwYDVQQD EyhiODBhN2YwMGY2M2VmMDIwZGVjMjJhZjM0MDA5YjBkNDU1ZGEzMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFCWKeTpSU6rBWD5fWTS0ufofR/L 5CeidnW2FWDMFVKz/eh2CB88WmveUOnBJuH6uAFxRAICT1IgyuIjngpbVfsIA6T3 kZ/UImpJil0iVCXvF1v6eIqFDQW7Zid1GLmbK0r2ht68/NWd+aJkNfpFUJYqNU2q c9MrEolLiTTSzjJpqQ4ZvSI9swVo6wh18K13nXU9LI/S78XkKgnexMCwfqYTbXpp d44jpXifluK14qlID9HD+BCthwLLG4nB4bSZOJDt0Ev1tQWONB8HnJhRj9zAJx7F BfU5gRcleZ8TBJ3maDIjPQ2THku8tJxi2gCDDcPrDmjnsZSHQ1TBm8JO5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgKfwD2PvAg3sIq80AJsNRV2jJsMB8GA1UdIwQY MBaAFDOEJBreXyYayOzoQ+Xn237hCOM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYt YzdhYTE5ZWFiYmE3LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYtYzdhYTE5ZWFiYmE3 LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnk4WzIOf Z/RRIt2HcBqbRl9PwHCazynmAyZV2dNOquRP9Mg8JX839WLBruzMTdjxb7WKySHo JYfnLswYH5l6I/i4o2xzplmC6gm2Hc76pqwz8GmlOHyxpIL5wB2ZMiR/H+BUM3Oz 5243Wk36suzolh8BqusiSEH0cgxJuv0dH6wPyd70pOQ/37pIR4rH/veUoaIG1GLT Yt6N5NrmEGY/ViHjFiNjLh4L1vw8WxmtlVAbyvxuMm8FFl4OllWMom+hTeo61766 Clb6z6ursEmc8L+2Q0ZVj5a0UtaYQa8231d7uTATCg96wuYzrDCCc3cxhNiIl4oO 2EfgnutPbCFWew== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:42 2025 by rpki-client