This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json) Hash identifier: BuogFhpqkGd88uKrLvXBCr0Hv9ZeQrP6omEY1l7i8X4= Subject key identifier: 29:18:DF:E9:75:F9:0E:9A:20:2F:82:B2:B8:61:53:A8:43:DB:24:DB Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Certificate serial: 019AF352C69633309B6908E294F07910E6AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft Manifest number: 06A1 Signing time: Sat 06 Dec 2025 11:01:19 +0000 Manifest this update: Sat 06 Dec 2025 11:01:19 +0000 Manifest next update: Sun 07 Dec 2025 11:01:19 +0000 Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: YONthFK0bOzCwOz3iHpBOuX7Do0BuyNscXkQbPZ+Hz0=) 2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=) 3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=) 4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c6:96:33:30:9b:69:08:e2:94:f0:79:10:e6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Validity Not Before: Dec 6 11:01:19 2025 GMT Not After : Dec 7 11:01:19 2025 GMT Subject: CN=2918dfe975f90e9a202f82b2b86153a843db24db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:36:ad:5d:7d:d6:2f:32:41:b4:9c:42:1f: fd:e5:9d:0c:e8:74:d8:dc:b9:56:09:4b:04:1e:fc: b9:16:ed:ee:c5:79:98:40:5e:a0:83:1d:0e:b7:f9: b3:b4:02:28:b6:62:0b:f3:50:3a:65:15:dc:29:16: 29:e1:7d:cc:90:f4:4f:68:36:c8:ae:65:52:65:ee: 35:54:72:71:8a:72:c4:56:77:10:8c:ce:37:e4:c6: 2f:b0:1d:54:0a:58:a0:96:d7:19:21:54:dc:3c:7f: 25:9d:57:c7:4b:3a:97:39:3e:0b:45:1c:bc:c1:ff: a9:83:c9:27:57:16:d2:13:d6:9a:33:50:4e:e3:a4: 64:a5:ee:87:b7:83:7c:06:f5:95:d0:7f:0e:d5:3e: 20:bf:a1:7e:69:5d:f2:53:b9:67:97:54:bb:d5:29: fe:25:fc:c9:f8:98:cc:cf:41:a4:ff:d0:74:69:96: 43:82:fb:5e:e1:af:ca:fe:6c:e2:4c:97:db:74:04: 5b:1c:ab:05:9e:73:f0:f0:04:3e:a9:96:19:ee:55: 9d:0c:f7:80:52:8c:fd:5f:93:f2:e6:47:d5:35:13: 2e:b8:b7:23:d8:fc:c5:e5:fa:a4:b8:db:9c:db:ae: eb:a0:e9:45:a2:01:40:13:e6:24:95:6c:ba:b2:51: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:18:DF:E9:75:F9:0E:9A:20:2F:82:B2:B8:61:53:A8:43:DB:24:DB X509v3 Authority Key Identifier: keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:76:a3:69:86:ed:95:23:08:b0:40:8c:77:be:b7:ab:40:de: 99:78:d7:f6:58:ab:8b:fa:33:4c:c4:0e:0d:9b:49:5a:82:d0: 4b:45:3b:94:2b:6b:9f:bf:95:4f:29:26:a2:0e:49:aa:1b:bb: 3c:b4:ff:d2:af:e0:53:13:fc:60:48:47:67:a7:b8:ad:98:85: 7f:d7:64:e4:e7:3f:3c:12:55:a7:e4:68:cb:13:75:e9:5c:88: 48:47:ae:ea:59:42:06:8b:8c:a8:31:64:6c:98:8a:3b:2a:e7: 02:bd:2c:84:f4:b1:f7:a0:09:ed:e1:87:cd:47:ed:73:ac:e4: 53:1f:0d:87:49:15:57:82:c3:73:86:19:5f:30:6a:ac:4c:af: 26:70:ca:71:75:b5:16:8e:be:9e:db:d2:aa:57:89:78:1d:42: 2c:76:e0:85:63:05:6a:f9:a8:c8:9f:21:d2:e0:00:23:d7:b4: f8:66:e4:36:20:6a:c5:f0:89:5f:c1:9f:9a:bd:4b:84:54:15: 6e:01:96:9e:4a:7a:ae:2d:5f:0e:3a:90:4b:d2:52:69:2a:1a: bc:bf:aa:eb:47:0d:16:54:be:b2:60:59:78:51:0f:1c:db:07: 78:cf:49:fc:27:61:40:43:76:54:84:5b:65:aa:f9:54:44:23: f4:43:10:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsaWMzCbaQjilPB5EOavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh OTAzMWUwHhcNMjUxMjA2MTEwMTE5WhcNMjUxMjA3MTEwMTE5WjAzMTEwLwYDVQQD EygyOTE4ZGZlOTc1ZjkwZTlhMjAyZjgyYjJiODYxNTNhODQzZGIyNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCU2rV191i8yQbScQh/95Z0M6HTY 3LlWCUsEHvy5Fu3uxXmYQF6ggx0Ot/mztAIotmIL81A6ZRXcKRYp4X3MkPRPaDbI rmVSZe41VHJxinLEVncQjM435MYvsB1UCligltcZIVTcPH8lnVfHSzqXOT4LRRy8 wf+pg8knVxbSE9aaM1BO46Rkpe6Ht4N8BvWV0H8O1T4gv6F+aV3yU7lnl1S71Sn+ JfzJ+JjMz0Gk/9B0aZZDgvte4a/K/mziTJfbdARbHKsFnnPw8AQ+qZYZ7lWdDPeA Uoz9X5Py5kfVNRMuuLcj2PzF5fqkuNuc267roOlFogFAE+YklWy6slFL8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkY3+l1+Q6aIC+CsrhhU6hD2yTbMB8GA1UdIwQY MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt Mzg3NTM2ZDAzYTcxLzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnajaYbt lSMIsECMd763q0DemXjX9liri/ozTMQODZtJWoLQS0U7lCtrn7+VTykmog5Jqhu7 PLT/0q/gUxP8YEhHZ6e4rZiFf9dk5Oc/PBJVp+RoyxN16VyISEeu6llCBouMqDFk bJiKOyrnAr0shPSx96AJ7eGHzUftc6zkUx8Nh0kVV4LDc4YZXzBqrEyvJnDKcXW1 Fo6+ntvSqleJeB1CLHbghWMFavmoyJ8h0uAAI9e0+GbkNiBqxfCJX8Gfmr1LhFQV bgGWnkp6ri1fDjqQS9JSaSoavL+q60cNFlS+smBZeFEPHNsHeM9J/CdhQEN2VIRb Zar5VEQj9EMQOA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:29 2025 by rpki-client