This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json) Hash identifier: jryzBrpuuaCcmSq7Wj3QHGzt1cJ3MfEMTgd+ImXxviE= Subject key identifier: 84:98:A7:F7:CA:A1:0A:8D:C6:70:F5:C5:EE:E0:2E:FB:F4:FF:52:B1 Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28 Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228 Certificate serial: 019AF31C0A0F3C2479A558323BFC4BF00160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:32 +0000 Manifest this update: Sat 06 Dec 2025 10:01:32 +0000 Manifest next update: Sun 07 Dec 2025 10:01:32 +0000 Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: pBp8dL3pP9SqUpozWEWlWXMe2PSiyqv0WQH+t/cZeVI=) 2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0a:0f:3c:24:79:a5:58:32:3b:fc:4b:f0:01:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228 Validity Not Before: Dec 6 10:01:32 2025 GMT Not After : Dec 7 10:01:32 2025 GMT Subject: CN=8498a7f7caa10a8dc670f5c5eee02efbf4ff52b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:d2:7d:00:45:fb:40:af:91:2d:d9:79:e5: 3d:aa:16:05:a4:6d:29:75:0c:f5:d7:7f:7b:9f:22: f5:d5:d5:bb:2b:b4:b9:d2:89:1d:45:c2:cb:fa:aa: 7e:45:c5:f9:95:1a:57:16:56:8d:5a:db:12:bb:cf: 81:78:0e:0e:c0:e4:96:57:d7:bc:75:45:da:23:1e: 48:54:34:4b:1d:43:ca:92:2d:0b:c4:6a:84:ad:46: d7:ea:ad:0a:57:c4:ac:4a:30:8e:4a:35:d3:e0:9a: fd:1c:43:3a:fa:b1:cd:17:90:9d:f8:51:bd:4e:5e: 15:ec:13:b9:48:da:47:bf:f6:04:99:2e:70:37:cb: 95:9f:33:07:8a:6f:74:74:ce:f6:3b:7d:19:a6:fe: 2b:cc:1b:61:35:17:c6:34:ae:8a:bd:28:7f:ff:18: 6d:b5:ed:6e:8f:3e:42:cc:4b:c9:17:d9:e0:8f:43: e0:df:e5:e1:16:ca:41:fa:d3:d1:75:82:46:80:d9: b2:3e:cd:9a:37:90:4a:59:46:42:a7:74:5b:01:b2: 9e:4c:79:3c:db:a1:85:36:3c:02:c5:17:94:44:61: c3:3d:f8:0f:98:81:5a:e8:19:3e:35:80:5f:85:b6: c2:78:5f:57:49:5c:87:72:25:6a:a8:66:3c:f3:ed: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:98:A7:F7:CA:A1:0A:8D:C6:70:F5:C5:EE:E0:2E:FB:F4:FF:52:B1 X509v3 Authority Key Identifier: keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:0b:b1:c1:14:72:c4:68:54:7c:91:f2:68:20:85:fd:9a:9b: c1:01:dc:e4:c5:9c:55:94:39:2c:57:31:e7:25:77:9f:8e:dd: 6b:1e:69:e0:60:2d:69:b1:15:b3:e9:87:8a:c9:32:0a:0b:b9: 92:d0:ba:e5:0c:1b:91:a1:f6:34:a0:7a:1e:7e:0c:a0:51:44: 15:ee:e5:cd:e1:ea:21:65:aa:46:9e:d8:fa:5b:fe:e0:03:35: f8:63:2b:bc:b7:82:0a:6a:e4:3a:e2:86:1e:ec:10:40:06:58: 46:b9:b7:3b:f4:58:76:a9:29:3d:d6:f7:b9:e8:ba:2e:df:46: e7:ec:af:f3:a7:60:b5:82:f4:32:20:cc:9e:3f:3c:19:da:4f: 68:15:8c:c6:f4:cb:6e:f1:ab:51:0d:92:ad:cc:26:21:02:26: 75:9c:85:8b:20:98:01:27:0f:b6:44:15:6d:05:49:aa:8d:fb: ff:83:e5:79:b9:72:b9:b3:47:b0:bd:67:86:b2:a1:2a:83:23: cb:1d:32:d1:9b:fa:cd:3b:8c:a6:19:58:1d:cd:10:72:ae:5d: 0b:0b:65:eb:31:18:3b:75:da:56:08:b2:38:27:25:3a:28:3b: 43:d2:d9:cc:a7:09:1f:05:af:dc:b3:10:d5:1d:01:cb:fe:35: a5:16:22:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAoPPCR5pVgyO/xL8AFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxM2UzNzE2MTM5NDY1ZTZhOGNmOWY2YmQ4YjViOGY3NjMz YWYyMjgwHhcNMjUxMjA2MTAwMTMyWhcNMjUxMjA3MTAwMTMyWjAzMTEwLwYDVQQD Eyg4NDk4YTdmN2NhYTEwYThkYzY3MGY1YzVlZWUwMmVmYmY0ZmY1MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW7SfQBF+0CvkS3ZeeU9qhYFpG0p dQz11397nyL11dW7K7S50okdRcLL+qp+RcX5lRpXFlaNWtsSu8+BeA4OwOSWV9e8 dUXaIx5IVDRLHUPKki0LxGqErUbX6q0KV8SsSjCOSjXT4Jr9HEM6+rHNF5Cd+FG9 Tl4V7BO5SNpHv/YEmS5wN8uVnzMHim90dM72O30Zpv4rzBthNRfGNK6KvSh//xht te1ujz5CzEvJF9ngj0Pg3+XhFspB+tPRdYJGgNmyPs2aN5BKWUZCp3RbAbKeTHk8 26GFNjwCxReURGHDPfgPmIFa6Bk+NYBfhbbCeF9XSVyHciVqqGY88+1DyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISYp/fKoQqNxnD1xe7gLvv0/1KxMB8GA1UdIwQY MBaAFOE+NxYTlGXmqM+fa9i1uPdjOvIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDct ZWYxNTcwYzcyNTk5LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDctZWYxNTcwYzcyNTk5 LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQuxwRRy xGhUfJHyaCCF/ZqbwQHc5MWcVZQ5LFcx5yV3n47dax5p4GAtabEVs+mHiskyCgu5 ktC65QwbkaH2NKB6Hn4MoFFEFe7lzeHqIWWqRp7Y+lv+4AM1+GMrvLeCCmrkOuKG HuwQQAZYRrm3O/RYdqkpPdb3uei6Lt9G5+yv86dgtYL0MiDMnj88GdpPaBWMxvTL bvGrUQ2SrcwmIQImdZyFiyCYAScPtkQVbQVJqo37/4PleblyubNHsL1nhrKhKoMj yx0y0Zv6zTuMphlYHc0Qcq5dCwtl6zEYO3XaVgiyOCclOig7Q9LZzKcJHwWv3LMQ 1R0By/41pRYikg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:58 2025 by rpki-client