This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json) Hash identifier: LLzPu2tCQnY2ZWcnkrKbu+uH46I0y6dlhdIt+uD0gHc= Subject key identifier: 86:B6:A3:1A:DD:8A:D5:D2:4F:FC:77:34:82:7D:4F:B3:E9:C1:F3:AA Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8 Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8 Certificate serial: 019AF1D2643CD143CCE08A13997B4996ADD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft Manifest number: 14B8 Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: CWfnX2lGrG/psIjZTWuBNlaWZy6rG/Owk6s+WHhKUeo=) 2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:64:3c:d1:43:cc:e0:8a:13:99:7b:49:96:ad:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8 Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=86b6a31add8ad5d24ffc7734827d4fb3e9c1f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:f9:24:47:2a:2a:05:69:5d:c0:70:15:fb: f0:95:54:2c:3a:e5:2b:73:6a:03:73:ff:a5:c4:42: 6b:c3:02:ba:1b:91:ae:9b:50:84:3c:7e:bb:07:28: d3:19:04:77:9d:21:48:aa:00:e9:a4:3c:53:5c:e2: 92:75:6c:73:2e:bc:0a:03:c8:06:61:d1:2c:bb:9e: eb:59:d6:05:5d:5d:ea:76:7d:af:c6:ab:31:14:86: 9a:05:af:ba:20:33:1e:ca:06:b7:5d:3c:d9:74:91: 92:48:c4:99:c8:1d:31:5b:87:f1:1f:52:c9:fb:de: 55:1f:1a:12:65:b4:e1:6f:96:3a:d0:b8:12:df:c8: 70:27:ed:fb:16:c5:a6:3a:f9:d5:85:b8:a1:bd:d8: 03:88:35:36:48:9a:d1:f0:5d:b0:f1:75:11:a5:2a: fd:08:73:8a:0b:40:1f:a9:d8:15:7c:a5:aa:bd:3e: 2c:1e:f9:6f:a8:13:f9:cb:aa:54:87:14:fd:fd:23: e2:c7:38:12:4d:3c:1e:e7:b8:04:06:ee:1a:b3:27: e4:1f:b8:cd:d7:16:46:b2:cf:f7:4b:b1:b6:6e:16: ab:64:07:5b:bd:78:89:c5:cf:84:7f:48:b5:5d:4e: a1:0e:1f:2a:0b:c9:1c:41:9a:da:7b:3d:11:b0:71: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B6:A3:1A:DD:8A:D5:D2:4F:FC:77:34:82:7D:4F:B3:E9:C1:F3:AA X509v3 Authority Key Identifier: keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d9:ab:c7:06:bd:8d:46:c8:bc:51:7a:b5:40:93:b0:eb:cf: 8e:b7:fc:3f:77:e3:2e:a9:7e:bc:7b:2e:8c:a3:7d:56:34:3b: de:c7:1a:b5:c6:78:a9:28:fc:00:8d:38:b3:b1:dd:f8:f4:ca: 05:50:97:49:a3:dd:a0:5d:86:ff:89:63:9a:b2:4d:9a:26:ac: 55:2d:c4:18:99:a7:66:c5:17:c1:69:fa:b7:2e:c5:c2:69:e2: 5b:67:57:c9:ba:bc:7a:8f:55:c6:18:d9:68:14:0d:ce:6b:28: 29:0d:8f:4d:cb:5b:ad:8d:0d:e4:92:54:c6:26:bc:bc:f9:cb: 1f:5d:88:f9:c6:ce:ed:be:c4:8b:9a:e4:94:dc:1c:12:2c:9b: 68:31:59:d5:93:62:c9:0d:ea:8d:c5:4b:e6:ba:e9:39:58:d5: 66:bf:9a:56:55:3b:a5:8f:08:c9:0a:3f:78:42:d7:04:43:3e: dd:1f:61:3e:c4:2e:de:25:12:48:2d:11:91:4d:f7:eb:33:6b: 1b:27:20:f7:40:6d:03:19:99:7f:2c:28:95:5e:7a:7e:07:83: d0:a6:e1:0e:1d:c0:78:6f:25:ee:8d:73:8f:58:04:03:7a:a2: 21:6a:55:82:1b:6d:dd:87:ba:87:4e:41:eb:7e:05:bc:84:4e: 6b:60:6d:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mQ80UPM4IoTmXtJlq3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzM2Q5ZmZkYWM1OGU3NjEyYjA5NTE0NGZlYzA2YmEyNTg1 YWE2YTgwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD Eyg4NmI2YTMxYWRkOGFkNWQyNGZmYzc3MzQ4MjdkNGZiM2U5YzFmM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPb5JEcqKgVpXcBwFfvwlVQsOuUr c2oDc/+lxEJrwwK6G5Gum1CEPH67ByjTGQR3nSFIqgDppDxTXOKSdWxzLrwKA8gG YdEsu57rWdYFXV3qdn2vxqsxFIaaBa+6IDMeyga3XTzZdJGSSMSZyB0xW4fxH1LJ +95VHxoSZbThb5Y60LgS38hwJ+37FsWmOvnVhbihvdgDiDU2SJrR8F2w8XURpSr9 CHOKC0AfqdgVfKWqvT4sHvlvqBP5y6pUhxT9/SPixzgSTTwe57gEBu4asyfkH7jN 1xZGss/3S7G2bharZAdbvXiJxc+Ef0i1XU6hDh8qC8kcQZraez0RsHGY9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa2oxrditXST/x3NIJ9T7PpwfOqMB8GA1UdIwQY MBaAFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTkt OWNiMjk2MzAxZTY0LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTktOWNiMjk2MzAxZTY0 LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdmrxwa9 jUbIvFF6tUCTsOvPjrf8P3fjLql+vHsujKN9VjQ73scatcZ4qSj8AI04s7Hd+PTK BVCXSaPdoF2G/4ljmrJNmiasVS3EGJmnZsUXwWn6ty7FwmniW2dXybq8eo9VxhjZ aBQNzmsoKQ2PTctbrY0N5JJUxia8vPnLH12I+cbO7b7Ei5rklNwcEiybaDFZ1ZNi yQ3qjcVL5rrpOVjVZr+aVlU7pY8IyQo/eELXBEM+3R9hPsQu3iUSSC0RkU336zNr Gycg90BtAxmZfywolV56fgeD0KbhDh3AeG8l7o1zj1gEA3qiIWpVghtt3Ye6h05B 634FvIROa2Btrg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:29 2025 by rpki-client