This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json) Hash identifier: AgNa3Pb+IoCgTBtjv3eRuT1akTiiDKQpi9CW0KpoPHI= Subject key identifier: DB:4E:CB:EC:C1:CE:04:03:2B:70:87:99:F5:57:33:18:57:36:39:9B Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae Certificate serial: 019AF352A4AD959BBD8ECFD9D7B7CA634626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft Manifest number: 15E2 Signing time: Sat 06 Dec 2025 11:01:10 +0000 Manifest this update: Sat 06 Dec 2025 11:01:10 +0000 Manifest next update: Sun 07 Dec 2025 11:01:10 +0000 Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: G7plO4wC3Vz0ql3IwRi2gqF0zOEYQICn9laqkcsWJkM=) 2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a4:ad:95:9b:bd:8e:cf:d9:d7:b7:ca:63:46:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae Validity Not Before: Dec 6 11:01:10 2025 GMT Not After : Dec 7 11:01:10 2025 GMT Subject: CN=db4ecbecc1ce04032b708799f55733185736399b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:c8:6c:e5:7e:fb:9b:d6:68:cc:58:1c:1e: 0c:05:12:72:57:74:a5:66:20:b6:3c:48:2a:b9:21: ad:49:1f:55:74:d2:47:e8:89:b8:32:b0:59:6b:c2: 3b:a2:27:85:b4:e8:22:19:2a:45:1f:58:e6:ba:7a: 0e:76:36:4f:28:d5:ff:f8:15:31:fc:6b:42:aa:9b: b7:71:af:f8:f1:2d:b2:69:11:98:e5:bd:93:3b:88: a0:3b:a9:55:02:e2:f6:7a:e0:80:14:e3:64:5e:6a: d8:94:cc:a3:4b:b5:c4:30:f4:da:ef:d1:48:83:13: 07:ad:81:da:a2:47:76:83:77:69:36:82:b8:dc:80: 52:70:01:4e:c9:97:7d:cc:38:39:c0:a3:2b:78:b0: 4a:06:d8:42:38:91:f6:96:9c:8b:02:52:7a:48:ae: 96:34:25:ce:5a:6d:83:23:ef:f9:26:cf:47:bc:73: 4e:c8:96:11:d6:86:e1:36:c1:04:07:3a:db:68:f0: b4:22:0d:b2:c0:dd:f3:5c:45:88:60:07:97:e8:0a: 2a:f3:55:e6:22:ea:62:05:eb:8b:77:c1:0a:79:c0: f3:fb:77:0f:5b:86:31:22:a0:34:39:33:f7:4e:52: 0d:d3:b4:fe:e3:88:e4:10:13:4b:b3:08:3d:41:13: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4E:CB:EC:C1:CE:04:03:2B:70:87:99:F5:57:33:18:57:36:39:9B X509v3 Authority Key Identifier: keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c7:8f:c4:c5:c9:5e:9c:0f:d3:06:14:c6:f1:eb:3d:2b:6b: b8:c5:e6:7d:3d:36:d6:84:0d:e4:77:90:fb:e2:7e:a7:2e:27: 6d:bc:b1:d5:c7:bd:c8:73:41:6d:61:74:a4:96:ff:d4:c7:0e: 93:76:ed:ae:b6:98:9c:9a:e9:0b:19:e4:21:33:5b:3c:f2:e2: a6:a1:1e:c5:55:87:e9:a3:0d:ab:ca:10:35:a9:51:4e:54:41: eb:d4:c4:ed:2f:28:d8:a2:1a:6f:b4:b9:f2:4b:9b:08:cf:60: ac:3d:a2:79:d4:7f:54:ac:bb:54:c0:63:a0:48:01:73:62:34: 95:fe:b4:95:f2:4a:15:0b:4d:31:12:6d:7f:a6:f7:4c:ed:6d: bd:22:b1:c2:67:16:5c:8a:94:b0:e1:ca:13:c8:2d:c4:d5:e9: 7f:07:12:4c:0e:fd:65:71:2d:b9:ec:dd:36:57:4c:f9:0e:66: ad:14:e1:0a:c1:44:95:4a:be:af:a7:cc:ee:a2:5b:c1:b3:62: 44:d3:48:d5:84:5d:99:70:b0:7c:c3:a2:79:41:ae:ea:36:6f: 0d:e1:3f:98:5c:4c:90:d5:0a:3f:83:fc:e1:7e:2b:17:44:04: fe:fd:e2:1f:c3:5a:08:9b:83:95:28:4d:de:9c:d6:08:05:09: a0:b6:65:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqStlZu9js/Z17fKY0YmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2M0NWU4NGIwNzhkNDU4YWRmOGQ4Njc0NDVjNDZmOGM4 ZDBmYWUwHhcNMjUxMjA2MTEwMTEwWhcNMjUxMjA3MTEwMTEwWjAzMTEwLwYDVQQD EyhkYjRlY2JlY2MxY2UwNDAzMmI3MDg3OTlmNTU3MzMxODU3MzYzOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3zIbOV++5vWaMxYHB4MBRJyV3Sl ZiC2PEgquSGtSR9VdNJH6Im4MrBZa8I7oieFtOgiGSpFH1jmunoOdjZPKNX/+BUx /GtCqpu3ca/48S2yaRGY5b2TO4igO6lVAuL2euCAFONkXmrYlMyjS7XEMPTa79FI gxMHrYHaokd2g3dpNoK43IBScAFOyZd9zDg5wKMreLBKBthCOJH2lpyLAlJ6SK6W NCXOWm2DI+/5Js9HvHNOyJYR1obhNsEEBzrbaPC0Ig2ywN3zXEWIYAeX6Aoq81Xm IupiBeuLd8EKecDz+3cPW4YxIqA0OTP3TlIN07T+44jkEBNLswg9QRNfTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtOy+zBzgQDK3CHmfVXMxhXNjmbMB8GA1UdIwQY MBaAFOHMRehLB41Fit+NhnRFxG+MjQ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQt NjMyMGM0NjBhM2Y4LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQtNjMyMGM0NjBhM2Y4 LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsePxMXJ XpwP0wYUxvHrPStruMXmfT021oQN5HeQ++J+py4nbbyx1ce9yHNBbWF0pJb/1McO k3btrraYnJrpCxnkITNbPPLipqEexVWH6aMNq8oQNalRTlRB69TE7S8o2KIab7S5 8kubCM9grD2iedR/VKy7VMBjoEgBc2I0lf60lfJKFQtNMRJtf6b3TO1tvSKxwmcW XIqUsOHKE8gtxNXpfwcSTA79ZXEtuezdNldM+Q5mrRThCsFElUq+r6fM7qJbwbNi RNNI1YRdmXCwfMOieUGu6jZvDeE/mFxMkNUKP4P84X4rF0QE/v3iH8NaCJuDlShN 3pzWCAUJoLZlUA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:45 2025 by rpki-client