This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json) Hash identifier: 4tI3qAocT1c6kj4If0ZpZunIPiB2hYrAFqaUYZXOF9w= Subject key identifier: 51:26:78:2F:DF:E5:59:F9:5A:CE:A6:D5:3E:65:96:65:31:07:4D:D2 Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28 Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628 Certificate serial: 019AF42DC2AC4EB7E001EC3F0CE98DCACF15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft Manifest number: 06BC Signing time: Sat 06 Dec 2025 15:00:30 +0000 Manifest this update: Sat 06 Dec 2025 15:00:30 +0000 Manifest next update: Sun 07 Dec 2025 15:00:30 +0000 Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: fYiGl/5fieEZbXX5cphN1ir4CdJAs5ibKVKGFjo5mog=) 2: FDe_pjW_jnnn_wQOP-AVXix4Szo.roa (hash: VtZUc2Nt2trLnWpsaaIqK/XsZumvjhDGxHdBVKEJhRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c2:ac:4e:b7:e0:01:ec:3f:0c:e9:8d:ca:cf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628 Validity Not Before: Dec 6 15:00:30 2025 GMT Not After : Dec 7 15:00:30 2025 GMT Subject: CN=5126782fdfe559f95acea6d53e65966531074dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:6e:05:9d:c2:0c:e0:56:c6:1a:1f:10:bb: 3c:05:ee:10:9a:2d:14:fc:9a:73:d3:ef:73:8c:05: 20:e9:e3:90:41:9a:d0:78:7b:84:85:57:ae:d4:c6: a1:d9:f9:a6:cc:a9:1f:60:d9:6d:5e:95:bf:32:07: 4b:91:a2:9e:5c:72:d1:7f:f2:73:92:18:81:9b:fc: 2b:f0:99:20:ac:63:57:f1:4a:14:17:8c:46:e3:61: 99:6d:59:1d:38:d3:bc:f6:3f:64:a3:c7:52:b4:7e: e1:d5:8b:cd:ab:24:2c:e5:2b:35:92:5c:7c:54:27: 36:06:9e:c7:a9:0e:5c:ce:0b:b6:de:d0:72:43:34: b7:5b:a7:f5:06:88:d3:20:22:61:e4:cd:a9:b6:8e: 36:c2:8e:e6:a8:92:7a:55:41:79:6a:51:47:3a:f0: 6e:b5:95:47:f6:65:f9:19:de:87:e3:fa:7f:56:c6: 90:b5:53:90:8a:67:5e:28:10:9c:c9:09:10:0a:c2: 2d:a5:07:8c:88:16:f2:76:79:07:d9:44:3e:f1:5e: 68:d3:f6:a9:03:3e:47:68:d7:17:be:57:50:4b:f1: 83:e1:69:25:6f:d1:2f:08:75:94:60:7f:6d:1a:14: 09:9d:cc:fc:70:ff:30:c8:2e:3f:71:7e:40:45:04: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:26:78:2F:DF:E5:59:F9:5A:CE:A6:D5:3E:65:96:65:31:07:4D:D2 X509v3 Authority Key Identifier: keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:40:ea:c3:b8:b5:0d:a1:76:fe:28:a1:a1:0b:f3:f9:3e:52: 19:68:66:50:de:dd:7d:f7:61:1e:73:eb:21:15:6e:d3:fb:35: f9:80:f3:c7:9d:11:a8:4e:9d:2f:7b:6d:0f:cf:ad:24:d9:a7: 30:73:d7:ac:c1:90:63:e7:48:c6:6e:ae:af:9d:c7:ab:16:54: 39:bf:cd:5f:9e:1b:63:1b:8e:80:d9:8a:1d:cb:a3:1c:78:8d: b5:a0:48:16:c1:f1:45:1e:b1:0d:a9:d1:92:b7:bb:1f:72:88: f3:b6:05:0b:f1:c8:05:fa:3e:39:0e:7f:e2:fe:3b:b6:5b:36: 47:eb:25:98:08:11:fe:04:04:36:54:ed:ca:21:4f:2b:28:87: a6:7a:ad:a8:a0:cc:88:ef:b1:20:fa:53:20:61:cd:9a:00:ac: 85:2a:85:1b:91:42:9d:87:b5:04:2d:10:81:19:c5:1d:77:a0: 17:0b:07:03:ec:26:ee:3b:97:1c:82:b1:97:df:67:3b:7d:4e: d7:5b:c9:b8:17:21:1f:87:9d:b6:da:7e:13:4e:f4:62:62:4c: 42:2f:9d:5c:c9:73:8b:7b:26:54:03:e3:0f:38:53:f1:15:be: 4f:dd:ec:4e:f7:fd:07:f0:f5:a1:d4:ae:e4:b8:f3:4b:d9:f2: 82:56:5a:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcKsTrfgAew/DOmNys8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj Zjg2MjgwHhcNMjUxMjA2MTUwMDMwWhcNMjUxMjA3MTUwMDMwWjAzMTEwLwYDVQQD Eyg1MTI2NzgyZmRmZTU1OWY5NWFjZWE2ZDUzZTY1OTY2NTMxMDc0ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJBuBZ3CDOBWxhofELs8Be4Qmi0U /Jpz0+9zjAUg6eOQQZrQeHuEhVeu1Mah2fmmzKkfYNltXpW/MgdLkaKeXHLRf/Jz khiBm/wr8JkgrGNX8UoUF4xG42GZbVkdONO89j9ko8dStH7h1YvNqyQs5Ss1klx8 VCc2Bp7HqQ5czgu23tByQzS3W6f1BojTICJh5M2pto42wo7mqJJ6VUF5alFHOvBu tZVH9mX5Gd6H4/p/VsaQtVOQimdeKBCcyQkQCsItpQeMiBbydnkH2UQ+8V5o0/ap Az5HaNcXvldQS/GD4Wklb9EvCHWUYH9tGhQJncz8cP8wyC4/cX5ARQQu6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEmeC/f5Vn5Ws6m1T5llmUxB03SMB8GA1UdIwQY MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt NWVjMzM2YmY3NDNiLzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0Dqw7i1 DaF2/iihoQvz+T5SGWhmUN7dffdhHnPrIRVu0/s1+YDzx50RqE6dL3ttD8+tJNmn MHPXrMGQY+dIxm6ur53HqxZUOb/NX54bYxuOgNmKHcujHHiNtaBIFsHxRR6xDanR kre7H3KI87YFC/HIBfo+OQ5/4v47tls2R+slmAgR/gQENlTtyiFPKyiHpnqtqKDM iO+xIPpTIGHNmgCshSqFG5FCnYe1BC0QgRnFHXegFwsHA+wm7juXHIKxl99nO31O 11vJuBchH4edttp+E070YmJMQi+dXMlzi3smVAPjDzhT8RW+T93sTvf9B/D1odSu 5LjzS9nyglZa8A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:13 2025 by rpki-client