This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft File: 4JnuB4Iu8qzpw1b3tCyur_JclpI.mft (raw, json) Hash identifier: 7LKxK904kvq8K5eLPC8oVTnKnqYjeRPehPCcmMj1mjE= Subject key identifier: 67:09:EF:07:E8:8D:BD:E2:61:0A:A2:6A:BB:1D:23:74:D9:4B:99:AB Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92 Certificate issuer: /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692 Certificate serial: 019AF5784719FAAE95FC79F90C34A7EA7936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft Manifest number: 04D5 Signing time: Sat 06 Dec 2025 21:01:31 +0000 Manifest this update: Sat 06 Dec 2025 21:01:31 +0000 Manifest next update: Sun 07 Dec 2025 21:01:31 +0000 Files and hashes: 1: 1iS_m3lD3dXmwGgBO22atH55ZJQ.roa (hash: dudlGcQ03vBBCIjSveQDl5YeTGubffbp9QB39KgS7sA=) 2: 4JnuB4Iu8qzpw1b3tCyur_JclpI.crl (hash: ThqsPHk2R6OnGT84rxJbwOiqkrqHSyM9SRnhCtgsLhY=) 3: XxHEoHSmaUZCdqhyF-8R1fXJK2s.roa (hash: ZDVLnDp+CjsJYq9nGB8Fx25sme4loxzKQeCqC4xcibs=) 4: nRKqQSWKM2KOG7DGDlJo7FvwlGg.roa (hash: G5UWZxYAvoCWsXhSSwnd86ky6SZpPBzCIKBhsZP0lcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:47:19:fa:ae:95:fc:79:f9:0c:34:a7:ea:79:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692 Validity Not Before: Dec 6 21:01:31 2025 GMT Not After : Dec 7 21:01:31 2025 GMT Subject: CN=6709ef07e88dbde2610aa26abb1d2374d94b99ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:4e:73:56:55:b4:a5:8b:a6:9c:bc:89:e7: 2d:2a:7d:0b:6b:84:b0:81:5f:a4:dd:20:ff:7e:29: 0a:62:43:74:ce:f7:8d:48:ce:17:63:44:06:98:be: 2d:5b:38:d3:7e:63:2d:5e:18:e3:2c:4d:44:7a:ff: 99:7b:b2:17:16:8d:70:16:71:a4:7b:cd:94:2e:7c: d8:16:e8:6d:41:43:bc:fe:f3:c8:20:f8:e3:bf:f0: 11:45:bf:6b:de:ad:4e:62:2c:67:3c:1a:04:2b:53: b4:30:ea:0a:c5:0a:ca:75:50:e5:53:c9:90:0b:61: c0:bf:79:9a:05:53:3b:3e:2c:12:b0:6a:4b:8d:21: 5d:dc:77:bc:9a:21:be:a4:01:52:92:63:5c:18:ff: 28:69:2b:26:15:dd:32:da:a8:68:63:06:da:3f:99: ed:da:bf:7a:69:c5:73:43:c9:2d:e9:ea:57:79:b3: 6a:15:eb:55:b0:6e:f7:02:51:7a:01:46:05:68:d9: e8:45:87:87:3f:95:7a:53:ef:2e:16:52:d7:91:ad: 5b:63:a3:d6:12:12:77:85:6b:ae:ec:93:ca:52:cd: 03:8c:4a:c3:38:ed:f6:16:38:87:0d:63:d4:5e:ae: b8:d8:82:eb:26:a7:ba:96:61:e5:a4:11:f8:05:d5: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:09:EF:07:E8:8D:BD:E2:61:0A:A2:6A:BB:1D:23:74:D9:4B:99:AB X509v3 Authority Key Identifier: keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:07:17:7d:67:4c:81:67:83:48:13:bc:28:de:eb:12:8e:55: a7:28:a8:bd:a5:4c:6d:e5:a5:4e:e8:e5:a8:25:31:ad:e4:ef: 38:71:44:ed:8f:93:48:ae:a8:de:23:d1:d2:a9:52:02:fc:8e: b7:27:2c:59:cf:a2:e8:0b:85:87:76:72:28:5b:39:94:09:a9: 88:45:f7:0f:9a:b5:6a:29:93:37:42:9f:21:41:96:84:27:b9: 08:7f:6f:3e:9e:b7:13:5e:03:c1:d9:25:12:9f:02:6c:af:4b: de:54:1e:9e:4e:33:69:8f:65:84:85:c6:c9:bf:8c:d4:16:41: 9e:e4:89:00:70:59:7d:0d:dc:2d:7e:ca:c3:64:73:a5:b9:e5: 46:c8:7e:a2:78:67:49:f3:7b:93:54:a5:0e:c9:01:a5:9e:7a: 60:46:cc:48:16:16:58:13:c4:16:d4:51:a1:d2:f0:50:53:d2: cf:4c:94:4a:97:ea:50:f8:76:b3:0e:8e:3c:12:fe:78:3a:7c: 4d:4f:4e:51:4b:98:bd:0c:dc:da:6d:b2:91:2b:08:4a:28:5a: b3:56:03:36:4f:b4:9e:ca:92:b6:85:8e:58:74:8f:0d:b7:f1: 0c:1c:5c:66:1d:4c:ed:d6:6b:d4:bb:3d:2f:1a:2d:2c:9d:fb: 0b:a6:c9:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eEcZ+q6V/Hn5DDSn6nk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOTllZTA3ODIyZWYyYWNlOWMzNTZmN2I0MmNhZWFmZjI1 Yzk2OTIwHhcNMjUxMjA2MjEwMTMxWhcNMjUxMjA3MjEwMTMxWjAzMTEwLwYDVQQD Eyg2NzA5ZWYwN2U4OGRiZGUyNjEwYWEyNmFiYjFkMjM3NGQ5NGI5OWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa1Oc1ZVtKWLppy8iectKn0La4Sw gV+k3SD/fikKYkN0zveNSM4XY0QGmL4tWzjTfmMtXhjjLE1Eev+Ze7IXFo1wFnGk e82ULnzYFuhtQUO8/vPIIPjjv/ARRb9r3q1OYixnPBoEK1O0MOoKxQrKdVDlU8mQ C2HAv3maBVM7PiwSsGpLjSFd3He8miG+pAFSkmNcGP8oaSsmFd0y2qhoYwbaP5nt 2r96acVzQ8kt6epXebNqFetVsG73AlF6AUYFaNnoRYeHP5V6U+8uFlLXka1bY6PW EhJ3hWuu7JPKUs0DjErDOO32FjiHDWPUXq642ILrJqe6lmHlpBH4BdXHSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcJ7wfojb3iYQqiarsdI3TZS5mrMB8GA1UdIwQY MBaAFOCZ7geCLvKs6cNW97Qsrq/yXJaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NzMyYmItZjU5MC00MTk0LTg1YmUt ZDA2OWYxNzYwMmI2LzEvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85NzMyYmItZjU5MC00MTk0LTg1YmUtZDA2OWYxNzYwMmI2 LzEvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAcXfWdM gWeDSBO8KN7rEo5VpyiovaVMbeWlTujlqCUxreTvOHFE7Y+TSK6o3iPR0qlSAvyO tycsWc+i6AuFh3ZyKFs5lAmpiEX3D5q1aimTN0KfIUGWhCe5CH9vPp63E14Dwdkl Ep8CbK9L3lQenk4zaY9lhIXGyb+M1BZBnuSJAHBZfQ3cLX7Kw2RzpbnlRsh+onhn SfN7k1SlDskBpZ56YEbMSBYWWBPEFtRRodLwUFPSz0yUSpfqUPh2sw6OPBL+eDp8 TU9OUUuYvQzc2m2ykSsISihas1YDNk+0nsqStoWOWHSPDbfxDBxcZh1M7dZr1Ls9 LxotLJ37C6bJ5Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:44:40 2025 by rpki-client