This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json) Hash identifier: r1VShbMG4JHJbMxcJh13+bzu6pSYenruSZ24jk/7vfA= Subject key identifier: E5:33:E4:D7:48:8D:88:EE:F5:69:68:E8:C5:F5:53:59:61:CC:D9:0C Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0 Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0 Certificate serial: 019AF31B6DB6524B088DD6A9664AEA80BF84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: TCkpqRlhbDrU5J55xOUyz2Ke/7slpLMZ/uCOWcgBEmI=) 2: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6d:b6:52:4b:08:8d:d6:a9:66:4a:ea:80:bf:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0 Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=e533e4d7488d88eef56968e8c5f5535961ccd90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:5b:a5:64:8e:62:b0:a4:c0:de:80:b0:c2: 6a:94:1b:1f:51:60:bd:9e:30:d6:a8:a4:a8:7b:04: 77:25:8a:0c:b5:eb:6a:25:64:a9:7f:a1:50:41:76: e7:49:2c:5b:72:f0:ac:22:04:4e:28:7f:71:c2:e8: b1:ce:ae:9c:a0:d6:3c:7f:01:b6:36:74:96:3a:73: d5:7f:75:a2:d5:c3:fc:c4:5f:c4:26:a8:12:03:e6: 7f:6a:40:e4:ed:ac:ce:5b:cc:4e:2f:66:36:73:bb: 59:6d:94:56:83:7d:9a:5e:dd:28:7a:a2:65:6c:2b: 3a:6d:a9:33:99:77:eb:17:6a:e3:6e:33:6c:08:7e: ba:40:54:d5:51:92:be:4f:0a:e6:6f:74:8c:9d:79: 2f:be:0f:06:dd:59:a9:97:06:a1:f9:0d:a1:04:5f: fe:8e:2b:9d:89:63:89:af:29:94:32:39:4d:7d:a7: 88:6e:02:3b:52:56:a9:b7:67:7b:db:88:19:07:6a: 6a:af:a1:5f:6f:df:44:be:b1:2c:84:ae:6d:0d:ec: fe:f1:8a:af:09:e3:61:0e:9a:56:5d:7a:51:e0:d1: 39:86:41:d0:0d:62:25:5f:93:81:e8:cf:15:cd:4a: f9:e4:a1:bf:36:b5:03:3d:f9:04:cc:fa:51:6c:2a: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:33:E4:D7:48:8D:88:EE:F5:69:68:E8:C5:F5:53:59:61:CC:D9:0C X509v3 Authority Key Identifier: keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2c:94:14:db:a1:e7:d0:3f:d6:dc:17:58:a5:83:10:c8:9f: 01:b4:c1:f6:7b:d7:b3:69:29:8f:50:c3:19:70:be:71:9c:af: 6f:0c:1b:91:47:35:fe:d7:da:fb:cc:65:2e:2c:8d:d6:a7:dc: 7a:04:d2:3a:ba:1f:52:f0:ad:12:80:b7:e1:96:90:04:b1:61: 78:8c:c5:36:90:f0:5c:db:8c:1e:bd:e1:67:0d:74:84:d9:e0: 2c:bf:c4:cc:e2:82:fd:89:37:86:cf:bb:e0:c4:51:d9:7c:bb: 89:e3:7f:9f:b2:40:fe:24:75:2c:77:65:8a:62:de:80:34:d5: a0:04:c9:54:7d:83:21:f2:b1:eb:4a:05:dd:64:aa:d8:9e:22: 59:60:64:c1:6f:b5:93:60:da:f4:f8:1b:ac:86:06:4a:3e:9b: a8:ee:75:9b:35:a4:80:96:71:ae:d7:7c:c0:32:6e:af:91:d3: 63:4a:93:10:f1:b4:2d:17:69:59:4b:23:c2:31:d5:96:93:a5: 7b:c1:2a:72:e8:7f:b4:b1:46:cf:e4:79:8d:cc:f2:76:ff:f5: 39:e6:07:d1:cb:3b:db:96:3d:fd:92:a0:09:ea:b1:f1:4e:e0: 71:7a:c5:5c:32:ef:f3:c4:d9:4e:08:9a:8f:18:d5:54:f2:8b: 53:c6:9d:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG222UksIjdapZkrqgL+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGNlZDNiMDlhOTA1ZWI5Njg2OWM1OGY2NmI0ZjhiNTkx NTAzYjAwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD EyhlNTMzZTRkNzQ4OGQ4OGVlZjU2OTY4ZThjNWY1NTM1OTYxY2NkOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoNbpWSOYrCkwN6AsMJqlBsfUWC9 njDWqKSoewR3JYoMtetqJWSpf6FQQXbnSSxbcvCsIgROKH9xwuixzq6coNY8fwG2 NnSWOnPVf3Wi1cP8xF/EJqgSA+Z/akDk7azOW8xOL2Y2c7tZbZRWg32aXt0oeqJl bCs6bakzmXfrF2rjbjNsCH66QFTVUZK+Twrmb3SMnXkvvg8G3Vmplwah+Q2hBF/+ jiudiWOJrymUMjlNfaeIbgI7Ulapt2d724gZB2pqr6Ffb99EvrEshK5tDez+8Yqv CeNhDppWXXpR4NE5hkHQDWIlX5OB6M8VzUr55KG/NrUDPfkEzPpRbCoz6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUz5NdIjYju9Wlo6MX1U1lhzNkMMB8GA1UdIwQY MBaAFP+M7TsJqQXrloacWPZrT4tZFQOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYt YmU1NjFjY2RlZDJjLzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYtYmU1NjFjY2RlZDJj LzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiyUFNuh 59A/1twXWKWDEMifAbTB9nvXs2kpj1DDGXC+cZyvbwwbkUc1/tfa+8xlLiyN1qfc egTSOrofUvCtEoC34ZaQBLFheIzFNpDwXNuMHr3hZw10hNngLL/EzOKC/Yk3hs+7 4MRR2Xy7ieN/n7JA/iR1LHdlimLegDTVoATJVH2DIfKx60oF3WSq2J4iWWBkwW+1 k2Da9PgbrIYGSj6bqO51mzWkgJZxrtd8wDJur5HTY0qTEPG0LRdpWUsjwjHVlpOl e8Eqcuh/tLFGz+R5jczydv/1OeYH0cs725Y9/ZKgCeqx8U7gcXrFXDLv88TZTgia jxjVVPKLU8adCg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:00 2025 by rpki-client