This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json) Hash identifier: ArMKmWdXAGD2xfqxghPfhdfooWiLKDHKzV25l+TgcDU= Subject key identifier: 05:4C:73:0B:97:0A:5C:18:14:23:FE:83:EE:7A:54:E5:78:50:D6:3C Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea Certificate serial: 019AF23FAD4A20621E4ADE4FDF19058F3A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: Rfz1KRUowhPCn5l3zAb7eHgxtZxK6hWKxWtPjKvfOsE=) 2: BfpSqqWPnz2zm8axpIU080CSsRs.roa (hash: i9cs+yG6O1Ft1obwZZ0jOFlWDCTv2KU1uV2QUmB00UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ad:4a:20:62:1e:4a:de:4f:df:19:05:8f:3a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=054c730b970a5c181423fe83ee7a54e57850d63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:c4:f9:0c:f7:7a:25:29:4e:4f:77:cd:9e: a5:10:b2:32:88:71:9f:2a:88:a8:67:3e:f3:2b:ca: 0d:3d:71:fc:71:16:e4:08:b6:a7:d8:80:8b:eb:00: f3:b3:18:5f:6e:47:08:bd:5c:28:5b:26:3c:fe:5b: db:9f:bc:71:2b:f0:ae:9a:e3:5c:b5:76:56:4b:8e: a8:a1:32:84:38:d6:24:fc:47:85:c9:31:64:58:75: 24:47:d9:84:b0:21:69:67:ef:48:c9:d6:b8:d9:d0: fd:66:ee:b3:17:b1:b6:d1:d2:e4:79:cf:ab:6f:a2: 60:3e:dd:af:c7:54:a9:fc:b7:55:b6:45:75:ed:db: 94:d4:ee:7f:ea:22:8f:9a:4b:bd:ef:77:ac:7f:95: 35:18:f2:f9:e1:8f:f0:c9:f5:00:c5:de:44:b1:ad: fa:b5:8e:de:f5:c1:39:00:a8:5f:56:1b:94:a5:53: 7d:2b:97:bc:94:e5:d4:0b:73:dc:0b:22:c7:04:ed: 27:28:61:17:92:d6:a2:8e:c2:d4:c2:fe:02:56:fc: 91:b8:84:ed:73:03:6b:6e:e6:77:ab:a2:83:a0:10: 2a:b7:57:fa:64:d4:f0:35:00:c9:05:94:a9:be:ed: bc:4e:d2:74:54:b9:b9:4f:09:10:73:66:8e:ca:aa: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4C:73:0B:97:0A:5C:18:14:23:FE:83:EE:7A:54:E5:78:50:D6:3C X509v3 Authority Key Identifier: keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2b:b9:42:78:27:06:f0:c4:8e:d7:1e:71:9d:ff:75:98:ad: e1:02:af:81:9a:72:08:b9:55:e7:c8:f1:1b:b2:cc:01:34:e4: 5f:80:a3:0e:bd:f6:35:0c:c1:c3:b3:e7:75:58:fb:78:9f:60: 0a:ac:41:aa:3a:85:72:fb:b9:80:cb:cf:20:20:bc:b5:21:05: b1:63:f5:aa:36:e7:bf:56:d8:af:40:18:13:cf:7b:c8:c6:94: 68:20:82:e4:ba:1c:9e:ed:cb:dd:9d:1b:a2:19:57:b3:54:de: ce:8d:ea:98:c0:35:ef:53:a4:90:0c:86:f5:08:c3:2c:c5:7f: c7:e2:c1:c1:7b:37:27:03:87:aa:12:fb:52:1d:ab:da:fa:c4: 8d:1e:43:c3:48:05:9e:61:10:48:f2:38:b5:70:ea:a1:c5:84: 84:e3:3d:66:d0:6d:ea:d7:ac:17:f3:d3:3d:55:4b:20:17:d1: 3d:10:d5:13:77:e9:de:1d:e2:b5:34:45:a7:48:55:12:56:0d: 09:6e:58:30:46:36:77:4a:7f:89:eb:85:eb:a2:9c:0f:6b:82: d6:c7:27:b3:1c:dc:02:d5:73:2d:1e:cb:59:b1:9f:d5:e6:28: 5e:f9:6b:1c:0b:c3:a8:f3:1a:b8:e4:01:9a:32:d8:c2:1e:e2: 8d:2e:53:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP61KIGIeSt5P3xkFjzpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWVkOWE5ZDFiNmI1MzgzZWJmOTQ2ZDVmYzU0OTgwNjEy NTYzZWEwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD EygwNTRjNzMwYjk3MGE1YzE4MTQyM2ZlODNlZTdhNTRlNTc4NTBkNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUDE+Qz3eiUpTk93zZ6lELIyiHGf KoioZz7zK8oNPXH8cRbkCLan2ICL6wDzsxhfbkcIvVwoWyY8/lvbn7xxK/CumuNc tXZWS46ooTKEONYk/EeFyTFkWHUkR9mEsCFpZ+9Iyda42dD9Zu6zF7G20dLkec+r b6JgPt2vx1Sp/LdVtkV17duU1O5/6iKPmku973esf5U1GPL54Y/wyfUAxd5Esa36 tY7e9cE5AKhfVhuUpVN9K5e8lOXUC3PcCyLHBO0nKGEXktaijsLUwv4CVvyRuITt cwNrbuZ3q6KDoBAqt1f6ZNTwNQDJBZSpvu28TtJ0VLm5TwkQc2aOyqoGEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVMcwuXClwYFCP+g+56VOV4UNY8MB8GA1UdIwQY MBaAFOKe2anRtrU4Pr+UbV/FSYBhJWPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEt ZjZjNjg1OWIzMGYwLzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEtZjZjNjg1OWIzMGYw LzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyu5Qngn BvDEjtcecZ3/dZit4QKvgZpyCLlV58jxG7LMATTkX4CjDr32NQzBw7PndVj7eJ9g CqxBqjqFcvu5gMvPICC8tSEFsWP1qjbnv1bYr0AYE897yMaUaCCC5Locnu3L3Z0b ohlXs1Tezo3qmMA171OkkAyG9QjDLMV/x+LBwXs3JwOHqhL7Uh2r2vrEjR5Dw0gF nmEQSPI4tXDqocWEhOM9ZtBt6tesF/PTPVVLIBfRPRDVE3fp3h3itTRFp0hVElYN CW5YMEY2d0p/ieuF66KcD2uC1scnsxzcAtVzLR7LWbGf1eYoXvlrHAvDqPMauOQB mjLYwh7ijS5ThA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:22 2025 by rpki-client