This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json) Hash identifier: m+ivDEaGI6bsKEGN6bw7htDk3wUhTJ6863cA02GEDro= Subject key identifier: 1A:72:B4:70:4A:D8:F0:4F:66:39:21:82:F3:D3:DD:3E:F7:93:38:02 Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8 Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8 Certificate serial: 019AF20965EDB5BF23B5C4527EB568C3BCCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:33 +0000 Manifest this update: Sat 06 Dec 2025 05:01:33 +0000 Manifest next update: Sun 07 Dec 2025 05:01:33 +0000 Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: VUvuOLln2IaAdYHgN3/7PtRNwrhCaf8FucAcYQMyeLY=) 2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:65:ed:b5:bf:23:b5:c4:52:7e:b5:68:c3:bc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8 Validity Not Before: Dec 6 05:01:33 2025 GMT Not After : Dec 7 05:01:33 2025 GMT Subject: CN=1a72b4704ad8f04f66392182f3d3dd3ef7933802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:d1:7c:75:7f:22:a2:9c:11:9e:d5:ca:f3: b8:15:fa:16:7c:f7:39:bc:69:cd:fd:bf:a7:32:ce: 00:46:bc:27:ef:79:ea:04:f8:7d:17:e5:0b:14:e4: 6e:53:d2:84:be:f9:7a:e8:8c:28:c0:8f:fa:46:aa: 33:50:b9:03:64:0c:50:ce:4f:db:45:a3:05:bc:f2: ee:c6:5b:e7:e7:c4:61:2b:28:70:0a:c1:9c:03:2b: 31:0a:ed:7d:41:31:12:1c:d2:ce:43:f1:89:c8:60: c4:c0:6c:73:2d:fd:27:55:14:9d:31:80:9a:66:d5: ba:86:0f:4a:d6:9b:98:06:f2:9a:eb:fa:83:4b:65: bc:a9:38:e0:1d:2d:e8:23:74:47:62:db:74:55:16: 53:f7:43:d4:ee:1e:c9:c6:9e:f9:b6:b3:eb:c6:ef: 44:00:1b:59:46:32:db:be:d2:17:16:12:1e:3a:36: c1:9d:a9:df:e2:17:04:56:28:06:4a:00:6e:af:7b: 33:17:5c:d2:c0:a9:72:33:12:5f:c8:be:ee:9a:88: 01:a1:9b:d0:3c:f9:86:90:4a:ff:d6:c7:3c:6e:c2: f6:cf:06:35:a5:12:fe:64:f8:bb:9b:f3:98:f5:38: 6a:6e:be:d6:4a:23:a5:1e:3f:1c:f8:09:fa:b2:21: 64:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:72:B4:70:4A:D8:F0:4F:66:39:21:82:F3:D3:DD:3E:F7:93:38:02 X509v3 Authority Key Identifier: keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:83:05:ec:6a:8d:de:79:cf:34:ca:e0:f9:3a:52:d4:20:18: cf:91:69:09:3a:6d:d8:ec:9f:f7:10:09:24:1e:90:fc:a6:a3: 9a:5d:63:d3:30:47:6b:ef:a7:eb:5d:a8:d0:c7:4f:95:c7:f5: 7f:35:82:69:a6:ca:68:15:29:60:30:9c:fb:a6:2b:86:cb:9c: b0:99:a5:59:4d:a9:e7:74:3f:76:41:9f:06:8a:5f:c0:c0:74: 1f:f0:c8:c9:ed:8f:c7:f3:8b:64:23:63:09:20:a1:01:13:2e: 19:17:e4:1c:1a:57:30:7b:ea:e7:4f:a6:8a:f6:26:02:7d:a5: c4:29:62:2f:09:e1:86:0e:ed:65:80:6f:75:3d:10:bd:6f:de: 91:37:33:72:04:c2:e9:ee:d7:84:3d:57:27:94:9d:6a:34:ca: 26:6f:20:1e:12:89:80:d8:60:a2:4f:f9:37:c7:5d:9e:19:65: b1:a7:ea:0a:4e:62:52:02:3f:d9:7e:9f:6f:83:2a:b1:40:59: 4f:0f:23:84:10:ac:e8:5c:99:1f:b8:e4:55:93:09:9b:2a:d9: 5f:45:b1:f8:20:fc:fc:82:04:b8:2d:58:b9:0c:58:8b:ad:c3: 86:21:52:d9:17:af:ba:a1:66:f6:ed:aa:df:05:ef:1e:18:e9: 7b:0f:3a:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWXttb8jtcRSfrVow7zNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwODk0NWQxZmM3YjQ3MGU2ODczNjU1Zjc1NTkzMDBlMDk3 YTY1ZTgwHhcNMjUxMjA2MDUwMTMzWhcNMjUxMjA3MDUwMTMzWjAzMTEwLwYDVQQD EygxYTcyYjQ3MDRhZDhmMDRmNjYzOTIxODJmM2QzZGQzZWY3OTMzODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/nRfHV/IqKcEZ7VyvO4FfoWfPc5 vGnN/b+nMs4ARrwn73nqBPh9F+ULFORuU9KEvvl66IwowI/6RqozULkDZAxQzk/b RaMFvPLuxlvn58RhKyhwCsGcAysxCu19QTESHNLOQ/GJyGDEwGxzLf0nVRSdMYCa ZtW6hg9K1puYBvKa6/qDS2W8qTjgHS3oI3RHYtt0VRZT90PU7h7Jxp75trPrxu9E ABtZRjLbvtIXFhIeOjbBnanf4hcEVigGSgBur3szF1zSwKlyMxJfyL7umogBoZvQ PPmGkEr/1sc8bsL2zwY1pRL+ZPi7m/OY9Thqbr7WSiOlHj8c+An6siFk+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpytHBK2PBPZjkhgvPT3T73kzgCMB8GA1UdIwQY MBaAFOCJRdH8e0cOaHNlX3VZMA4JemXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQt MjhlNzczZGI5MWMyLzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQtMjhlNzczZGI5MWMy LzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIMF7GqN 3nnPNMrg+TpS1CAYz5FpCTpt2Oyf9xAJJB6Q/Kajml1j0zBHa++n612o0MdPlcf1 fzWCaabKaBUpYDCc+6YrhsucsJmlWU2p53Q/dkGfBopfwMB0H/DIye2Px/OLZCNj CSChARMuGRfkHBpXMHvq50+mivYmAn2lxCliLwnhhg7tZYBvdT0QvW/ekTczcgTC 6e7XhD1XJ5SdajTKJm8gHhKJgNhgok/5N8ddnhllsafqCk5iUgI/2X6fb4MqsUBZ Tw8jhBCs6FyZH7jkVZMJmyrZX0Wx+CD8/IIEuC1YuQxYi63DhiFS2RevuqFm9u2q 3wXvHhjpew86UQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:05 2025 by rpki-client