This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json) Hash identifier: 9qJUKbXzMFlIqi5dx4qOfZoYMZusdxdb7x3Aki8qjiw= Subject key identifier: F8:78:D3:99:49:22:A5:67:09:21:54:E8:C8:5D:1E:A3:82:59:0C:D4 Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d Certificate serial: 019AF1643384304F73FEBE8517BDAC0FC082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft Manifest number: 0C04 Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: 40ZRJHrWEWxdFi2kWdvc7+bJPGu593clIR1yqJakZM8=) 2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:33:84:30:4f:73:fe:be:85:17:bd:ac:0f:c0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=f878d3994922a567092154e8c85d1ea382590cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:ae:d1:5f:e4:72:6e:7b:bb:3a:dd:c0:d9: ba:aa:88:67:83:04:2f:bc:82:92:c3:c7:17:04:1c: 8b:d2:f3:3f:59:f0:49:9a:c4:9c:6f:1f:b8:27:dc: 00:6e:11:96:d6:7d:a4:7a:4d:b9:fe:4a:96:0a:39: 09:c4:e2:1f:27:c4:9f:da:d5:51:44:7b:69:ae:87: 61:d4:da:fc:99:9e:d6:c2:2d:71:07:0d:66:4e:79: c7:40:5f:b3:0c:85:34:e3:43:e4:a7:0e:14:d7:46: f0:cc:98:91:63:b7:86:dd:2a:e4:6c:7b:ef:e7:c4: 83:5b:0f:1e:9c:00:d0:97:44:c2:41:de:a0:9c:af: 3b:d0:78:aa:e6:45:24:05:12:c9:53:64:1b:8e:08: 13:29:4d:59:0e:aa:d0:f8:b3:f3:ff:4a:3e:d2:2d: a0:16:96:ba:b3:5b:c7:f9:aa:0b:a4:3f:91:b9:24: 50:8a:7d:c6:a4:8c:0e:a7:fe:1b:6f:58:c4:0d:f9: 06:50:43:19:73:f7:31:a3:b5:46:55:36:0d:95:63: b8:2b:c5:56:27:08:4e:31:28:8c:5c:f6:48:4f:c3: be:46:20:36:ec:55:f8:a4:99:ed:37:cb:c9:7f:3e: 64:4b:0a:d4:3f:3f:ce:d6:24:6a:47:45:9a:ac:fd: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:78:D3:99:49:22:A5:67:09:21:54:E8:C8:5D:1E:A3:82:59:0C:D4 X509v3 Authority Key Identifier: keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b8:e6:46:20:c9:87:f4:97:eb:b9:3b:f7:7d:dc:20:04:48: 90:fb:4c:a9:35:97:77:29:4d:06:17:cf:20:bd:e2:10:b3:a6: 5a:e8:fc:49:f0:23:05:92:3b:ca:2f:b7:66:e3:32:3d:56:89: ea:7f:85:e4:e8:e3:40:49:cb:49:ba:ec:29:64:05:86:b7:2d: 13:97:96:50:0e:76:96:68:23:7c:ff:4e:21:02:44:d9:31:a4: 9d:02:44:5c:62:6e:87:03:40:86:4d:d5:9d:64:27:f0:44:cf: 3c:dc:cf:4a:4d:ea:dc:45:af:9b:dd:da:ac:bc:42:fb:91:55: 76:c9:c4:f1:fa:73:f0:6a:1b:c9:d5:54:5b:cc:70:6c:87:55: 2c:e8:77:6a:70:94:44:4e:7d:89:04:a0:c3:22:9f:88:1e:19: 31:d8:40:11:d5:34:33:28:81:de:d4:17:26:71:f0:09:b6:96: 3d:72:40:88:7b:71:dc:38:3b:fe:e1:95:a0:50:47:2f:0c:e5: 7b:aa:eb:97:95:d8:d6:de:75:c8:72:7a:f9:6e:70:3d:a3:ef: 1f:74:fe:1b:78:51:ec:d4:db:e8:69:cb:32:ec:65:ca:86:f8: 79:4d:55:c0:18:17:95:b5:eb:80:fe:3d:00:3b:3b:5f:89:8d: 9d:f4:8a:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDOEME9z/r6FF72sD8CCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTBlOWNjM2I3ZTM2M2Q3MjZiZDcwMjc1MGI1M2YyOWIw NTBhN2QwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD EyhmODc4ZDM5OTQ5MjJhNTY3MDkyMTU0ZThjODVkMWVhMzgyNTkwY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xmu0V/kcm57uzrdwNm6qohngwQv vIKSw8cXBByL0vM/WfBJmsScbx+4J9wAbhGW1n2kek25/kqWCjkJxOIfJ8Sf2tVR RHtprodh1Nr8mZ7Wwi1xBw1mTnnHQF+zDIU040Pkpw4U10bwzJiRY7eG3SrkbHvv 58SDWw8enADQl0TCQd6gnK870Hiq5kUkBRLJU2QbjggTKU1ZDqrQ+LPz/0o+0i2g Fpa6s1vH+aoLpD+RuSRQin3GpIwOp/4bb1jEDfkGUEMZc/cxo7VGVTYNlWO4K8VW JwhOMSiMXPZIT8O+RiA27FX4pJntN8vJfz5kSwrUPz/O1iRqR0WarP2T9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPh405lJIqVnCSFU6MhdHqOCWQzUMB8GA1UdIwQY MBaAFOKQ6cw7fjY9cmvXAnULU/KbBQp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEt OTExM2ZkN2FmZDZjLzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEtOTExM2ZkN2FmZDZj LzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrjmRiDJ h/SX67k7933cIARIkPtMqTWXdylNBhfPIL3iELOmWuj8SfAjBZI7yi+3ZuMyPVaJ 6n+F5OjjQEnLSbrsKWQFhrctE5eWUA52lmgjfP9OIQJE2TGknQJEXGJuhwNAhk3V nWQn8ETPPNzPSk3q3EWvm93arLxC+5FVdsnE8fpz8GobydVUW8xwbIdVLOh3anCU RE59iQSgwyKfiB4ZMdhAEdU0MyiB3tQXJnHwCbaWPXJAiHtx3Dg7/uGVoFBHLwzl e6rrl5XY1t51yHJ6+W5wPaPvH3T+G3hR7NTb6GnLMuxlyob4eU1VwBgXlbXrgP49 ADs7X4mNnfSKjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:14 2025 by rpki-client