This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json) Hash identifier: w+MoS6C0BBEnFqTTUEV/vPra3B6Pn+wGcHflqkKvbTo= Subject key identifier: 89:84:8F:92:BC:47:2F:F5:61:37:BE:61:0F:FF:CE:F7:F0:24:68:86 Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Certificate serial: 019B108186D95A22CCC597DDC39ACDEC43F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft Manifest number: 11FB Signing time: Fri 12 Dec 2025 03:01:22 +0000 Manifest this update: Fri 12 Dec 2025 03:01:22 +0000 Manifest next update: Sat 13 Dec 2025 03:01:22 +0000 Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: r6vvZh/Q1LywLM/A39YSU+SZ+Z7x8qyPEf0Sv8Bac7w=) 2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:86:d9:5a:22:cc:c5:97:dd:c3:9a:cd:ec:43:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Validity Not Before: Dec 12 03:01:22 2025 GMT Not After : Dec 13 03:01:22 2025 GMT Subject: CN=89848f92bc472ff56137be610fffcef7f0246886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:a0:9b:62:82:ee:d2:63:fb:86:a8:f3:87: 68:66:22:bd:b4:b4:73:cc:8e:24:b1:c9:13:55:ed: 26:df:db:42:ce:62:88:bb:77:26:6d:dc:1d:97:1d: 0c:a2:af:d6:bb:0c:ee:db:87:e5:f7:e0:dd:36:bf: 07:0a:92:59:87:16:60:27:cf:3f:2b:ae:57:58:94: b1:51:f0:33:79:5a:1d:50:2f:35:c1:17:93:48:32: 03:c8:57:66:f2:94:cb:5c:a5:f3:ae:6f:31:fc:77: 1c:12:04:1f:2c:f7:35:29:b6:cd:97:39:63:fc:5b: 35:b6:f4:05:b0:9a:a9:b3:9d:04:9c:58:ca:9e:c0: de:7a:88:57:4c:aa:c0:27:42:cf:72:aa:95:46:17: 75:ea:aa:3d:ec:20:f2:5c:c1:0d:cf:bf:54:a6:f3: 2e:db:19:53:4a:30:14:b4:33:c1:0e:cf:65:65:92: f6:a9:fb:90:05:0b:4e:11:f2:9a:a8:f3:46:24:05: 57:1c:1c:c5:72:76:81:05:e2:57:d3:9d:e7:36:5d: 3f:90:ef:44:8c:79:a8:aa:85:59:40:94:cd:7e:3c: 8a:c9:4c:79:01:e6:da:02:4b:a4:71:26:4f:d8:85: 09:66:a1:ea:5e:e3:61:83:bc:ff:12:c2:00:b9:71: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:8F:92:BC:47:2F:F5:61:37:BE:61:0F:FF:CE:F7:F0:24:68:86 X509v3 Authority Key Identifier: keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:53:cc:6a:d5:4f:6b:cf:67:04:3b:a1:ef:51:8a:be:c6:50: f5:06:39:7e:80:2c:0a:c3:1f:23:47:42:2d:01:52:0f:94:28: d7:77:fa:bd:ec:03:6f:9e:36:9b:99:cd:0e:d8:7d:41:b0:e3: 09:90:70:1d:ba:88:e2:b8:7f:1b:5a:d1:20:a1:49:1e:2c:aa: 11:a5:f1:2d:68:5f:e9:fa:98:f5:35:74:b2:c9:f4:34:53:a4: 6c:38:04:da:72:0b:0b:da:0e:39:ee:41:88:5d:b7:33:3f:0a: 0b:9c:72:49:90:16:a3:b7:44:7c:15:a8:ab:aa:39:fc:08:db: fb:7b:62:dd:0d:af:70:11:86:44:e0:28:48:4c:60:9a:37:e7: 73:2a:14:81:87:c3:96:43:8f:fe:d4:43:9d:26:01:f2:de:11: 31:04:82:5f:32:b3:15:1c:ff:60:87:71:63:b0:f9:0c:98:5c: d7:05:ef:04:ca:9e:56:a0:1d:fc:88:de:09:02:c4:d2:f1:56: 7e:97:94:6b:d5:af:98:e9:c6:17:86:60:bc:23:cd:3d:2b:3f: e0:85:9e:e0:a3:2f:d4:9d:51:31:89:c4:bb:fc:e5:57:b1:6d: 55:0b:b6:1b:4e:e9:30:c9:27:7e:2d:af:3f:16:bd:c1:7a:89: a3:4c:cc:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgYbZWiLMxZfdw5rN7EPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMDExZjA4NTlkMDZhMDg0OTc1ZjRlOGJkMmI1NTY3MTBk ZDhjMzAwHhcNMjUxMjEyMDMwMTIyWhcNMjUxMjEzMDMwMTIyWjAzMTEwLwYDVQQD Eyg4OTg0OGY5MmJjNDcyZmY1NjEzN2JlNjEwZmZmY2VmN2YwMjQ2ODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklKgm2KC7tJj+4ao84doZiK9tLRz zI4ksckTVe0m39tCzmKIu3cmbdwdlx0Moq/Wuwzu24fl9+DdNr8HCpJZhxZgJ88/ K65XWJSxUfAzeVodUC81wReTSDIDyFdm8pTLXKXzrm8x/HccEgQfLPc1KbbNlzlj /Fs1tvQFsJqps50EnFjKnsDeeohXTKrAJ0LPcqqVRhd16qo97CDyXMENz79UpvMu 2xlTSjAUtDPBDs9lZZL2qfuQBQtOEfKaqPNGJAVXHBzFcnaBBeJX053nNl0/kO9E jHmoqoVZQJTNfjyKyUx5AebaAkukcSZP2IUJZqHqXuNhg7z/EsIAuXFduQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImEj5K8Ry/1YTe+YQ//zvfwJGiGMB8GA1UdIwQY MBaAFOMBHwhZ0GoISXX06L0rVWcQ3YwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDIt ZDQ4YjdkMjYyNGRiLzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDItZDQ4YjdkMjYyNGRi LzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklPMatVP a89nBDuh71GKvsZQ9QY5foAsCsMfI0dCLQFSD5Qo13f6vewDb542m5nNDth9QbDj CZBwHbqI4rh/G1rRIKFJHiyqEaXxLWhf6fqY9TV0ssn0NFOkbDgE2nILC9oOOe5B iF23Mz8KC5xySZAWo7dEfBWoq6o5/Ajb+3ti3Q2vcBGGROAoSExgmjfncyoUgYfD lkOP/tRDnSYB8t4RMQSCXzKzFRz/YIdxY7D5DJhc1wXvBMqeVqAd/IjeCQLE0vFW fpeUa9WvmOnGF4ZgvCPNPSs/4IWe4KMv1J1RMYnEu/zlV7FtVQu2G07pMMknfi2v Pxa9wXqJo0zMHw== -----END CERTIFICATE-----Generated at Fri Dec 12 10:40:54 2025 by rpki-client