This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json) Hash identifier: 7Agi4FecWnxW4OEAfQAHKKA2REdxoUGthSedhNEcnA0= Subject key identifier: D6:02:BC:A7:06:74:1A:C5:73:06:05:49:97:E4:F0:41:53:0A:F7:E6 Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Certificate serial: 019AF12EA665F480B775F8B951C5E9765B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft Manifest number: 0DA9 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: XWZuFFuXDZ7WrnkCn99CC6VfLPFqzVX9Gx0cPbdlztM=) 2: f9bSypnQ1K1dn8AOmITCAE2WfeM.roa (hash: laJDW9FEQ26/eBw7OzSphhRdw2m3zDOPQril8cOuxC0=) 3: qF1Sjwc0E4igMvbiTG0GFEV_V8w.roa (hash: C2rdzoCh63UKjy4imOMfxu3Z/XTp23zoXQCrUfaLgrk=) 4: wr0uj1SbyF4a3afbyHifWHkLV18.roa (hash: whbGKVVedV+YGL/Rez8V9NgGyEYM+j686HKrZpVv8SA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a6:65:f4:80:b7:75:f8:b9:51:c5:e9:76:5b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=d602bca706741ac57306054997e4f041530af7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:5c:5b:7b:45:f8:58:aa:5c:fb:42:f2:d0: 7a:b0:30:21:2a:7e:07:18:66:c0:ef:82:46:09:ef: 80:4e:ce:ff:0e:f7:69:7c:20:ed:83:0e:74:67:6e: 8d:07:ec:e1:d0:9d:e3:0e:0d:1d:bd:0e:4c:94:5e: 17:d8:80:90:2f:7f:3f:17:1d:7e:da:f4:e2:9a:a6: b1:0c:3d:d4:06:d7:84:1d:29:21:29:4f:18:63:5d: 15:b9:a6:31:cd:a4:34:27:a3:f5:b1:34:f6:13:23: a5:b9:e5:32:a7:28:fd:23:b2:e5:f3:23:d0:92:3b: b8:09:e9:f0:69:be:94:b2:18:26:1b:d0:1d:92:ae: fb:14:f4:2d:0e:7e:f5:6a:0e:a9:2d:e2:da:43:3a: 25:b6:f6:58:4d:49:53:56:79:bf:63:e3:8f:10:d1: 57:ff:43:38:2d:fb:02:63:d7:ff:d9:7a:fa:f1:14: d1:5b:03:bc:c9:ed:9e:03:5d:ed:f7:d9:69:84:1d: 32:d6:de:8b:6a:28:ba:1f:d4:a9:53:bb:b2:28:bd: df:6e:79:55:e3:a7:81:9b:5a:f5:15:c7:cb:1c:b1: 69:79:a2:2d:9a:89:bc:90:74:c0:e2:f1:f4:b7:8f: 2d:ec:74:9b:d6:fa:ed:a7:fb:1c:43:41:f5:30:6c: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:02:BC:A7:06:74:1A:C5:73:06:05:49:97:E4:F0:41:53:0A:F7:E6 X509v3 Authority Key Identifier: keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9b:66:e8:a2:29:fa:1b:a1:7f:9c:cc:66:73:70:62:cd:4f: 3a:ba:b8:95:a0:ef:b0:65:1b:e5:d4:1b:01:85:6a:a6:d9:00: f1:17:9a:6d:a5:72:a5:ee:56:d9:51:2b:b6:e3:73:11:10:34: 62:f4:67:d3:28:61:d7:69:66:a9:dd:f1:33:19:cf:78:b3:29: d8:b8:db:0b:4d:4c:ab:70:ab:ad:8b:a0:ad:73:37:91:b1:7e: f2:2d:42:0c:5d:92:fe:c2:5c:a8:32:c8:33:33:78:35:9c:68: 2c:6e:8f:dc:cf:bc:09:a6:0a:cc:13:a4:d8:22:e2:6a:29:b7: 27:93:53:fc:f2:f8:11:f6:a4:fa:a4:95:e3:2f:39:8d:b3:c0: d6:f4:1b:fa:90:7c:e6:eb:4c:fd:27:99:fd:8b:88:d8:42:7e: aa:a5:fa:76:ad:89:25:bc:df:5c:b0:53:c1:5b:9f:70:c2:d0: 15:cc:bb:52:8e:29:43:50:fe:c9:b9:45:59:56:62:30:68:55: 7e:04:eb:2a:24:f5:e9:00:7c:ef:70:25:49:b9:0d:56:bd:dc: 89:55:69:69:0b:a8:44:0f:4f:61:ab:1d:da:1e:24:2c:77:af: 29:1b:92:c3:bd:de:6d:50:09:e4:2b:af:35:fc:9b:98:24:9a: 36:3b:ee:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqZl9IC3dfi5UcXpdluUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2 YTI0ZjUwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD EyhkNjAyYmNhNzA2NzQxYWM1NzMwNjA1NDk5N2U0ZjA0MTUzMGFmN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw1cW3tF+FiqXPtC8tB6sDAhKn4H GGbA74JGCe+ATs7/DvdpfCDtgw50Z26NB+zh0J3jDg0dvQ5MlF4X2ICQL38/Fx1+ 2vTimqaxDD3UBteEHSkhKU8YY10VuaYxzaQ0J6P1sTT2EyOlueUypyj9I7Ll8yPQ kju4Cenwab6UshgmG9Adkq77FPQtDn71ag6pLeLaQzoltvZYTUlTVnm/Y+OPENFX /0M4LfsCY9f/2Xr68RTRWwO8ye2eA13t99lphB0y1t6Laii6H9SpU7uyKL3fbnlV 46eBm1r1FcfLHLFpeaItmom8kHTA4vH0t48t7HSb1vrtp/scQ0H1MGwD6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYCvKcGdBrFcwYFSZfk8EFTCvfmMB8GA1UdIwQY MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt OWNhZjI1YTQ5OWQ3LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3 LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHptm6KIp +huhf5zMZnNwYs1POrq4laDvsGUb5dQbAYVqptkA8ReabaVype5W2VErtuNzERA0 YvRn0yhh12lmqd3xMxnPeLMp2LjbC01Mq3CrrYugrXM3kbF+8i1CDF2S/sJcqDLI MzN4NZxoLG6P3M+8CaYKzBOk2CLiaim3J5NT/PL4Efak+qSV4y85jbPA1vQb+pB8 5utM/SeZ/YuI2EJ+qqX6dq2JJbzfXLBTwVufcMLQFcy7Uo4pQ1D+yblFWVZiMGhV fgTrKiT16QB873AlSbkNVr3ciVVpaQuoRA9PYasd2h4kLHevKRuSw73ebVAJ5Cuv NfybmCSaNjvucQ== -----END CERTIFICATE-----Generated at Sat Dec 6 02:46:56 2025 by rpki-client