This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json) Hash identifier: AZqNDpFiacGoFpx5I+fucBQiAaTAXs3fig+tyjkj32E= Subject key identifier: E5:3A:2F:E6:5C:D4:84:97:C5:24:9D:11:83:99:23:B7:39:03:2F:43 Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Certificate serial: 019B10140116AAD1E9C962CBA726FF7E7167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft Manifest number: 07D7 Signing time: Fri 12 Dec 2025 01:01:44 +0000 Manifest this update: Fri 12 Dec 2025 01:01:44 +0000 Manifest next update: Sat 13 Dec 2025 01:01:44 +0000 Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: SOGIigefpXkaDnXGvAaTfadXD0+Pk0Vgcl+xPanFx+s=) 2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=) 3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:01:16:aa:d1:e9:c9:62:cb:a7:26:ff:7e:71:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Validity Not Before: Dec 12 01:01:44 2025 GMT Not After : Dec 13 01:01:44 2025 GMT Subject: CN=e53a2fe65cd48497c5249d11839923b739032f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:99:b5:88:57:91:8b:76:ce:fa:e2:db:3a: 29:4b:7f:9e:ca:b1:45:66:5a:93:1a:a6:8d:ff:07: c3:27:f1:86:b2:22:8d:1c:fa:0b:73:90:bf:2f:6c: 8a:bb:2f:e9:2e:f1:4d:ad:3e:19:67:bb:af:8e:24: 81:85:76:7d:ae:e5:9e:a3:ba:2a:a2:91:be:1c:71: c8:10:12:7c:8d:06:29:95:da:f6:a8:ac:ee:bb:4f: b5:8d:eb:19:78:c9:5f:1e:ef:0b:25:04:2e:62:88: dc:d7:9c:c4:2f:4c:22:c5:14:c2:89:c5:b1:c2:6b: de:82:b3:fd:d3:c4:4d:8a:86:ac:b9:f5:e6:aa:cf: 77:af:66:c5:03:93:66:1d:dd:7e:20:18:56:2b:1c: 68:9e:d8:07:a5:49:16:d8:59:b3:3f:8d:6a:a3:7a: 71:18:6c:11:fb:da:6f:70:8f:7d:c5:0e:5c:28:14: 2a:55:09:27:b8:a7:a3:cd:df:10:ef:d8:16:26:0a: ad:6b:aa:bc:60:b6:5e:34:c7:a2:e3:06:4c:26:e0: c7:5b:1e:78:8c:a4:0a:ee:0e:ce:f9:36:1b:b6:1b: 3c:e8:a0:e0:2f:d9:4c:f7:9a:3b:cb:88:b8:24:aa: 69:05:f8:bd:78:3d:f9:12:e8:66:7f:86:e3:f8:6f: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3A:2F:E6:5C:D4:84:97:C5:24:9D:11:83:99:23:B7:39:03:2F:43 X509v3 Authority Key Identifier: keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9c:cd:37:88:4b:fb:1f:21:ea:3c:f3:7b:50:e9:b2:91:7d: 71:d7:7f:34:cf:65:23:be:89:2b:b2:21:5a:62:7e:00:3e:60: e1:84:c5:b2:66:64:f2:71:e5:e4:80:ab:e1:9e:0e:45:b8:2f: b0:70:87:20:c2:c9:67:9b:bc:b1:69:d3:4a:63:6a:5d:60:f9: dc:20:0b:f8:52:c3:98:7e:a0:32:fe:01:56:c1:18:d7:f7:f1: ee:c7:10:19:51:e0:ff:1a:7d:25:6c:9e:14:d3:59:e7:4d:f1: c0:76:f4:99:f6:36:e1:9a:a4:3c:ca:63:1d:7c:f0:3f:eb:a0: c8:f1:56:de:b7:b2:08:6e:84:3b:da:06:d1:3c:5e:6b:c1:ec: eb:ba:89:35:b4:64:53:1b:63:67:32:79:74:62:e0:5e:29:d8: ba:bf:95:2f:36:3a:98:f1:83:e5:79:c4:3a:1f:26:26:bd:e3: 69:16:39:ae:00:42:99:a2:10:ca:c2:0e:8b:d4:86:29:02:c4: e6:a0:82:5d:aa:63:11:b2:ec:de:c3:e1:68:7f:7d:a5:50:93: 7d:40:e3:71:6c:eb:5d:75:26:89:d5:c1:89:8b:89:6d:6a:20: a9:38:a2:60:a4:c3:19:33:a5:0b:b4:71:01:7a:f6:5e:b4:04: a4:b9:8d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFAEWqtHpyWLLpyb/fnFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4 MjBhZDkwHhcNMjUxMjEyMDEwMTQ0WhcNMjUxMjEzMDEwMTQ0WjAzMTEwLwYDVQQD EyhlNTNhMmZlNjVjZDQ4NDk3YzUyNDlkMTE4Mzk5MjNiNzM5MDMyZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA076ZtYhXkYt2zvri2zopS3+eyrFF ZlqTGqaN/wfDJ/GGsiKNHPoLc5C/L2yKuy/pLvFNrT4ZZ7uvjiSBhXZ9ruWeo7oq opG+HHHIEBJ8jQYpldr2qKzuu0+1jesZeMlfHu8LJQQuYojc15zEL0wixRTCicWx wmvegrP908RNioasufXmqs93r2bFA5NmHd1+IBhWKxxontgHpUkW2FmzP41qo3px GGwR+9pvcI99xQ5cKBQqVQknuKejzd8Q79gWJgqta6q8YLZeNMei4wZMJuDHWx54 jKQK7g7O+TYbths86KDgL9lM95o7y4i4JKppBfi9eD35Euhmf4bj+G/6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU6L+Zc1ISXxSSdEYOZI7c5Ay9DMB8GA1UdIwQY MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5zNN4hL +x8h6jzze1DpspF9cdd/NM9lI76JK7IhWmJ+AD5g4YTFsmZk8nHl5ICr4Z4ORbgv sHCHIMLJZ5u8sWnTSmNqXWD53CAL+FLDmH6gMv4BVsEY1/fx7scQGVHg/xp9JWye FNNZ503xwHb0mfY24ZqkPMpjHXzwP+ugyPFW3reyCG6EO9oG0Txea8Hs67qJNbRk UxtjZzJ5dGLgXinYur+VLzY6mPGD5XnEOh8mJr3jaRY5rgBCmaIQysIOi9SGKQLE 5qCCXapjEbLs3sPhaH99pVCTfUDjcWzrXXUmidXBiYuJbWogqTiiYKTDGTOlC7Rx AXr2XrQEpLmNeA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:45:48 2025 by rpki-client