This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json) Hash identifier: w+MfaKktx98oY+gXBjbavvtGjkxCpbvakbp9pqEkmgg= Subject key identifier: 1B:9B:73:93:6B:FD:59:A0:32:7C:05:7B:B5:AA:34:81:F5:E7:31:9D Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Certificate serial: 019B0EC9EE75F93F964330D30650EC9FC3E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft Manifest number: 063C Signing time: Thu 11 Dec 2025 19:01:13 +0000 Manifest this update: Thu 11 Dec 2025 19:01:13 +0000 Manifest next update: Fri 12 Dec 2025 19:01:13 +0000 Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: c7xsPHKWnPEl/KGJ1ByW1DGSb17N38x4YgXzrfdQCJY=) 2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:ee:75:f9:3f:96:43:30:d3:06:50:ec:9f:c3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Validity Not Before: Dec 11 19:01:13 2025 GMT Not After : Dec 12 19:01:13 2025 GMT Subject: CN=1b9b73936bfd59a0327c057bb5aa3481f5e7319d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:f1:d3:10:bf:80:9b:c9:5f:0a:5d:51:36: 8d:6c:c3:6a:b0:22:72:8f:ae:ba:f0:02:af:36:c9: a8:e3:c5:c1:6f:e0:b2:2b:88:7e:47:e8:37:14:9b: 15:82:00:db:c4:c0:2f:cc:22:6f:3a:da:d0:58:7e: 49:06:26:ac:04:b0:97:2f:0e:63:8f:0e:b1:a9:5d: 18:13:41:9e:71:4a:0a:5b:ab:ac:82:ba:b1:1e:de: d4:ab:de:16:bc:03:49:5e:ff:10:a5:7b:ba:a5:1d: 05:be:3b:72:27:8e:2a:78:f1:f8:82:75:e8:91:e0: 90:e4:de:3d:36:eb:24:88:ec:41:97:f4:a8:58:24: e6:5c:04:7f:af:72:ea:59:bd:32:73:09:04:b6:a8: 6a:ca:b5:0d:20:c9:29:20:fa:29:e7:aa:08:8c:c6: f6:b5:d7:ce:5d:f4:61:8d:ae:e4:6d:4d:99:10:9a: bf:61:62:0f:cc:7e:43:a8:0f:89:1f:ea:92:1c:9a: c2:8f:e9:57:7b:47:68:f9:e9:19:f9:a3:88:3b:f5: 11:b9:73:bc:60:dd:5c:51:7f:a4:3b:bb:da:95:62: 83:95:68:dd:c9:35:49:e7:77:e4:8c:22:2b:76:48: db:0c:02:78:f1:d9:82:92:6a:8f:05:7f:11:48:dc: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9B:73:93:6B:FD:59:A0:32:7C:05:7B:B5:AA:34:81:F5:E7:31:9D X509v3 Authority Key Identifier: keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:5b:51:98:d6:c9:07:54:49:8c:bb:2b:64:27:d5:d1:0c:dd: e3:87:bd:c4:15:2f:f9:12:49:45:e3:ac:d2:8b:2e:a9:58:18: 7f:31:8a:b1:4b:5d:73:7c:63:f0:b4:d4:74:a9:83:76:8d:bd: 90:5b:14:59:e8:65:1b:f9:22:49:59:5d:be:90:9e:f9:c7:9b: cd:58:8d:57:29:6b:4a:db:2d:de:7c:ab:b0:6e:2e:23:f2:58: 10:ed:72:64:9a:42:93:2f:0c:75:0d:52:95:f3:32:92:25:36: 30:3c:bc:65:7d:05:4b:45:c6:ce:77:60:72:6b:61:61:fd:61: b3:69:af:35:1c:3b:df:59:89:92:63:62:e0:c0:0e:dc:ca:6d: 01:24:2c:06:98:f1:1b:4f:df:d4:df:40:6e:6e:da:8b:d8:5e: d7:f8:38:ca:14:99:7b:5a:42:b0:67:7b:34:96:7e:cc:48:55: aa:ba:87:f3:45:e4:c0:d1:f5:c4:b9:e9:ef:4d:45:d0:19:fa: 07:c5:fe:f3:68:5a:ca:0d:84:f2:b5:4d:e7:7f:5f:ad:12:d9: 84:c8:b1:e3:dd:c5:5a:3a:c4:b4:28:c5:de:68:4b:95:91:b9: 37:41:6c:ef:f7:21:18:b8:de:da:34:24:23:a9:2d:68:58:a7: 4d:2c:f5:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOye51+T+WQzDTBlDsn8PnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDVkNTYxZTc2ZWYyNTljNGEwMmRmMzBmMzUwNjRkZWRl ZGYyZDcwHhcNMjUxMjExMTkwMTEzWhcNMjUxMjEyMTkwMTEzWjAzMTEwLwYDVQQD EygxYjliNzM5MzZiZmQ1OWEwMzI3YzA1N2JiNWFhMzQ4MWY1ZTczMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr37x0xC/gJvJXwpdUTaNbMNqsCJy j6668AKvNsmo48XBb+CyK4h+R+g3FJsVggDbxMAvzCJvOtrQWH5JBiasBLCXLw5j jw6xqV0YE0GecUoKW6usgrqxHt7Uq94WvANJXv8QpXu6pR0FvjtyJ44qePH4gnXo keCQ5N49NuskiOxBl/SoWCTmXAR/r3LqWb0ycwkEtqhqyrUNIMkpIPop56oIjMb2 tdfOXfRhja7kbU2ZEJq/YWIPzH5DqA+JH+qSHJrCj+lXe0do+ekZ+aOIO/URuXO8 YN1cUX+kO7valWKDlWjdyTVJ53fkjCIrdkjbDAJ48dmCkmqPBX8RSNwiFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBubc5Nr/VmgMnwFe7WqNIH15zGdMB8GA1UdIwQY MBaAFODV1WHnbvJZxKAt8w81Bk3t7fLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUt N2RjNTI4YWE1ZDRlLzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUtN2RjNTI4YWE1ZDRl LzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ltRmNbJ B1RJjLsrZCfV0Qzd44e9xBUv+RJJReOs0osuqVgYfzGKsUtdc3xj8LTUdKmDdo29 kFsUWehlG/kiSVldvpCe+cebzViNVylrStst3nyrsG4uI/JYEO1yZJpCky8MdQ1S lfMykiU2MDy8ZX0FS0XGzndgcmthYf1hs2mvNRw731mJkmNi4MAO3MptASQsBpjx G0/f1N9Abm7ai9he1/g4yhSZe1pCsGd7NJZ+zEhVqrqH80XkwNH1xLnp701F0Bn6 B8X+82hayg2E8rVN539frRLZhMix493FWjrEtCjF3mhLlZG5N0Fs7/chGLje2jQk I6ktaFinTSz1Qw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:33 2025 by rpki-client