This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft File: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json) Hash identifier: Jky20Iky6fUOt/j6I+sZ2boYZeDoCe5+bcFV0NvmqxI= Subject key identifier: CD:4A:85:02:BB:CB:0C:35:AE:54:91:BE:9E:4C:0C:AA:FB:48:95:63 Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Certificate serial: 019B0E5B834C07BEA8CC377B38BA0A4E2FBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft Manifest number: 1781 Signing time: Thu 11 Dec 2025 17:00:36 +0000 Manifest this update: Thu 11 Dec 2025 17:00:36 +0000 Manifest next update: Fri 12 Dec 2025 17:00:36 +0000 Files and hashes: 1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: mgZ5nqzHGyBnOKQN+Y3DXdEvNoIE5pkPljPpm572upY=) 2: 69Gg052Fvx4I2Fe4cFxkAgmaw8U.roa (hash: 4OJvsk33eSq4Pcms3ZWUp5ICc5rvGRU0gr/rstfeV/0=) 3: M0_KB7YWngkVytRrWSYysj7YJLA.roa (hash: Wx2mA+u5jzHoEfTRzsY0nX3Oe/9sdMOBfbPWiWl5Xlc=) 4: V0Sp0TtSbp08bch-dMvX-f8oa2o.roa (hash: JjHFR/Br8lLNxd0wBIShn4KBf2iV68ca7V3XI/Bh6Lc=) 5: w2HliW1FxAoWboCzBC57HQK_5M4.roa (hash: 1o/6TghmsgYeou6D438p0wdWpOeCHDeKRbg9VK0Bxfs=) 6: z5K__5uwKXFTzaD79qKBdTd2bJI.roa (hash: Cp/izXCB0pUAYpj87c/lOI2duT2TX+EDfDIWds1Fqng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:83:4c:07:be:a8:cc:37:7b:38:ba:0a:4e:2f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Validity Not Before: Dec 11 17:00:36 2025 GMT Not After : Dec 12 17:00:36 2025 GMT Subject: CN=cd4a8502bbcb0c35ae5491be9e4c0caafb489563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:27:5e:2a:41:ab:93:ec:ba:39:59:dd:68: 85:1b:e4:03:ca:71:73:a7:a8:bd:5e:ce:8f:d6:c6: cf:85:26:c9:96:53:7e:f8:11:6a:ba:56:d0:df:52: 0f:c0:e9:1f:35:b1:bf:b9:c7:05:f9:f6:e6:d9:02: d1:a5:d6:24:77:93:df:6d:ef:46:91:c3:de:31:81: 21:7a:f3:a4:d4:c7:2d:f5:b7:e7:3f:e0:ad:df:9a: 2f:7c:4c:4d:f4:33:69:c9:78:cc:7b:3b:de:a1:13: 89:09:54:86:47:49:a4:39:5d:5f:59:9e:6a:99:d9: 7b:d4:2e:27:4f:84:c3:2b:46:bf:b1:ec:f4:78:06: fa:69:9d:1a:2a:53:2d:b0:e5:3d:13:f2:86:87:95: 7d:23:a9:d3:6a:44:c3:cf:36:d4:c5:f4:4f:d9:e3: 3e:aa:d5:dc:46:55:82:6e:9f:9f:a3:b0:c0:83:49: 56:05:05:3f:85:3f:6d:08:a3:21:9f:7b:8b:88:2a: 17:49:c4:88:82:89:77:91:37:63:db:f5:09:de:15: 85:64:8a:58:7c:e3:fd:c2:76:0f:3b:f1:e0:af:e6: b9:ce:c6:19:88:9c:b6:f0:b5:36:fb:15:23:9f:7d: ef:02:b0:32:80:0c:63:94:de:4c:19:62:89:94:63: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4A:85:02:BB:CB:0C:35:AE:54:91:BE:9E:4C:0C:AA:FB:48:95:63 X509v3 Authority Key Identifier: keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ff:47:33:2f:eb:40:b2:d2:81:b2:1e:e9:06:30:ad:91:8c: af:09:d4:b7:78:22:c5:a9:e8:6d:73:00:43:88:fc:36:58:8d: b2:0d:7d:ea:19:a0:2b:aa:9e:0f:78:2a:0b:1a:cc:21:6c:3d: 8a:24:88:ca:83:81:f9:e2:a7:2a:03:85:59:f2:d9:c7:78:2e: 1c:84:52:10:8e:50:d1:a1:0b:b3:46:86:e6:30:c2:d1:e0:1d: c1:2c:98:ef:0d:16:0a:b6:b3:5b:7c:7a:23:f5:86:38:ec:15: 5a:d4:71:bb:49:c2:cd:29:02:d6:01:a1:4b:fa:4c:c1:cb:7f: da:33:d8:78:fc:17:d7:ff:ff:ca:66:16:7b:4a:9b:f9:01:a1: 5b:40:48:a3:49:6f:88:9d:7b:6e:be:d7:02:f6:86:db:b1:39: a3:8c:e8:53:0b:8f:fc:a1:f7:ba:81:35:39:d2:7c:a9:4c:f5: 50:1b:f3:1c:a0:02:b5:08:ed:b8:b4:d6:b3:c6:70:82:90:c3: b7:c6:74:fa:c4:ee:64:2b:68:2c:44:60:a8:c6:43:32:d4:49: 77:55:7e:45:64:0c:f3:0a:14:a1:90:63:82:1c:86:d6:da:df: ed:ee:94:d5:c9:49:92:31:b9:e5:57:de:b8:74:85:70:08:2b: c2:a5:d1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW4NMB76ozDd7OLoKTi+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZThmNTZiYzFmNTAxMDI5MTY4MWJjMmQ4YzAyZjlhY2Jm NzE0YTAwHhcNMjUxMjExMTcwMDM2WhcNMjUxMjEyMTcwMDM2WjAzMTEwLwYDVQQD EyhjZDRhODUwMmJiY2IwYzM1YWU1NDkxYmU5ZTRjMGNhYWZiNDg5NTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaAnXipBq5PsujlZ3WiFG+QDynFz p6i9Xs6P1sbPhSbJllN++BFqulbQ31IPwOkfNbG/uccF+fbm2QLRpdYkd5Pfbe9G kcPeMYEhevOk1Mct9bfnP+Ct35ovfExN9DNpyXjMezveoROJCVSGR0mkOV1fWZ5q mdl71C4nT4TDK0a/sez0eAb6aZ0aKlMtsOU9E/KGh5V9I6nTakTDzzbUxfRP2eM+ qtXcRlWCbp+fo7DAg0lWBQU/hT9tCKMhn3uLiCoXScSIgol3kTdj2/UJ3hWFZIpY fOP9wnYPO/Hgr+a5zsYZiJy28LU2+xUjn33vArAygAxjlN5MGWKJlGNXQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1KhQK7yww1rlSRvp5MDKr7SJVjMB8GA1UdIwQY MBaAFOLo9WvB9QECkWgbwtjAL5rL9xSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTct NDQ3ZWRjNGY5YWY2LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTctNDQ3ZWRjNGY5YWY2 LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMP9HMy/r QLLSgbIe6QYwrZGMrwnUt3gixanobXMAQ4j8NliNsg196hmgK6qeD3gqCxrMIWw9 iiSIyoOB+eKnKgOFWfLZx3guHIRSEI5Q0aELs0aG5jDC0eAdwSyY7w0WCrazW3x6 I/WGOOwVWtRxu0nCzSkC1gGhS/pMwct/2jPYePwX1///ymYWe0qb+QGhW0BIo0lv iJ17br7XAvaG27E5o4zoUwuP/KH3uoE1OdJ8qUz1UBvzHKACtQjtuLTWs8ZwgpDD t8Z0+sTuZCtoLERgqMZDMtRJd1V+RWQM8woUoZBjghyG1trf7e6U1clJkjG55Vfe uHSFcAgrwqXRSw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:02:04 2025 by rpki-client