This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft File: 4MW7PaU0Nb9B4X997EfUSE5_MSk.mft (raw, json) Hash identifier: 65THsdxF+Eq6yaj1MOwTI2r38Y0e1KNfEfAQaSaa0zc= Subject key identifier: 3F:B5:E2:1E:E0:29:7A:2C:06:BA:6A:8B:44:52:2A:1E:8E:C0:23:B1 Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019AED86E5A77CE28BBD2D7CA8CC96DA4ADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft Manifest number: 012D Signing time: Fri 05 Dec 2025 08:00:32 +0000 Manifest this update: Fri 05 Dec 2025 08:00:32 +0000 Manifest next update: Sat 06 Dec 2025 08:00:32 +0000 Files and hashes: 1: 4MW7PaU0Nb9B4X997EfUSE5_MSk.crl (hash: vsj9NThk6lMFHhY5cal3wCE6SQYDf/UM0GSzsrXAnOU=) 2: 9GR2dHkwSLVkeTC97SQWtO-Ou6s.roa (hash: 8dva46ddaCVAVhuRS29XVF0xv3mbOQXR/o6u4dePeK4=) 3: DOzJON1bs3hiZ3VHnEmsvsi0zBQ.roa (hash: 0UphDOF22C9mcUTv3cPQJDc8LIXIF1k+LyuIOSGCS50=) 4: OSYxWvdp836ljzdJlZno6YzlpGY.roa (hash: /5wE/HFby5mcM6+MFX0ZUh7Bq6r/zEB35ZUNILuEf84=) 5: Pfa8J12SK6qYlpp-JCEIEXT9ItQ.roa (hash: m14RvIzc2rz/0aG6QUUC8I/FrsLRlE3a6BpD0Y3vDzU=) 6: svN3Ok6VL2a-EVdJe6UTIYjW6Ug.roa (hash: MGU8Tr1wY79f7aOOX/E7HRh3hZPVTx7pl2+ACWyvncY=) 7: vmS5BdN7qv6lm6TAxWJK3LZ33KQ.roa (hash: 15/dbHkyNejRc1b3Z2HNyUYHE9FyHjv1laHgorxIb9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:86:e5:a7:7c:e2:8b:bd:2d:7c:a8:cc:96:da:4a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Dec 5 08:00:32 2025 GMT Not After : Dec 6 08:00:32 2025 GMT Subject: CN=3fb5e21ee0297a2c06ba6a8b44522a1e8ec023b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:16:d4:de:83:7c:8a:09:08:34:7f:63:eb: 99:b4:a5:a9:4e:df:5a:99:f9:b3:bb:d2:eb:7d:cc: b8:17:ca:6e:56:8a:85:63:53:62:64:43:43:53:a8: 17:7e:40:65:ad:b3:94:2a:a1:b3:74:80:13:7f:df: 18:b5:be:ee:de:83:04:3e:7d:24:ff:f5:13:48:2a: 8c:f3:d9:35:44:57:42:5e:37:ff:77:f3:af:c8:db: b5:d8:da:a8:49:bf:28:3c:f3:87:81:9d:d5:bc:3b: 10:2c:d6:ee:05:4f:80:de:a8:fb:48:1c:6f:ae:2e: 6a:b7:d7:dd:ad:a2:60:0a:b2:5a:c7:4c:32:f6:3e: ab:c1:ba:49:ef:7d:3c:fe:66:c3:aa:2a:ae:40:ea: 26:15:dc:d9:93:09:0a:f1:e7:fa:66:aa:c2:71:36: 16:ff:43:37:2d:01:d6:1f:9c:3f:78:5f:46:2d:07: c4:bb:75:11:7d:cd:e8:87:89:79:d9:d4:6b:65:8a: ac:ae:51:1f:98:e2:4f:7d:22:ee:fa:b9:cf:7b:d0: 4c:0f:1d:b6:9a:64:56:51:0a:d2:82:c1:16:6f:dc: 64:ca:6f:2f:b8:9d:14:74:21:b4:3b:a4:15:13:fb: 64:fd:68:a3:a7:30:d0:14:01:60:a9:1d:75:f9:c7: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B5:E2:1E:E0:29:7A:2C:06:BA:6A:8B:44:52:2A:1E:8E:C0:23:B1 X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6a:9a:62:f5:99:aa:4f:83:4c:a4:2f:94:b8:b1:cb:d7:59: 29:a8:13:79:8e:ff:54:3d:fc:73:34:79:07:8f:10:9f:36:c6: 2b:64:21:a6:95:29:e1:10:dd:b8:40:e6:48:f5:73:50:83:cf: 5e:8e:06:95:f8:75:cc:a5:c8:6c:ee:d4:e3:a6:d6:ca:f2:20: 3c:6f:6f:02:9d:86:0c:b9:a2:bd:00:ed:32:c8:52:17:57:89: 35:07:d5:44:8a:41:8a:cb:95:d7:60:71:c9:96:6f:af:26:63: 3a:fb:e5:a9:20:40:b4:0a:4b:58:d0:bf:d1:98:80:03:f7:93: f9:80:39:a6:49:8c:ce:bf:ff:9f:f0:88:2b:60:6f:05:4c:91: 86:25:68:b2:28:ab:20:c7:32:5b:cd:b2:0e:eb:4e:60:0f:9c: 55:e4:cd:f3:d2:06:b3:eb:df:fd:88:85:f3:5e:0d:2a:e3:2b: 7e:89:e9:27:26:7e:94:a5:77:14:41:23:53:58:f1:8a:8d:44: 4f:f0:37:65:71:1d:25:8f:66:66:65:45:0e:88:83:98:af:29: 4e:f5:f5:20:71:3f:21:fb:59:e4:1a:18:a7:70:44:7e:2c:63: 93:e3:4b:f4:4c:f3:fe:3f:3e:bf:8f:52:01:c8:12:7b:38:2d: 47:e6:ec:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrthuWnfOKLvS18qMyW2krfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjUxMjA1MDgwMDMyWhcNMjUxMjA2MDgwMDMyWjAzMTEwLwYDVQQD EygzZmI1ZTIxZWUwMjk3YTJjMDZiYTZhOGI0NDUyMmExZThlYzAyM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswcW1N6DfIoJCDR/Y+uZtKWpTt9a mfmzu9Lrfcy4F8puVoqFY1NiZENDU6gXfkBlrbOUKqGzdIATf98Ytb7u3oMEPn0k //UTSCqM89k1RFdCXjf/d/OvyNu12NqoSb8oPPOHgZ3VvDsQLNbuBU+A3qj7SBxv ri5qt9fdraJgCrJax0wy9j6rwbpJ7308/mbDqiquQOomFdzZkwkK8ef6ZqrCcTYW /0M3LQHWH5w/eF9GLQfEu3URfc3oh4l52dRrZYqsrlEfmOJPfSLu+rnPe9BMDx22 mmRWUQrSgsEWb9xkym8vuJ0UdCG0O6QVE/tk/WijpzDQFAFgqR11+ccyxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+14h7gKXosBrpqi0RSKh6OwCOxMB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2qaYvWZ qk+DTKQvlLixy9dZKagTeY7/VD38czR5B48QnzbGK2QhppUp4RDduEDmSPVzUIPP Xo4Glfh1zKXIbO7U46bWyvIgPG9vAp2GDLmivQDtMshSF1eJNQfVRIpBisuV12Bx yZZvryZjOvvlqSBAtApLWNC/0ZiAA/eT+YA5pkmMzr//n/CIK2BvBUyRhiVosiir IMcyW82yDutOYA+cVeTN89IGs+vf/YiF814NKuMrfonpJyZ+lKV3FEEjU1jxio1E T/A3ZXEdJY9mZmVFDoiDmK8pTvX1IHE/IftZ5BoYp3BEfixjk+NL9Ezz/j8+v49S AcgSezgtR+bsAA== -----END CERTIFICATE-----Generated at Fri Dec 5 10:06:03 2025 by rpki-client