This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json) Hash identifier: dh0zpj9Kw9o0F58ZsZTocl5bwE0FQGMzMjI374UsN9o= Subject key identifier: 6A:D4:C9:6C:D5:0F:74:17:00:8A:53:CC:21:4F:44:AC:E3:52:B4:61 Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20 Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20 Certificate serial: 019AFD9FA6D29E27E53ED2FFCBE3CCE49AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft Manifest number: 0535 Signing time: Mon 08 Dec 2025 11:01:29 +0000 Manifest this update: Mon 08 Dec 2025 11:01:29 +0000 Manifest next update: Tue 09 Dec 2025 11:01:29 +0000 Files and hashes: 1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: VbxWwELsRoiHbauSGOs7YpBS9BzyY2ty5FzqODxW2OA=) 2: GN1cEGtzhGUtNVwPMehD-Lj4N1Q.roa (hash: C8P5r4sDxFHAMG8SatPLslHel1irs4/AKLXy4El1DWk=) 3: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:9f:a6:d2:9e:27:e5:3e:d2:ff:cb:e3:cc:e4:9a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20 Validity Not Before: Dec 8 11:01:29 2025 GMT Not After : Dec 9 11:01:29 2025 GMT Subject: CN=6ad4c96cd50f7417008a53cc214f44ace352b461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:ce:b7:7b:49:35:9a:b4:b5:2d:13:b3:ef: 31:2e:bb:7b:99:ac:6f:0c:d4:57:14:34:be:e1:37: 38:ef:d0:db:4b:56:e4:8d:33:c4:0e:ae:01:fd:96: 4d:0e:6f:6f:ac:c6:8c:22:c6:b0:6d:bc:29:ff:4e: 7b:8f:4f:b6:29:2a:d1:0d:68:0d:67:1a:5c:46:cd: 7b:99:e9:be:f8:c6:dc:a9:a6:80:d1:1e:90:cf:ba: 95:85:3e:47:2b:af:49:05:c9:47:b5:4b:ca:95:e5: d3:ab:0b:8d:61:a1:1a:45:3c:c1:24:d8:70:57:9b: fb:24:7c:e7:42:25:3a:d5:58:ac:b7:00:72:f1:be: c2:36:75:ac:fa:6c:de:5f:fa:e7:ae:f6:44:1b:80: 8c:e2:82:78:73:cc:cc:e4:4b:7c:a4:89:5c:7c:ca: 7f:9d:ce:e8:f4:0a:a2:65:22:ea:05:1e:0e:f8:5c: dc:29:1e:84:9d:df:5b:d0:c9:d9:d8:54:f0:b4:5a: c2:d8:8d:94:d6:24:c3:2c:ad:4e:ca:6f:4e:d0:b3: d5:dc:6e:3a:68:df:64:db:6f:6e:d5:37:d1:41:01: b4:c9:b0:58:02:bd:4b:eb:05:f7:22:29:d1:e1:57: da:8f:08:19:ae:93:5c:6a:26:97:d9:54:ef:26:e3: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D4:C9:6C:D5:0F:74:17:00:8A:53:CC:21:4F:44:AC:E3:52:B4:61 X509v3 Authority Key Identifier: keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f8:7e:bf:f4:6e:f8:41:89:d9:03:89:a4:3f:90:07:9e:46: af:80:e1:3f:f2:f2:b5:25:ec:0d:84:57:e9:4c:ce:5d:24:df: d4:f9:13:76:3b:97:4c:e6:49:33:c9:6a:d2:5f:93:f5:1b:b9: 58:7f:92:c8:1f:c1:0c:d0:33:62:cb:ef:1e:80:d9:b2:d0:4c: bf:7e:52:b0:5e:d1:89:58:b6:9c:cd:66:0d:8b:e9:f6:ee:b2: a6:c2:74:fd:9c:a7:e4:02:bb:07:15:d9:f1:6d:d8:46:0c:fe: 17:f2:79:07:61:0e:79:bd:25:67:d5:5e:08:31:a5:fc:c6:0b: 34:0c:74:75:4b:c5:1c:1a:a6:2e:3b:10:fb:79:dd:44:2f:6c: 80:cc:4c:cd:22:98:78:d9:d7:7b:52:97:b9:63:6f:68:20:a4: 44:f1:f2:1d:78:27:0f:b1:88:3d:48:d0:dc:43:63:d5:2d:55: 05:67:79:33:90:8e:8b:8b:ed:20:aa:d2:4f:f6:ec:5d:50:03: d6:b3:91:97:2c:4e:e3:4c:4a:a1:9d:4f:f3:fb:59:af:cf:bb: ad:e5:02:0b:cf:9c:38:83:f3:b4:d0:c7:7f:71:27:a9:37:86: d9:5d:e3:06:a2:59:ad:8d:8e:11:5f:14:33:05:29:fa:1d:27: c6:7f:4a:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9n6bSniflPtL/y+PM5JqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj OTZmMjAwHhcNMjUxMjA4MTEwMTI5WhcNMjUxMjA5MTEwMTI5WjAzMTEwLwYDVQQD Eyg2YWQ0Yzk2Y2Q1MGY3NDE3MDA4YTUzY2MyMTRmNDRhY2UzNTJiNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1vOt3tJNZq0tS0Ts+8xLrt7maxv DNRXFDS+4Tc479DbS1bkjTPEDq4B/ZZNDm9vrMaMIsawbbwp/057j0+2KSrRDWgN ZxpcRs17mem++MbcqaaA0R6Qz7qVhT5HK69JBclHtUvKleXTqwuNYaEaRTzBJNhw V5v7JHznQiU61VistwBy8b7CNnWs+mzeX/rnrvZEG4CM4oJ4c8zM5Et8pIlcfMp/ nc7o9AqiZSLqBR4O+FzcKR6End9b0MnZ2FTwtFrC2I2U1iTDLK1Oym9O0LPV3G46 aN9k229u1TfRQQG0ybBYAr1L6wX3IinR4VfajwgZrpNcaiaX2VTvJuOJkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrUyWzVD3QXAIpTzCFPRKzjUrRhMB8GA1UdIwQY MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt ZWIxZTkxNjQ0ZjJkLzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvh+v/Ru +EGJ2QOJpD+QB55Gr4DhP/LytSXsDYRX6UzOXSTf1PkTdjuXTOZJM8lq0l+T9Ru5 WH+SyB/BDNAzYsvvHoDZstBMv35SsF7RiVi2nM1mDYvp9u6ypsJ0/Zyn5AK7BxXZ 8W3YRgz+F/J5B2EOeb0lZ9VeCDGl/MYLNAx0dUvFHBqmLjsQ+3ndRC9sgMxMzSKY eNnXe1KXuWNvaCCkRPHyHXgnD7GIPUjQ3ENj1S1VBWd5M5COi4vtIKrST/bsXVAD 1rORlyxO40xKoZ1P8/tZr8+7reUCC8+cOIPztNDHf3EnqTeG2V3jBqJZrY2OEV8U MwUp+h0nxn9KUA== -----END CERTIFICATE-----Generated at Mon Dec 8 15:15:39 2025 by rpki-client