This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json) Hash identifier: rJqwp/GqTf4iVkx4UKuBXM6WoI3DpbpqCJ2Z96SYOM4= Subject key identifier: 06:80:3D:D2:54:C5:29:60:86:32:F2:81:7F:49:8C:0C:67:A2:B5:68 Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155 Certificate serial: 019B1CF30C5003C395C621FE4A5C2673545E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft Manifest number: 01E4 Signing time: Sun 14 Dec 2025 13:00:48 +0000 Manifest this update: Sun 14 Dec 2025 13:00:48 +0000 Manifest next update: Mon 15 Dec 2025 13:00:48 +0000 Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: jLxztAKsXUsS704CGoBJF29wk+V5hD4/gQGMpT/rgmA=) 2: Eba-gFj6_KEbGtGz74WD9Qe5r-8.roa (hash: IQzF41AYmHmWyxwMWh8AK7MBgafq4BN6uK+awf+6jdE=) 3: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (hash: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:0c:50:03:c3:95:c6:21:fe:4a:5c:26:73:54:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155 Validity Not Before: Dec 14 13:00:48 2025 GMT Not After : Dec 15 13:00:48 2025 GMT Subject: CN=06803dd254c529608632f2817f498c0c67a2b568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:86:46:56:5e:7e:4a:60:d7:e7:cc:18:89:81: a5:ef:35:ca:ff:29:d7:85:f5:33:d3:36:7a:11:5f: 58:10:6a:78:3f:98:66:84:3d:cf:ff:7a:74:d7:78: 8a:1b:49:33:34:fc:df:0a:0b:de:44:bf:e2:6e:ec: 9d:f8:18:53:bb:88:eb:db:dc:20:9d:4c:2f:20:81: ee:2b:3e:71:52:64:32:24:9b:22:4d:9f:8c:57:8b: 30:d4:10:da:2f:df:23:f1:6d:b0:87:af:b8:71:f3: b3:34:66:40:70:3c:15:e9:fd:c7:94:06:59:28:b9: ec:6f:64:6b:de:a4:2f:01:1b:b3:f1:4b:4d:8b:f0: bd:db:0a:c5:e3:1e:43:b9:5e:a7:3c:19:28:4c:38: b1:33:91:df:ac:4d:83:49:f1:19:d4:ce:a1:69:fa: 90:87:15:ab:c1:04:4f:98:3d:fd:58:2a:01:a8:42: b4:1a:23:2d:f8:1f:36:1b:7b:52:ac:05:bc:27:68: b3:b2:08:22:1f:9e:10:0c:d2:88:3b:27:c3:ad:b7: a0:59:60:1c:8d:23:bb:1d:8d:98:fe:ad:f9:45:fb: 73:f8:66:63:e5:ea:1e:58:64:93:27:8f:d9:c0:c5: e0:0a:99:a3:a2:35:41:a1:ee:0f:b4:b0:29:de:08: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:80:3D:D2:54:C5:29:60:86:32:F2:81:7F:49:8C:0C:67:A2:B5:68 X509v3 Authority Key Identifier: keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:59:f6:d1:61:28:22:eb:e9:83:d4:7b:8a:4f:2d:c2:45:37: c1:55:1e:1b:c8:a4:7d:ed:81:26:f4:22:38:23:15:a4:f6:bf: c4:15:f0:e9:b6:ec:10:c1:8e:54:52:f8:32:86:d5:6d:b7:3c: 56:2d:50:b2:09:61:64:0e:3e:f3:b0:9d:5b:74:1c:7d:4f:26: 8c:37:92:15:64:96:b7:82:f1:fd:83:06:ae:52:40:3a:c0:41: 0e:cc:f5:b1:a6:5e:7e:4f:7d:ba:f1:07:b9:57:9a:93:1a:62: 0d:b4:85:b7:a6:ef:29:10:8d:c3:d6:36:23:b1:db:42:76:6a: 01:eb:2e:dd:99:23:37:be:bb:dc:14:6c:79:c3:1a:28:c4:b5: bf:c8:68:fe:c3:a8:02:8b:a5:b6:b0:e3:37:3d:8a:9b:7d:d0: 07:70:ff:c7:94:a9:eb:7e:16:c5:b9:96:ac:97:d4:f6:6c:ac: ae:1d:b9:b6:7d:88:29:e3:eb:fe:d3:f9:4a:ef:12:69:2c:d4: 88:b5:ef:44:10:33:97:ab:83:bf:c3:06:99:a9:68:43:c1:61: cd:2f:37:4c:16:17:8d:85:74:4d:94:fc:e9:ab:b2:c3:b8:dc: 9c:d4:33:74:61:fa:8a:4e:c3:a4:1c:b4:1c:6f:6b:aa:66:b6: eb:9a:9c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8wxQA8OVxiH+Slwmc1ReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzQyYzU4NjM3MWQ0NjViY2YzNWY3OWUxNjYwZTExZTA4 MDUxNTUwHhcNMjUxMjE0MTMwMDQ4WhcNMjUxMjE1MTMwMDQ4WjAzMTEwLwYDVQQD EygwNjgwM2RkMjU0YzUyOTYwODYzMmYyODE3ZjQ5OGMwYzY3YTJiNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YZGVl5+SmDX58wYiYGl7zXK/ynX hfUz0zZ6EV9YEGp4P5hmhD3P/3p013iKG0kzNPzfCgveRL/ibuyd+BhTu4jr29wg nUwvIIHuKz5xUmQyJJsiTZ+MV4sw1BDaL98j8W2wh6+4cfOzNGZAcDwV6f3HlAZZ KLnsb2Rr3qQvARuz8UtNi/C92wrF4x5DuV6nPBkoTDixM5HfrE2DSfEZ1M6hafqQ hxWrwQRPmD39WCoBqEK0GiMt+B82G3tSrAW8J2izsggiH54QDNKIOyfDrbegWWAc jSO7HY2Y/q35Rftz+GZj5eoeWGSTJ4/ZwMXgCpmjojVBoe4PtLAp3gioQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaAPdJUxSlghjLygX9JjAxnorVoMB8GA1UdIwQY MBaAFOM0LFhjcdRlvPNfeeFmDhHggFFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt ZDk1YTM4ZjBjMDZlLzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl LzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFn20WEo Iuvpg9R7ik8twkU3wVUeG8ikfe2BJvQiOCMVpPa/xBXw6bbsEMGOVFL4MobVbbc8 Vi1QsglhZA4+87CdW3QcfU8mjDeSFWSWt4Lx/YMGrlJAOsBBDsz1saZefk99uvEH uVeakxpiDbSFt6bvKRCNw9Y2I7HbQnZqAesu3ZkjN7673BRsecMaKMS1v8ho/sOo AoultrDjNz2Km33QB3D/x5Sp634WxbmWrJfU9mysrh25tn2IKePr/tP5Su8SaSzU iLXvRBAzl6uDv8MGmaloQ8FhzS83TBYXjYV0TZT86auyw7jcnNQzdGH6ik7DpBy0 HG9rqma265qcqA== -----END CERTIFICATE-----Generated at Sun Dec 14 17:16:27 2025 by rpki-client