This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json) Hash identifier: 9oFiE1FYhiMlMmXkkNVJE1QGZW7/DnrgmZDao8dRyUo= Subject key identifier: C4:9C:88:70:88:34:3F:FA:53:9A:E5:C8:DE:AC:12:9B:BB:72:83:CD Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf Certificate serial: 019B0F37EDF7FC7173D102DFE1B85D851407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft Manifest number: 0AB5 Signing time: Thu 11 Dec 2025 21:01:22 +0000 Manifest this update: Thu 11 Dec 2025 21:01:22 +0000 Manifest next update: Fri 12 Dec 2025 21:01:22 +0000 Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: pHC9Q3Oog2Q1ulpayO9F7GodLBzi5KC9KGzLHmfahks=) 2: oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa (hash: aFW6lgXJpeg0bmQI7iZHPliZcmK0ToNkD5OYtI2CIQI=) 3: s6V5k75uP9Du1h1TOqbJVxNQlpk.asa (hash: 4gKeo2b3gnQfAxzJIIq7R9o3by/qPWXIYyzmMQ3wxD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:ed:f7:fc:71:73:d1:02:df:e1:b8:5d:85:14:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a323546484220cb402063380f4016369262acf Validity Not Before: Dec 11 21:01:22 2025 GMT Not After : Dec 12 21:01:22 2025 GMT Subject: CN=c49c887088343ffa539ae5c8deac129bbb7283cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:0e:93:0d:87:de:f9:ad:92:17:3a:5e:da: d1:0a:08:d0:6a:b5:44:b6:90:62:6a:74:41:3a:0f: 8f:11:dd:11:dd:bb:af:b9:4c:a3:a9:23:c6:4a:06: 2d:4b:cb:e6:88:0d:4f:6c:5e:e3:12:91:fa:02:8e: f2:fe:7e:23:5b:af:2c:67:38:97:b4:22:b2:30:f4: 73:40:46:40:93:81:fd:47:a1:91:3e:42:8f:a6:c8: 11:c4:4c:da:50:a6:94:1a:7f:83:af:ab:92:a9:17: 38:30:d8:e0:9e:c5:8b:af:c5:5c:42:a8:af:ce:97: a9:82:13:18:0f:f4:e1:56:e1:5c:1e:5c:89:be:3b: e1:5a:b9:d1:d4:86:be:18:0c:f8:ff:ed:86:a9:c4: 66:72:15:85:f1:8e:fc:61:13:1a:98:db:be:16:d2: 8f:12:6c:87:b2:12:4f:b4:b7:41:8c:33:ba:29:0b: 10:c9:96:0a:84:b0:b2:c5:17:d4:23:5e:64:91:79: 57:d3:90:1d:4c:70:82:73:9a:2a:28:57:06:ec:65: c1:d4:ca:91:ea:6e:33:aa:46:22:ff:06:85:40:e2: 53:bc:7f:43:90:2b:fc:31:f6:9e:fc:33:ce:6d:07: 59:a4:11:9c:06:97:a4:f6:a8:41:c5:73:47:81:b6: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9C:88:70:88:34:3F:FA:53:9A:E5:C8:DE:AC:12:9B:BB:72:83:CD X509v3 Authority Key Identifier: keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:98:38:88:67:8f:ce:0b:ec:8b:86:1f:5e:bf:60:16:3f:92: c3:73:13:5d:92:69:33:e3:d1:8d:36:0c:04:5d:20:d0:2e:d3: c0:7e:f2:7c:ce:c9:cd:67:bc:fa:7b:98:d5:e4:66:7c:2e:58: 76:f2:9e:d1:36:6b:2f:1d:70:35:e6:66:9d:52:4e:0b:0f:2a: 17:37:d8:42:fe:11:00:92:27:32:f4:cb:97:a8:50:12:61:02: d2:7b:3b:a9:ce:34:21:9e:cd:ec:eb:8b:e3:da:8a:cc:1b:76: e6:b0:b6:17:cc:9e:e7:fd:ae:26:15:cb:67:4d:b8:6f:b8:c3: 75:56:ee:75:47:09:c9:69:55:4d:30:da:6b:14:3c:90:4e:19: 6e:6f:7e:3f:e1:65:84:5c:1a:e2:2e:24:63:fc:9d:33:ea:c2: dc:5a:44:45:c2:24:df:da:4e:a1:a8:93:e4:6c:d1:36:ee:f6: 74:10:39:50:58:a6:34:f7:fd:4f:57:31:c9:ae:72:59:98:eb: 93:65:35:7a:6a:e4:b5:d0:6f:70:11:16:84:1c:dd:29:77:fe: 4c:0c:4b:3a:1a:e7:6b:78:6a:a1:e5:0e:59:ff:97:64:ad:c7: 27:30:74:a8:9a:a1:1e:4b:dd:93:f2:49:3a:f5:33:e0:77:e4: eb:d1:59:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN+33/HFz0QLf4bhdhRQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTMyMzU0NjQ4NDIyMGNiNDAyMDYzMzgwZjQwMTYzNjky NjJhY2YwHhcNMjUxMjExMjEwMTIyWhcNMjUxMjEyMjEwMTIyWjAzMTEwLwYDVQQD EyhjNDljODg3MDg4MzQzZmZhNTM5YWU1YzhkZWFjMTI5YmJiNzI4M2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F8Okw2H3vmtkhc6XtrRCgjQarVE tpBianRBOg+PEd0R3buvuUyjqSPGSgYtS8vmiA1PbF7jEpH6Ao7y/n4jW68sZziX tCKyMPRzQEZAk4H9R6GRPkKPpsgRxEzaUKaUGn+Dr6uSqRc4MNjgnsWLr8VcQqiv zpepghMYD/ThVuFcHlyJvjvhWrnR1Ia+GAz4/+2GqcRmchWF8Y78YRMamNu+FtKP EmyHshJPtLdBjDO6KQsQyZYKhLCyxRfUI15kkXlX05AdTHCCc5oqKFcG7GXB1MqR 6m4zqkYi/waFQOJTvH9DkCv8Mfae/DPObQdZpBGcBpek9qhBxXNHgbbzuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSciHCIND/6U5rlyN6sEpu7coPNMB8GA1UdIwQY MBaAFOGjI1RkhCIMtAIGM4D0AWNpJirPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEt OGVjMDYwNGU2OTI5LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEtOGVjMDYwNGU2OTI5 LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpg4iGeP zgvsi4YfXr9gFj+Sw3MTXZJpM+PRjTYMBF0g0C7TwH7yfM7JzWe8+nuY1eRmfC5Y dvKe0TZrLx1wNeZmnVJOCw8qFzfYQv4RAJInMvTLl6hQEmEC0ns7qc40IZ7N7OuL 49qKzBt25rC2F8ye5/2uJhXLZ024b7jDdVbudUcJyWlVTTDaaxQ8kE4Zbm9+P+Fl hFwa4i4kY/ydM+rC3FpERcIk39pOoaiT5GzRNu72dBA5UFimNPf9T1cxya5yWZjr k2U1emrktdBvcBEWhBzdKXf+TAxLOhrna3hqoeUOWf+XZK3HJzB0qJqhHkvdk/JJ OvUz4Hfk69FZYA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:38 2025 by rpki-client