This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json) Hash identifier: 5gnP0x85HaTPaylqdTb5bazqKelCq6zi8kVIMmLpzUk= Subject key identifier: 40:94:99:45:73:67:C7:9A:69:0E:66:04:75:55:C2:8C:F7:E8:37:B5 Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Certificate serial: 019B1014165144A1A3F3D36755D8A4281E90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 01:01:50 +0000 Manifest this update: Fri 12 Dec 2025 01:01:50 +0000 Manifest next update: Sat 13 Dec 2025 01:01:50 +0000 Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=) 2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: 1E1OWf4g7hEtEtDOW8zudtGFrKc3LO8n831AP9EA8XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:16:51:44:a1:a3:f3:d3:67:55:d8:a4:28:1e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Validity Not Before: Dec 12 01:01:50 2025 GMT Not After : Dec 13 01:01:50 2025 GMT Subject: CN=409499457367c79a690e66047555c28cf7e837b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:9b:f3:d8:34:63:5a:5c:24:5d:3f:0f:95: e6:71:fe:06:b8:c6:29:02:d0:5f:2e:a5:ad:09:2d: a6:8b:49:84:47:fe:82:0b:e9:a0:7e:4c:7e:97:64: e3:36:de:d5:4c:f1:fa:6c:bb:2f:3b:0d:ca:ac:45: 8e:e0:10:84:4c:90:15:57:74:17:46:3f:5e:a4:68: c1:95:19:27:48:8f:e7:c3:99:ab:eb:87:5b:3e:21: e8:4c:6f:ee:58:43:d5:35:0a:61:d3:31:b5:5a:a6: f8:a4:a6:71:eb:0c:8b:8b:2a:c1:25:16:30:b6:e1: fc:7b:d8:4d:1d:97:8c:02:1e:b4:60:ce:35:9e:ac: d0:90:58:a5:d9:d5:80:0f:dc:c8:8e:3f:c9:ab:fb: e8:d8:b6:98:88:d5:2b:59:2c:58:ff:c0:96:37:39: 45:6d:e8:86:8b:23:4a:17:c0:d1:44:09:35:1c:e3: 9e:c4:46:1f:45:b9:86:79:b4:9a:a1:79:c3:d9:2c: ee:33:01:42:d0:0e:a1:0c:f0:4a:fe:2d:49:9b:96: 1d:51:83:1e:02:05:54:56:fd:1b:1c:84:ee:fa:77: f4:1c:df:ec:ab:f8:98:b5:00:cf:42:7d:9f:5b:0f: 52:a6:21:c5:7e:8e:ae:6d:24:fd:06:5b:1b:50:53: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:94:99:45:73:67:C7:9A:69:0E:66:04:75:55:C2:8C:F7:E8:37:B5 X509v3 Authority Key Identifier: keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f2:ec:7a:c2:49:28:d9:31:8e:5f:51:1c:c6:a7:b1:bf:ce: 63:e8:5d:29:e9:28:43:d4:4d:c5:45:17:59:d4:1d:9b:62:09: 72:f1:ea:b7:73:4b:79:e4:c4:ad:9e:fa:b7:fd:16:cb:6f:32: bc:d8:a2:c5:06:c3:75:85:1b:5c:fd:6f:30:43:9a:29:f0:0a: a3:36:75:58:17:44:64:5c:f8:5e:a6:84:30:93:33:dd:fe:4d: 5c:f1:9b:24:76:16:2e:2d:df:d6:23:25:1a:0c:b0:98:86:d7: 9f:eb:8f:4b:c9:18:42:5c:55:bf:2f:96:4c:48:50:f7:f0:ac: c5:ae:6c:88:f5:f7:1c:9a:48:e2:a5:8a:8a:6c:9b:ef:77:66: a1:a4:e5:7c:09:5f:a5:5a:fd:90:78:f8:10:08:e3:82:9d:7c: 83:44:a1:a1:11:ab:51:31:f6:10:a2:9e:db:6c:8b:f5:91:34: 44:7b:d0:61:54:d4:60:68:ce:d5:31:b0:4a:db:b2:27:28:67: ef:36:8b:8f:31:e4:4e:54:7d:2a:96:22:6c:f2:c0:d0:23:01: 7e:37:d4:5d:10:7b:1d:6d:f6:25:da:96:ab:f3:8d:3f:66:ea: 6d:56:21:8c:61:35:4e:09:9e:41:10:19:ab:21:0d:ae:76:f3: d1:81:9f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFBZRRKGj89NnVdikKB6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODA5YTdlNmNhMTRkMGExYTk3NjY3M2UwMzE5ZTM0ZTk1 NmVkM2QwHhcNMjUxMjEyMDEwMTUwWhcNMjUxMjEzMDEwMTUwWjAzMTEwLwYDVQQD Eyg0MDk0OTk0NTczNjdjNzlhNjkwZTY2MDQ3NTU1YzI4Y2Y3ZTgzN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVub89g0Y1pcJF0/D5Xmcf4GuMYp AtBfLqWtCS2mi0mER/6CC+mgfkx+l2TjNt7VTPH6bLsvOw3KrEWO4BCETJAVV3QX Rj9epGjBlRknSI/nw5mr64dbPiHoTG/uWEPVNQph0zG1Wqb4pKZx6wyLiyrBJRYw tuH8e9hNHZeMAh60YM41nqzQkFil2dWAD9zIjj/Jq/vo2LaYiNUrWSxY/8CWNzlF beiGiyNKF8DRRAk1HOOexEYfRbmGebSaoXnD2SzuMwFC0A6hDPBK/i1Jm5YdUYMe AgVUVv0bHITu+nf0HN/sq/iYtQDPQn2fWw9SpiHFfo6ubST9BlsbUFN/SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECUmUVzZ8eaaQ5mBHVVwoz36De1MB8GA1UdIwQY MBaAFL+Amn5soU0KGpdmc+AxnjTpVu09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAt M2ZkZmI0MTQwZjI0LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAtM2ZkZmI0MTQwZjI0 LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvLsesJJ KNkxjl9RHMansb/OY+hdKekoQ9RNxUUXWdQdm2IJcvHqt3NLeeTErZ76t/0Wy28y vNiixQbDdYUbXP1vMEOaKfAKozZ1WBdEZFz4XqaEMJMz3f5NXPGbJHYWLi3f1iMl GgywmIbXn+uPS8kYQlxVvy+WTEhQ9/Csxa5siPX3HJpI4qWKimyb73dmoaTlfAlf pVr9kHj4EAjjgp18g0ShoRGrUTH2EKKe22yL9ZE0RHvQYVTUYGjO1TGwStuyJyhn 7zaLjzHkTlR9KpYibPLA0CMBfjfUXRB7HW32JdqWq/ONP2bqbVYhjGE1TgmeQRAZ qyENrnbz0YGf7A== -----END CERTIFICATE-----Generated at Fri Dec 12 07:22:27 2025 by rpki-client