This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json) Hash identifier: 9pX4oi6aVfHfM3JU/ZIaSflDe+SfzHU8MXF67pJ3j4U= Subject key identifier: 30:25:C4:70:9E:9F:B7:89:73:B3:2D:B1:AD:FC:92:E0:25:A7:74:B0 Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2 Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2 Certificate serial: 019AF653CCC12BEA9EAA4C69923FFB44CC48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft Manifest number: 0F84 Signing time: Sun 07 Dec 2025 01:01:18 +0000 Manifest this update: Sun 07 Dec 2025 01:01:18 +0000 Manifest next update: Mon 08 Dec 2025 01:01:18 +0000 Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: l5kxCZlKWbH64qcLXAkvkPds+UsobpLo7cjMiJ0487s=) 2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=) 3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=) 4: iTRKgS_ctdQMS65aT9yNiwNmnac.roa (hash: 9OIP8hq95SLwUq03I4+pqdX2ifDWiqIls9ZH9aKVb9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:cc:c1:2b:ea:9e:aa:4c:69:92:3f:fb:44:cc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2 Validity Not Before: Dec 7 01:01:18 2025 GMT Not After : Dec 8 01:01:18 2025 GMT Subject: CN=3025c4709e9fb78973b32db1adfc92e025a774b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:94:28:04:dc:15:f4:31:4d:39:02:12:c1: 42:a6:e2:d8:15:19:d6:55:0d:4a:37:70:6a:9a:5d: f2:b5:0b:85:83:1b:e7:4e:d8:34:85:17:98:f8:11: 0f:fc:70:6c:a6:f5:31:f5:7a:40:fb:41:e7:dc:2d: f4:57:64:0a:93:ea:91:5c:18:bd:a6:b7:d1:5f:bd: 6f:70:2a:c6:d6:35:55:c3:09:78:b6:25:2e:ff:50: 02:3c:14:21:1e:cb:d2:ad:9a:f2:5e:71:29:e3:34: f9:ea:f0:f2:32:b7:35:46:c4:e3:6c:fe:fe:75:6a: 36:d9:3e:4f:09:9e:aa:2b:42:1c:e7:92:ee:bf:f5: 27:0f:f9:8d:24:c2:69:af:6d:d7:34:62:71:b4:c4: 83:22:62:b8:88:ff:f9:ba:09:b9:71:43:c8:3c:f9: c4:20:84:90:51:69:cf:55:b0:6e:74:30:51:ea:a9: b9:98:3e:68:af:f9:94:19:8f:f7:35:8b:4b:1e:94: 41:f8:35:9e:18:ff:46:a3:29:e3:16:75:a6:fa:1d: 7f:f0:e9:98:08:57:58:6f:52:71:bb:3f:9b:6c:53: c2:f0:9e:1b:0f:fa:23:19:65:35:9d:88:2e:93:c5: 6d:53:02:a1:52:04:d8:c0:e8:6f:14:cc:0e:ac:55: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:25:C4:70:9E:9F:B7:89:73:B3:2D:B1:AD:FC:92:E0:25:A7:74:B0 X509v3 Authority Key Identifier: keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7b:7d:2a:dc:02:41:25:b6:be:16:60:1e:27:88:79:c9:71: 27:36:6b:d6:f8:0e:10:07:c3:9d:15:9b:75:75:a1:54:73:63: 89:16:48:b1:41:66:18:d4:56:c7:fb:d9:82:5f:97:c5:19:a5: cd:3a:2a:5d:b4:52:1b:c8:31:56:c5:0e:20:de:be:3d:48:11: c9:1c:e0:80:36:c8:72:74:02:7b:43:31:52:1b:21:81:79:25: 63:17:17:9c:a7:0e:16:67:f3:37:a7:e9:a2:61:67:83:a7:95: a8:a2:19:ba:f2:19:27:69:df:0a:c3:4e:23:12:c0:29:09:18: 8c:03:e4:9a:6a:9a:d6:4b:83:87:cd:a5:04:15:92:c1:02:98: 7c:0c:7b:22:5a:96:ef:fc:57:b3:86:05:9a:13:06:39:4f:dd: f5:28:cf:a2:ce:a4:0b:48:f9:9f:e7:ba:1e:f4:c6:8c:e4:84: 42:03:24:20:a5:c9:78:f7:f4:c0:66:55:eb:95:42:5f:08:ed: 64:22:18:72:84:ac:8e:f3:c4:be:ef:28:30:cd:fd:bd:e0:4d: f7:95:9a:8d:a4:6f:bb:e7:47:46:ac:8a:c6:40:6e:a8:6e:b9: 10:6d:96:7b:49:1e:97:15:18:77:58:1e:78:0d:db:b2:b1:e0: c3:9d:d6:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U8zBK+qeqkxpkj/7RMxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTYzMTgyNDdkMjExODQxZjk2MjBhOWExMTMwMDEwZGRi NDg2ZjIwHhcNMjUxMjA3MDEwMTE4WhcNMjUxMjA4MDEwMTE4WjAzMTEwLwYDVQQD EygzMDI1YzQ3MDllOWZiNzg5NzNiMzJkYjFhZGZjOTJlMDI1YTc3NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VeUKATcFfQxTTkCEsFCpuLYFRnW VQ1KN3Bqml3ytQuFgxvnTtg0hReY+BEP/HBspvUx9XpA+0Hn3C30V2QKk+qRXBi9 prfRX71vcCrG1jVVwwl4tiUu/1ACPBQhHsvSrZryXnEp4zT56vDyMrc1RsTjbP7+ dWo22T5PCZ6qK0Ic55Luv/UnD/mNJMJpr23XNGJxtMSDImK4iP/5ugm5cUPIPPnE IISQUWnPVbBudDBR6qm5mD5or/mUGY/3NYtLHpRB+DWeGP9GoynjFnWm+h1/8OmY CFdYb1Jxuz+bbFPC8J4bD/ojGWU1nYguk8VtUwKhUgTYwOhvFMwOrFXyBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAlxHCen7eJc7Mtsa38kuAlp3SwMB8GA1UdIwQY MBaAFOMWMYJH0hGEH5YgqaETABDdtIbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYt ZWMyODdlMWQzN2U1LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1 LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHt9KtwC QSW2vhZgHieIeclxJzZr1vgOEAfDnRWbdXWhVHNjiRZIsUFmGNRWx/vZgl+XxRml zToqXbRSG8gxVsUOIN6+PUgRyRzggDbIcnQCe0MxUhshgXklYxcXnKcOFmfzN6fp omFng6eVqKIZuvIZJ2nfCsNOIxLAKQkYjAPkmmqa1kuDh82lBBWSwQKYfAx7IlqW 7/xXs4YFmhMGOU/d9SjPos6kC0j5n+e6HvTGjOSEQgMkIKXJePf0wGZV65VCXwjt ZCIYcoSsjvPEvu8oMM39veBN95WajaRvu+dHRqyKxkBuqG65EG2We0kelxUYd1ge eA3bsrHgw53WHw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:32 2025 by rpki-client