This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json) Hash identifier: uUYuFaJI+U2gyJh/vM6VhQl8j0al+Cx4qEu0jwhTSzw= Subject key identifier: 4B:27:3D:3E:AD:12:BF:1B:63:C6:7C:AE:5D:E7:6F:84:FC:30:52:40 Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c Certificate serial: 019B0DB6A2D3F2B2106D16F4AAAAD45E3637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft Manifest number: 10D6 Signing time: Thu 11 Dec 2025 14:00:31 +0000 Manifest this update: Thu 11 Dec 2025 14:00:31 +0000 Manifest next update: Fri 12 Dec 2025 14:00:31 +0000 Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: 42k9BJsivJLvHk1Ocnuuklw06SRO5ow59QeqIbvEH6k=) 2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:a2:d3:f2:b2:10:6d:16:f4:aa:aa:d4:5e:36:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c Validity Not Before: Dec 11 14:00:31 2025 GMT Not After : Dec 12 14:00:31 2025 GMT Subject: CN=4b273d3ead12bf1b63c67cae5de76f84fc305240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:3d:ff:05:9c:5f:b5:31:d9:4e:95:e8:74: 4c:4a:6f:fd:79:24:c3:b6:92:d5:00:15:cb:e6:43: 78:08:ec:0b:fb:75:7f:3e:3b:d3:45:c9:35:7d:4a: 50:d2:11:88:ab:2f:a0:97:90:a9:3e:54:dd:c3:24: e9:b3:05:9d:46:8c:fc:ed:ea:b6:c9:df:eb:66:9a: cf:1c:6a:0c:a2:78:f0:9b:8d:06:ce:78:b9:5d:fb: f0:be:19:c9:3f:f5:3c:e8:8d:74:0a:d0:fe:39:1b: 5d:01:1f:26:d8:89:1b:ea:70:94:47:2b:02:f8:41: 82:67:8b:2b:80:7f:8d:33:61:99:ea:a5:89:16:ae: cd:27:64:5c:c3:d4:b1:be:c7:2a:b6:c9:d1:e0:d7: 82:22:d3:8a:66:a7:2f:48:1e:90:d7:1a:a8:ab:75: 9c:35:f6:fd:ce:0f:9f:82:28:c5:15:75:f1:c2:89: 0e:17:55:38:c2:df:ac:73:c4:51:b2:26:fc:13:bf: 57:c8:a5:b1:64:fe:c6:e5:65:e8:51:2d:c2:85:b5: 49:15:94:f4:32:d3:a6:2f:34:0a:90:a6:91:11:c2: 1f:40:aa:1b:50:84:c4:70:a2:30:87:90:07:1d:dc: c8:7a:df:2b:f1:89:b4:a2:f2:e1:85:ff:06:fe:0c: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:27:3D:3E:AD:12:BF:1B:63:C6:7C:AE:5D:E7:6F:84:FC:30:52:40 X509v3 Authority Key Identifier: keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:35:02:f0:39:1e:b7:03:ff:d3:32:34:28:0f:96:be:bf:82: 34:90:52:bd:71:ed:22:ac:66:b3:d0:8f:ba:ce:28:69:63:b5: cf:e1:1d:c9:e2:23:62:ad:e9:90:cd:6a:25:7e:4e:ed:90:1f: 25:00:b6:94:e8:a9:63:e3:85:38:7a:9d:d0:5b:82:84:a6:25: 99:be:96:45:a5:7b:ca:c4:69:d3:82:d9:b3:de:2d:5a:f3:80: 39:e1:78:86:ad:60:23:2d:0d:3a:99:e3:13:e9:01:87:60:35: af:43:17:fc:da:9f:21:e7:b8:f3:9c:6f:6e:bc:1f:a3:eb:52: 5d:6a:34:e3:a3:85:90:8f:d9:4d:be:a0:c4:aa:3e:aa:93:50: 56:62:aa:4f:82:1f:bb:c8:c0:b4:80:e8:ad:33:d8:75:2b:7f: 07:e1:0d:35:d1:98:b5:58:f3:82:f4:14:b7:a0:8a:a3:98:68: 4d:37:b6:d0:48:d6:49:75:02:57:ad:4d:df:36:c9:f2:bd:92: df:b1:af:51:88:3b:b0:c9:99:aa:f0:cd:39:a4:53:05:92:8a: e2:2f:c4:6e:34:88:04:26:39:26:a8:de:d8:3e:00:c5:25:1c: 8a:97:ac:0a:39:8c:b2:90:04:ed:a3:81:64:d1:50:c6:c8:8b: 33:ac:58:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtqLT8rIQbRb0qqrUXjY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZmUwMDExZWJlNGYyMTZjNThkM2FiNDI4MTJiOTg0MDJi ZTBiMmMwHhcNMjUxMjExMTQwMDMxWhcNMjUxMjEyMTQwMDMxWjAzMTEwLwYDVQQD Eyg0YjI3M2QzZWFkMTJiZjFiNjNjNjdjYWU1ZGU3NmY4NGZjMzA1MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoI9/wWcX7Ux2U6V6HRMSm/9eSTD tpLVABXL5kN4COwL+3V/PjvTRck1fUpQ0hGIqy+gl5CpPlTdwyTpswWdRoz87eq2 yd/rZprPHGoMonjwm40Gzni5XfvwvhnJP/U86I10CtD+ORtdAR8m2Ikb6nCURysC +EGCZ4srgH+NM2GZ6qWJFq7NJ2Rcw9SxvscqtsnR4NeCItOKZqcvSB6Q1xqoq3Wc Nfb9zg+fgijFFXXxwokOF1U4wt+sc8RRsib8E79XyKWxZP7G5WXoUS3ChbVJFZT0 MtOmLzQKkKaREcIfQKobUITEcKIwh5AHHdzIet8r8Ym0ovLhhf8G/gzhYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsnPT6tEr8bY8Z8rl3nb4T8MFJAMB8GA1UdIwQY MBaAFA/+ABHr5PIWxY06tCgSuYQCvgssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzIt NmNjMGRhZjM0MWM0LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzItNmNjMGRhZjM0MWM0 LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzUC8Dke twP/0zI0KA+Wvr+CNJBSvXHtIqxms9CPus4oaWO1z+EdyeIjYq3pkM1qJX5O7ZAf JQC2lOipY+OFOHqd0FuChKYlmb6WRaV7ysRp04LZs94tWvOAOeF4hq1gIy0NOpnj E+kBh2A1r0MX/NqfIee485xvbrwfo+tSXWo046OFkI/ZTb6gxKo+qpNQVmKqT4If u8jAtIDorTPYdSt/B+ENNdGYtVjzgvQUt6CKo5hoTTe20EjWSXUCV61N3zbJ8r2S 37GvUYg7sMmZqvDNOaRTBZKK4i/EbjSIBCY5Jqje2D4AxSUcipesCjmMspAE7aOB ZNFQxsiLM6xYcg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:06 2025 by rpki-client