This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json) Hash identifier: kDMq3dB0a6/bdeZSqw/EU6kAeCvXaPkbnNndA06VL6M= Subject key identifier: 3C:75:58:C1:9E:60:BD:A2:6C:F2:F7:3B:36:8B:80:26:CF:89:F1:A0 Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Certificate serial: 019B101346A651DB1BEE36D4F21E625FA039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft Manifest number: 1308 Signing time: Fri 12 Dec 2025 01:00:57 +0000 Manifest this update: Fri 12 Dec 2025 01:00:57 +0000 Manifest next update: Sat 13 Dec 2025 01:00:57 +0000 Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: ielqkvjDkxytdKISQUL0WZDC+zFN/uEpesoIHFpDTPQ=) 2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:46:a6:51:db:1b:ee:36:d4:f2:1e:62:5f:a0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Validity Not Before: Dec 12 01:00:57 2025 GMT Not After : Dec 13 01:00:57 2025 GMT Subject: CN=3c7558c19e60bda26cf2f73b368b8026cf89f1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:f9:98:44:2b:3b:1a:2a:45:bc:87:1c:65: 5d:e6:35:98:c6:cb:d4:d1:d8:b0:95:04:3a:9c:a5: 91:1c:eb:80:1c:b1:75:0c:79:3e:56:c5:d2:13:aa: 84:67:4b:d1:c1:ba:d5:bb:8d:00:7e:a6:aa:32:40: 47:7e:4b:af:9d:ef:0c:ea:69:99:d4:0f:4b:2d:e1: d2:7b:db:cb:c9:e9:05:f3:b9:52:31:11:ae:30:59: ca:c5:87:c9:4c:8c:95:5a:93:18:42:2f:e5:cc:bb: 72:85:7f:24:ff:5b:1d:0e:6c:65:52:db:14:b5:4f: 04:82:5a:34:ae:fe:20:4e:21:3a:6d:f4:a2:35:5d: b6:d8:45:bf:1a:f6:62:c9:e5:75:d9:00:be:2c:63: dc:0c:73:a2:91:4c:5e:0a:08:21:ec:4e:27:cd:57: c3:55:cf:28:72:f2:8b:24:78:e8:13:db:18:ea:cb: 50:88:a4:48:20:9b:3e:62:eb:fc:7e:2a:98:3e:36: a5:62:0a:54:41:62:60:80:ea:c7:a6:70:3c:cc:ba: 47:c2:22:0d:e5:19:f7:67:fa:2a:89:1b:a6:25:12: b0:26:54:59:0b:84:92:62:8d:e8:93:e7:ff:ca:20: aa:ea:ec:cd:05:fe:c4:51:bf:8e:3d:b7:fc:df:8a: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:75:58:C1:9E:60:BD:A2:6C:F2:F7:3B:36:8B:80:26:CF:89:F1:A0 X509v3 Authority Key Identifier: keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:91:8c:38:7f:e0:41:e3:e6:01:5b:e8:72:f1:7b:6d:fd:5d: 77:28:d3:b3:d5:08:39:cc:b1:9b:76:69:e8:cd:d0:14:a6:bd: aa:f6:8d:f0:35:62:1f:1a:cd:3d:2c:b0:7b:ab:34:53:30:9b: 65:84:ec:0e:a5:09:2f:44:21:40:13:c9:77:d8:e5:a5:92:19: da:48:cf:50:f3:20:28:4e:51:7c:ef:d6:db:a2:31:20:54:8b: 44:32:9f:22:9a:25:bf:d0:d8:21:47:1a:fc:1e:c1:56:99:c6: 64:ee:3a:07:27:90:8f:ce:90:4c:22:c4:26:7d:28:b9:62:9e: f5:e3:de:8b:f9:95:fc:c4:b4:8f:2d:c2:91:2c:49:34:4f:8f: a7:1c:5d:30:1e:2b:2c:cf:e3:2c:37:72:13:bd:d5:ae:ea:cc: e2:8a:61:c2:77:3f:1f:bc:77:ca:a5:f8:4b:dd:ba:e2:51:c8: e9:d8:e2:69:10:d7:2b:41:46:c9:d5:22:28:73:0a:10:2f:fa: e9:4a:50:98:6d:e6:7e:53:e9:7b:bb:0a:2a:cd:0d:68:4d:ef: d9:3d:13:75:7a:3a:4a:f3:a1:8b:1b:26:8f:03:4f:c7:48:5b: eb:ea:e5:7f:fd:17:93:60:36:4d:f1:f9:93:39:27:52:6f:02: d4:36:6c:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE0amUdsb7jbU8h5iX6A5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh OTgyMzEwHhcNMjUxMjEyMDEwMDU3WhcNMjUxMjEzMDEwMDU3WjAzMTEwLwYDVQQD EygzYzc1NThjMTllNjBiZGEyNmNmMmY3M2IzNjhiODAyNmNmODlmMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMf5mEQrOxoqRbyHHGVd5jWYxsvU 0diwlQQ6nKWRHOuAHLF1DHk+VsXSE6qEZ0vRwbrVu40AfqaqMkBHfkuvne8M6mmZ 1A9LLeHSe9vLyekF87lSMRGuMFnKxYfJTIyVWpMYQi/lzLtyhX8k/1sdDmxlUtsU tU8Eglo0rv4gTiE6bfSiNV222EW/GvZiyeV12QC+LGPcDHOikUxeCggh7E4nzVfD Vc8ocvKLJHjoE9sY6stQiKRIIJs+Yuv8fiqYPjalYgpUQWJggOrHpnA8zLpHwiIN 5Rn3Z/oqiRumJRKwJlRZC4SSYo3ok+f/yiCq6uzNBf7EUb+OPbf834r9uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDx1WMGeYL2ibPL3OzaLgCbPifGgMB8GA1UdIwQY MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5GMOH/g QePmAVvocvF7bf1ddyjTs9UIOcyxm3Zp6M3QFKa9qvaN8DViHxrNPSywe6s0UzCb ZYTsDqUJL0QhQBPJd9jlpZIZ2kjPUPMgKE5RfO/W26IxIFSLRDKfIpolv9DYIUca /B7BVpnGZO46ByeQj86QTCLEJn0ouWKe9ePei/mV/MS0jy3CkSxJNE+PpxxdMB4r LM/jLDdyE73VrurM4ophwnc/H7x3yqX4S9264lHI6djiaRDXK0FGydUiKHMKEC/6 6UpQmG3mflPpe7sKKs0NaE3v2T0TdXo6SvOhixsmjwNPx0hb6+rlf/0Xk2A2TfH5 kzknUm8C1DZsCg== -----END CERTIFICATE-----Generated at Fri Dec 12 09:48:04 2025 by rpki-client