This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json) Hash identifier: S9rIpdKwl+FS+z4K6iJ+sEVa6WUzFCpjw7c+wGrRzrE= Subject key identifier: 19:71:38:4B:54:8E:84:68:58:BB:09:76:74:35:B5:13:51:08:1E:50 Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Certificate serial: 019B42B7AF757E573CC7764D7C32BD9AB3F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft Manifest number: 0BED Signing time: Sun 21 Dec 2025 21:01:32 +0000 Manifest this update: Sun 21 Dec 2025 21:01:32 +0000 Manifest next update: Mon 22 Dec 2025 21:01:32 +0000 Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: K7v7lMHTZU19/rBlbChz1a2lApmnKJwmRIT/EovKZQ8=) 2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=) 3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:af:75:7e:57:3c:c7:76:4d:7c:32:bd:9a:b3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Validity Not Before: Dec 21 21:01:32 2025 GMT Not After : Dec 22 21:01:32 2025 GMT Subject: CN=1971384b548e846858bb09767435b51351081e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:68:ef:87:c1:c9:0c:8f:0a:41:a6:aa:51: 10:b9:75:ff:da:19:1d:bf:47:35:90:06:6f:72:f3: 06:b2:b7:04:db:1d:ea:b2:c9:a8:95:5e:cc:64:90: 89:b5:5c:f0:5e:6a:0f:d5:43:3f:9d:6a:b1:fb:06: b7:d0:55:0e:6d:48:7e:0f:08:63:8e:39:cf:30:22: f7:10:52:c2:32:21:f8:91:9d:ab:e3:85:e1:66:e9: 7a:89:39:cc:d3:a9:f4:c2:57:a3:56:d0:61:6a:7f: 8a:cb:74:2a:9a:89:4e:2d:2a:d9:78:38:d2:c2:5c: 2a:30:fd:4b:a5:c9:28:4d:6c:f9:f8:ca:ce:59:f8: 53:c5:90:76:5e:a3:51:0b:42:1b:14:cb:a9:3c:0e: 98:1b:06:79:ee:1f:f9:de:b4:12:ed:4d:5e:48:2d: 5c:cf:61:63:69:a2:3f:0b:46:be:96:ae:b3:76:0e: 2f:bc:a5:a2:be:b8:c1:23:1d:3f:76:7a:a4:1a:7f: 2c:3a:19:0f:42:58:3e:17:96:ef:b8:dc:58:58:a3: 42:8c:e3:e1:0c:51:00:5e:4a:ea:e7:33:38:30:13: 1b:9a:ce:e0:70:95:32:2b:fa:51:60:02:22:6b:8f: fa:ac:1d:af:32:9f:13:48:a8:06:1e:32:06:b0:44: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:38:4B:54:8E:84:68:58:BB:09:76:74:35:B5:13:51:08:1E:50 X509v3 Authority Key Identifier: keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:73:2e:30:4b:07:89:78:a4:51:b5:4c:dc:dd:3c:3f:93:58: 4d:15:5f:ef:c7:93:e4:e0:2d:df:f8:4a:96:4d:6b:8e:e2:00: 35:11:e7:ad:d4:f6:c5:99:20:c9:ee:6d:6d:c8:4f:08:25:bd: c1:49:68:10:e5:7e:2d:cf:5a:aa:cc:66:e1:0e:2e:1f:95:66: c1:5a:17:80:8c:00:a2:16:31:a7:1c:e8:14:8b:f0:dc:8e:16: 66:d6:5b:06:c8:8c:f4:ec:19:7c:22:af:ef:a0:19:14:9d:e9: dc:16:6c:ee:5a:44:3c:d5:59:1f:07:37:0b:48:33:d8:0c:9a: 27:cd:00:e8:1a:36:bf:e8:d6:eb:78:80:55:9d:5e:d5:a7:90: 54:70:34:a7:19:d4:3f:3b:79:11:7e:4d:26:a3:36:4d:b5:be: 93:0e:d1:5c:a5:b6:a1:e9:3c:06:b8:c0:1d:51:3d:37:a4:31: 18:53:1b:c2:64:55:c1:80:ca:a8:5f:ec:8f:98:cd:59:ca:f8: 91:53:bb:97:c1:9e:e6:3d:cb:6d:bc:82:d7:27:62:e2:ca:df: ba:4a:8c:51:ae:5a:7c:b1:b8:b0:cc:f0:56:87:f6:b5:42:9b: 01:e4:28:fa:43:83:e1:d1:d4:af:9a:ea:b6:42:93:df:6c:c0: b2:0e:07:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt691flc8x3ZNfDK9mrP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOGNkOTQ0MDU1MmU3ZGFiOWNkNTYzMWQ0YWI4NzI0NTE1 MzViN2EwHhcNMjUxMjIxMjEwMTMyWhcNMjUxMjIyMjEwMTMyWjAzMTEwLwYDVQQD EygxOTcxMzg0YjU0OGU4NDY4NThiYjA5NzY3NDM1YjUxMzUxMDgxZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscRo74fByQyPCkGmqlEQuXX/2hkd v0c1kAZvcvMGsrcE2x3qssmolV7MZJCJtVzwXmoP1UM/nWqx+wa30FUObUh+Dwhj jjnPMCL3EFLCMiH4kZ2r44XhZul6iTnM06n0wlejVtBhan+Ky3QqmolOLSrZeDjS wlwqMP1LpckoTWz5+MrOWfhTxZB2XqNRC0IbFMupPA6YGwZ57h/53rQS7U1eSC1c z2FjaaI/C0a+lq6zdg4vvKWivrjBIx0/dnqkGn8sOhkPQlg+F5bvuNxYWKNCjOPh DFEAXkrq5zM4MBMbms7gcJUyK/pRYAIia4/6rB2vMp8TSKgGHjIGsESWRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlxOEtUjoRoWLsJdnQ1tRNRCB5QMB8GA1UdIwQY MBaAFNOM2UQFUufauc1WMdSrhyRRU1t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMt N2M2NWE4NTJmMDkyLzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMtN2M2NWE4NTJmMDky LzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHMuMEsH iXikUbVM3N08P5NYTRVf78eT5OAt3/hKlk1rjuIANRHnrdT2xZkgye5tbchPCCW9 wUloEOV+Lc9aqsxm4Q4uH5VmwVoXgIwAohYxpxzoFIvw3I4WZtZbBsiM9OwZfCKv 76AZFJ3p3BZs7lpEPNVZHwc3C0gz2AyaJ80A6Bo2v+jW63iAVZ1e1aeQVHA0pxnU Pzt5EX5NJqM2TbW+kw7RXKW2oek8BrjAHVE9N6QxGFMbwmRVwYDKqF/sj5jNWcr4 kVO7l8Ge5j3LbbyC1ydi4srfukqMUa5afLG4sMzwVof2tUKbAeQo+kOD4dHUr5rq tkKT32zAsg4H2Q== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:43 2025 by rpki-client