This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json) Hash identifier: Co4u4LjnNdpPMzyIAtcKjJt3xLm7hQ5tu+yd3LkENGQ= Subject key identifier: 2A:9E:39:8F:18:7D:EB:75:2B:84:E6:03:43:D2:AE:0B:5F:8A:2C:82 Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Certificate serial: 019AEBD01142432704B71AA66D002575F21C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft Manifest number: 0BC0 Signing time: Fri 05 Dec 2025 00:01:12 +0000 Manifest this update: Fri 05 Dec 2025 00:01:12 +0000 Manifest next update: Sat 06 Dec 2025 00:01:12 +0000 Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: e5nxPcSf6XwHw6JU8Bgy0wMwaDJhReBbe5CXF6VxEIQ=) 2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=) 3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:d0:11:42:43:27:04:b7:1a:a6:6d:00:25:75:f2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Validity Not Before: Dec 5 00:01:12 2025 GMT Not After : Dec 6 00:01:12 2025 GMT Subject: CN=2a9e398f187deb752b84e60343d2ae0b5f8a2c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:62:1f:40:22:71:49:7d:21:01:0d:c0:ce: b0:23:fc:4b:32:ab:2b:4f:9c:ca:e1:be:53:3e:23: 92:93:79:10:bd:2c:f7:9c:59:31:19:d2:a5:51:d4: b8:48:16:17:ba:ec:bc:07:fd:74:0c:10:15:9b:67: 1d:88:30:8c:c7:91:35:7f:01:df:55:f7:68:c0:89: 95:44:f8:c3:9a:26:23:99:c0:42:15:cf:01:6e:ba: a2:40:7f:42:6d:c0:c4:f0:1c:fb:98:11:10:28:33: 16:a5:52:28:4b:c9:60:90:45:58:a2:ba:df:3b:79: 65:22:e1:0b:04:f3:8b:1b:b4:dc:6f:43:b2:2a:ce: 7c:5e:a7:4f:ef:e1:44:84:23:ac:a2:15:61:44:a3: b4:c2:21:14:fe:7b:f0:d8:b6:92:c7:c2:19:90:80: 69:90:1f:68:36:45:47:e0:7c:07:aa:d7:33:4b:12: b5:30:d6:33:32:78:7f:68:61:e5:49:f5:83:4d:23: cf:d0:d9:e6:87:3a:82:23:c5:75:3e:8f:a3:2a:a7: 04:92:e6:79:4d:29:09:73:d8:5d:9d:a3:54:9c:c4: 49:07:3c:47:1b:ed:0d:75:0f:2e:1f:1a:dd:58:fd: 0c:bc:a2:15:08:6d:ee:6e:50:4d:03:b1:94:83:33: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9E:39:8F:18:7D:EB:75:2B:84:E6:03:43:D2:AE:0B:5F:8A:2C:82 X509v3 Authority Key Identifier: keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e8:86:a7:7f:2b:22:ae:a9:37:d9:80:26:25:90:51:a4:bc: b6:0b:b9:48:f6:25:ec:1d:b6:72:d8:24:a7:be:b1:7b:63:91: c8:00:83:29:65:53:30:bc:ab:c1:07:82:ef:2b:2b:60:8a:aa: 66:ce:83:b9:49:48:f8:35:66:36:e8:4b:41:6a:9d:34:cc:f1: 68:aa:2a:c8:b4:20:c4:d7:de:f8:54:6d:b4:2f:06:2c:44:d5: 52:0a:30:28:88:9a:38:bf:2a:a8:cf:2a:63:4a:63:1c:15:3d: e4:fa:ac:c4:64:ec:2a:9e:f2:74:c8:48:f1:2f:c2:da:11:89: 88:50:63:20:7e:66:4b:c8:10:93:bf:a5:55:c8:21:a9:24:49: b3:05:50:d8:7e:9d:48:db:6e:49:54:5b:ea:67:88:82:88:e3: 99:e5:d7:dd:d9:8a:a3:e3:c4:20:bf:1e:17:b9:3f:36:0f:01: 01:4d:e0:c5:88:de:1b:b1:24:fa:f7:54:91:cb:0e:22:dc:6d: 79:d7:67:3d:c3:a4:33:d6:02:9f:92:72:04:dc:f1:ba:4d:ae: f5:f4:14:b4:4e:ce:fe:0b:4f:4d:30:e4:61:04:b2:36:ed:5a: 51:22:02:d9:1b:cd:12:c1:e2:fc:cf:1b:a2:76:1f:27:13:0a: 24:7a:15:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrr0BFCQycEtxqmbQAldfIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOGNkOTQ0MDU1MmU3ZGFiOWNkNTYzMWQ0YWI4NzI0NTE1 MzViN2EwHhcNMjUxMjA1MDAwMTEyWhcNMjUxMjA2MDAwMTEyWjAzMTEwLwYDVQQD EygyYTllMzk4ZjE4N2RlYjc1MmI4NGU2MDM0M2QyYWUwYjVmOGEyYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSxiH0AicUl9IQENwM6wI/xLMqsr T5zK4b5TPiOSk3kQvSz3nFkxGdKlUdS4SBYXuuy8B/10DBAVm2cdiDCMx5E1fwHf VfdowImVRPjDmiYjmcBCFc8BbrqiQH9CbcDE8Bz7mBEQKDMWpVIoS8lgkEVYorrf O3llIuELBPOLG7Tcb0OyKs58XqdP7+FEhCOsohVhRKO0wiEU/nvw2LaSx8IZkIBp kB9oNkVH4HwHqtczSxK1MNYzMnh/aGHlSfWDTSPP0NnmhzqCI8V1Po+jKqcEkuZ5 TSkJc9hdnaNUnMRJBzxHG+0NdQ8uHxrdWP0MvKIVCG3ublBNA7GUgzNXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqeOY8Yfet1K4TmA0PSrgtfiiyCMB8GA1UdIwQY MBaAFNOM2UQFUufauc1WMdSrhyRRU1t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMt N2M2NWE4NTJmMDkyLzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMtN2M2NWE4NTJmMDky LzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+iGp38r Iq6pN9mAJiWQUaS8tgu5SPYl7B22ctgkp76xe2ORyACDKWVTMLyrwQeC7ysrYIqq Zs6DuUlI+DVmNuhLQWqdNMzxaKoqyLQgxNfe+FRttC8GLETVUgowKIiaOL8qqM8q Y0pjHBU95PqsxGTsKp7ydMhI8S/C2hGJiFBjIH5mS8gQk7+lVcghqSRJswVQ2H6d SNtuSVRb6meIgojjmeXX3dmKo+PEIL8eF7k/Ng8BAU3gxYjeG7Ek+vdUkcsOItxt eddnPcOkM9YCn5JyBNzxuk2u9fQUtE7O/gtPTTDkYQSyNu1aUSIC2RvNEsHi/M8b onYfJxMKJHoVqA== -----END CERTIFICATE-----Generated at Fri Dec 5 07:14:47 2025 by rpki-client