This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json) Hash identifier: zXbnOT7PRqulZqjNpkE3XL2EPtnUSD3kPt+yB+TmXi0= Subject key identifier: 89:BD:C3:4A:6C:8E:50:3A:14:52:BE:58:9D:7A:27:3E:C0:64:F7:1E Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a Certificate serial: 019AABA7302E8429D9E84F63D0E8AFA829AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft Manifest number: 173D Signing time: Sat 22 Nov 2025 13:00:51 +0000 Manifest this update: Sat 22 Nov 2025 13:00:51 +0000 Manifest next update: Sun 23 Nov 2025 13:00:51 +0000 Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=) 2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: vNHkiP6oWS+CuEFgErwvLwWHz/PWLGB4nH6j9gpsTKk=) 3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a7:30:2e:84:29:d9:e8:4f:63:d0:e8:af:a8:29:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a Validity Not Before: Nov 22 13:00:51 2025 GMT Not After : Nov 23 13:00:51 2025 GMT Subject: CN=89bdc34a6c8e503a1452be589d7a273ec064f71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:ce:c4:f8:49:d5:f4:b1:77:20:fe:23:e5: 50:3c:2c:3d:0c:63:04:2b:f9:f4:63:50:58:cc:c9: c5:32:56:83:de:29:71:8a:38:5c:be:09:6e:46:41: 77:42:60:90:77:35:7e:7f:ee:03:2f:d9:d7:f8:1e: d2:f2:8b:1f:11:77:9f:05:71:f9:ac:49:6b:7b:96: 35:70:d7:d3:0c:ff:a5:0d:f6:99:0d:6d:37:99:fd: de:6a:3f:31:0f:e2:69:02:27:e7:ca:46:6e:27:cb: 50:b2:3d:b6:f5:eb:4e:ab:8d:ed:1d:0e:7a:6e:b8: 21:8e:5e:5d:d2:67:e6:e6:54:e4:dd:2b:9f:f8:45: da:86:4c:5d:dd:8e:31:08:36:67:88:cb:6f:0e:c8: 78:5c:36:d2:80:2a:ae:da:de:39:21:62:4f:86:01: f7:6c:6a:60:80:cf:db:cb:ca:4b:db:cd:b5:a0:d2: 43:37:21:63:cb:34:a5:89:c4:96:1b:1f:44:4d:a8: 32:dd:c4:1a:98:88:9f:27:4d:23:48:38:3d:b3:f9: 51:8d:d9:3b:95:79:e3:83:45:10:25:1b:99:4f:69: c5:fe:89:da:ee:74:58:74:5a:5a:7a:c6:1f:22:79: 08:5e:4a:f7:25:dc:a7:a8:44:62:d3:3e:49:42:93: d5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:C3:4A:6C:8E:50:3A:14:52:BE:58:9D:7A:27:3E:C0:64:F7:1E X509v3 Authority Key Identifier: keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a1:73:27:04:8a:8d:59:74:40:a2:1f:dd:08:4c:b8:3f:71: 86:4a:a3:fa:1f:1f:3c:3a:f2:ed:41:f4:d4:86:1e:12:74:50: 61:25:a7:fe:46:7b:22:91:a7:96:ff:51:39:3a:17:92:64:69: 54:3a:2d:95:57:1c:3a:38:ce:1e:67:f5:e7:2e:ad:29:7e:18: 7c:7c:40:d2:c3:30:f6:90:3a:57:9d:ea:78:04:6a:f7:95:05: 43:fb:13:4e:b4:21:5f:2d:a0:65:25:c6:aa:5b:55:bd:af:9b: f7:d4:1c:9b:c9:2d:04:1a:c1:91:56:2a:94:bb:e6:2b:39:b9: 05:c6:6d:b0:25:f5:89:be:08:ff:11:58:d8:ad:08:bb:f2:e2: b0:dd:b5:5d:17:4f:86:c5:68:62:80:53:51:60:d2:d6:c4:d1: d5:bf:f3:a5:5a:bd:b6:d9:a3:9f:d0:7a:52:7e:bc:7a:48:41: 9a:d1:fd:9f:3a:fd:22:ec:56:14:81:3a:54:34:41:27:35:d6: 20:cf:9d:29:39:c0:1a:09:72:c9:d9:f7:76:43:88:01:f2:80: 37:00:22:dd:8d:18:b0:fc:ce:9b:a3:e5:ba:91:1d:ad:59:90: cb:8a:6f:ba:85:f3:6c:dd:0f:0c:55:70:c1:00:67:82:6c:37: 95:24:6a:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpzAuhCnZ6E9j0OivqCmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGJjMjg3MGRlMjU5OWRhZjY2NDk3ZjU3MjljNzRiMzNl Zjk5M2EwHhcNMjUxMTIyMTMwMDUxWhcNMjUxMTIzMTMwMDUxWjAzMTEwLwYDVQQD Eyg4OWJkYzM0YTZjOGU1MDNhMTQ1MmJlNTg5ZDdhMjczZWMwNjRmNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t3OxPhJ1fSxdyD+I+VQPCw9DGME K/n0Y1BYzMnFMlaD3ilxijhcvgluRkF3QmCQdzV+f+4DL9nX+B7S8osfEXefBXH5 rElre5Y1cNfTDP+lDfaZDW03mf3eaj8xD+JpAifnykZuJ8tQsj229etOq43tHQ56 brghjl5d0mfm5lTk3Suf+EXahkxd3Y4xCDZniMtvDsh4XDbSgCqu2t45IWJPhgH3 bGpggM/by8pL2821oNJDNyFjyzSlicSWGx9ETagy3cQamIifJ00jSDg9s/lRjdk7 lXnjg0UQJRuZT2nF/ona7nRYdFpaesYfInkIXkr3JdynqERi0z5JQpPVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIm9w0psjlA6FFK+WJ16Jz7AZPceMB8GA1UdIwQY MBaAFOJLwocN4lmdr2ZJf1cpx0sz75k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEt NjhhMmYwYmI1YjdhLzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEtNjhhMmYwYmI1Yjdh LzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKFzJwSK jVl0QKIf3QhMuD9xhkqj+h8fPDry7UH01IYeEnRQYSWn/kZ7IpGnlv9ROToXkmRp VDotlVccOjjOHmf15y6tKX4YfHxA0sMw9pA6V53qeARq95UFQ/sTTrQhXy2gZSXG qltVva+b99Qcm8ktBBrBkVYqlLvmKzm5BcZtsCX1ib4I/xFY2K0Iu/LisN21XRdP hsVoYoBTUWDS1sTR1b/zpVq9ttmjn9B6Un68ekhBmtH9nzr9IuxWFIE6VDRBJzXW IM+dKTnAGglyydn3dkOIAfKANwAi3Y0YsPzOm6PlupEdrVmQy4pvuoXzbN0PDFVw wQBngmw3lSRqxw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:48:20 2025 by rpki-client