This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json) Hash identifier: U6/fneNwxAkweZGg6S3X9Otk3k45ZK66szNjOlU8RKA= Subject key identifier: 51:39:64:6B:E7:F3:AB:09:E4:62:B1:AC:8D:39:70:70:02:32:78:56 Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019AACB9D484C155ED9A3B90EE26E9E2A54E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft Manifest number: 1742 Signing time: Sat 22 Nov 2025 18:00:50 +0000 Manifest this update: Sat 22 Nov 2025 18:00:50 +0000 Manifest next update: Sun 23 Nov 2025 18:00:50 +0000 Files and hashes: 1: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: 4FN55pzuh4NWe1CNt2uSQhrsoEKCI0+zU64AkoipY7c=) 2: Z53TKhtsYia8AaAM7SEuxUzomSo.roa (hash: Y9Eq+3ShcYYBqxEHUekT9D2l2UAArlCFvrOoMzpOskE=) 3: cvkG_y1cL0YAHfjQA7tH3oSS1BM.roa (hash: kvaRsBfAFxeZA6gu+TEc8LHfkCny56mAcc6wJSjFdsU=) 4: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=) 5: it7IHvJCQfR1gZTQymCzS9Ta2cI.roa (hash: /axHPc2cp+I2aoPIZLPk+zOh5Faet3AVlxLqRnIEWb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:d4:84:c1:55:ed:9a:3b:90:ee:26:e9:e2:a5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Nov 22 18:00:50 2025 GMT Not After : Nov 23 18:00:50 2025 GMT Subject: CN=5139646be7f3ab09e462b1ac8d39707002327856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:fb:cd:34:f8:6c:4b:ad:21:18:7e:df:ab: d1:8b:a3:86:32:59:06:0b:3a:40:e7:ef:13:bc:d1: ab:88:ea:4e:81:3c:05:c3:6c:db:74:4a:da:40:90: 2c:9a:b6:1f:49:5b:c5:1b:45:42:8d:80:31:f8:ee: 99:55:e5:98:8c:7d:08:31:1c:49:98:27:13:9b:7e: 31:80:52:ad:2b:10:ce:75:fb:46:58:0e:89:71:e1: 8f:bf:b6:93:63:aa:92:92:71:84:8e:51:0f:c3:10: 2f:06:11:cf:6a:6e:70:a5:bd:e9:0a:fa:c4:4c:5a: 3c:0e:fd:1c:80:36:d2:6c:ef:37:07:73:19:e1:87: e9:20:00:e3:e8:41:5e:6c:8f:8c:10:c2:49:d2:47: 74:00:3e:ac:df:8d:06:e8:46:0b:a5:c5:7c:29:17: c1:14:c5:3a:10:cb:92:85:89:d4:dc:30:f9:c1:e5: b0:10:b1:a3:49:aa:f8:da:f7:cb:8a:7d:dd:9f:49: ac:f7:c9:b0:9a:66:0f:f6:cf:b1:a0:49:de:12:6d: 5a:97:87:b0:2b:33:31:6d:9f:63:fd:ba:8b:01:0d: 13:c6:2b:49:1d:80:da:1e:d6:48:d4:41:e7:f7:90: ad:8c:18:a5:12:18:ab:40:af:c9:52:76:d3:02:79: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:39:64:6B:E7:F3:AB:09:E4:62:B1:AC:8D:39:70:70:02:32:78:56 X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3d:67:fd:c1:fc:3a:84:1b:bb:fe:61:b2:d1:22:02:3d:1a: e9:99:bf:1a:75:f1:a9:f2:76:14:3e:ed:92:d6:5b:63:fd:ff: 58:c3:0f:31:41:25:3e:db:ba:d0:3c:a3:f5:b9:1a:fc:ab:f1: b8:5a:a5:21:f3:90:3c:3b:83:92:0e:09:fa:c4:3d:89:0d:6f: 0d:90:93:bc:90:69:c6:82:72:f4:e5:5c:c1:51:ae:f9:71:fc: 55:a3:3f:d9:f7:5f:73:52:6b:e2:6f:22:08:71:bb:db:f7:48: e6:53:13:eb:4e:42:27:83:a1:a9:78:43:f1:70:ec:3e:c9:dd: 6b:36:3f:17:5e:88:72:d5:91:22:ba:ca:a9:67:49:58:36:a8: 27:29:c3:60:ec:85:cd:60:a1:1c:7c:5e:60:04:e6:1c:ad:b3: a6:45:59:9b:af:32:fe:a5:4d:f0:48:03:3d:45:44:6a:c1:0b: aa:26:ef:e3:11:66:6c:10:0f:a6:6c:ab:17:91:1a:71:94:d0: 6e:1b:82:9f:25:13:dd:f1:a4:93:98:68:b5:49:1a:61:1e:74: 65:91:be:c1:04:51:7b:3a:88:ff:cd:68:33:57:0e:6f:41:f6: 42:a3:8f:84:3d:2b:cb:cc:91:44:32:05:43:79:66:79:90:e2: b1:77:c6:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsudSEwVXtmjuQ7ibp4qVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjUxMTIyMTgwMDUwWhcNMjUxMTIzMTgwMDUwWjAzMTEwLwYDVQQD Eyg1MTM5NjQ2YmU3ZjNhYjA5ZTQ2MmIxYWM4ZDM5NzA3MDAyMzI3ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu37zTT4bEutIRh+36vRi6OGMlkG CzpA5+8TvNGriOpOgTwFw2zbdEraQJAsmrYfSVvFG0VCjYAx+O6ZVeWYjH0IMRxJ mCcTm34xgFKtKxDOdftGWA6JceGPv7aTY6qSknGEjlEPwxAvBhHPam5wpb3pCvrE TFo8Dv0cgDbSbO83B3MZ4YfpIADj6EFebI+MEMJJ0kd0AD6s340G6EYLpcV8KRfB FMU6EMuShYnU3DD5weWwELGjSar42vfLin3dn0ms98mwmmYP9s+xoEneEm1al4ew KzMxbZ9j/bqLAQ0TxitJHYDaHtZI1EHn95CtjBilEhirQK/JUnbTAnkqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFE5ZGvn86sJ5GKxrI05cHACMnhWMB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz1n/cH8 OoQbu/5hstEiAj0a6Zm/GnXxqfJ2FD7tktZbY/3/WMMPMUElPtu60Dyj9bka/Kvx uFqlIfOQPDuDkg4J+sQ9iQ1vDZCTvJBpxoJy9OVcwVGu+XH8VaM/2fdfc1Jr4m8i CHG72/dI5lMT605CJ4OhqXhD8XDsPsndazY/F16IctWRIrrKqWdJWDaoJynDYOyF zWChHHxeYATmHK2zpkVZm68y/qVN8EgDPUVEasELqibv4xFmbBAPpmyrF5EacZTQ bhuCnyUT3fGkk5hotUkaYR50ZZG+wQRRezqI/81oM1cOb0H2QqOPhD0ry8yRRDIF Q3lmeZDisXfGVg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:28 2025 by rpki-client