This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json) Hash identifier: nsZe6VUXNFTxIF6+Z+n/5tpi5ufUPtI02JtI6EAR9hw= Subject key identifier: 5F:4D:71:11:02:AB:03:E1:26:E2:D5:7E:9E:93:11:97:CD:FE:F5:6B Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Certificate serial: 019B1916B439937FA994A04FDA713EB80A19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft Manifest number: 1036 Signing time: Sat 13 Dec 2025 19:01:16 +0000 Manifest this update: Sat 13 Dec 2025 19:01:16 +0000 Manifest next update: Sun 14 Dec 2025 19:01:16 +0000 Files and hashes: 1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: EK2+DojNrk5tLTar3UQ08KwOVBiNIB1UODLgl6Z0M8Y=) 2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=) 3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=) 4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:b4:39:93:7f:a9:94:a0:4f:da:71:3e:b8:0a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Validity Not Before: Dec 13 19:01:16 2025 GMT Not After : Dec 14 19:01:16 2025 GMT Subject: CN=5f4d711102ab03e126e2d57e9e931197cdfef56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:72:80:04:59:37:5e:21:ca:31:a5:4a:d2: 61:fc:f8:32:91:6a:32:7e:7c:62:fd:cf:ac:8d:f6: 6e:f7:ef:f8:bd:98:c7:bb:b6:a2:68:1e:b6:b0:fd: 21:de:66:90:db:4e:66:c4:de:8d:4b:51:f4:31:dc: 4f:93:11:27:bf:a2:f2:c0:b6:ee:3f:48:14:8f:7e: e4:6b:a3:2a:61:21:ae:93:71:2e:bd:29:ea:36:c1: 93:d2:64:6f:ed:20:bd:14:00:60:34:31:a6:a7:51: 9f:92:27:cb:9b:30:18:fd:36:88:6a:86:cd:c6:6f: c3:1d:21:05:18:58:56:b8:4b:8c:01:90:24:56:90: f1:25:3c:f3:d7:22:6e:47:20:0e:7d:35:89:94:c3: 02:cc:91:1a:0a:67:c9:f3:0e:94:81:0f:2a:ff:a1: 9d:32:19:42:b8:a8:54:a4:f2:3f:81:31:c2:4b:af: ae:04:c2:d4:82:bf:ac:a0:f7:0d:25:08:70:03:1a: c0:83:b7:d6:90:29:e5:c7:19:1d:02:66:44:19:ad: be:8e:51:f8:e2:f6:f6:40:42:e3:da:37:5a:00:c8: 2e:18:8d:a1:ce:81:5c:66:b2:c9:37:3c:c5:d5:81: a3:4e:6b:b8:d6:ac:7d:32:5c:1e:69:78:43:cd:c0: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:71:11:02:AB:03:E1:26:E2:D5:7E:9E:93:11:97:CD:FE:F5:6B X509v3 Authority Key Identifier: keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4c:85:8c:28:bb:50:38:a2:73:65:e3:6b:bd:aa:e6:72:d3: 29:7d:9e:57:7a:c1:b6:d9:06:ea:a8:4f:24:2a:79:79:f0:18: 2d:9a:21:6f:47:cf:0f:a4:be:95:d0:dc:aa:df:bf:6e:23:c9: 12:d8:40:35:29:3e:7c:b1:65:0d:4f:62:cc:98:f3:6d:9c:27: 24:80:8a:08:89:67:ff:03:0e:8c:3c:96:bf:9d:6c:6b:ba:93: 03:58:d5:5a:4c:6b:d2:f4:65:d9:96:e8:04:17:28:d5:53:43: 83:36:0e:ab:ad:3f:4d:10:0d:6c:79:de:4c:26:b9:0e:c5:5a: 5d:3b:4f:d0:df:3b:30:62:d9:c2:9e:17:b3:20:63:e2:2f:f7: 6b:51:14:91:8e:0c:78:45:88:9f:39:31:03:95:76:b8:3f:a9: e5:b6:63:8d:6a:ca:8d:76:a9:9c:41:f0:71:6c:6a:7b:55:e2: 6e:18:64:6f:fc:1b:0f:7b:79:22:6a:5a:f1:da:3a:76:9b:6d: eb:1d:b0:9e:b2:af:54:2c:d6:2c:a4:1f:e1:98:07:0e:db:df: 32:d9:c2:28:41:6b:4d:8b:98:48:b9:f4:0d:86:7b:d0:d2:55: 77:fe:49:d8:11:c8:37:4b:5a:b3:b6:db:00:b1:f7:22:86:99: 92:46:84:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFrQ5k3+plKBP2nE+uAoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx ZmI0ZjIwHhcNMjUxMjEzMTkwMTE2WhcNMjUxMjE0MTkwMTE2WjAzMTEwLwYDVQQD Eyg1ZjRkNzExMTAyYWIwM2UxMjZlMmQ1N2U5ZTkzMTE5N2NkZmVmNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFxygARZN14hyjGlStJh/PgykWoy fnxi/c+sjfZu9+/4vZjHu7aiaB62sP0h3maQ205mxN6NS1H0MdxPkxEnv6LywLbu P0gUj37ka6MqYSGuk3EuvSnqNsGT0mRv7SC9FABgNDGmp1GfkifLmzAY/TaIaobN xm/DHSEFGFhWuEuMAZAkVpDxJTzz1yJuRyAOfTWJlMMCzJEaCmfJ8w6UgQ8q/6Gd MhlCuKhUpPI/gTHCS6+uBMLUgr+soPcNJQhwAxrAg7fWkCnlxxkdAmZEGa2+jlH4 4vb2QELj2jdaAMguGI2hzoFcZrLJNzzF1YGjTmu41qx9MlweaXhDzcD/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9NcRECqwPhJuLVfp6TEZfN/vVrMB8GA1UdIwQY MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0yFjCi7 UDiic2Xja72q5nLTKX2eV3rBttkG6qhPJCp5efAYLZohb0fPD6S+ldDcqt+/biPJ EthANSk+fLFlDU9izJjzbZwnJICKCIln/wMOjDyWv51sa7qTA1jVWkxr0vRl2Zbo BBco1VNDgzYOq60/TRANbHneTCa5DsVaXTtP0N87MGLZwp4XsyBj4i/3a1EUkY4M eEWInzkxA5V2uD+p5bZjjWrKjXapnEHwcWxqe1Xibhhkb/wbD3t5Impa8do6dptt 6x2wnrKvVCzWLKQf4ZgHDtvfMtnCKEFrTYuYSLn0DYZ70NJVd/5J2BHIN0tas7bb ALH3IoaZkkaEdw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:07:51 2025 by rpki-client