This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json) Hash identifier: mrHQoLwKdUXFG6nn+a6nDrl/qZh8y8Dn8EMhqKWSy/Y= Subject key identifier: 6B:AD:08:77:7A:12:AA:63:37:E7:3C:C8:34:13:30:C9:59:FB:F2:E0 Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d Certificate serial: 019B104A5A54D532AB598DB555DEE3B11866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft Manifest number: 0C14 Signing time: Fri 12 Dec 2025 02:01:06 +0000 Manifest this update: Fri 12 Dec 2025 02:01:06 +0000 Manifest next update: Sat 13 Dec 2025 02:01:06 +0000 Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: MHFfH67WT7x2WCVlQUREYbfYrtuKaXT1kfM0cNzietw=) 2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:5a:54:d5:32:ab:59:8d:b5:55:de:e3:b1:18:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d Validity Not Before: Dec 12 02:01:06 2025 GMT Not After : Dec 13 02:01:06 2025 GMT Subject: CN=6bad08777a12aa6337e73cc8341330c959fbf2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:44:06:c8:ed:31:6e:a8:7d:d0:31:86:7d: bc:48:dc:7d:49:c5:4f:f9:72:92:28:8c:1b:0d:f2: 57:99:e9:0d:0b:2a:6f:7c:f2:7e:89:6f:b0:b0:74: 77:78:bd:90:de:8a:76:f8:17:09:90:4e:36:ac:d2: fb:6b:45:24:3b:8d:37:b1:16:d4:3f:65:d4:a4:a9: a7:9e:3d:fc:23:18:d5:89:f4:56:62:fb:99:46:79: ce:f5:3a:25:a2:a5:8d:74:05:11:22:85:0d:26:1c: 39:b6:71:39:b2:11:86:ff:5e:d0:6c:3f:bb:d3:c6: ba:cd:d1:f3:be:00:53:ce:46:72:b1:30:07:3a:20: 1a:09:ab:cf:e5:bd:f1:ff:ef:43:10:c4:a4:8d:34: 44:31:5e:69:c6:e1:86:d2:bd:3e:7b:76:15:7c:e5: 95:95:4a:0c:9a:05:35:63:ef:99:62:fc:3f:74:38: 87:5a:1f:60:6e:4c:5b:5d:13:2d:c3:56:0a:69:d2: a6:9e:03:af:44:cb:fc:ac:04:cc:59:da:05:ce:9e: b4:b1:c9:a4:40:5f:53:43:af:4e:87:34:a1:c5:9f: 17:a2:4e:9a:28:96:c8:f4:58:e5:78:4d:fc:ee:fd: e1:42:65:9f:f3:18:ea:dc:29:b8:b2:fb:14:c9:27: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AD:08:77:7A:12:AA:63:37:E7:3C:C8:34:13:30:C9:59:FB:F2:E0 X509v3 Authority Key Identifier: keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:71:71:f4:04:0b:f7:d1:f1:94:99:10:ae:20:8c:f8:f9: 79:4b:8f:07:cf:2f:74:98:7b:53:a7:f7:92:08:47:7f:06:4e: 6b:fe:0b:39:b6:80:67:5b:4a:e3:48:a9:43:0e:55:b1:1f:30: e3:bb:73:0e:ac:4d:9f:b5:76:ab:11:2e:f7:31:94:34:cd:e4: 16:65:b3:cb:80:bb:f9:98:7d:27:51:f1:ca:b9:02:df:21:b7: 1c:43:7c:f2:35:c4:37:01:ca:96:2c:60:62:f8:5b:ab:91:02: 31:9a:4f:da:0e:22:86:d6:12:96:4f:3f:2b:35:f8:f1:df:f3: c7:a4:d0:94:fb:35:e0:42:41:38:89:34:fe:5a:e8:5b:75:3d: 6a:48:29:6e:c2:e0:8a:77:5e:2a:f9:21:6b:7c:ef:fb:11:bc: b7:51:1c:56:91:d9:2c:e8:09:f9:7d:6f:95:1e:ce:42:7b:01: b8:43:47:92:49:b1:ab:cf:dd:16:44:bb:0f:ed:62:02:93:ff: 0c:32:3a:33:cb:9f:a3:9c:fa:d1:fb:33:40:a6:2c:5f:a8:25: 30:fa:05:f8:27:7a:d1:bd:36:b0:7f:c4:b1:ba:26:14:40:5f: 2d:2b:4f:50:4a:ee:4e:b8:d4:39:af:3f:d6:c1:59:83:89:69: 2d:40:e1:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSlpU1TKrWY21Vd7jsRhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTBlOWNjM2I3ZTM2M2Q3MjZiZDcwMjc1MGI1M2YyOWIw NTBhN2QwHhcNMjUxMjEyMDIwMTA2WhcNMjUxMjEzMDIwMTA2WjAzMTEwLwYDVQQD Eyg2YmFkMDg3NzdhMTJhYTYzMzdlNzNjYzgzNDEzMzBjOTU5ZmJmMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AxEBsjtMW6ofdAxhn28SNx9ScVP +XKSKIwbDfJXmekNCypvfPJ+iW+wsHR3eL2Q3op2+BcJkE42rNL7a0UkO403sRbU P2XUpKmnnj38IxjVifRWYvuZRnnO9ToloqWNdAURIoUNJhw5tnE5shGG/17QbD+7 08a6zdHzvgBTzkZysTAHOiAaCavP5b3x/+9DEMSkjTREMV5pxuGG0r0+e3YVfOWV lUoMmgU1Y++ZYvw/dDiHWh9gbkxbXRMtw1YKadKmngOvRMv8rATMWdoFzp60scmk QF9TQ69OhzShxZ8Xok6aKJbI9FjleE387v3hQmWf8xjq3Cm4svsUySeTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGutCHd6EqpjN+c8yDQTMMlZ+/LgMB8GA1UdIwQY MBaAFOKQ6cw7fjY9cmvXAnULU/KbBQp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEt OTExM2ZkN2FmZDZjLzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEtOTExM2ZkN2FmZDZj LzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJFxcfQE C/fR8ZSZEK4gjPj5eUuPB88vdJh7U6f3kghHfwZOa/4LObaAZ1tK40ipQw5VsR8w 47tzDqxNn7V2qxEu9zGUNM3kFmWzy4C7+Zh9J1HxyrkC3yG3HEN88jXENwHKlixg Yvhbq5ECMZpP2g4ihtYSlk8/KzX48d/zx6TQlPs14EJBOIk0/lroW3U9akgpbsLg indeKvkha3zv+xG8t1EcVpHZLOgJ+X1vlR7OQnsBuENHkkmxq8/dFkS7D+1iApP/ DDI6M8ufo5z60fszQKYsX6glMPoF+Cd60b02sH/EsbomFEBfLStPUEruTrjUOa8/ 1sFZg4lpLUDhtw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:25:42 2025 by rpki-client