This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft File: s4-3-dr7t_J8ZSqEbTf7nimODho.mft (raw, json) Hash identifier: fczmBNGyvSrJsF4ETfOOp5DLX0sAnxzloFC6vfLjAbM= Subject key identifier: 89:1A:BB:61:E5:82:D5:E2:3B:E9:62:56:DD:87:B7:C6:0F:84:96:F2 Authority key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A Certificate issuer: /CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a Certificate serial: 019AF12E137A4D1EA326E44389EA607BE174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft Manifest number: 01D8 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: s4-3-dr7t_J8ZSqEbTf7nimODho.crl (hash: XYCbruEDCQyB/baBEx7Ar7wsjYSuUTOis3RPAjyavxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:13:7a:4d:1e:a3:26:e4:43:89:ea:60:7b:e1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=891abb61e582d5e23be96256dd87b7c60f8496f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:4c:10:b7:56:0c:a3:c5:b4:4f:32:25:0c: a7:5f:24:2e:91:75:10:14:af:2b:7c:0a:a4:09:95: 9d:17:c3:75:3d:81:4b:06:79:14:30:e9:a1:6b:3b: a0:80:94:75:a2:93:0c:cf:cf:f0:83:42:3f:31:f6: 25:0d:e2:61:c3:c9:d4:84:a2:44:a4:1d:d2:5e:56: 81:a0:c1:7c:83:2d:28:6c:a9:c9:b6:b3:28:a9:41: 53:89:96:08:e5:9c:15:51:c4:2b:c5:a5:45:7f:1f: 18:f9:5e:a0:83:e9:1b:3e:12:e4:40:e4:0f:5c:df: 3c:00:34:da:2e:ea:bd:73:6b:1f:64:85:9c:f1:05: a1:0c:20:c5:55:de:8c:d9:0f:43:f0:3e:b3:f6:9b: 9e:33:44:20:d2:c3:63:b4:6a:a3:a4:d1:7f:b5:95: 57:be:68:93:64:b0:40:11:20:09:47:56:25:ff:a2: 2e:c0:db:f1:34:97:ed:4c:d8:8f:0d:12:31:92:9c: a5:61:18:62:1d:ed:c5:cc:ed:f1:d3:28:f6:f4:1a: 59:4a:9c:3d:59:af:3b:81:f6:4c:d7:d6:1c:eb:f7: 5a:59:ce:43:82:1b:64:7f:9a:ff:4b:ff:0f:c9:e7: ab:21:1c:85:c7:d1:65:03:fa:83:23:98:d0:e3:72: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1A:BB:61:E5:82:D5:E2:3B:E9:62:56:DD:87:B7:C6:0F:84:96:F2 X509v3 Authority Key Identifier: keyid:B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b3:5e:ca:4a:ef:b8:52:c0:ff:aa:6d:04:ae:7d:2a:06:32: 73:bc:fa:cb:17:2d:8a:9a:4e:80:22:11:af:1b:3b:21:7a:23: cb:a1:4c:a0:30:81:af:6b:e7:89:1d:d4:0b:e7:c5:67:db:cc: d6:19:4d:69:9e:0c:9f:50:11:93:8b:ae:d7:bf:09:71:74:62: d3:de:1c:46:d4:ca:b5:0d:86:c8:10:06:3f:05:c9:9f:d5:59: 4b:c5:37:63:32:4f:fb:85:3c:7d:d3:72:d6:e2:51:1f:8f:48: ac:62:0a:0a:f0:4a:45:3c:2b:29:75:f8:92:b5:d5:61:8e:27: 99:91:e5:05:e1:95:08:e3:26:1b:c3:b8:14:4e:c2:a9:42:85: ce:e4:cb:f3:9d:92:9e:71:23:6a:54:3a:55:a5:ae:4c:8c:46: 8c:3c:aa:32:f1:ea:9b:5f:59:53:f2:06:44:98:5d:96:10:44: 76:87:da:7f:1e:8f:54:5a:c5:d2:1a:87:55:b6:16:c6:1d:c9: 58:dd:cf:1a:16:9d:01:92:cf:32:62:d6:bc:b9:e3:e2:47:83: 02:04:02:80:ac:37:af:61:6a:d2:5e:dd:80:be:2c:d0:b8:34: d5:03:33:b5:2d:41:65:fc:27:41:7a:3b:74:45:ce:ba:0e:e1: b2:cb:0a:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhN6TR6jJuRDiepge+F0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGZiN2Y5ZGFmYmI3ZjI3YzY1MmE4NDZkMzdmYjllMjk4 ZTBlMWEwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD Eyg4OTFhYmI2MWU1ODJkNWUyM2JlOTYyNTZkZDg3YjdjNjBmODQ5NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nNMELdWDKPFtE8yJQynXyQukXUQ FK8rfAqkCZWdF8N1PYFLBnkUMOmhazuggJR1opMMz8/wg0I/MfYlDeJhw8nUhKJE pB3SXlaBoMF8gy0obKnJtrMoqUFTiZYI5ZwVUcQrxaVFfx8Y+V6gg+kbPhLkQOQP XN88ADTaLuq9c2sfZIWc8QWhDCDFVd6M2Q9D8D6z9pueM0Qg0sNjtGqjpNF/tZVX vmiTZLBAESAJR1Yl/6IuwNvxNJftTNiPDRIxkpylYRhiHe3FzO3x0yj29BpZSpw9 Wa87gfZM19Yc6/daWc5Dghtkf5r/S/8PyeerIRyFx9FlA/qDI5jQ43KQNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkau2HlgtXiO+liVt2Ht8YPhJbyMB8GA1UdIwQY MBaAFLOPt/na+7fyfGUqhG03+54pjg4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczQtMy1kcjd0X0o4WlNxRWJUZjduaW1PRGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNmM2ZWUtNDI2MC00ZjExLWIyMTgt ZGMxYWZiMGY3ZjE5LzEvczQtMy1kcjd0X0o4WlNxRWJUZjduaW1PRGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNmM2ZWUtNDI2MC00ZjExLWIyMTgtZGMxYWZiMGY3ZjE5 LzEvczQtMy1kcjd0X0o4WlNxRWJUZjduaW1PRGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLNeykrv uFLA/6ptBK59KgYyc7z6yxctippOgCIRrxs7IXojy6FMoDCBr2vniR3UC+fFZ9vM 1hlNaZ4Mn1ARk4uu178JcXRi094cRtTKtQ2GyBAGPwXJn9VZS8U3YzJP+4U8fdNy 1uJRH49IrGIKCvBKRTwrKXX4krXVYY4nmZHlBeGVCOMmG8O4FE7CqUKFzuTL852S nnEjalQ6VaWuTIxGjDyqMvHqm19ZU/IGRJhdlhBEdofafx6PVFrF0hqHVbYWxh3J WN3PGhadAZLPMmLWvLnj4keDAgQCgKw3r2Fq0l7dgL4s0Lg01QMztS1BZfwnQXo7 dEXOug7hsssKWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:39 2025 by rpki-client