This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft File: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json) Hash identifier: ISDN6c4/wemX8ev/i6T85XNBTI7b03/K7kq97yygAm8= Subject key identifier: FC:EA:41:8E:FA:A8:D0:77:36:73:CE:37:F6:6F:E6:90:6B:15:88:7D Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46 Certificate issuer: /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546 Certificate serial: 019AF31CE7DD0FA5FE49966243DE6F2D0CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft Manifest number: 01EE Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: mEU34e9Z58VWoSpHQCCpJ4RWO+cRdD5cbiGcdIWoUDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e7:dd:0f:a5:fe:49:96:62:43:de:6f:2d:0c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546 Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=fcea418efaa8d0773673ce37f66fe6906b15887d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:6d:c0:cf:38:fa:dd:27:25:ad:97:eb:aa: b8:80:3b:85:2a:34:19:dc:cc:dd:fc:8c:08:4d:fc: ed:c4:2a:9c:64:dd:cd:68:71:e8:54:87:0c:3a:7d: ca:a6:fd:1f:be:1c:ed:e7:af:72:f9:77:ec:60:6a: cf:fc:7d:64:ef:d8:ea:53:56:45:7c:78:90:65:85: b5:71:df:03:91:f0:bb:18:f6:db:47:ec:5a:ea:1a: d5:41:b6:18:3f:a9:69:7b:39:d6:17:a7:59:33:8d: 56:09:05:1f:e7:93:4e:8a:03:58:07:a5:cc:a3:d4: a6:01:71:11:40:ed:b6:ac:5f:3e:9b:ec:cb:d1:8b: 4a:1b:59:40:78:32:12:e6:ef:2c:b7:fd:28:df:a0: 0d:06:bd:bd:5b:46:25:f6:95:9f:e9:b2:26:aa:c1: 97:98:18:15:5a:07:f5:89:4b:ab:57:03:b6:4f:43: ab:b9:dc:d6:f0:d7:3e:67:0e:45:e1:bf:b6:bd:6d: fb:fb:8c:d4:4e:2c:e9:14:08:04:9c:f9:d6:7c:41: 02:61:82:99:7d:64:b1:e3:ba:a3:2d:d8:57:ef:b9: 0c:cf:a7:76:b7:ae:68:37:30:3a:ee:e0:84:56:9d: fc:ba:fa:1f:05:35:81:12:d6:1c:2c:9c:cc:f5:bf: cf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EA:41:8E:FA:A8:D0:77:36:73:CE:37:F6:6F:E6:90:6B:15:88:7D X509v3 Authority Key Identifier: keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f0:55:4e:41:52:26:d5:bb:78:a0:9b:2a:c6:7e:1c:2f:7e: 27:61:be:ed:09:a1:f2:e3:52:84:34:b5:c5:ff:1c:18:95:6b: 3a:b5:12:5b:de:b2:28:31:16:60:50:1f:72:11:48:e5:6e:33: 34:f3:b9:e7:89:b6:8a:f8:16:8d:93:af:9d:70:64:d6:79:71: 1f:15:38:07:39:e8:13:00:1b:e7:78:32:c4:5e:82:7a:1d:fc: 44:cc:5d:3c:5a:a1:01:ee:3e:92:39:71:b0:22:37:f0:f4:d7: c1:40:7a:eb:79:b5:f5:d8:03:9b:0c:23:d3:4e:aa:61:c1:5d: f7:17:77:f4:d0:d4:7e:60:0a:4b:24:50:3c:9c:bb:e5:82:e9: d5:b5:aa:0e:1e:8b:b7:e1:6e:63:16:c4:d2:b8:e9:b9:5b:e2: f9:66:eb:25:4c:39:26:43:d4:22:5e:b2:c0:90:14:50:07:e8: a9:b9:19:a8:2a:e7:47:78:9c:02:7f:22:a9:2f:0b:85:cb:69: ee:41:4c:f2:6a:87:0e:b8:81:b5:ba:63:7a:d8:41:77:ea:68: 4d:b8:75:31:ea:77:6d:c3:96:dc:9c:28:c7:fa:75:a6:65:7a: 69:5f:2f:f9:26:19:65:a7:15:b3:aa:6b:3b:4d:67:0b:cc:71: ec:75:51:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOfdD6X+SZZiQ95vLQylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZmY0YzRlMjM4MTA2ZGM1ZjI5NmUyNmE5Y2VjZjNjNGE0 MzU1NDYwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD EyhmY2VhNDE4ZWZhYThkMDc3MzY3M2NlMzdmNjZmZTY5MDZiMTU4ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrltwM84+t0nJa2X66q4gDuFKjQZ 3Mzd/IwITfztxCqcZN3NaHHoVIcMOn3Kpv0fvhzt569y+XfsYGrP/H1k79jqU1ZF fHiQZYW1cd8DkfC7GPbbR+xa6hrVQbYYP6lpeznWF6dZM41WCQUf55NOigNYB6XM o9SmAXERQO22rF8+m+zL0YtKG1lAeDIS5u8st/0o36ANBr29W0Yl9pWf6bImqsGX mBgVWgf1iUurVwO2T0OrudzW8Nc+Zw5F4b+2vW37+4zUTizpFAgEnPnWfEECYYKZ fWSx47qjLdhX77kMz6d2t65oNzA67uCEVp38uvofBTWBEtYcLJzM9b/PpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzqQY76qNB3NnPON/Zv5pBrFYh9MB8GA1UdIwQY MBaAFOL/TE4jgQbcXyluJqnOzzxKQ1VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kODYxMzctYThjOC00YTYyLTg3Yzkt MjNlZjZjZWU1ZWRmLzEvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kODYxMzctYThjOC00YTYyLTg3YzktMjNlZjZjZWU1ZWRm LzEvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPBVTkFS JtW7eKCbKsZ+HC9+J2G+7Qmh8uNShDS1xf8cGJVrOrUSW96yKDEWYFAfchFI5W4z NPO554m2ivgWjZOvnXBk1nlxHxU4BznoEwAb53gyxF6Ceh38RMxdPFqhAe4+kjlx sCI38PTXwUB663m19dgDmwwj006qYcFd9xd39NDUfmAKSyRQPJy75YLp1bWqDh6L t+FuYxbE0rjpuVvi+WbrJUw5JkPUIl6ywJAUUAfoqbkZqCrnR3icAn8iqS8Lhctp 7kFM8mqHDriBtbpjethBd+poTbh1Mep3bcOW3Jwox/p1pmV6aV8v+SYZZacVs6pr O01nC8xx7HVRqg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:33 2025 by rpki-client