This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json) Hash identifier: ij+Fo9qISclwMvki9e0H/jVIN2Hf4ojpAR1UJcSHtJE= Subject key identifier: 2F:20:16:21:AF:C0:90:AB:04:57:41:69:25:BC:84:39:62:ED:89:6F Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd Certificate serial: 019AF653DCF295FB371960D0A9DECA46D418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft Manifest number: 07F5 Signing time: Sun 07 Dec 2025 01:01:22 +0000 Manifest this update: Sun 07 Dec 2025 01:01:22 +0000 Manifest next update: Mon 08 Dec 2025 01:01:22 +0000 Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: y0M56rPqt7IOcSJpyRt2NT7gS7yXHOxK4pLSzuOUZYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:dc:f2:95:fb:37:19:60:d0:a9:de:ca:46:d4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd Validity Not Before: Dec 7 01:01:22 2025 GMT Not After : Dec 8 01:01:22 2025 GMT Subject: CN=2f201621afc090ab0457416925bc843962ed896f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:bb:75:f3:74:42:1b:db:76:0b:fd:c1:d2: e4:6a:2c:7f:d4:0b:49:8e:36:f5:a1:3d:eb:60:dd: c3:d7:06:6c:fe:4d:cb:b4:56:1c:3f:6f:54:5b:5b: fd:07:a5:f1:9a:c5:51:ca:42:aa:02:b2:20:4a:a3: 40:37:3c:2e:de:f1:a2:91:67:ee:e5:c2:7e:53:ff: 10:2f:5a:11:e3:5f:3c:ad:26:bd:dd:f1:c3:71:8a: 09:93:5f:e8:23:36:ca:4f:83:4d:84:1b:63:cc:3a: 45:9e:31:c5:39:f8:d7:ed:19:2a:55:52:99:95:45: 4d:05:ad:c5:cc:16:9c:b0:21:31:c2:b4:3a:09:4d: 00:cd:95:04:99:73:39:64:26:2f:c5:79:64:05:6a: f8:6c:9e:3b:45:90:68:80:91:a7:d5:53:58:d2:e5: f8:09:04:d7:59:5b:a4:ef:7b:9b:37:7e:83:06:38: 6a:de:51:ae:00:02:8b:ae:7e:dc:b4:68:51:d0:f2: 34:1b:65:33:13:29:81:5c:e1:b5:e8:cd:2b:f3:b0: bf:2e:45:51:6a:f1:25:f4:71:b3:f3:f3:93:3d:5f: 65:a7:b3:e0:f7:6a:b7:3e:83:c7:9d:3b:22:14:b5: 2f:63:aa:60:27:3c:d5:50:69:d7:73:60:44:76:91: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:20:16:21:AF:C0:90:AB:04:57:41:69:25:BC:84:39:62:ED:89:6F X509v3 Authority Key Identifier: keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ee:4b:57:f5:b8:f5:40:fa:40:4c:20:1f:70:a2:4a:af:77: e6:19:cc:65:ac:0a:94:30:ed:21:39:dd:f5:b0:8f:7a:5c:a2: 8c:20:ed:9b:0e:0c:48:23:5e:97:70:27:e0:48:6d:75:2b:3a: 08:04:22:93:7a:c7:e5:1a:cf:4a:f7:89:de:02:af:a6:2f:9c: 4d:eb:65:7a:9e:47:28:cd:ff:ca:f8:69:e3:30:23:42:90:c9: 7f:02:23:eb:6f:b2:1a:5a:10:71:c6:af:59:3d:c5:f6:b8:cb: 7d:46:b9:6b:7b:25:cc:76:b2:c3:b5:da:92:db:03:54:82:b9: f7:ee:59:d7:6b:eb:ac:a6:a4:64:13:08:69:8b:36:41:c3:48: 88:f1:d8:e2:68:d0:63:29:86:a8:bd:e6:54:ca:79:01:54:a3: 70:1b:57:40:7c:93:fb:51:46:44:a8:0e:94:e7:2f:fb:4b:6a: ea:88:9c:ad:36:20:07:4b:5a:1b:bb:8d:b3:09:3b:72:68:08: 9f:4b:98:40:45:88:ed:82:1b:b2:52:18:fd:11:c1:f6:45:32: ac:bc:02:99:6f:53:64:5a:df:d3:a0:06:71:a5:43:32:0c:95: 44:28:dc:c7:95:f1:61:e7:93:42:35:73:eb:d8:37:13:3e:52: 71:be:09:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U9zylfs3GWDQqd7KRtQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYWUxNGU4NjNjMWIxNWExZWEyZTQ5YTJlYjUwNDg1M2Y3 NWI2YmQwHhcNMjUxMjA3MDEwMTIyWhcNMjUxMjA4MDEwMTIyWjAzMTEwLwYDVQQD EygyZjIwMTYyMWFmYzA5MGFiMDQ1NzQxNjkyNWJjODQzOTYyZWQ4OTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoa7dfN0Qhvbdgv9wdLkaix/1AtJ jjb1oT3rYN3D1wZs/k3LtFYcP29UW1v9B6XxmsVRykKqArIgSqNANzwu3vGikWfu 5cJ+U/8QL1oR4188rSa93fHDcYoJk1/oIzbKT4NNhBtjzDpFnjHFOfjX7RkqVVKZ lUVNBa3FzBacsCExwrQ6CU0AzZUEmXM5ZCYvxXlkBWr4bJ47RZBogJGn1VNY0uX4 CQTXWVuk73ubN36DBjhq3lGuAAKLrn7ctGhR0PI0G2UzEymBXOG16M0r87C/LkVR avEl9HGz8/OTPV9lp7Pg92q3PoPHnTsiFLUvY6pgJzzVUGnXc2BEdpEk8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8gFiGvwJCrBFdBaSW8hDli7YlvMB8GA1UdIwQY MBaAFOCuFOhjwbFaHqLkmi61BIU/dba9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYt Yzc5MDVmYjM4NmE3LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYtYzc5MDVmYjM4NmE3 LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZO5LV/W4 9UD6QEwgH3CiSq935hnMZawKlDDtITnd9bCPelyijCDtmw4MSCNel3An4EhtdSs6 CAQik3rH5RrPSveJ3gKvpi+cTetlep5HKM3/yvhp4zAjQpDJfwIj62+yGloQccav WT3F9rjLfUa5a3slzHayw7XaktsDVIK59+5Z12vrrKakZBMIaYs2QcNIiPHY4mjQ YymGqL3mVMp5AVSjcBtXQHyT+1FGRKgOlOcv+0tq6oicrTYgB0taG7uNswk7cmgI n0uYQEWI7YIbslIY/RHB9kUyrLwCmW9TZFrf06AGcaVDMgyVRCjcx5XxYeeTQjVz 69g3Ez5Scb4J/w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:58:03 2025 by rpki-client