This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json) Hash identifier: DtFxUg/lXYMhqNv5xSreH4r1TXoBRyyldEKtfcF+bHg= Subject key identifier: CD:28:FB:22:90:80:00:38:19:CD:A6:D4:2A:6E:F0:FD:51:19:71:09 Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78 Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178 Certificate serial: 019AF19AD1C184F711685D34E3411B601313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: pppsVdE+WqTu/+4aWXV0BgJyEafNfG8NE6K42ZkCKGk=) 2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d1:c1:84:f7:11:68:5d:34:e3:41:1b:60:13:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=cd28fb229080003819cda6d42a6ef0fd51197109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:ee:91:8d:9a:b5:ca:10:bd:65:12:e5:a1: 56:85:03:eb:87:31:0b:b4:41:2f:e0:63:60:ca:5a: 75:d2:69:73:72:b9:26:e3:aa:76:36:04:ee:3f:ff: 00:75:eb:2f:26:66:12:4c:1f:83:b2:06:08:b0:0a: 07:42:5b:67:d5:c0:4a:43:f2:c2:23:dd:73:58:b1: 4c:69:f6:c6:b6:42:43:dc:45:d4:ec:aa:e0:c5:ad: 48:e0:46:fd:23:e2:5d:25:2c:7e:62:d5:31:9f:44: 14:41:ab:80:ef:b0:ae:20:05:f0:77:71:a3:6f:cd: 50:aa:11:d6:cc:8d:d5:53:4b:c5:34:6d:04:41:96: ae:e1:ee:68:b6:56:d5:b0:45:e8:27:7e:ae:bb:1c: 9b:00:0e:7e:40:82:cd:2f:8d:97:7c:49:5e:a1:06: 15:48:9a:49:69:44:81:f0:04:ff:1c:d6:cb:20:3c: b4:7d:8d:29:af:8f:70:f5:c0:22:51:c1:80:ed:ac: 1f:cd:97:a6:b0:ba:9c:9d:24:d7:5c:a0:fb:e5:e3: a3:10:5d:9b:eb:3e:fc:05:1f:f4:3d:26:99:0b:bd: d5:73:7a:48:15:d5:6d:e6:b5:d4:5c:e2:17:3f:92: 62:f7:cd:1b:b1:4f:87:e2:97:83:53:26:94:44:9d: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:FB:22:90:80:00:38:19:CD:A6:D4:2A:6E:F0:FD:51:19:71:09 X509v3 Authority Key Identifier: keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:8b:15:d0:5d:d6:2e:a7:90:25:2b:d9:6e:bb:4d:36:c2:70: 03:1d:cf:9b:68:4e:72:f3:14:29:e9:6e:e6:ff:98:e4:d1:2d: 0c:fa:00:3f:46:05:7d:93:61:19:4a:58:79:6a:e9:7a:64:1b: 8d:ef:03:02:20:8a:35:5b:52:51:1f:c8:24:54:27:39:9b:ff: 16:52:89:39:e6:81:22:c5:a2:9c:bf:ff:17:c3:e0:bd:33:5c: c2:0c:be:93:50:7a:a8:d5:02:24:58:66:e2:56:f8:18:f9:3d: 9c:3b:00:5e:4b:8c:39:79:2d:28:a6:34:8a:08:2f:76:e0:57: e4:b7:8b:49:9f:20:a1:64:46:70:76:4e:c8:0d:55:9d:79:dc: f6:5e:19:a3:1b:1f:b1:db:59:9c:3c:ef:4c:66:e2:f5:79:58: ae:26:14:5e:03:22:40:35:61:e1:96:44:09:8c:d0:df:c0:67: 87:00:ae:9d:7a:97:fd:58:87:66:14:ea:05:8f:16:20:c4:9f: 68:ed:f2:07:20:99:b3:4e:e6:4f:a7:63:12:ad:00:de:83:0f: e9:ca:0f:d9:7a:eb:13:17:80:cb:95:b8:c3:69:e8:27:39:97: f6:c9:52:5e:84:8f:cc:c1:71:b3:3d:44:18:b0:34:43:76:f0: 72:d3:8b:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtHBhPcRaF0040EbYBMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDA2YTA2ZGM0OTA5OTdmZjhmYzNhNDJlY2YzODliZWQz ZGQxNzgwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EyhjZDI4ZmIyMjkwODAwMDM4MTljZGE2ZDQyYTZlZjBmZDUxMTk3MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllTukY2atcoQvWUS5aFWhQPrhzEL tEEv4GNgylp10mlzcrkm46p2NgTuP/8AdesvJmYSTB+DsgYIsAoHQltn1cBKQ/LC I91zWLFMafbGtkJD3EXU7Krgxa1I4Eb9I+JdJSx+YtUxn0QUQauA77CuIAXwd3Gj b81QqhHWzI3VU0vFNG0EQZau4e5otlbVsEXoJ36uuxybAA5+QILNL42XfEleoQYV SJpJaUSB8AT/HNbLIDy0fY0pr49w9cAiUcGA7awfzZemsLqcnSTXXKD75eOjEF2b 6z78BR/0PSaZC73Vc3pIFdVt5rXUXOIXP5Ji980bsU+H4peDUyaURJ2qtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0o+yKQgAA4Gc2m1Cpu8P1RGXEJMB8GA1UdIwQY MBaAFOEAagbcSQmX/4/DpC7POJvtPdF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2Ut NDk0ZTI2NDkxNzk2LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2UtNDk0ZTI2NDkxNzk2 LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJosV0F3W LqeQJSvZbrtNNsJwAx3Pm2hOcvMUKelu5v+Y5NEtDPoAP0YFfZNhGUpYeWrpemQb je8DAiCKNVtSUR/IJFQnOZv/FlKJOeaBIsWinL//F8PgvTNcwgy+k1B6qNUCJFhm 4lb4GPk9nDsAXkuMOXktKKY0iggvduBX5LeLSZ8goWRGcHZOyA1VnXnc9l4Zoxsf sdtZnDzvTGbi9XlYriYUXgMiQDVh4ZZECYzQ38BnhwCunXqX/ViHZhTqBY8WIMSf aO3yByCZs07mT6djEq0A3oMP6coP2XrrExeAy5W4w2noJzmX9slSXoSPzMFxsz1E GLA0Q3bwctOLpA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:07 2025 by rpki-client