This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft File: 4LVOM0Iq091sqToY7dguC2jIWlw.mft (raw, json) Hash identifier: SkeDKoFhRCATOB4Vp4nZCS7UbR1vf/NbMo5NbvXEZsM= Subject key identifier: 45:84:56:CD:FC:F4:16:DA:E1:13:D8:EF:8E:1C:15:D0:7D:AD:7D:82 Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C Certificate issuer: /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c Certificate serial: 019AF5787C9FBC352E17A9673376337A08F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft Manifest number: 0A70 Signing time: Sat 06 Dec 2025 21:01:45 +0000 Manifest this update: Sat 06 Dec 2025 21:01:45 +0000 Manifest next update: Sun 07 Dec 2025 21:01:45 +0000 Files and hashes: 1: 4LVOM0Iq091sqToY7dguC2jIWlw.crl (hash: OFPxnop1TnuF3ZnnEglyY/uHRCFJ3ExwYZ3OTCzThXY=) 2: 93WDpe_nqig4pm6_Z5KqoXM-m-I.roa (hash: +05qP5tX3rvyytgRGZx+7tHz5to109QDlCt0+rv4I4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:7c:9f:bc:35:2e:17:a9:67:33:76:33:7a:08:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c Validity Not Before: Dec 6 21:01:45 2025 GMT Not After : Dec 7 21:01:45 2025 GMT Subject: CN=458456cdfcf416dae113d8ef8e1c15d07dad7d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:70:b0:f9:98:e2:7d:06:2d:6f:34:a2:d6: 87:82:f9:46:97:63:9e:bb:2d:14:21:eb:e9:80:fa: fc:10:75:6c:c4:29:4a:1e:c2:29:91:d0:ce:80:c2: 8b:46:96:e1:32:be:1a:1b:3a:f0:d1:05:f6:e4:5e: 08:3a:6c:3b:aa:ac:4e:2c:95:f6:cf:fb:06:b4:b1: d7:90:6a:b2:f4:a4:2b:80:99:2b:49:76:ef:93:20: df:dd:22:41:01:ab:56:eb:70:5c:e1:a5:64:7c:65: 94:57:e6:a9:0a:e5:9e:74:5d:96:14:44:37:cf:30: 6c:67:9c:6b:a4:ff:06:f8:fb:ff:c6:8d:e1:2a:78: f2:22:aa:9e:d0:4b:20:45:3b:8d:52:5a:1b:6b:d8: f2:94:db:04:56:c9:94:eb:60:ef:c1:d3:a3:a8:69: 43:31:d6:ed:86:03:8b:54:88:a1:be:36:d4:56:6b: 41:20:f4:77:d4:e8:79:85:5d:c9:4b:70:76:f2:57: ba:d1:bb:aa:6b:08:94:1f:35:cc:3e:0a:66:6e:3f: 68:52:c6:bf:85:da:03:df:be:98:46:41:d6:65:8e: c7:0c:61:64:1a:ac:3a:4d:6c:9e:0a:b7:dc:92:44: 6a:b6:5d:28:dc:61:54:fa:dc:76:64:12:c9:48:bf: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:84:56:CD:FC:F4:16:DA:E1:13:D8:EF:8E:1C:15:D0:7D:AD:7D:82 X509v3 Authority Key Identifier: keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:9e:4b:3c:6e:16:f9:bd:c4:9b:f9:df:e3:ab:62:db:7e:7c: 6e:17:28:b0:b4:9a:ed:14:c3:4f:d5:dc:54:a1:92:d3:58:a5: 96:2c:71:63:39:5b:a8:7a:4a:67:22:2f:64:16:a1:71:34:e8: 1f:91:dc:a3:fb:19:97:3d:1d:b1:a6:75:aa:1f:bd:89:c0:37: 3a:4f:da:ae:2b:f4:73:07:9b:57:37:f8:22:0b:74:c7:3c:56: 8b:f6:88:b0:4a:d9:f9:9b:6d:52:c9:0d:50:ad:07:b5:5e:c3: a8:97:75:bd:f4:1c:7a:69:9f:60:fc:93:3a:18:2e:fa:48:91: a5:71:51:92:a3:47:0a:b0:f1:9b:d5:50:eb:62:f9:4b:7e:ed: 97:de:0e:ab:4d:a7:b6:4e:c6:d0:fa:31:a1:17:4c:60:54:81: fc:2e:70:a3:93:9a:dd:93:f0:66:5d:64:af:9b:84:1d:63:0d: 5d:99:73:2a:64:5d:f7:75:a5:bb:27:4e:c6:fb:5c:30:cb:09: 84:07:78:00:7f:06:a3:d7:34:bf:9d:a2:b5:ea:60:ff:c1:57: 9e:36:84:bf:33:68:cb:38:66:a4:73:6f:b6:d9:93:5d:26:60: fe:dd:da:0f:1d:78:ef:42:c7:17:99:f1:65:d2:d7:27:7f:d7: 45:61:dd:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eHyfvDUuF6lnM3Yzegj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYjU0ZTMzNDIyYWQzZGQ2Y2E5M2ExOGVkZDgyZTBiNjhj ODVhNWMwHhcNMjUxMjA2MjEwMTQ1WhcNMjUxMjA3MjEwMTQ1WjAzMTEwLwYDVQQD Eyg0NTg0NTZjZGZjZjQxNmRhZTExM2Q4ZWY4ZTFjMTVkMDdkYWQ3ZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PJwsPmY4n0GLW80otaHgvlGl2Oe uy0UIevpgPr8EHVsxClKHsIpkdDOgMKLRpbhMr4aGzrw0QX25F4IOmw7qqxOLJX2 z/sGtLHXkGqy9KQrgJkrSXbvkyDf3SJBAatW63Bc4aVkfGWUV+apCuWedF2WFEQ3 zzBsZ5xrpP8G+Pv/xo3hKnjyIqqe0EsgRTuNUloba9jylNsEVsmU62DvwdOjqGlD MdbthgOLVIihvjbUVmtBIPR31Oh5hV3JS3B28le60buqawiUHzXMPgpmbj9oUsa/ hdoD376YRkHWZY7HDGFkGqw6TWyeCrfckkRqtl0o3GFU+tx2ZBLJSL8XtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWEVs389Bba4RPY744cFdB9rX2CMB8GA1UdIwQY MBaAFOC1TjNCKtPdbKk6GO3YLgtoyFpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNExWT00wSXEwOTFzcVRvWTdkZ3VDMmpJV2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80OTZiYmEtYTZhMy00ZGQzLThmODYt M2NiYjVlODc3NzkxLzEvNExWT00wSXEwOTFzcVRvWTdkZ3VDMmpJV2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80OTZiYmEtYTZhMy00ZGQzLThmODYtM2NiYjVlODc3Nzkx LzEvNExWT00wSXEwOTFzcVRvWTdkZ3VDMmpJV2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzp5LPG4W +b3Em/nf46ti2358bhcosLSa7RTDT9XcVKGS01illixxYzlbqHpKZyIvZBahcTTo H5Hco/sZlz0dsaZ1qh+9icA3Ok/ariv0cwebVzf4Igt0xzxWi/aIsErZ+ZttUskN UK0HtV7DqJd1vfQcemmfYPyTOhgu+kiRpXFRkqNHCrDxm9VQ62L5S37tl94Oq02n tk7G0PoxoRdMYFSB/C5wo5Oa3ZPwZl1kr5uEHWMNXZlzKmRd93WluydOxvtcMMsJ hAd4AH8Go9c0v52itepg/8FXnjaEvzNoyzhmpHNvttmTXSZg/t3aDx1470LHF5nx ZdLXJ3/XRWHdug== -----END CERTIFICATE-----Generated at Sun Dec 7 03:18:26 2025 by rpki-client