This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json) Hash identifier: W+k4CD/n9iwiVzkRHtE8SOC4vicKudqLcMCznRjjFYA= Subject key identifier: 08:4F:32:70:8E:98:5A:EC:5E:4F:FC:A8:CB:37:38:C9:EE:2F:82:D7 Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68 Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68 Certificate serial: 019AF19B189548DD7F9C869602F28B412058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft Manifest number: 0A2D Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: u0OiPSUx6aLWNX3Rm0hUH9uFzZdAY4TwBVkURZ+QMYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:18:95:48:dd:7f:9c:86:96:02:f2:8b:41:20:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=084f32708e985aec5e4ffca8cb3738c9ee2f82d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:5d:0c:45:d8:d2:56:27:fa:01:14:41:50: 29:9e:35:b9:ae:4a:8e:f0:cd:88:2b:d0:ad:e9:95: 59:4b:d7:6a:48:8c:c1:f9:4a:78:5c:2f:ed:a8:30: 49:ca:d5:10:78:cb:43:a4:60:7d:59:9a:83:c5:92: 3a:70:7a:8f:23:38:b3:9f:7b:c6:13:b5:85:52:4b: 6a:96:b4:27:59:a7:dd:45:04:42:7e:83:c9:80:75: 58:2e:93:f8:43:85:31:20:62:85:07:67:af:e5:de: ed:01:1b:0a:76:e0:ca:66:e2:88:12:c3:08:38:a4: e0:c0:78:04:cf:51:7c:61:32:91:77:de:e4:01:5b: 51:74:61:30:9d:48:9f:06:e2:90:68:a7:00:8b:8e: f0:20:17:9b:57:32:c1:dc:72:7d:4c:f6:de:e4:f6: 46:91:f9:ec:04:ec:e8:29:b0:dc:cc:5e:61:aa:fa: c3:df:4c:de:63:9b:72:f5:0a:7e:53:71:24:fc:e4: 86:62:e1:c5:64:dc:ec:a2:ac:2f:6e:55:52:a3:ac: 77:9d:53:09:64:74:37:6c:b8:f9:d8:82:bd:5c:55: 3c:cf:f1:7b:b6:bb:a9:3c:58:98:f3:3e:7e:70:0f: ce:03:e6:ec:1c:10:0e:4e:d3:0a:4f:6d:78:9c:b6: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4F:32:70:8E:98:5A:EC:5E:4F:FC:A8:CB:37:38:C9:EE:2F:82:D7 X509v3 Authority Key Identifier: keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3c:d2:a0:da:d6:39:24:4c:2f:00:7a:4b:56:f7:26:5f:f8: 58:86:3c:eb:97:0e:c6:13:5a:9f:2f:43:43:fa:0d:fd:db:84: 59:7e:37:13:3d:89:21:62:39:c0:bd:b5:bd:ed:05:72:6e:45: 1d:90:14:d4:49:21:8a:56:95:fd:25:c8:99:e0:f1:8f:c0:f4: 15:e7:2a:1a:ed:eb:8b:44:3f:7e:bb:f6:e0:ab:4d:73:01:84: d6:2e:c7:7b:92:08:6f:4d:c2:a2:7b:21:de:40:14:d1:1d:1d: 91:01:c0:03:75:df:39:78:29:8a:6d:73:65:21:7f:20:93:2e: e4:1b:df:49:5d:08:91:8b:ab:58:ca:47:5c:b6:86:6d:e7:cb: 29:b9:03:35:a5:04:5c:5a:68:10:ba:92:e1:72:8b:e4:c0:97: 23:0f:fe:4b:91:5f:2e:29:e8:b9:14:42:0f:f5:34:40:c7:9f: e1:34:32:0d:a4:29:30:1f:69:d8:dc:46:af:94:03:bf:5e:0e: bb:5f:9f:f1:3f:b4:53:b8:76:cf:f6:c2:81:2e:b5:c3:30:02: c8:96:9a:5d:9b:02:bd:89:90:dd:f3:2e:0a:e4:5a:57:c3:a1: 7a:c7:e8:8d:d1:34:17:13:ee:92:c0:f1:2d:5f:58:52:b4:f7: bc:73:3b:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxiVSN1/nIaWAvKLQSBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDk3NGMzYmQ0ZmVhNGU5ZmViNTEyOWRiZWQyMDNjMDc1 YzhkNjgwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EygwODRmMzI3MDhlOTg1YWVjNWU0ZmZjYThjYjM3MzhjOWVlMmY4MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMVdDEXY0lYn+gEUQVApnjW5rkqO 8M2IK9Ct6ZVZS9dqSIzB+Up4XC/tqDBJytUQeMtDpGB9WZqDxZI6cHqPIzizn3vG E7WFUktqlrQnWafdRQRCfoPJgHVYLpP4Q4UxIGKFB2ev5d7tARsKduDKZuKIEsMI OKTgwHgEz1F8YTKRd97kAVtRdGEwnUifBuKQaKcAi47wIBebVzLB3HJ9TPbe5PZG kfnsBOzoKbDczF5hqvrD30zeY5ty9Qp+U3Ek/OSGYuHFZNzsoqwvblVSo6x3nVMJ ZHQ3bLj52IK9XFU8z/F7trupPFiY8z5+cA/OA+bsHBAOTtMKT214nLYilwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhPMnCOmFrsXk/8qMs3OMnuL4LXMB8GA1UdIwQY MBaAFOHZdMO9T+pOn+tRKdvtIDwHXI1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAt YzAzNDEwOTRiMDlhLzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAtYzAzNDEwOTRiMDlh LzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTzSoNrW OSRMLwB6S1b3Jl/4WIY865cOxhNany9DQ/oN/duEWX43Ez2JIWI5wL21ve0Fcm5F HZAU1EkhilaV/SXImeDxj8D0FecqGu3ri0Q/frv24KtNcwGE1i7He5IIb03Consh 3kAU0R0dkQHAA3XfOXgpim1zZSF/IJMu5BvfSV0IkYurWMpHXLaGbefLKbkDNaUE XFpoELqS4XKL5MCXIw/+S5FfLinouRRCD/U0QMef4TQyDaQpMB9p2NxGr5QDv14O u1+f8T+0U7h2z/bCgS61wzACyJaaXZsCvYmQ3fMuCuRaV8OhesfojdE0FxPuksDx LV9YUrT3vHM7LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:21 2025 by rpki-client