This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json) Hash identifier: IzaPjyJy5xtnIOtpFzLDehS89RR3gxIU1u72Y+1ZijA= Subject key identifier: 64:75:C8:8B:F9:48:1D:AD:ED:7A:68:2C:E1:42:25:8D:E6:FE:AC:AB Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Certificate serial: 019AF12E0108E329E6E79B338B8450EF49E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft Manifest number: 0B6D Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: 9bwKA+v5q/MG0Io4UusVM3f+ME23jasyHs7QY3ZyqTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:01:08:e3:29:e6:e7:9b:33:8b:84:50:ef:49:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=6475c88bf9481daded7a682ce142258de6feacab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:0b:74:57:43:9f:69:f9:e1:2b:74:6d:34: 87:1e:f7:83:ec:32:a9:5c:10:77:e9:86:ba:76:c3: e1:b3:83:e3:78:0b:c0:ba:a0:cd:e4:83:d1:e0:87: 7e:c2:7a:97:a9:c4:c2:9f:ba:95:6d:a4:9c:73:cb: 1a:05:d2:0b:d7:4f:ac:e5:9d:81:2c:7c:aa:54:4f: 2a:ec:ce:8d:02:c1:7e:8d:fb:28:06:1d:12:61:d3: f4:2c:c3:40:0a:d1:6a:80:ce:2b:31:6d:44:a8:0e: 7a:dc:30:6e:25:e8:3a:28:1c:04:7a:b4:d0:e4:3e: 2c:26:c1:b3:1c:36:7a:dd:e8:80:c3:17:c5:e0:7e: b1:96:95:86:01:ee:1a:4b:85:eb:49:a9:94:e5:30: ea:11:12:e0:81:57:b3:38:b7:7b:8b:2d:08:e8:94: 23:36:5b:53:03:c0:a3:c4:91:31:80:c4:b6:f9:1e: 86:89:1a:c7:86:fc:78:7c:c6:d6:bc:e6:a7:63:cf: 06:fb:2b:3d:d7:cc:5a:03:ff:1a:77:27:47:34:6e: 08:a7:a6:6a:80:11:15:ef:34:05:a8:a3:1f:d8:cf: ff:af:7a:f8:39:07:ad:6a:d2:46:9b:02:f5:11:02: ee:8e:a3:b4:41:c3:d4:87:6f:1b:f7:fb:98:c6:92: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:75:C8:8B:F9:48:1D:AD:ED:7A:68:2C:E1:42:25:8D:E6:FE:AC:AB X509v3 Authority Key Identifier: keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:5a:1f:58:05:86:67:16:6c:35:12:73:b8:9a:e6:36:e2:c0: 2d:46:c5:6e:55:93:a9:95:16:87:dc:c3:e4:61:fa:68:3d:5c: 8c:73:8b:61:80:f9:cb:cd:b4:29:77:17:c5:c8:ca:f9:7e:a3: 96:94:54:57:06:fb:53:a7:01:4a:66:41:96:02:d2:e6:ce:09: 88:19:27:ef:e9:63:85:ca:28:9a:1e:7b:2b:3a:54:10:1b:90: 72:4b:f6:4e:86:a7:38:38:ae:dc:12:ac:55:95:b9:66:92:ed: 7f:ac:28:72:95:4d:29:d3:f1:4f:54:46:38:00:dd:e9:ae:5f: c0:bd:f0:1c:54:cb:5b:f5:9a:bb:c8:04:43:4b:d1:e3:92:55: 8a:8c:87:61:e2:26:c2:3e:12:4a:1f:39:56:c6:9c:1c:7c:43: e3:6b:21:22:4f:8b:ff:5d:8d:a7:1b:66:1c:2d:1a:a9:59:ef: 61:9a:f2:3c:41:e6:52:ac:b4:9a:45:bd:be:b9:30:c0:7c:4d: 40:65:a3:7f:a8:29:f7:ef:fa:69:b3:27:b5:7a:b1:66:66:c2: 35:23:f2:95:88:12:ff:55:fa:b5:6c:ee:74:12:13:49:5b:35: 2a:34:04:26:c3:54:d3:7d:67:50:7e:aa:50:12:0b:8c:7e:5d: 1f:dd:e7:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgEI4ynm55szi4RQ70nnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODRhNDE5OTdlZWVhNGQwNWZjYzdjZDQwYjEyMTEzYTVi YjY5ZTgwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD Eyg2NDc1Yzg4YmY5NDgxZGFkZWQ3YTY4MmNlMTQyMjU4ZGU2ZmVhY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhELdFdDn2n54St0bTSHHveD7DKp XBB36Ya6dsPhs4PjeAvAuqDN5IPR4Id+wnqXqcTCn7qVbaScc8saBdIL10+s5Z2B LHyqVE8q7M6NAsF+jfsoBh0SYdP0LMNACtFqgM4rMW1EqA563DBuJeg6KBwEerTQ 5D4sJsGzHDZ63eiAwxfF4H6xlpWGAe4aS4XrSamU5TDqERLggVezOLd7iy0I6JQj NltTA8CjxJExgMS2+R6GiRrHhvx4fMbWvOanY88G+ys918xaA/8adydHNG4Ip6Zq gBEV7zQFqKMf2M//r3r4OQetatJGmwL1EQLujqO0QcPUh28b9/uYxpJzswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR1yIv5SB2t7XpoLOFCJY3m/qyrMB8GA1UdIwQY MBaAFNOEpBmX7upNBfzHzUCxIROlu2noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUt ZjZkMGZmNDU4NjQ4LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUtZjZkMGZmNDU4NjQ4 LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVofWAWG ZxZsNRJzuJrmNuLALUbFblWTqZUWh9zD5GH6aD1cjHOLYYD5y820KXcXxcjK+X6j lpRUVwb7U6cBSmZBlgLS5s4JiBkn7+ljhcoomh57KzpUEBuQckv2ToanODiu3BKs VZW5ZpLtf6wocpVNKdPxT1RGOADd6a5fwL3wHFTLW/Wau8gEQ0vR45JVioyHYeIm wj4SSh85VsacHHxD42shIk+L/12NpxtmHC0aqVnvYZryPEHmUqy0mkW9vrkwwHxN QGWjf6gp9+/6abMntXqxZmbCNSPylYgS/1X6tWzudBITSVs1KjQEJsNU031nUH6q UBILjH5dH93n2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:17 2025 by rpki-client