This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json) Hash identifier: oH8B47gXiDR7hHTLBVZw6+FRrxfU65pN8qhW01w8hjE= Subject key identifier: FF:B2:FE:A2:A7:B5:D2:57:C1:01:35:C8:83:B8:9F:7D:E7:9F:E0:7A Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc Certificate serial: 019AF12DF777E3314679BE5CC9A73391B459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: DTI4UzkD9T/cnU0qhb7B/pEm5Q/AW0GTL3A8dm7xYjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f7:77:e3:31:46:79:be:5c:c9:a7:33:91:b4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=ffb2fea2a7b5d257c10135c883b89f7de79fe07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:b9:6e:ad:b9:44:f6:b0:74:01:64:aa:65: bf:a3:42:55:08:59:c4:19:84:fc:76:33:de:57:17: d4:f4:b7:34:ed:88:e7:cd:dc:30:00:dc:7a:f6:b2: ad:b8:14:6a:c4:31:e4:a0:63:25:4d:62:88:bb:41: 04:12:82:9c:1e:f6:d5:26:c4:2d:89:6b:ba:b5:62: 72:d2:c2:7b:dd:58:95:40:13:29:d6:e5:dc:e5:55: 07:4f:c1:f2:0a:66:36:eb:ea:56:e5:b8:a3:b0:f9: 83:6b:2c:9c:78:0b:0a:2a:59:93:c7:72:9c:8a:8b: 24:e1:41:0d:4c:e8:6c:a6:c5:90:f1:48:33:eb:bf: d3:ca:16:b5:e0:49:4a:7b:ae:b1:e7:9d:b7:59:72: a1:a0:4c:23:38:c3:60:9e:94:aa:01:22:4c:d3:4a: fb:c3:ea:de:b7:f0:45:9c:27:70:dc:78:f1:3e:c6: 73:14:90:94:52:d3:27:c2:50:82:7a:69:89:45:85: 4d:59:33:b9:6a:fd:90:e3:36:a9:be:dd:dd:69:2b: 3e:68:ea:6c:e8:7d:5b:82:e1:f1:24:44:f7:f4:a5: 54:57:85:1c:17:29:ef:d1:de:d9:4a:68:b2:03:f3: d8:a8:3a:31:7f:36:c0:b5:da:3c:bf:83:3c:af:ad: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B2:FE:A2:A7:B5:D2:57:C1:01:35:C8:83:B8:9F:7D:E7:9F:E0:7A X509v3 Authority Key Identifier: keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a5:71:20:03:7d:a2:c0:86:3e:66:3c:cd:fe:6f:a8:4b:54: aa:a1:05:70:50:0a:4c:f3:c6:03:34:61:21:75:2f:f6:a0:cd: ee:3b:ad:5a:03:9e:26:57:f0:58:3e:a0:41:08:ba:a1:e7:62: 1c:1d:ec:38:5f:08:e3:25:24:2b:7e:8a:a4:3e:78:67:28:50: 5e:c0:06:ee:57:23:e6:56:9d:2b:47:04:1b:07:dc:c2:ef:b7: 6d:9f:22:07:97:e8:ec:bf:a7:f5:36:fd:fc:b9:7a:36:cd:c0: e3:d1:f7:9a:57:e6:ef:4e:71:ac:32:3a:ea:4b:27:25:28:e2: 43:de:c4:e0:8b:6e:de:90:eb:0b:6b:bd:03:99:9a:c1:41:13: 12:03:47:06:c2:6e:3f:d1:fc:39:6e:0f:df:9e:19:e8:d9:6f: 84:1e:54:a2:ab:1d:0f:09:7e:db:54:7d:6e:0a:fc:d7:cc:4b: 85:0c:4e:f4:97:d8:c1:a6:4c:c5:f9:cb:ea:32:76:1c:d8:c6: 15:8f:ab:bd:f2:5e:ee:32:ec:58:51:8d:ae:d0:93:b2:8d:c7: 28:68:5a:a4:2e:44:16:a6:6c:7d:0e:18:f8:43:11:38:d4:6c: 5a:aa:28:24:12:70:64:66:ba:6f:bf:68:47:64:fe:57:ed:b3: 9d:83:36:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfd34zFGeb5cyaczkbRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWVlNWE1OTJiM2E3ZWM3M2I1NDk0NDI0OTk2ZjdlYmVj NjhmYmMwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD EyhmZmIyZmVhMmE3YjVkMjU3YzEwMTM1Yzg4M2I4OWY3ZGU3OWZlMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYe5bq25RPawdAFkqmW/o0JVCFnE GYT8djPeVxfU9Lc07YjnzdwwANx69rKtuBRqxDHkoGMlTWKIu0EEEoKcHvbVJsQt iWu6tWJy0sJ73ViVQBMp1uXc5VUHT8HyCmY26+pW5bijsPmDayyceAsKKlmTx3Kc iosk4UENTOhspsWQ8Ugz67/Tyha14ElKe66x5523WXKhoEwjOMNgnpSqASJM00r7 w+ret/BFnCdw3HjxPsZzFJCUUtMnwlCCemmJRYVNWTO5av2Q4zapvt3daSs+aOps 6H1bguHxJET39KVUV4UcFynv0d7ZSmiyA/PYqDoxfzbAtdo8v4M8r62LuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+y/qKntdJXwQE1yIO4n33nn+B6MB8GA1UdIwQY MBaAFOKu5aWSs6fsc7VJRCSZb36+xo+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHE3bHBaS3pwLXh6dFVsRUpKbHZmcjdHajd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xN2U5MzYtMTYzMC00YTg1LWE5M2It Mzk1NWUwNzg2MDkyLzEvNHE3bHBaS3pwLXh6dFVsRUpKbHZmcjdHajd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xN2U5MzYtMTYzMC00YTg1LWE5M2ItMzk1NWUwNzg2MDky LzEvNHE3bHBaS3pwLXh6dFVsRUpKbHZmcjdHajd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKVxIAN9 osCGPmY8zf5vqEtUqqEFcFAKTPPGAzRhIXUv9qDN7jutWgOeJlfwWD6gQQi6oedi HB3sOF8I4yUkK36KpD54ZyhQXsAG7lcj5ladK0cEGwfcwu+3bZ8iB5fo7L+n9Tb9 /Ll6Ns3A49H3mlfm705xrDI66ksnJSjiQ97E4Itu3pDrC2u9A5mawUETEgNHBsJu P9H8OW4P354Z6NlvhB5UoqsdDwl+21R9bgr818xLhQxO9JfYwaZMxfnL6jJ2HNjG FY+rvfJe7jLsWFGNrtCTso3HKGhapC5EFqZsfQ4Y+EMRONRsWqooJBJwZGa6b79o R2T+V+2znYM2+A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:53 2025 by rpki-client