This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft File: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json) Hash identifier: Xs3WCGuWbRWouIwjww4XdN/2g9I8f9ZP1qzf3xUEmmw= Subject key identifier: 00:8E:47:36:2B:AD:83:00:DE:56:79:82:23:55:31:6F:48:A7:8A:0F Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03 Certificate issuer: /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03 Certificate serial: 019AF23FCA63C1E4DD3B040769936B2FCD5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft Manifest number: 149C Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: lBSRcqUZJMW/8UYqwQSmUrQD8oHlUR+EF3NZKLRnJW8=) 2: yfb_qPLjpTR6E53AWD8zAEu3mD8.roa (hash: ewXjqJ1u8QGc/DB2xhFt7iKmK54tjMWGPVl8lml9NyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ca:63:c1:e4:dd:3b:04:07:69:93:6b:2f:cd:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=008e47362bad8300de5679822355316f48a78a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:c4:7a:a0:13:4b:a4:0f:ac:36:d6:86:3e: 31:b6:26:7c:a8:aa:5b:bf:de:d5:64:2c:0e:75:f2: 8f:61:b9:63:80:97:20:b4:5c:5c:ca:ec:5e:a0:9b: 16:9d:65:52:8a:be:c9:03:f1:7b:c4:ca:14:5c:19: 81:a3:b8:71:16:0f:3b:38:6e:aa:99:9e:4a:b6:76: 99:04:81:63:7e:e6:3b:f6:2a:73:4d:e1:34:16:53: 7a:9c:1d:21:2d:3c:ea:64:22:fe:bb:b9:04:97:6b: da:88:59:7a:61:ee:2b:58:9a:5b:3a:ba:9d:9b:5b: 8d:37:76:39:4e:7b:4c:84:2e:01:ed:f0:58:38:c8: 0e:89:08:21:16:18:78:f9:08:f3:1b:50:9c:3b:dd: 89:ac:75:77:94:35:92:8a:0e:15:93:ba:19:c1:83: 57:03:1d:b0:ec:86:a2:72:93:b9:b9:ff:88:ed:ff: a8:cd:4b:5e:2c:9c:4e:41:d9:1f:2d:fb:8f:32:b8: 17:6b:8f:1c:82:3e:a6:3e:13:0b:9c:66:c1:20:da: a9:63:27:73:bd:7e:4a:b4:7c:3f:6b:4f:2b:2c:2d: 05:fd:92:96:9c:60:63:d5:41:d4:b8:c8:79:6d:a1: 60:13:73:2a:63:01:49:35:c5:80:e8:84:48:6c:48: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8E:47:36:2B:AD:83:00:DE:56:79:82:23:55:31:6F:48:A7:8A:0F X509v3 Authority Key Identifier: keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2a:da:17:43:5b:28:9d:74:13:53:88:49:d5:c0:50:6d:ec: e9:52:d3:8a:ad:0f:06:3f:82:d3:80:66:81:43:63:c9:60:22: 3d:e7:1c:97:ce:ff:34:26:fb:fd:63:11:91:78:f4:09:a0:1f: 16:12:72:60:fd:7c:66:b3:c8:81:f6:1b:47:57:6b:99:a6:75: 31:3f:38:fa:c1:21:d2:ae:d4:e0:13:7b:58:7a:05:ff:0c:d6: e8:58:74:0f:d7:eb:23:22:00:7b:a7:bc:4c:20:99:4d:b6:fd: 6d:cf:a3:76:d1:61:3d:6d:86:bc:8c:78:06:44:d5:9c:7a:f7: 2b:4c:be:be:7d:1a:16:27:9c:6d:21:bd:27:13:97:6d:b1:80: 5e:ec:68:15:f7:84:b6:28:af:c9:cc:78:f4:1b:47:0d:3b:75: 7c:0b:d1:c0:a1:52:52:e0:7f:c2:61:47:77:8b:9e:67:51:a1: 0e:22:10:0c:08:57:d0:55:a3:cb:b2:2a:2c:6e:6a:0c:f0:50: db:a3:6a:a2:bb:04:fc:43:40:43:50:ca:71:1b:3a:e4:10:0c: a1:f4:16:19:75:1d:8e:d6:2e:7e:77:49:d2:97:8a:67:34:ef: 3b:fc:08:6d:50:ce:51:11:27:06:a3:f4:63:4a:5f:10:8a:a6: 27:0d:1b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8pjweTdOwQHaZNrL81fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDdlOWZmMTI3OGExNGRjMjZlZjMzZjlmZjUzMWQ4NmVm ZjVkMDMwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EygwMDhlNDczNjJiYWQ4MzAwZGU1Njc5ODIyMzU1MzE2ZjQ4YTc4YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqXEeqATS6QPrDbWhj4xtiZ8qKpb v97VZCwOdfKPYbljgJcgtFxcyuxeoJsWnWVSir7JA/F7xMoUXBmBo7hxFg87OG6q mZ5KtnaZBIFjfuY79ipzTeE0FlN6nB0hLTzqZCL+u7kEl2vaiFl6Ye4rWJpbOrqd m1uNN3Y5TntMhC4B7fBYOMgOiQghFhh4+QjzG1CcO92JrHV3lDWSig4Vk7oZwYNX Ax2w7IaicpO5uf+I7f+ozUteLJxOQdkfLfuPMrgXa48cgj6mPhMLnGbBINqpYydz vX5KtHw/a08rLC0F/ZKWnGBj1UHUuMh5baFgE3MqYwFJNcWA6IRIbEgMjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACORzYrrYMA3lZ5giNVMW9Ip4oPMB8GA1UdIwQY MBaAFOHX6f8SeKFNwm7zP5/1Mdhu/10DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hYTc5MjItYzJjMC00N2FlLTkxMDgt NjAzMGE5ZGEzYjg5LzEvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hYTc5MjItYzJjMC00N2FlLTkxMDgtNjAzMGE5ZGEzYjg5 LzEvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiraF0Nb KJ10E1OISdXAUG3s6VLTiq0PBj+C04BmgUNjyWAiPeccl87/NCb7/WMRkXj0CaAf FhJyYP18ZrPIgfYbR1drmaZ1MT84+sEh0q7U4BN7WHoF/wzW6Fh0D9frIyIAe6e8 TCCZTbb9bc+jdtFhPW2GvIx4BkTVnHr3K0y+vn0aFiecbSG9JxOXbbGAXuxoFfeE tiivycx49BtHDTt1fAvRwKFSUuB/wmFHd4ueZ1GhDiIQDAhX0FWjy7IqLG5qDPBQ 26NqorsE/ENAQ1DKcRs65BAMofQWGXUdjtYufndJ0peKZzTvO/wIbVDOUREnBqP0 Y0pfEIqmJw0bXw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:52 2025 by rpki-client