This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json) Hash identifier: XVh6tx2BD96iQtvf57S/9tP+GFuYeUphNGAZK5IVkts= Subject key identifier: 4E:3A:9F:C8:75:AB:44:9C:19:46:57:16:3B:31:A6:76:F5:29:EB:9F Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7 Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7 Certificate serial: 019AF2098934CA33C8761DA60B51CA12FC93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: yJVJBM4kQB+9eCJKh708U1iJZGt+M/wV7WYt2/IRdWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:89:34:ca:33:c8:76:1d:a6:0b:51:ca:12:fc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=4e3a9fc875ab449c194657163b31a676f529eb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4c:ac:67:15:77:4c:fa:e3:78:2e:f2:d0:a2: 65:06:c1:fb:01:29:b9:ae:9d:15:77:10:18:2d:9e: 8b:a3:3b:95:80:49:bf:2c:fb:cd:ef:0a:a6:b4:8d: 08:66:7c:bf:76:f1:91:fa:2d:30:dd:58:7a:f7:a0: 9b:c1:6b:e4:ea:5b:ba:be:3a:2c:05:c4:9a:16:54: 59:94:16:02:fe:73:f5:27:0f:a0:bf:8e:c5:80:79: 55:3e:86:74:e9:6a:f5:65:7c:30:74:cc:59:33:e2: d9:ed:c9:3c:ce:bc:d0:e4:db:73:4f:95:9b:3b:d1: 12:60:56:5d:95:c9:07:52:75:e6:06:99:6f:2f:e0: 07:99:d4:17:fa:72:91:21:11:34:dd:d1:12:d0:5a: 68:c3:c7:7f:3b:96:6e:4a:07:e1:e0:04:74:87:7f: 0b:c2:65:21:d7:e9:fa:48:da:d5:0c:47:e3:a2:2f: fb:d0:be:aa:04:c5:ad:c8:49:9d:07:77:cb:a6:a5: a8:25:8b:78:ac:5a:52:34:fd:ec:97:46:f1:29:2d: d1:77:bd:46:8a:cc:0d:c6:6c:08:f5:73:a8:c8:c5: 1b:8e:7c:31:8e:d4:99:d6:46:0d:98:79:24:04:78: d8:2b:d8:85:5b:65:c0:60:e2:24:ce:66:34:4c:4c: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:9F:C8:75:AB:44:9C:19:46:57:16:3B:31:A6:76:F5:29:EB:9F X509v3 Authority Key Identifier: keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:16:1a:ca:24:1a:d9:3d:0f:ca:bb:b7:52:4f:d8:20:4b:d0: 3a:6f:d3:1a:42:cb:ed:58:e5:12:ad:75:1b:16:b1:7d:37:2b: 24:f7:c3:34:8a:af:fe:38:e9:a6:cf:79:37:68:fb:cc:c7:ca: b7:43:29:a3:89:94:18:ab:dd:6f:4c:9c:92:12:0a:ab:e3:c8: ff:70:ec:31:85:c8:c5:0a:53:31:10:30:2e:4b:f8:69:b6:38: b1:06:7d:77:a4:44:86:21:e6:b5:b6:14:12:0e:49:8b:da:0e: 4f:23:b0:ce:cd:24:43:12:fd:2a:1c:cc:51:94:73:a6:27:13: fd:7d:3f:b2:7b:99:a3:40:3c:c4:70:02:12:fd:3a:82:15:9a: 84:bd:d4:8f:70:b9:5d:1e:b9:eb:5d:4d:33:a2:8f:1c:43:dd: 54:93:58:94:0b:bb:39:a5:11:b1:4a:87:1d:60:48:52:47:dd: 1f:ec:84:52:cb:1d:59:d9:54:b0:b3:57:67:6c:64:b8:38:20: 6b:30:42:73:df:bb:89:b2:23:70:cb:97:ce:33:57:81:cf:24: 8b:5f:9b:3c:db:23:a0:4d:6b:0e:59:1d:42:d4:51:47:e0:55: d0:1b:1a:25:3b:3c:8e:90:de:0c:c4:0b:21:45:7f:47:b5:24: 5c:36:1c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYk0yjPIdh2mC1HKEvyTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOGI3OTgxMGNlYmM1YmEyYTUyZjdhMDhkNTE5NmQzM2U4 Y2RjZTcwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD Eyg0ZTNhOWZjODc1YWI0NDljMTk0NjU3MTYzYjMxYTY3NmY1MjllYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10ysZxV3TPrjeC7y0KJlBsH7ASm5 rp0VdxAYLZ6LozuVgEm/LPvN7wqmtI0IZny/dvGR+i0w3Vh696CbwWvk6lu6vjos BcSaFlRZlBYC/nP1Jw+gv47FgHlVPoZ06Wr1ZXwwdMxZM+LZ7ck8zrzQ5NtzT5Wb O9ESYFZdlckHUnXmBplvL+AHmdQX+nKRIRE03dES0Fpow8d/O5ZuSgfh4AR0h38L wmUh1+n6SNrVDEfjoi/70L6qBMWtyEmdB3fLpqWoJYt4rFpSNP3sl0bxKS3Rd71G iswNxmwI9XOoyMUbjnwxjtSZ1kYNmHkkBHjYK9iFW2XAYOIkzmY0TExurQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE46n8h1q0ScGUZXFjsxpnb1KeufMB8GA1UdIwQY MBaAFG+LeYEM68W6KlL3oI1RltM+jNznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kZTY3NTktMDkxOS00ZTVjLThhY2Et NDQzNTUzMjhiN2IwLzEvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kZTY3NTktMDkxOS00ZTVjLThhY2EtNDQzNTUzMjhiN2Iw LzEvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhYayiQa 2T0Pyru3Uk/YIEvQOm/TGkLL7VjlEq11GxaxfTcrJPfDNIqv/jjpps95N2j7zMfK t0Mpo4mUGKvdb0yckhIKq+PI/3DsMYXIxQpTMRAwLkv4abY4sQZ9d6REhiHmtbYU Eg5Ji9oOTyOwzs0kQxL9KhzMUZRzpicT/X0/snuZo0A8xHACEv06ghWahL3Uj3C5 XR65611NM6KPHEPdVJNYlAu7OaURsUqHHWBIUkfdH+yEUssdWdlUsLNXZ2xkuDgg azBCc9+7ibIjcMuXzjNXgc8ki1+bPNsjoE1rDlkdQtRRR+BV0BsaJTs8jpDeDMQL IUV/R7UkXDYcbw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:25:24 2025 by rpki-client