This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json) Hash identifier: oBCrkpdgb+IGfU8NIhrHsb42DfRMA2K7P0d9RdxHcOs= Subject key identifier: 51:01:DA:F1:BD:ED:B2:C8:8E:14:D2:22:7D:CA:F1:F7:E2:43:13:A9 Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06 Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06 Certificate serial: 019AF088AFF82B5895AA688CF076F492AE75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft Manifest number: 05DA Signing time: Fri 05 Dec 2025 22:01:20 +0000 Manifest this update: Fri 05 Dec 2025 22:01:20 +0000 Manifest next update: Sat 06 Dec 2025 22:01:20 +0000 Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: xcw642QT9X5Bpg5Ga0Gq3WHfbVpwCpuwf/5EiUGM6wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:af:f8:2b:58:95:aa:68:8c:f0:76:f4:92:ae:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06 Validity Not Before: Dec 5 22:01:20 2025 GMT Not After : Dec 6 22:01:20 2025 GMT Subject: CN=5101daf1bdedb2c88e14d2227dcaf1f7e24313a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:c7:35:13:ec:72:bf:4a:4b:af:4e:a8:48: 65:19:00:da:bd:62:24:da:74:04:ab:41:c0:f4:32: 25:28:17:f3:e2:5f:6a:14:d5:41:6e:a6:2c:a4:e5: 13:37:dc:5d:d0:b2:e2:1e:d8:39:db:ec:49:5c:9c: 29:83:8f:b4:7f:e3:49:41:8a:c3:a1:fa:d2:0f:ac: 03:02:6b:14:b0:9d:29:85:73:5e:d6:a5:c5:93:ca: 9e:01:65:a0:e2:47:31:8d:45:2d:b2:21:db:25:63: 00:83:55:77:1d:32:ca:d5:9b:47:b8:75:08:2d:8a: 3f:b7:e8:b9:49:8b:d4:f6:1b:d6:c4:48:47:56:bf: 15:77:91:e3:9d:62:b8:4b:eb:7d:c3:18:82:39:c1: 29:27:ed:57:e6:22:ab:26:b7:db:04:be:b2:a4:62: 04:fb:24:53:0c:db:b6:a7:1a:88:8b:5b:cf:53:85: aa:8f:b4:c5:2a:e9:c9:45:93:8b:f6:38:06:ed:1f: 5d:76:33:a5:65:35:ae:f1:a8:88:27:3a:91:4b:19: 90:94:88:bb:a6:ea:c8:31:25:1b:c3:7b:ef:41:3f: ce:9b:89:f0:d8:3c:d0:84:d9:9f:fc:b8:3c:e9:53: 03:6f:a6:64:9e:1e:45:72:5c:b5:8e:96:22:3e:8a: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:DA:F1:BD:ED:B2:C8:8E:14:D2:22:7D:CA:F1:F7:E2:43:13:A9 X509v3 Authority Key Identifier: keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1a:73:a7:ce:db:7b:eb:c5:08:3f:c0:a7:dd:d4:ef:fd:12: 8b:5b:88:f3:40:89:a6:64:08:7b:76:34:53:4a:21:71:00:80: 6d:e4:9a:0a:41:83:2a:ed:45:da:32:b1:ec:4c:f2:a1:8b:87: 35:55:c7:da:e4:f6:80:f2:b8:15:63:50:b5:28:15:26:9b:ac: ed:5c:f3:80:bc:37:af:fa:b3:77:02:9b:6d:43:16:76:86:68: a1:04:55:0d:08:96:1c:51:43:3f:c3:b5:ba:e6:fc:96:ad:aa: df:e8:ab:3c:b0:4c:cc:e8:35:93:2e:e8:d4:e2:de:fd:70:59: 6f:b4:36:b8:36:c0:1d:21:c6:35:ee:2a:e6:fc:91:6b:45:9c: 49:af:e1:92:89:fc:6f:de:20:77:c0:49:c9:3a:53:b6:cc:67: b4:a9:6c:78:a0:09:48:f2:4f:b5:25:03:16:7d:cc:f4:b2:30: dd:8c:7f:17:21:4c:13:8f:dc:14:39:f6:41:73:9c:0d:54:36: c4:cb:82:93:c2:3c:9b:d0:91:5f:14:92:fb:5c:e2:69:25:33: 07:6a:f0:b9:7f:6b:f5:75:c7:10:64:8e:e1:6a:3e:82:90:f6: a6:d3:12:50:1d:8e:e6:ed:71:96:db:d6:a6:a9:f5:95:a3:72: bd:bf:5a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiK/4K1iVqmiM8Hb0kq51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxM2RkNGI4MWYxZmM3OWRkNGRhNjQyOGY5YzJhMDI3MzQ1 N2ZmMDYwHhcNMjUxMjA1MjIwMTIwWhcNMjUxMjA2MjIwMTIwWjAzMTEwLwYDVQQD Eyg1MTAxZGFmMWJkZWRiMmM4OGUxNGQyMjI3ZGNhZjFmN2UyNDMxM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLfHNRPscr9KS69OqEhlGQDavWIk 2nQEq0HA9DIlKBfz4l9qFNVBbqYspOUTN9xd0LLiHtg52+xJXJwpg4+0f+NJQYrD ofrSD6wDAmsUsJ0phXNe1qXFk8qeAWWg4kcxjUUtsiHbJWMAg1V3HTLK1ZtHuHUI LYo/t+i5SYvU9hvWxEhHVr8Vd5HjnWK4S+t9wxiCOcEpJ+1X5iKrJrfbBL6ypGIE +yRTDNu2pxqIi1vPU4Wqj7TFKunJRZOL9jgG7R9ddjOlZTWu8aiIJzqRSxmQlIi7 purIMSUbw3vvQT/Om4nw2DzQhNmf/Lg86VMDb6Zknh5Fcly1jpYiPoqbrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEB2vG97bLIjhTSIn3K8ffiQxOpMB8GA1UdIwQY MBaAFOE91LgfH8ed1NpkKPnCoCc0V/8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYjViZDctNjAzYi00YTVjLThhOTgt ZDU2Mzk1OWQyNzdkLzEvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wYjViZDctNjAzYi00YTVjLThhOTgtZDU2Mzk1OWQyNzdk LzEvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRpzp87b e+vFCD/Ap93U7/0Si1uI80CJpmQIe3Y0U0ohcQCAbeSaCkGDKu1F2jKx7EzyoYuH NVXH2uT2gPK4FWNQtSgVJpus7VzzgLw3r/qzdwKbbUMWdoZooQRVDQiWHFFDP8O1 uub8lq2q3+irPLBMzOg1ky7o1OLe/XBZb7Q2uDbAHSHGNe4q5vyRa0WcSa/hkon8 b94gd8BJyTpTtsxntKlseKAJSPJPtSUDFn3M9LIw3Yx/FyFME4/cFDn2QXOcDVQ2 xMuCk8I8m9CRXxSS+1ziaSUzB2rwuX9r9XXHEGSO4Wo+gpD2ptMSUB2O5u1xltvW pqn1laNyvb9atg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:59 2025 by rpki-client