This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json) Hash identifier: NFu+60WImGFHWbOqLaKLGhDSRlJ4L8Dk4iDdlpEBJro= Subject key identifier: 06:91:AB:7A:FA:8F:76:A8:2B:C8:44:C8:E4:58:AC:22:1E:1D:54:EC Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20 Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20 Certificate serial: 019AF19AFE4B09625FB985ECE44434E3223D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: 91Dy4XfiDOZZCpIdRUb8s3FeT59VPbLhcFGrLlKRXgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fe:4b:09:62:5f:b9:85:ec:e4:44:34:e3:22:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20 Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=0691ab7afa8f76a82bc844c8e458ac221e1d54ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:e7:ca:99:17:92:95:d2:6f:2b:09:4a:03: 69:5e:46:6f:2e:89:ee:e2:32:a3:56:22:ce:dd:dd: 1c:07:ff:ed:cb:2f:e1:20:7d:f1:54:80:da:04:8c: ac:2f:ed:32:3a:9b:77:71:39:af:c0:08:21:65:dc: 94:13:e2:e1:2f:09:22:e3:75:a4:d8:80:82:32:a0: e6:24:0a:8f:d8:7c:28:0f:b0:94:5c:6c:ea:f7:43: 01:8c:94:47:1e:d7:01:1f:33:ef:b1:6a:3a:c7:b1: 1d:ab:11:64:12:f8:57:8a:12:e9:1f:74:a3:0e:dd: 6b:ec:c4:8e:6f:e8:11:15:ab:e0:21:22:57:46:1d: 51:04:fe:b7:a8:12:13:2a:1f:ad:30:6a:8c:1f:8a: 66:a6:cc:87:27:ce:4b:f9:0f:f4:cf:19:8d:37:4a: 9b:b4:60:0f:b7:70:07:64:8d:49:b0:1c:0b:8c:9e: d0:5d:9a:6a:55:31:68:17:ea:74:ad:15:a7:55:63: 64:2a:be:ec:ee:0a:40:85:82:13:81:1f:dc:ea:d0: e6:78:25:a3:07:b0:c9:8c:70:27:3f:f1:e9:da:3d: ab:a5:e3:18:42:d8:47:b9:c9:70:4e:2e:ab:ed:c8: 44:01:27:fa:15:7c:09:45:a7:8d:fd:a1:df:c5:0f: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:91:AB:7A:FA:8F:76:A8:2B:C8:44:C8:E4:58:AC:22:1E:1D:54:EC X509v3 Authority Key Identifier: keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:50:2b:39:45:12:14:13:ca:de:8e:2b:a1:3e:c5:59:3a:c9: 4b:5e:e1:17:57:3b:fd:08:38:ee:f9:e4:99:45:4b:2d:ac:8c: 48:b1:e1:ff:10:13:49:83:12:60:e0:b8:68:82:48:fd:67:76: b0:b4:5e:8d:44:53:74:fe:f6:df:0c:f4:18:fc:0f:86:4b:c5: f1:de:fc:86:96:1a:cd:5e:f2:49:44:bf:72:02:74:c3:07:37: 62:fe:b2:02:db:72:c8:e2:1b:35:56:78:5a:34:a3:ef:ce:15: 5e:70:17:9e:66:e6:0a:4d:f4:a5:0e:3f:cf:17:5a:8d:88:f0: a8:da:44:78:62:5f:06:a0:17:5b:2d:99:a6:14:ee:f0:6e:ff: 24:c4:a6:11:43:ea:b4:8c:9d:7d:be:6b:b1:3c:53:99:03:60: c8:ac:2f:aa:28:b3:db:a4:6c:05:75:e5:e0:6f:d4:20:ef:9a: 29:8b:26:04:63:0f:a2:ff:40:03:dd:a7:16:f3:4c:10:63:cf: 2a:9d:fb:2f:34:31:a5:e2:a4:40:14:0a:04:2f:70:19:ce:96: 72:4b:47:93:53:73:0b:a5:35:08:e6:c7:52:a0:39:d0:e5:27: 99:33:77:94:b4:7b:4c:11:e6:27:ef:6c:d4:62:67:4f:8c:51: a8:80:0c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv5LCWJfuYXs5EQ04yI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDM3MWM0YTdhYWE4NTVmOGNjM2IxYWVhODAyMjk0MjBh ODBmMjAwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD EygwNjkxYWI3YWZhOGY3NmE4MmJjODQ0YzhlNDU4YWMyMjFlMWQ1NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTPnypkXkpXSbysJSgNpXkZvLonu 4jKjViLO3d0cB//tyy/hIH3xVIDaBIysL+0yOpt3cTmvwAghZdyUE+LhLwki43Wk 2ICCMqDmJAqP2HwoD7CUXGzq90MBjJRHHtcBHzPvsWo6x7EdqxFkEvhXihLpH3Sj Dt1r7MSOb+gRFavgISJXRh1RBP63qBITKh+tMGqMH4pmpsyHJ85L+Q/0zxmNN0qb tGAPt3AHZI1JsBwLjJ7QXZpqVTFoF+p0rRWnVWNkKr7s7gpAhYITgR/c6tDmeCWj B7DJjHAnP/Hp2j2rpeMYQthHuclwTi6r7chEASf6FXwJRaeN/aHfxQ+g5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaRq3r6j3aoK8hEyORYrCIeHVTsMB8GA1UdIwQY MBaAFOLTccSnqqhV+Mw7GuqAIpQgqA8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWFhMzAtMTQyYS00ZmUwLWFhYjkt OTA3YTU4Yzk5NGMyLzEvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mZWFhMzAtMTQyYS00ZmUwLWFhYjktOTA3YTU4Yzk5NGMy LzEvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllArOUUS FBPK3o4roT7FWTrJS17hF1c7/Qg47vnkmUVLLayMSLHh/xATSYMSYOC4aIJI/Wd2 sLRejURTdP723wz0GPwPhkvF8d78hpYazV7ySUS/cgJ0wwc3Yv6yAttyyOIbNVZ4 WjSj784VXnAXnmbmCk30pQ4/zxdajYjwqNpEeGJfBqAXWy2ZphTu8G7/JMSmEUPq tIydfb5rsTxTmQNgyKwvqiiz26RsBXXl4G/UIO+aKYsmBGMPov9AA92nFvNMEGPP Kp37LzQxpeKkQBQKBC9wGc6WcktHk1NzC6U1CObHUqA50OUnmTN3lLR7TBHmJ+9s 1GJnT4xRqIAMNA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:09 2025 by rpki-client