This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json) Hash identifier: XpqBSwjVfv/MQK331XbR4clozuH3VhWnleQ3BSbxJv8= Subject key identifier: 17:B6:74:0E:CB:A0:99:DA:2A:05:61:2D:79:0B:47:81:5B:36:BA:3A Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3 Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3 Certificate serial: 019AF208F988D4187AA2AA72DBAC286EDD69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft Manifest number: 0C06 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: DCFMrlWBrGs9f4txOjUtjTwyNZClHBHy8OYVxoGseXc=) 2: cJOETGpzF01z2PB9BHQ2YdHB3Oo.roa (hash: ddSAvoAgeQ9Rf29fTQhbhEaJlnO0oFB6dwFmZVNzK/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f9:88:d4:18:7a:a2:aa:72:db:ac:28:6e:dd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3 Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=17b6740ecba099da2a05612d790b47815b36ba3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:07:e5:c5:f4:42:89:96:80:52:54:51:39: 94:f5:80:dc:f7:36:5b:51:bc:cf:8e:35:1c:25:9f: fc:48:81:ad:b9:09:ae:be:b5:ec:42:8c:ba:5d:4b: 46:e0:28:b0:b0:c9:43:88:25:34:87:f9:6a:52:40: 1b:79:67:95:2b:12:4e:9e:40:ab:f8:d8:c4:cf:db: c2:d6:55:5a:f6:b3:c3:1d:3f:ff:74:b1:d2:83:d2: 96:bc:37:ca:16:75:0c:28:b6:52:9e:3b:56:9d:43: 8a:96:fc:f5:b3:e6:61:59:ff:99:a4:fc:f2:40:ca: 7a:08:ee:66:61:0e:72:29:5d:24:74:57:68:d8:1e: 16:cd:f2:91:40:bd:9a:9c:44:a3:02:b8:22:b7:c7: 13:40:76:07:a1:84:5c:5c:30:2c:ba:65:ff:26:6c: 44:e5:51:74:24:bf:99:41:ec:f1:17:3c:79:0a:ba: 13:eb:11:da:06:de:52:4c:fa:83:49:aa:6c:4b:90: 0d:1c:85:f1:2b:50:c4:ae:4a:d9:00:95:f3:e7:07: e6:f2:3c:ec:64:c2:a0:7a:66:5e:93:2b:87:c0:c0: e6:11:27:cd:eb:d9:3a:32:f7:e8:f0:63:f9:66:cb: e0:ce:11:15:c0:74:9f:42:7a:56:04:ae:ef:e0:aa: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B6:74:0E:CB:A0:99:DA:2A:05:61:2D:79:0B:47:81:5B:36:BA:3A X509v3 Authority Key Identifier: keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:8f:65:2a:f5:36:0e:cc:45:25:6e:34:f3:e7:e1:73:8a:ba: 2a:e0:8c:e6:5a:90:42:be:70:65:09:92:8c:3f:da:c2:10:c1: 22:79:42:67:62:cf:05:99:6a:f1:5f:89:84:59:a9:70:e7:de: 12:a3:ed:af:4d:a3:f3:ac:9a:b6:73:81:5f:5d:6d:14:be:6f: 01:ac:4e:88:92:0c:5b:e9:db:c0:ee:46:ac:6d:ce:2a:cc:c4: 99:2f:35:83:4e:85:d4:ad:99:2f:06:19:f2:57:ab:36:ff:9e: 4f:65:3d:dd:37:77:e6:90:ee:f9:4d:92:16:e7:c9:b4:d7:d3: 83:af:c2:38:d4:ba:05:f0:dd:ae:67:f6:54:c5:39:75:e8:90: bd:bd:91:a3:f7:95:72:9d:de:78:4a:94:7e:79:b0:be:36:20: 12:30:89:f1:3e:95:0f:a0:58:65:6b:03:a4:da:cc:d0:93:3e: 85:83:08:df:02:3a:b8:fb:f4:03:48:49:f1:7b:8b:14:b1:56: c2:a8:d3:1b:27:2b:d5:40:83:f8:5f:63:c3:b5:dd:32:72:36: 69:a3:88:c4:b0:96:07:02:b6:46:f4:4f:06:54:ad:14:8b:4b: cc:7c:30:a8:f1:da:9c:ab:11:14:89:87:f0:4b:91:6d:75:38: 76:27:15:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPmI1Bh6oqpy26wobt1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODNmYTQzOGE2ZmFlNjJiMzVmOTA5MTg3NmM0NGRlZGI5 YzBkYTMwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EygxN2I2NzQwZWNiYTA5OWRhMmEwNTYxMmQ3OTBiNDc4MTViMzZiYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv8H5cX0QomWgFJUUTmU9YDc9zZb UbzPjjUcJZ/8SIGtuQmuvrXsQoy6XUtG4CiwsMlDiCU0h/lqUkAbeWeVKxJOnkCr +NjEz9vC1lVa9rPDHT//dLHSg9KWvDfKFnUMKLZSnjtWnUOKlvz1s+ZhWf+ZpPzy QMp6CO5mYQ5yKV0kdFdo2B4WzfKRQL2anESjArgit8cTQHYHoYRcXDAsumX/JmxE 5VF0JL+ZQezxFzx5CroT6xHaBt5STPqDSapsS5ANHIXxK1DErkrZAJXz5wfm8jzs ZMKgemZekyuHwMDmESfN69k6Mvfo8GP5ZsvgzhEVwHSfQnpWBK7v4KrHgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe2dA7LoJnaKgVhLXkLR4FbNro6MB8GA1UdIwQY MBaAFHOD+kOKb65is1+QkYdsRN7bnA2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWVkYTgtYjc1Yy00YmJiLThlN2Qt OGZlYWFmYWM3ZTg5LzEvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YWVkYTgtYjc1Yy00YmJiLThlN2QtOGZlYWFmYWM3ZTg5 LzEvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZI9lKvU2 DsxFJW408+fhc4q6KuCM5lqQQr5wZQmSjD/awhDBInlCZ2LPBZlq8V+JhFmpcOfe EqPtr02j86yatnOBX11tFL5vAaxOiJIMW+nbwO5GrG3OKszEmS81g06F1K2ZLwYZ 8lerNv+eT2U93Td35pDu+U2SFufJtNfTg6/CONS6BfDdrmf2VMU5deiQvb2Ro/eV cp3eeEqUfnmwvjYgEjCJ8T6VD6BYZWsDpNrM0JM+hYMI3wI6uPv0A0hJ8XuLFLFW wqjTGycr1UCD+F9jw7XdMnI2aaOIxLCWBwK2RvRPBlStFItLzHwwqPHanKsRFImH 8EuRbXU4dicVrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:10 2025 by rpki-client