This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft File: 4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json) Hash identifier: TcJXYZf6GrkukQy9767DONthoAVcAVvldu41A6YroFY= Subject key identifier: 34:91:FA:D0:20:6F:53:12:1F:32:0A:DF:DB:66:B2:2A:55:EF:A2:44 Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B Certificate issuer: /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b Certificate serial: 019AF209517C100459ED3736809CEA297704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft Manifest number: 0DE0 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: MQkdkPwCIhNqZS4PDR3RnHeJNUbi4abwdcdAAOi3WgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:51:7c:10:04:59:ed:37:36:80:9c:ea:29:77:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=3491fad0206f53121f320adfdb66b22a55efa244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:ce:54:e5:6b:66:9d:09:d8:bd:49:30:f9: 16:e7:ad:d3:93:22:7a:4e:62:da:9d:28:73:d4:d7: 87:15:10:74:3c:b0:6a:b4:49:cc:60:b3:4e:4e:b3: 22:ee:b2:b9:96:e6:c6:56:2e:90:db:65:bf:e8:e5: 5e:73:ff:76:84:5e:a2:d6:e1:d6:34:5f:43:11:14: 7e:0d:ca:bf:ff:6a:40:0e:1c:83:28:bb:f2:26:8f: da:79:16:44:eb:1c:62:86:d4:80:ed:a2:88:75:6f: cf:6d:a1:e7:1a:ec:ad:2f:ea:79:81:43:4f:4e:62: df:c4:99:8f:06:6f:5d:49:08:ae:30:f8:33:2a:a1: 67:29:d8:95:7b:3e:bf:29:15:01:0f:c4:9a:66:cf: 71:56:cc:bb:d5:55:44:f5:05:b5:3f:25:62:0b:5e: 21:89:e0:ec:3b:57:ff:74:00:e2:0f:ae:4e:73:97: bf:d3:3a:53:80:14:05:a9:6e:24:b7:5a:bc:f2:e6: 91:f4:18:ca:98:4e:e6:70:4e:c3:06:cd:d4:31:2f: 50:fa:c7:af:47:3f:00:32:fe:d8:31:d2:33:f9:c0: 1e:d3:58:1c:a0:f3:c4:f7:6a:91:0b:af:38:57:85: 62:dc:91:a1:6e:7a:28:2e:14:33:ec:57:f1:75:53: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:FA:D0:20:6F:53:12:1F:32:0A:DF:DB:66:B2:2A:55:EF:A2:44 X509v3 Authority Key Identifier: keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:84:ea:f5:59:14:d2:c1:75:cd:1a:1e:14:fd:d1:60:66:cd: 46:ea:c2:4b:7d:04:77:97:79:a5:7e:c9:bc:eb:15:ab:e9:77: 1f:e2:e9:8b:70:9e:22:b7:ce:5a:02:9c:d7:53:56:2f:86:5f: c6:91:60:68:16:7a:ae:d4:ac:60:ee:64:54:17:a3:56:85:2c: 2d:fd:b0:94:4d:1c:8e:99:11:72:bc:d8:aa:80:92:2f:af:48: e1:55:8f:ea:9d:4b:29:3c:ca:66:db:e6:08:e6:c4:c8:24:9f: 50:2e:1a:17:3a:7f:f1:c7:7b:0f:90:8d:07:72:09:84:c1:f3: 90:ea:cf:76:e3:75:a5:0a:30:5f:5c:7d:0b:b3:b4:b3:01:12: 7e:c8:df:14:0b:81:d1:51:ec:97:a5:b0:32:7b:ba:2c:ee:fe: a0:1e:7e:6b:2c:96:3f:85:35:bf:7e:df:1f:3f:17:d5:26:9e: fe:c1:0a:51:9b:e7:e5:32:39:0f:ff:5f:8b:7f:34:84:45:81: 74:cc:cd:d8:7a:62:8f:48:55:d8:9c:f1:c3:7e:16:06:6f:b0: c4:0a:9d:ac:0c:43:3b:e2:9f:68:cf:d8:4f:f0:92:7e:d1:35: f1:8c:81:94:f3:f0:bb:0d:41:e2:a4:fa:d7:87:bc:42:4d:e8: b3:e4:52:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVF8EARZ7Tc2gJzqKXcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNWM3Y2Q1YTkxYjQ0NTg2NjBkMDcwZTA0NzdmYmU2OTVj MTJiMGIwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EygzNDkxZmFkMDIwNmY1MzEyMWYzMjBhZGZkYjY2YjIyYTU1ZWZhMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxnOVOVrZp0J2L1JMPkW563TkyJ6 TmLanShz1NeHFRB0PLBqtEnMYLNOTrMi7rK5lubGVi6Q22W/6OVec/92hF6i1uHW NF9DERR+Dcq//2pADhyDKLvyJo/aeRZE6xxihtSA7aKIdW/PbaHnGuytL+p5gUNP TmLfxJmPBm9dSQiuMPgzKqFnKdiVez6/KRUBD8SaZs9xVsy71VVE9QW1PyViC14h ieDsO1f/dADiD65Oc5e/0zpTgBQFqW4kt1q88uaR9BjKmE7mcE7DBs3UMS9Q+sev Rz8AMv7YMdIz+cAe01gcoPPE92qRC684V4Vi3JGhbnooLhQz7FfxdVPkZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSR+tAgb1MSHzIK39tmsipV76JEMB8GA1UdIwQY MBaAFOBcfNWpG0RYZg0HDgR3++aVwSsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEt ODMyYjVkZWY1YWQ4LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEtODMyYjVkZWY1YWQ4 LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYTq9VkU 0sF1zRoeFP3RYGbNRurCS30Ed5d5pX7JvOsVq+l3H+Lpi3CeIrfOWgKc11NWL4Zf xpFgaBZ6rtSsYO5kVBejVoUsLf2wlE0cjpkRcrzYqoCSL69I4VWP6p1LKTzKZtvm CObEyCSfUC4aFzp/8cd7D5CNB3IJhMHzkOrPduN1pQowX1x9C7O0swESfsjfFAuB 0VHsl6WwMnu6LO7+oB5+ayyWP4U1v37fHz8X1Sae/sEKUZvn5TI5D/9fi380hEWB dMzN2Hpij0hV2Jzxw34WBm+wxAqdrAxDO+KfaM/YT/CSftE18YyBlPPwuw1B4qT6 14e8Qk3os+RS9A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:34 2025 by rpki-client