This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft File: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft (raw, json) Hash identifier: oMryDRuMxzSzQAdZ78u+JA0Fn1TvsomqNr7+g1ILZ3Y= Subject key identifier: BE:E6:A3:97:34:24:1D:A8:C7:37:80:5B:73:2C:BB:39:98:F5:C0:7F Authority key identifier: E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4 Certificate issuer: /CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4 Certificate serial: 019AF2AD6F5DBC3921A8DAF988C36F644041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft Manifest number: 0115 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl (hash: chRPRcg1zL2zQ4y/W9ZNfauDSk96j/pR9ynF1Dopvcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6f:5d:bc:39:21:a8:da:f9:88:c3:6f:64:40:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=bee6a39734241da8c737805b732cbb3998f5c07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:42:b2:94:6d:80:05:e9:81:0d:dd:92:24:af: 63:52:c5:2a:e0:d1:2f:99:1d:4f:3e:cd:6e:27:62: 82:ab:e2:60:ce:55:65:59:cd:ee:9c:0b:35:ac:f3: e3:97:41:b1:97:f6:f0:25:5a:57:2c:c2:22:50:b3: 8a:9c:c2:87:4a:3b:49:97:dd:07:29:7b:c3:26:9c: 61:c1:52:88:c2:11:dc:2d:23:f6:e9:49:fa:cf:18: 33:94:a1:88:55:43:c5:be:d0:9f:bf:95:ed:c5:34: b9:6a:ba:84:e3:3c:08:9b:00:21:ca:dd:ab:68:c0: 0f:18:9b:0b:93:a9:55:00:d4:da:41:0c:b8:35:6b: ab:96:53:fc:7f:24:2b:b8:73:07:89:07:1e:54:88: 85:15:eb:32:af:89:b4:5f:2a:39:e3:59:d7:a4:55: ff:fb:86:d6:7d:d7:b6:06:3f:1a:71:d2:96:81:2f: 4f:6c:12:c7:83:51:55:a6:1b:32:e2:2d:87:c9:0b: 19:0b:32:77:79:1b:e3:7c:97:d8:32:9c:8c:04:9d: d1:08:54:98:a1:b1:f4:2e:80:85:9c:29:a5:f5:4b: 87:d7:38:64:2a:21:7b:c9:d4:86:86:b2:51:cf:45: 6f:53:8b:35:21:fe:94:08:e4:17:cc:96:1c:9e:18: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E6:A3:97:34:24:1D:A8:C7:37:80:5B:73:2C:BB:39:98:F5:C0:7F X509v3 Authority Key Identifier: keyid:E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:11:0f:bc:6e:9a:41:67:72:aa:06:00:39:c9:12:5a:7f:54: 59:c1:48:95:b6:a8:f4:16:ff:ef:a3:43:7c:51:fa:47:13:cc: ec:8a:f9:17:4f:9b:66:85:de:c3:93:07:5d:6a:bd:d1:0b:0c: 8f:96:bb:69:a9:5b:8b:92:54:f9:3b:3f:be:bc:78:d2:2d:3c: c7:ba:ea:51:a2:49:d9:c2:29:f8:ef:c8:97:c2:4d:d7:33:9c: 06:5a:bb:c6:4d:42:b2:a6:67:b8:1d:65:e6:3c:2b:31:c7:22: e2:0b:a1:e1:2f:20:db:c0:98:9b:1f:0b:28:4e:d3:c9:db:3c: 5f:e3:25:14:30:b0:93:28:2a:67:72:48:2f:29:9b:e5:45:d2: 23:e4:80:f8:6f:70:90:95:30:71:91:73:a6:76:17:be:5c:aa: af:72:6d:aa:ef:13:86:54:46:72:04:1a:92:86:e1:8e:68:df: c4:58:f6:11:d0:54:d9:0f:3c:8c:0e:42:59:7e:9e:52:04:f1: 6d:2f:d1:f4:fa:dd:3c:80:f4:35:ae:0c:d3:08:7c:11:0d:5d: 6c:c5:82:d0:d3:15:f4:9a:ff:2b:d9:a4:a8:06:dd:3c:2d:9c: 8d:00:d0:61:8e:40:5e:e0:f5:4e:0c:35:a3:92:a8:88:7b:ed: cf:4a:2b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW9dvDkhqNr5iMNvZEBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTVmZjAwNWFhMjY2OTFjN2UzMzBlYmY5YzFjNGMxYWU1 NDk0ZDQwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD EyhiZWU2YTM5NzM0MjQxZGE4YzczNzgwNWI3MzJjYmIzOTk4ZjVjMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UKylG2ABemBDd2SJK9jUsUq4NEv mR1PPs1uJ2KCq+JgzlVlWc3unAs1rPPjl0Gxl/bwJVpXLMIiULOKnMKHSjtJl90H KXvDJpxhwVKIwhHcLSP26Un6zxgzlKGIVUPFvtCfv5XtxTS5arqE4zwImwAhyt2r aMAPGJsLk6lVANTaQQy4NWurllP8fyQruHMHiQceVIiFFesyr4m0Xyo541nXpFX/ +4bWfde2Bj8acdKWgS9PbBLHg1FVphsy4i2HyQsZCzJ3eRvjfJfYMpyMBJ3RCFSY obH0LoCFnCml9UuH1zhkKiF7ydSGhrJRz0VvU4s1If6UCOQXzJYcnhgkwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7mo5c0JB2oxzeAW3MsuzmY9cB/MB8GA1UdIwQY MBaAFOAV/wBaomaRx+Mw6/nBxMGuVJTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zODFiOWUtY2IxOS00MDg4LTkwNjYt ZGVlMzE3ZWVjMmY3LzEvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zODFiOWUtY2IxOS00MDg4LTkwNjYtZGVlMzE3ZWVjMmY3 LzEvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACREPvG6a QWdyqgYAOckSWn9UWcFIlbao9Bb/76NDfFH6RxPM7Ir5F0+bZoXew5MHXWq90QsM j5a7aalbi5JU+Ts/vrx40i08x7rqUaJJ2cIp+O/Il8JN1zOcBlq7xk1CsqZnuB1l 5jwrMcci4guh4S8g28CYmx8LKE7Tyds8X+MlFDCwkygqZ3JILymb5UXSI+SA+G9w kJUwcZFzpnYXvlyqr3Jtqu8ThlRGcgQakobhjmjfxFj2EdBU2Q88jA5CWX6eUgTx bS/R9PrdPID0Na4M0wh8EQ1dbMWC0NMV9Jr/K9mkqAbdPC2cjQDQYY5AXuD1Tgw1 o5KoiHvtz0orqA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:44:01 2025 by rpki-client