This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.mft File: 4p9sKxV-ZtjY8gMvOafwtBlitEc.mft (raw, json) Hash identifier: qSWFekL8SFpJnmttssqQNc8ZkOsX0XuXkeKZmH0xo3Q= Subject key identifier: 10:52:73:58:82:42:EB:BA:F8:1D:0C:B8:56:E5:64:81:35:11:E8:1A Authority key identifier: E2:9F:6C:2B:15:7E:66:D8:D8:F2:03:2F:39:A7:F0:B4:19:62:B4:47 Certificate issuer: /CN=e29f6c2b157e66d8d8f2032f39a7f0b41962b447 Certificate serial: 019AF0BF7D603C2C51D006033B47673DF8A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9sKxV-ZtjY8gMvOafwtBlitEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.mft Manifest number: 40 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: 4p9sKxV-ZtjY8gMvOafwtBlitEc.crl (hash: x71ecLSB+YDGZd/87cgMV/a8UNLCbWQ/PUXzPUGALoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.mft rsync://rpki.ripe.net/repository/DEFAULT/4p9sKxV-ZtjY8gMvOafwtBlitEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7d:60:3c:2c:51:d0:06:03:3b:47:67:3d:f8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29f6c2b157e66d8d8f2032f39a7f0b41962b447 Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=105273588242ebbaf81d0cb856e564813511e81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:9d:e6:c6:9a:6f:cd:00:ec:8e:1c:8d:87: 1f:90:e8:46:5d:b2:a2:c0:2a:bc:ce:44:68:c8:e8: 70:e2:48:36:a3:2e:a3:03:63:71:2e:44:02:1f:e4: 95:75:e7:0e:9d:59:4d:8a:f0:ce:81:ef:9b:de:14: 1c:76:5f:e5:6f:af:ab:52:72:bf:a7:f6:d3:1a:b0: ff:45:cc:b0:83:55:98:a9:b8:9e:d7:fd:f9:7c:04: 75:84:86:ee:4b:d3:0c:78:35:78:a1:0a:62:7a:59: fa:32:63:9f:e1:2c:cb:8a:6f:e1:13:28:03:e4:3a: ca:30:ca:56:86:65:79:03:22:be:f6:5d:a3:b2:6d: 97:0c:ce:7d:71:11:3f:19:f9:99:fa:d7:19:64:fe: 2c:67:af:a2:09:7b:6f:8f:1a:8a:be:9e:aa:b2:99: 02:15:e0:59:90:20:0e:99:8f:8d:b9:4a:10:59:2a: 1b:4d:a4:10:6b:78:c0:bf:0e:5c:46:18:28:28:fc: c1:12:34:b6:6d:25:07:2e:8b:fe:84:1e:01:b6:95: 4e:2e:a7:64:10:a2:f5:b0:46:58:67:0f:e5:e4:a9: 8b:06:f2:c2:65:c9:a4:06:df:05:5e:e7:d2:8a:91: 50:41:61:c8:ec:1e:01:65:a4:82:d6:34:51:23:1e: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:52:73:58:82:42:EB:BA:F8:1D:0C:B8:56:E5:64:81:35:11:E8:1A X509v3 Authority Key Identifier: keyid:E2:9F:6C:2B:15:7E:66:D8:D8:F2:03:2F:39:A7:F0:B4:19:62:B4:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9sKxV-ZtjY8gMvOafwtBlitEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:60:d3:e3:b0:10:4e:14:e6:d0:29:ac:4e:bf:31:e6:0c:24: bb:06:54:3d:7a:da:24:9b:37:a2:b4:17:84:e0:f0:56:25:5a: 7d:57:eb:8b:d7:ba:12:cb:14:4d:65:a6:e0:57:2b:fa:df:7e: a1:61:3e:26:64:5f:7c:96:4a:6a:f9:6c:1d:ba:7b:ea:04:37: 34:61:f2:0c:a1:f9:73:44:87:60:3a:5d:c1:5f:93:4a:ee:fc: 4f:77:9e:f5:66:b7:37:f5:29:bc:a7:02:94:03:07:44:20:fd: 1f:67:53:44:91:4b:a5:f7:42:af:11:72:1a:1b:81:44:ad:70: aa:c4:9b:85:75:5d:4b:ac:14:e2:51:4f:9a:bf:32:96:8a:0f: f0:4a:ae:e9:0d:55:2f:4a:6e:75:1d:fe:dc:d6:ac:fb:6f:9c: 08:5d:13:54:53:54:d2:dd:dc:10:0c:71:ae:23:de:86:7d:e8: a6:08:34:50:70:e1:82:d6:15:86:49:15:fd:cb:be:b1:f7:fc: 41:50:0c:22:5a:bd:17:f0:d3:49:92:c0:7b:17:18:1e:81:6f: 73:5e:3f:f5:44:9e:e5:af:5b:09:ae:5b:e3:2e:0b:36:c1:d0: c1:dd:31:1d:f1:cb:9e:93:df:c8:4c:50:a5:ea:dc:5b:e2:88: aa:bb:18:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv31gPCxR0AYDO0dnPfiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWY2YzJiMTU3ZTY2ZDhkOGYyMDMyZjM5YTdmMGI0MTk2 MmI0NDcwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD EygxMDUyNzM1ODgyNDJlYmJhZjgxZDBjYjg1NmU1NjQ4MTM1MTFlODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMCd5saab80A7I4cjYcfkOhGXbKi wCq8zkRoyOhw4kg2oy6jA2NxLkQCH+SVdecOnVlNivDOge+b3hQcdl/lb6+rUnK/ p/bTGrD/Rcywg1WYqbie1/35fAR1hIbuS9MMeDV4oQpieln6MmOf4SzLim/hEygD 5DrKMMpWhmV5AyK+9l2jsm2XDM59cRE/GfmZ+tcZZP4sZ6+iCXtvjxqKvp6qspkC FeBZkCAOmY+NuUoQWSobTaQQa3jAvw5cRhgoKPzBEjS2bSUHLov+hB4BtpVOLqdk EKL1sEZYZw/l5KmLBvLCZcmkBt8FXufSipFQQWHI7B4BZaSC1jRRIx6X+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBSc1iCQuu6+B0MuFblZIE1EegaMB8GA1UdIwQY MBaAFOKfbCsVfmbY2PIDLzmn8LQZYrRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHA5c0t4Vi1adGpZOGdNdk9hZnd0QmxpdEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kN2UyMDQtYjkwMS00NDNhLTg4NGYt YjA1YWEwMTAwNjc5LzEvNHA5c0t4Vi1adGpZOGdNdk9hZnd0QmxpdEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kN2UyMDQtYjkwMS00NDNhLTg4NGYtYjA1YWEwMTAwNjc5 LzEvNHA5c0t4Vi1adGpZOGdNdk9hZnd0QmxpdEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2DT47AQ ThTm0CmsTr8x5gwkuwZUPXraJJs3orQXhODwViVafVfri9e6EssUTWWm4Fcr+t9+ oWE+JmRffJZKavlsHbp76gQ3NGHyDKH5c0SHYDpdwV+TSu78T3ee9Wa3N/UpvKcC lAMHRCD9H2dTRJFLpfdCrxFyGhuBRK1wqsSbhXVdS6wU4lFPmr8ylooP8Equ6Q1V L0pudR3+3Nas+2+cCF0TVFNU0t3cEAxxriPehn3opgg0UHDhgtYVhkkV/cu+sff8 QVAMIlq9F/DTSZLAexcYHoFvc14/9USe5a9bCa5b4y4LNsHQwd0xHfHLnpPfyExQ percW+KIqrsYhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:53 2025 by rpki-client