This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft File: 4C15LJfb1EguuBXMmk-59Uevegk.mft (raw, json) Hash identifier: 5vP8AwSEsyq9hxvR7noYOohl+mle+8PLZZK4DukZDek= Subject key identifier: 4C:EA:99:E3:4F:5E:1C:D6:F7:A1:05:0E:4F:4D:D1:34:18:F2:56:FB Authority key identifier: E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09 Certificate issuer: /CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09 Certificate serial: 019AF50B4A6061226607360C492C49386E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:02:29 +0000 Manifest this update: Sat 06 Dec 2025 19:02:29 +0000 Manifest next update: Sun 07 Dec 2025 19:02:29 +0000 Files and hashes: 1: 4C15LJfb1EguuBXMmk-59Uevegk.crl (hash: hZkyo5IQi5xwqfUyzjE9ON7WguQJoAWqU3cwD9NsGt4=) 2: cWQ3FcXIpgayQfqlmppdKMwVQXo.roa (hash: psm2EXD7JYCfSDQE9D3Rxu9Bj66wyGfDywECDIfOm7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:4a:60:61:22:66:07:36:0c:49:2c:49:38:6e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09 Validity Not Before: Dec 6 19:02:29 2025 GMT Not After : Dec 7 19:02:29 2025 GMT Subject: CN=4cea99e34f5e1cd6f7a1050e4f4dd13418f256fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:f2:07:57:35:7f:87:e6:53:d1:f2:ae:80: bd:29:ba:2f:9d:c2:aa:19:63:65:b1:c0:bb:2a:42: 1b:88:3d:86:9b:d8:56:e2:b3:f5:fa:f1:d2:e4:a0: 8d:c4:e5:ed:63:a9:84:d3:df:b0:0e:cf:23:9a:32: 5c:6b:8a:8b:81:93:f1:e1:78:96:a1:c1:de:25:43: 36:7f:b1:56:4b:3e:31:1a:a1:2b:03:2a:b8:d8:88: c7:0d:db:00:8c:fb:9b:30:b4:61:ad:ca:97:e8:e7: bf:f2:0d:8a:59:84:68:63:bf:df:1d:93:9b:a3:af: a6:cc:98:7b:5b:74:42:f2:a2:97:be:a1:73:da:9f: 57:b4:87:4e:11:d2:b2:17:0f:3f:a9:5b:72:7b:60: 3c:ed:e5:50:9e:ea:42:82:96:f4:10:b7:99:c6:ca: 25:f6:b0:09:17:3e:c8:ed:ed:75:c4:da:4c:67:72: d7:e1:ac:94:6d:f6:6b:f1:84:05:d6:52:70:1a:d0: 0e:30:eb:ca:77:cd:23:40:c2:3e:a9:c9:f3:b4:28: b5:f4:d0:5e:0a:37:a1:ff:6f:f2:5b:20:dc:ce:3b: f3:66:3a:57:d9:49:65:15:08:9b:dd:84:c5:0b:4c: ad:1e:f3:4e:2e:53:cd:51:15:87:99:05:80:71:43: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EA:99:E3:4F:5E:1C:D6:F7:A1:05:0E:4F:4D:D1:34:18:F2:56:FB X509v3 Authority Key Identifier: keyid:E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:05:78:f5:d5:04:de:ca:87:e4:50:14:99:55:3b:59:12:e0: 14:a0:3b:9d:22:21:eb:1b:04:84:4d:18:9b:3b:10:88:43:cd: ca:03:74:52:de:ed:75:02:4e:5c:37:bc:b6:12:15:54:a9:cb: e3:7c:e0:c0:e2:ba:f1:0d:01:d7:a0:79:89:4f:48:d6:40:4f: 37:51:73:7a:4d:36:53:c8:da:b6:b3:57:0d:e9:99:07:3b:58: 56:43:5c:01:a1:b5:72:6f:bc:ae:fe:69:70:23:f9:6a:a4:7c: 1f:aa:91:9e:a8:0d:29:f8:c8:d5:4b:95:68:ad:4d:12:7c:11: 13:6a:01:b2:97:04:16:33:3a:26:23:49:13:83:34:be:29:06: b2:76:70:8d:fd:1c:71:a0:64:09:cb:4c:c6:36:e1:4d:8d:cc: ad:2b:37:53:98:d1:1b:20:a3:a8:3e:a4:50:75:7b:52:21:7f: 5a:64:8f:84:e0:d0:f4:a3:5c:ca:b9:f3:03:2a:57:30:6d:eb: c7:81:f5:77:74:fd:79:9b:6f:5b:0e:22:60:30:c9:ff:8a:64: f3:04:50:6e:3a:78:d9:f9:87:4a:9e:6c:0a:89:ae:48:3e:f2: ba:af:c3:28:31:19:4c:d5:3b:8d:e2:8f:c4:81:23:04:5f:b2: 95:dc:fd:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0pgYSJmBzYMSSxJOG4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMmQ3OTJjOTdkYmQ0NDgyZWI4MTVjYzlhNGZiOWY1NDdh ZjdhMDkwHhcNMjUxMjA2MTkwMjI5WhcNMjUxMjA3MTkwMjI5WjAzMTEwLwYDVQQD Eyg0Y2VhOTllMzRmNWUxY2Q2ZjdhMTA1MGU0ZjRkZDEzNDE4ZjI1NmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7nyB1c1f4fmU9HyroC9KbovncKq GWNlscC7KkIbiD2Gm9hW4rP1+vHS5KCNxOXtY6mE09+wDs8jmjJca4qLgZPx4XiW ocHeJUM2f7FWSz4xGqErAyq42IjHDdsAjPubMLRhrcqX6Oe/8g2KWYRoY7/fHZOb o6+mzJh7W3RC8qKXvqFz2p9XtIdOEdKyFw8/qVtye2A87eVQnupCgpb0ELeZxsol 9rAJFz7I7e11xNpMZ3LX4ayUbfZr8YQF1lJwGtAOMOvKd80jQMI+qcnztCi19NBe Cjeh/2/yWyDczjvzZjpX2UllFQib3YTFC0ytHvNOLlPNURWHmQWAcUPu2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzqmeNPXhzW96EFDk9N0TQY8lb7MB8GA1UdIwQY MBaAFOAteSyX29RILrgVzJpPufVHr3oJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEMxNUxKZmIxRWd1dUJYTW1rLTU5VWV2ZWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mNzE5NWItZGQwMC00MjkwLTlmNzgt YWJkOTBmMzI5YzBjLzEvNEMxNUxKZmIxRWd1dUJYTW1rLTU5VWV2ZWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mNzE5NWItZGQwMC00MjkwLTlmNzgtYWJkOTBmMzI5YzBj LzEvNEMxNUxKZmIxRWd1dUJYTW1rLTU5VWV2ZWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgV49dUE 3sqH5FAUmVU7WRLgFKA7nSIh6xsEhE0YmzsQiEPNygN0Ut7tdQJOXDe8thIVVKnL 43zgwOK68Q0B16B5iU9I1kBPN1Fzek02U8jatrNXDemZBztYVkNcAaG1cm+8rv5p cCP5aqR8H6qRnqgNKfjI1UuVaK1NEnwRE2oBspcEFjM6JiNJE4M0vikGsnZwjf0c caBkCctMxjbhTY3MrSs3U5jRGyCjqD6kUHV7UiF/WmSPhODQ9KNcyrnzAypXMG3r x4H1d3T9eZtvWw4iYDDJ/4pk8wRQbjp42fmHSp5sComuSD7yuq/DKDEZTNU7jeKP xIEjBF+yldz9kw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:59 2025 by rpki-client