This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json) Hash identifier: UT1xiaQQffnSmePU18VNl9bcjhGF5y8WCJEKA4n59dw= Subject key identifier: C5:11:E9:D8:74:35:FF:AC:61:38:E8:90:CD:3E:F0:DA:48:DE:D9:3E Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6 Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6 Certificate serial: 019AF389D4A54593835F9B7959F5A6960895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft Manifest number: 0E1E Signing time: Sat 06 Dec 2025 12:01:27 +0000 Manifest this update: Sat 06 Dec 2025 12:01:27 +0000 Manifest next update: Sun 07 Dec 2025 12:01:27 +0000 Files and hashes: 1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: kMvhAgZ0+53quKeIzWg/akSOurLFgGfpfhqEoje/aFM=) 2: Q8-T8rHgFoT7CVxsMFqUQCc8JdY.roa (hash: RshmXbtDnZ3rOqJWlQSI0/TW/t+laA0v6rWUW/sLLhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d4:a5:45:93:83:5f:9b:79:59:f5:a6:96:08:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6 Validity Not Before: Dec 6 12:01:27 2025 GMT Not After : Dec 7 12:01:27 2025 GMT Subject: CN=c511e9d87435ffac6138e890cd3ef0da48ded93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:13:2c:98:e5:06:6e:de:ae:3b:45:a8:98: fe:21:49:35:12:c2:7d:eb:26:63:37:ae:fd:21:1b: b9:90:15:62:4b:77:c1:ca:d2:30:65:f8:ca:3f:13: 0a:82:0d:0b:04:1b:18:0a:49:b6:b0:4e:44:f7:47: ea:39:7c:e2:17:08:12:17:d7:b1:83:19:07:47:c1: 56:fc:61:39:32:a2:62:bb:74:fa:9d:49:a4:96:bb: 2e:9e:71:1c:de:b2:fe:af:bf:7d:2d:bf:56:90:ff: 86:cc:25:96:1c:6f:9c:8f:99:3c:04:bf:e3:f5:21: ea:d5:b0:11:f8:67:c1:37:1f:e0:b6:9c:1a:27:5c: 7a:8b:32:56:6b:01:b3:f1:1a:ed:0f:ce:de:6d:5d: d0:74:d5:b6:39:b5:67:e7:bd:a6:5d:11:5c:27:3f: 0c:68:55:7f:6d:76:1f:44:2e:e6:f6:02:a8:b6:2f: b6:f5:b6:98:53:33:b5:e8:b7:3e:18:b3:f8:57:12: 58:2f:f8:39:bd:13:55:f0:e5:67:21:fb:0c:ee:6d: f5:f9:4a:5a:24:8a:62:2e:07:3d:4f:14:19:19:ee: aa:84:ab:5b:c2:ab:97:cb:0a:37:2e:d8:6c:29:9e: a9:50:42:6e:37:44:ed:d3:e1:f7:0c:2b:74:59:a2: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:11:E9:D8:74:35:FF:AC:61:38:E8:90:CD:3E:F0:DA:48:DE:D9:3E X509v3 Authority Key Identifier: keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:89:8d:92:d1:83:e8:26:a1:43:c9:9f:f6:f4:60:7b:fe:3f: 47:b2:c4:58:79:1d:d2:8e:b5:e4:cc:ae:c8:7e:5c:f9:2f:29: 1e:c1:c9:70:1c:86:a5:07:56:e4:52:39:dc:b3:e2:20:ff:7d: 8b:12:73:ac:c8:97:d6:9e:d3:a1:f1:70:95:47:6e:88:94:5a: 0f:a0:b4:16:45:39:29:cf:71:4d:35:34:93:f7:a9:b7:01:70: d2:cc:af:8d:6a:bf:bc:dd:58:25:5b:a5:d5:fa:4c:88:a6:b7: 26:77:66:b6:3a:cd:fd:0c:a1:3e:a3:56:d1:1f:f4:3c:eb:29: ab:8d:3b:df:49:68:4c:9c:55:6a:d1:25:84:11:b9:4e:05:05: 47:42:13:a2:3c:ae:48:e8:7c:39:80:ad:67:38:c3:ff:cf:f3: b5:ed:e5:fe:0f:84:63:ce:86:8f:39:79:a1:42:0c:b5:f7:53: 99:1d:09:dc:31:f9:77:dd:9a:2c:71:15:e6:3a:68:ba:19:8c: 7a:31:99:91:a0:d3:0a:e3:54:9f:72:aa:88:20:58:0c:f4:57: a3:15:13:f4:2c:b2:2a:a4:18:7d:69:b6:4c:c2:11:c4:1b:fd: 43:76:5f:c3:99:98:6d:9b:b2:7b:e7:be:09:89:f8:89:04:6a: 11:9a:74:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidSlRZODX5t5WfWmlgiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGZiYjliM2NkMWMyMTZhZGM2OTllNWVkYWQ1ZjUzMWQ5 YWZjYjYwHhcNMjUxMjA2MTIwMTI3WhcNMjUxMjA3MTIwMTI3WjAzMTEwLwYDVQQD EyhjNTExZTlkODc0MzVmZmFjNjEzOGU4OTBjZDNlZjBkYTQ4ZGVkOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS4TLJjlBm7erjtFqJj+IUk1EsJ9 6yZjN679IRu5kBViS3fBytIwZfjKPxMKgg0LBBsYCkm2sE5E90fqOXziFwgSF9ex gxkHR8FW/GE5MqJiu3T6nUmklrsunnEc3rL+r799Lb9WkP+GzCWWHG+cj5k8BL/j 9SHq1bAR+GfBNx/gtpwaJ1x6izJWawGz8RrtD87ebV3QdNW2ObVn572mXRFcJz8M aFV/bXYfRC7m9gKoti+29baYUzO16Lc+GLP4VxJYL/g5vRNV8OVnIfsM7m31+Upa JIpiLgc9TxQZGe6qhKtbwquXywo3LthsKZ6pUEJuN0Tt0+H3DCt0WaJfIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUR6dh0Nf+sYTjokM0+8NpI3tk+MB8GA1UdIwQY MBaAFOEPu5s80cIWrcaZ5e2tX1Mdmvy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQt NjJhMjhmM2UwMDFjLzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQtNjJhMjhmM2UwMDFj LzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYmNktGD 6CahQ8mf9vRge/4/R7LEWHkd0o615MyuyH5c+S8pHsHJcByGpQdW5FI53LPiIP99 ixJzrMiX1p7TofFwlUduiJRaD6C0FkU5Kc9xTTU0k/eptwFw0syvjWq/vN1YJVul 1fpMiKa3JndmtjrN/QyhPqNW0R/0POspq40730loTJxVatElhBG5TgUFR0ITojyu SOh8OYCtZzjD/8/zte3l/g+EY86Gjzl5oUIMtfdTmR0J3DH5d92aLHEV5jpouhmM ejGZkaDTCuNUn3KqiCBYDPRXoxUT9CyyKqQYfWm2TMIRxBv9Q3Zfw5mYbZuye+e+ CYn4iQRqEZp0Tg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:22:10 2025 by rpki-client