This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json) Hash identifier: tSyGptdTH5RaCskJLkmjYb9hI7nNhArYmuPYbsNcWlc= Subject key identifier: C5:F2:23:41:91:CB:C6:EC:C2:E4:12:74:DA:3E:E4:61:1F:83:17:8C Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91 Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91 Certificate serial: 019AF31D2032A50F2819C3F887A704CE57F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft Manifest number: 1065 Signing time: Sat 06 Dec 2025 10:02:43 +0000 Manifest this update: Sat 06 Dec 2025 10:02:43 +0000 Manifest next update: Sun 07 Dec 2025 10:02:43 +0000 Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: susJBdDgKnPtIQ8dVWQqKjFOwiQ/evwWk21yTAT7lGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:20:32:a5:0f:28:19:c3:f8:87:a7:04:ce:57:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91 Validity Not Before: Dec 6 10:02:43 2025 GMT Not After : Dec 7 10:02:43 2025 GMT Subject: CN=c5f2234191cbc6ecc2e41274da3ee4611f83178c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:7f:11:1b:e7:c7:9d:41:93:d4:72:ea:01: 24:1e:0d:bd:a5:65:eb:7b:48:64:c9:ca:e1:9d:a5: 1c:98:0c:d1:9f:8f:42:8a:42:33:1a:97:2c:4f:08: c4:cf:c0:3a:51:9d:01:67:f0:27:90:b9:59:85:db: 43:c9:cf:ee:b2:f0:52:74:d2:74:69:30:80:e4:2e: a8:6c:58:92:f3:d7:8f:f7:67:b9:e3:a7:c9:6b:6f: 77:0f:8c:0f:97:cf:1b:9a:78:c9:d7:fb:69:72:48: 8a:8e:7f:ea:2d:67:b7:07:c1:a8:96:28:f0:1a:49: 85:70:78:e1:c6:56:93:5e:e0:43:22:4b:d5:92:ca: 98:e4:13:36:c8:15:e1:96:72:34:d5:14:e4:c9:2a: 68:1f:d0:3b:79:6a:71:ee:c5:27:f7:7d:2b:77:b2: 2f:1f:75:84:b7:f7:e1:9c:74:88:63:90:1a:10:c4: 53:da:bd:83:cb:9d:e0:bf:f2:60:5a:0b:a1:79:84: 8f:24:14:03:31:e5:2a:22:99:6a:1a:b9:30:cf:bd: 5d:ce:05:a3:08:e1:4e:bc:81:4e:73:18:d9:d0:4b: 9d:52:40:a1:c5:08:27:2c:1f:6c:e3:99:b5:39:c8: 68:38:33:14:d0:69:e0:10:1f:07:a3:80:66:af:b0: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F2:23:41:91:CB:C6:EC:C2:E4:12:74:DA:3E:E4:61:1F:83:17:8C X509v3 Authority Key Identifier: keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c8:81:41:8a:f7:57:df:7f:2c:14:bb:c3:92:d3:65:59:a1: 50:a6:11:54:75:07:90:9c:dd:4f:39:30:05:01:7f:fa:86:63: b7:1d:9d:75:06:83:e9:f8:0e:a5:92:9c:e0:8a:f6:76:ae:b6: ee:4a:81:e1:8f:7e:ac:85:1c:42:6f:5e:59:c1:a4:8e:62:fb: a9:7a:a0:4d:4a:9c:d3:cd:53:b4:ad:93:94:e1:1e:3a:0c:5c: a5:ac:86:5b:c8:8e:2e:e1:69:f2:9e:39:f7:74:22:6a:29:6e: 59:58:f8:bb:a5:57:87:27:19:19:02:ee:26:b4:b6:cc:5b:e4: 60:24:e4:04:6c:59:9a:5c:22:d6:99:d5:79:0b:cb:2a:c4:0e: 73:b1:e2:2d:28:e9:da:96:0b:23:78:d2:ee:f7:86:a3:43:b0: ac:86:6b:d6:f5:90:d7:b3:50:7c:ee:ee:e2:dc:0d:b6:6a:d3: 94:ff:3d:89:66:29:c4:f0:fb:40:a0:bb:06:a9:14:16:da:81: 69:b7:48:27:2a:2c:cd:87:1b:7c:a9:02:d4:9d:c9:07:87:fc: d8:bc:52:7d:72:1f:31:eb:74:b8:1b:f7:a7:a5:3c:43:9f:60: c8:4d:36:8c:49:9f:58:a2:71:cd:3b:0e:d4:78:2e:10:9f:fe: 92:ce:bd:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSAypQ8oGcP4h6cEzlf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjUzNDNkOTViZDRkYmMzMGYzZDcyMjQ5NTQxYTlkNDdl NzZkOTEwHhcNMjUxMjA2MTAwMjQzWhcNMjUxMjA3MTAwMjQzWjAzMTEwLwYDVQQD EyhjNWYyMjM0MTkxY2JjNmVjYzJlNDEyNzRkYTNlZTQ2MTFmODMxNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJp/ERvnx51Bk9Ry6gEkHg29pWXr e0hkycrhnaUcmAzRn49CikIzGpcsTwjEz8A6UZ0BZ/AnkLlZhdtDyc/usvBSdNJ0 aTCA5C6obFiS89eP92e546fJa293D4wPl88bmnjJ1/tpckiKjn/qLWe3B8Golijw GkmFcHjhxlaTXuBDIkvVksqY5BM2yBXhlnI01RTkySpoH9A7eWpx7sUn930rd7Iv H3WEt/fhnHSIY5AaEMRT2r2Dy53gv/JgWguheYSPJBQDMeUqIplqGrkwz71dzgWj COFOvIFOcxjZ0EudUkChxQgnLB9s45m1OchoODMU0GngEB8Ho4Bmr7D5ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXyI0GRy8bswuQSdNo+5GEfgxeMMB8GA1UdIwQY MBaAFOFlND2VvU28MPPXIklUGp1H522RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdVMFBaVzlUYnd3ODljaVNWUWFuVWZuYlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZDI2YjgtZjc0Ny00ZDlhLTlhYTIt NmUyYzA1M2Q5OTkzLzEvNFdVMFBaVzlUYnd3ODljaVNWUWFuVWZuYlpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83ZDI2YjgtZjc0Ny00ZDlhLTlhYTItNmUyYzA1M2Q5OTkz LzEvNFdVMFBaVzlUYnd3ODljaVNWUWFuVWZuYlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMiBQYr3 V99/LBS7w5LTZVmhUKYRVHUHkJzdTzkwBQF/+oZjtx2ddQaD6fgOpZKc4Ir2dq62 7kqB4Y9+rIUcQm9eWcGkjmL7qXqgTUqc081TtK2TlOEeOgxcpayGW8iOLuFp8p45 93QiailuWVj4u6VXhycZGQLuJrS2zFvkYCTkBGxZmlwi1pnVeQvLKsQOc7HiLSjp 2pYLI3jS7veGo0OwrIZr1vWQ17NQfO7u4twNtmrTlP89iWYpxPD7QKC7BqkUFtqB abdIJyoszYcbfKkC1J3JB4f82LxSfXIfMet0uBv3p6U8Q59gyE02jEmfWKJxzTsO 1HguEJ/+ks69uA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:06 2025 by rpki-client