This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft File: P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json) Hash identifier: ycGPZIq6iFR58cqorxokT2Ts2shrRadYp2RJ/jj6jns= Subject key identifier: 79:88:44:B8:0C:7A:EA:D7:DA:98:90:1E:90:86:DF:7F:DA:F6:4C:88 Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8 Certificate issuer: /CN=3f8138fea066d6f504436001cc9d7f339db734c8 Certificate serial: 019AF8E86C3751E3B12F4F167486ADB6C215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft Manifest number: 03E7 Signing time: Sun 07 Dec 2025 13:02:52 +0000 Manifest this update: Sun 07 Dec 2025 13:02:52 +0000 Manifest next update: Mon 08 Dec 2025 13:02:52 +0000 Files and hashes: 1: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: AC+c34F/qpeqj7c0qQLSJMhdo98FB1UkXkkultBJkQo=) 2: a7YNlS63NsZTTW2uGzFrnfKok9w.roa (hash: A6Vj/t1HktktvRKs1GT2mBgPnzQ8ZrkihcAERAUHOMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e8:6c:37:51:e3:b1:2f:4f:16:74:86:ad:b6:c2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8 Validity Not Before: Dec 7 13:02:52 2025 GMT Not After : Dec 8 13:02:52 2025 GMT Subject: CN=798844b80c7aead7da98901e9086df7fdaf64c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:55:0a:17:fa:2a:05:e4:b3:48:f0:e8:42: c6:da:52:3c:b2:9c:5d:29:f7:60:14:96:79:91:8c: 1b:c2:0a:7e:70:b7:c6:df:2b:1d:b3:94:1c:b9:c2: 74:e6:e0:1c:c6:5b:95:64:fb:08:4e:d8:65:65:8d: 22:fa:e5:d3:2f:b8:9c:cc:68:4d:ca:94:35:2b:a8: 72:f2:47:f6:b0:73:d6:db:bf:13:be:f7:63:20:47: cd:1f:19:fa:f4:40:3e:bd:15:e7:06:a0:ae:c7:9b: 17:11:fa:06:1d:51:5c:f9:9c:3e:22:74:c5:e3:5a: a0:65:b3:2d:4a:ea:8a:6b:be:10:ac:fc:6e:47:8f: 0b:9c:5b:72:fc:b4:6f:89:70:b6:15:88:11:21:23: 17:eb:4c:f0:cd:28:2a:ae:5d:72:16:43:70:e0:cf: 0d:ec:81:e9:9c:2f:76:62:c2:d5:06:59:7b:c6:e8: a3:85:02:ab:b0:40:a6:6c:32:d5:3f:0a:0b:30:6a: 8c:77:d8:ef:8f:b0:86:70:06:7c:b0:cb:a8:2d:36: 2c:81:b1:37:1b:8b:f5:fa:a9:3e:23:b3:23:48:e7: 7e:2f:64:c0:2c:3e:8b:72:c2:de:f4:fa:11:f3:29: a3:ae:fc:17:46:02:84:a2:b0:13:0c:1b:78:4e:ee: db:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:88:44:B8:0C:7A:EA:D7:DA:98:90:1E:90:86:DF:7F:DA:F6:4C:88 X509v3 Authority Key Identifier: keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:46:b3:bb:ef:59:c3:30:bc:34:80:66:9e:d3:6b:46:8b:1b: cf:50:cf:86:66:2e:be:28:8b:bc:c9:a6:df:e5:e4:6d:f9:b3: 5e:1c:4d:1f:48:13:69:20:a1:93:45:a5:d3:3c:07:93:6f:2e: 64:4f:0d:2f:65:7f:08:0a:b5:81:4b:15:92:f1:42:73:f8:fb: 81:3c:e7:cb:58:df:48:39:2b:3f:d2:93:00:46:82:12:72:5e: ca:38:57:db:41:1c:61:08:99:88:62:ef:bf:5f:cd:b0:23:5c: 98:3b:e3:10:c8:46:47:f1:5f:14:a6:76:5f:14:69:44:5d:8c: 32:08:85:f2:2c:68:34:2e:12:5e:e8:e4:8a:d8:02:da:8c:69: 93:9c:49:65:d7:89:1d:48:3c:00:3a:bc:53:0d:21:50:c0:2a: 50:45:d1:89:df:6c:9b:37:77:c4:d8:e0:ef:a6:24:0b:45:ce: b9:e3:41:ae:a4:f0:f7:2a:2f:56:a5:05:32:61:66:ec:46:86: 6c:bf:95:33:db:3f:f0:9b:6d:0b:77:16:c6:04:92:fc:f8:10: d8:12:bc:84:18:cd:6e:5f:b8:04:e2:6d:f3:ec:9b:5c:26:53: 3f:ff:d3:6d:d0:ef:5c:42:40:ea:83:db:b2:63:c5:ff:80:65: c0:de:ae:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr46Gw3UeOxL08WdIattsIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmODEzOGZlYTA2NmQ2ZjUwNDQzNjAwMWNjOWQ3ZjMzOWRi NzM0YzgwHhcNMjUxMjA3MTMwMjUyWhcNMjUxMjA4MTMwMjUyWjAzMTEwLwYDVQQD Eyg3OTg4NDRiODBjN2FlYWQ3ZGE5ODkwMWU5MDg2ZGY3ZmRhZjY0Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQpVChf6KgXks0jw6ELG2lI8spxd KfdgFJZ5kYwbwgp+cLfG3ysds5QcucJ05uAcxluVZPsITthlZY0i+uXTL7iczGhN ypQ1K6hy8kf2sHPW278TvvdjIEfNHxn69EA+vRXnBqCux5sXEfoGHVFc+Zw+InTF 41qgZbMtSuqKa74QrPxuR48LnFty/LRviXC2FYgRISMX60zwzSgqrl1yFkNw4M8N 7IHpnC92YsLVBll7xuijhQKrsECmbDLVPwoLMGqMd9jvj7CGcAZ8sMuoLTYsgbE3 G4v1+qk+I7MjSOd+L2TALD6LcsLe9PoR8ymjrvwXRgKEorATDBt4Tu7b9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmIRLgMeurX2piQHpCG33/a9kyIMB8GA1UdIwQY MBaAFD+BOP6gZtb1BENgAcydfzOdtzTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgt ZTMyN2U1MjI3MDY2LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgtZTMyN2U1MjI3MDY2 LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEazu+9Z wzC8NIBmntNrRosbz1DPhmYuviiLvMmm3+XkbfmzXhxNH0gTaSChk0Wl0zwHk28u ZE8NL2V/CAq1gUsVkvFCc/j7gTzny1jfSDkrP9KTAEaCEnJeyjhX20EcYQiZiGLv v1/NsCNcmDvjEMhGR/FfFKZ2XxRpRF2MMgiF8ixoNC4SXujkitgC2oxpk5xJZdeJ HUg8ADq8Uw0hUMAqUEXRid9smzd3xNjg76YkC0XOueNBrqTw9yovVqUFMmFm7EaG bL+VM9s/8JttC3cWxgSS/PgQ2BK8hBjNbl+4BOJt8+ybXCZTP//TbdDvXEJA6oPb smPF/4BlwN6utw== -----END CERTIFICATE-----Generated at Sun Dec 7 16:59:51 2025 by rpki-client