This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json) Hash identifier: Rp5tnUw2ZQMNyd/oG7wwh4tN6qmIbqBQ67RVPhhkb0M= Subject key identifier: 4A:1F:AD:C1:96:66:71:65:4F:D0:41:8C:77:45:1C:53:71:2B:12:FF Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4 Certificate issuer: /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4 Certificate serial: 019AF276FC35BAF2AFE709FF99CCBCC1F2AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft Manifest number: 0E6A Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: nDy4UWB/RzwnPDeez50ZORYRkyX9jlZevk8UzgXFWd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fc:35:ba:f2:af:e7:09:ff:99:cc:bc:c1:f2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=4a1fadc1966671654fd0418c77451c53712b12ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:85:dc:c5:11:d9:78:e2:ef:db:52:03:56: 1b:ce:cc:4c:e7:e7:70:03:5f:2d:60:49:b9:b9:c7: 08:98:44:b1:99:0d:84:52:ba:b2:e4:e5:89:d2:9c: b2:46:da:8d:0e:31:6b:5b:eb:73:2d:07:69:61:c3: da:c7:a6:8c:a0:3e:6a:7f:63:32:e7:62:cb:27:88: 15:57:db:a9:3d:fd:92:85:64:0f:8b:37:3d:49:37: 2a:90:13:10:65:95:27:61:f1:97:fb:1a:0a:c1:7a: d9:3e:60:82:8f:7c:4b:36:ec:33:df:bb:54:2c:d3: 8e:9d:be:07:32:90:83:b0:79:cf:7d:89:c1:d0:bf: 4e:b3:07:5b:f8:ce:79:0e:ad:0e:17:80:ef:aa:c7: f9:69:a6:bb:59:d3:4f:14:78:5c:3c:9c:ec:ce:31: 42:5a:17:31:37:36:0a:07:3b:49:50:5e:7d:e4:a7: c6:a7:00:9a:d9:36:1e:f2:f7:48:0e:d5:89:9b:2d: dc:2c:37:fc:2c:c2:8c:fe:5f:44:64:e7:b3:59:1c: 7c:f3:10:ce:51:9c:fa:d0:34:90:52:4b:d3:f2:36: a7:1f:f4:e2:29:9e:87:fd:f6:3e:45:4a:9c:e2:92: f8:0c:21:2b:b3:aa:65:5f:32:17:65:4f:3d:a4:96: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1F:AD:C1:96:66:71:65:4F:D0:41:8C:77:45:1C:53:71:2B:12:FF X509v3 Authority Key Identifier: keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:86:4e:6f:8c:5d:e6:2b:1a:7f:99:76:96:32:5c:08:07:10: 54:58:af:b0:7e:3c:c4:e7:ac:19:3b:bc:46:55:6f:9c:8b:ea: 8f:26:03:3a:6e:0d:44:14:fa:7d:9f:22:66:e0:4e:dd:ed:0e: 66:51:6f:71:49:89:2a:71:9b:b8:9d:15:a2:4b:07:d4:fa:fa: 7d:62:4c:97:4d:52:13:86:7e:81:1e:ea:96:c9:67:62:94:b4: c9:17:11:43:a4:9c:d5:18:3d:bf:c3:6e:df:1c:9b:4c:50:35: 7d:99:fa:30:46:01:2a:58:57:51:40:ed:ee:ed:85:0f:b0:73: c3:62:8a:9a:82:9a:60:9a:c2:8d:77:52:ee:d6:ae:16:7f:17: 1f:8f:24:5c:12:ad:d9:6f:db:ec:8e:53:25:07:70:53:ba:93: 59:27:9a:e4:71:ff:fe:11:1b:44:38:72:13:ca:37:14:bc:2e: 74:d1:b2:fc:f7:41:9d:4b:f9:62:fb:8e:16:ee:f9:d9:c8:d2: ea:3f:04:7c:92:23:79:d0:80:c6:c9:41:ff:a5:e7:99:33:59: 9f:0a:c4:69:93:bd:29:99:ed:55:f3:f7:a0:30:57:d3:65:dd: fb:07:3a:b6:06:85:48:3c:1f:40:4d:e5:fd:de:cd:ed:b9:4c: a2:5c:fd:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvw1uvKv5wn/mcy8wfKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZmUyNmY5YTdiMjNmYmYxMTgyZGU2MmMzYWQ1MjI3NjBj MzE2ZjQwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD Eyg0YTFmYWRjMTk2NjY3MTY1NGZkMDQxOGM3NzQ1MWM1MzcxMmIxMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4GF3MUR2Xji79tSA1YbzsxM5+dw A18tYEm5uccImESxmQ2EUrqy5OWJ0pyyRtqNDjFrW+tzLQdpYcPax6aMoD5qf2My 52LLJ4gVV9upPf2ShWQPizc9STcqkBMQZZUnYfGX+xoKwXrZPmCCj3xLNuwz37tU LNOOnb4HMpCDsHnPfYnB0L9Oswdb+M55Dq0OF4Dvqsf5aaa7WdNPFHhcPJzszjFC WhcxNzYKBztJUF595KfGpwCa2TYe8vdIDtWJmy3cLDf8LMKM/l9EZOezWRx88xDO UZz60DSQUkvT8janH/TiKZ6H/fY+RUqc4pL4DCErs6plXzIXZU89pJacQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEofrcGWZnFlT9BBjHdFHFNxKxL/MB8GA1UdIwQY MBaAFPz+Jvmnsj+/EYLeYsOtUidgwxb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1A0bS1hZXlQNzhSZ3Q1aXc2MVNKMkRERnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lNzhkZWQtZTg5MC00MGQyLTk4ZTAt MzFhMzVkYjIwMWY5LzEvX1A0bS1hZXlQNzhSZ3Q1aXc2MVNKMkRERnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9lNzhkZWQtZTg5MC00MGQyLTk4ZTAtMzFhMzVkYjIwMWY5 LzEvX1A0bS1hZXlQNzhSZ3Q1aXc2MVNKMkRERnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoZOb4xd 5isaf5l2ljJcCAcQVFivsH48xOesGTu8RlVvnIvqjyYDOm4NRBT6fZ8iZuBO3e0O ZlFvcUmJKnGbuJ0VoksH1Pr6fWJMl01SE4Z+gR7qlslnYpS0yRcRQ6Sc1Rg9v8Nu 3xybTFA1fZn6MEYBKlhXUUDt7u2FD7Bzw2KKmoKaYJrCjXdS7tauFn8XH48kXBKt 2W/b7I5TJQdwU7qTWSea5HH//hEbRDhyE8o3FLwudNGy/PdBnUv5YvuOFu752cjS 6j8EfJIjedCAxslB/6XnmTNZnwrEaZO9KZntVfP3oDBX02Xd+wc6tgaFSDwfQE3l /d7N7blMolz99g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:26 2025 by rpki-client