This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft File: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json) Hash identifier: QtcaEqGZf3k2UtJ3E/6GpYr5tu5spQqzoHrGfj6GYds= Subject key identifier: AB:2E:16:F6:58:51:22:A1:B8:95:38:FC:49:D2:CC:C7:38:34:6D:0B Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F Certificate issuer: /CN=e312f441382d5ba1d80df459bd46c0a31590e72f Certificate serial: 019AF6538AEE99EFAEA083FD8BDEBB26B1F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft Manifest number: 0300 Signing time: Sun 07 Dec 2025 01:01:01 +0000 Manifest this update: Sun 07 Dec 2025 01:01:01 +0000 Manifest next update: Mon 08 Dec 2025 01:01:01 +0000 Files and hashes: 1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: TIfB78TEOl9YYnhcc0CrwRI0/GzgREah15ARWzz+p2Q=) 2: V9qSkag-yPFb6kdg7t_bXdafQY8.roa (hash: /gE5NbLPMb6fQQc04np3UK1UkGHwo2L/kFXUOBu9e5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:8a:ee:99:ef:ae:a0:83:fd:8b:de:bb:26:b1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f Validity Not Before: Dec 7 01:01:01 2025 GMT Not After : Dec 8 01:01:01 2025 GMT Subject: CN=ab2e16f6585122a1b89538fc49d2ccc738346d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:d6:28:c0:01:0d:34:fd:05:e5:a0:05:f7: b3:53:ea:f4:9f:59:60:8f:2a:1d:8b:fd:d1:52:18: 30:6d:45:11:a9:12:cc:24:f7:88:42:a7:e0:5c:89: 00:50:33:87:c2:26:eb:7d:05:d5:73:51:1b:fb:ba: f1:d2:fe:ac:1f:ed:6c:35:bc:2c:80:fd:cb:20:b8: 8a:6e:b4:e9:e5:56:29:59:8a:60:87:d2:62:8c:9a: e1:1c:d6:16:de:dc:87:8d:37:a9:64:16:19:cc:83: 03:9b:dd:78:29:f8:7e:14:be:89:e5:63:96:0d:38: d7:a4:76:22:14:88:d2:5b:37:d8:17:35:6a:ff:6a: 72:62:61:0c:c9:68:d2:c7:65:61:73:7d:1d:85:c2: 03:36:c3:b1:bd:14:02:5a:dc:a3:e0:2d:c8:31:ad: 00:9b:fa:9e:ea:24:e9:f9:60:a9:83:ee:3b:c2:ca: 3e:cd:e4:37:96:d4:7b:8c:49:ef:d3:d5:fa:66:ef: 87:c2:df:3e:f4:b2:e9:6a:aa:88:fe:9b:a5:86:0d: 9b:60:ac:ae:05:93:de:b3:b6:a7:9f:d6:8c:07:fe: d7:82:77:03:02:1b:69:f3:7a:45:65:06:06:4f:77: 37:ec:fc:bf:d8:cb:da:d0:db:58:59:f7:e6:ad:41: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2E:16:F6:58:51:22:A1:B8:95:38:FC:49:D2:CC:C7:38:34:6D:0B X509v3 Authority Key Identifier: keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a2:f9:54:cf:4b:21:3b:df:43:23:32:1f:b6:b8:f4:6d:42: 12:1d:96:69:0e:7a:2a:cd:f4:0c:dc:e7:7e:c1:f6:b7:44:9b: 23:16:4a:d1:ee:b0:1e:44:49:38:7b:dc:c3:43:f5:14:c9:b3: 44:3b:df:c8:54:50:00:26:24:46:e3:4e:9b:ff:34:b4:7a:4a: 5e:2f:bd:60:9e:27:3f:31:52:fc:dc:b0:33:7e:2b:8b:9d:00: 32:b3:ac:7d:98:62:5c:b5:4a:a0:ff:45:77:45:21:4a:53:6c: 1e:19:a7:30:ab:56:74:16:97:b3:d1:97:77:dc:7a:50:72:8f: 55:85:16:ab:c4:1f:f7:16:0d:c9:c6:84:52:e7:13:cc:6c:8d: 9e:ea:bb:b3:ae:54:42:73:30:02:06:e4:2a:76:20:42:81:be: 51:a5:92:82:e9:9e:8b:d7:1b:14:26:2e:bc:84:dd:e0:d5:a0: 22:84:b8:27:3f:8f:f1:6c:69:11:e4:a5:cb:b1:3a:7f:f8:98: b6:b3:73:32:5f:9d:c7:73:bc:7a:33:59:9a:00:b3:f8:f7:76: 2e:4d:16:61:80:43:e2:19:81:b9:80:80:bd:d2:a7:a1:5d:da: eb:56:8d:11:56:d5:d0:73:4a:a7:ce:54:56:fb:ac:bc:c1:a6: e9:68:46:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U4rume+uoIP9i967JrH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTJmNDQxMzgyZDViYTFkODBkZjQ1OWJkNDZjMGEzMTU5 MGU3MmYwHhcNMjUxMjA3MDEwMTAxWhcNMjUxMjA4MDEwMTAxWjAzMTEwLwYDVQQD EyhhYjJlMTZmNjU4NTEyMmExYjg5NTM4ZmM0OWQyY2NjNzM4MzQ2ZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IjWKMABDTT9BeWgBfezU+r0n1lg jyodi/3RUhgwbUURqRLMJPeIQqfgXIkAUDOHwibrfQXVc1Eb+7rx0v6sH+1sNbws gP3LILiKbrTp5VYpWYpgh9JijJrhHNYW3tyHjTepZBYZzIMDm914Kfh+FL6J5WOW DTjXpHYiFIjSWzfYFzVq/2pyYmEMyWjSx2Vhc30dhcIDNsOxvRQCWtyj4C3IMa0A m/qe6iTp+WCpg+47wso+zeQ3ltR7jEnv09X6Zu+Hwt8+9LLpaqqI/pulhg2bYKyu BZPes7ann9aMB/7XgncDAhtp83pFZQYGT3c37Py/2Mva0NtYWffmrUGl4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsuFvZYUSKhuJU4/EnSzMc4NG0LMB8GA1UdIwQY MBaAFOMS9EE4LVuh2A30Wb1GwKMVkOcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTkt YjgwZWZiZDY4YmZkLzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTktYjgwZWZiZDY4YmZk LzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKL5VM9L ITvfQyMyH7a49G1CEh2WaQ56Ks30DNznfsH2t0SbIxZK0e6wHkRJOHvcw0P1FMmz RDvfyFRQACYkRuNOm/80tHpKXi+9YJ4nPzFS/NywM34ri50AMrOsfZhiXLVKoP9F d0UhSlNsHhmnMKtWdBaXs9GXd9x6UHKPVYUWq8Qf9xYNycaEUucTzGyNnuq7s65U QnMwAgbkKnYgQoG+UaWSgumei9cbFCYuvITd4NWgIoS4Jz+P8WxpEeSly7E6f/iY trNzMl+dx3O8ejNZmgCz+Pd2Lk0WYYBD4hmBuYCAvdKnoV3a61aNEVbV0HNKp85U VvusvMGm6WhGkg== -----END CERTIFICATE-----Generated at Sun Dec 7 08:13:01 2025 by rpki-client