This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft File: 4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json) Hash identifier: LRVNCU4zHyaxFaRnZ9gIjY3NMhQWf3FWHYiwbDfsCrY= Subject key identifier: AA:7B:EF:BE:FF:61:78:B1:2E:D9:55:C4:51:16:A7:34:EB:3F:D1:9A Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b Certificate serial: 019AF12CD0DE5288D09A8D8CA6DFE46F080D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:37 +0000 Manifest this update: Sat 06 Dec 2025 01:00:37 +0000 Manifest next update: Sun 07 Dec 2025 01:00:37 +0000 Files and hashes: 1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: k8cacr9bUG3kT61tHHv0ZxamYAXq5r2u+LVgtXjL1uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d0:de:52:88:d0:9a:8d:8c:a6:df:e4:6f:08:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b Validity Not Before: Dec 6 01:00:37 2025 GMT Not After : Dec 7 01:00:37 2025 GMT Subject: CN=aa7befbeff6178b12ed955c45116a734eb3fd19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:e4:7b:56:12:26:49:12:d7:c7:90:62:99: c2:08:66:e5:9c:47:44:be:61:25:7e:bb:a9:a3:43: 6b:d4:4a:a2:6b:9e:d4:a5:4b:93:11:85:23:06:7e: 23:ea:14:33:87:2d:c4:a2:58:82:83:0e:4a:db:13: f6:ed:d6:dd:bc:0e:d5:aa:ee:cd:26:8f:ca:b0:32: ec:a6:2e:c0:43:98:c3:61:42:9d:f0:ed:cc:64:65: f1:de:9d:a9:51:55:4f:e7:95:0f:b5:58:81:9a:ec: 64:f1:87:8f:6f:6b:0a:02:9d:9b:ab:4a:23:d1:96: a2:c2:76:44:e9:67:ff:6f:7c:7f:f7:6e:89:64:4e: 9d:fc:de:79:b6:cd:4e:07:5b:cc:df:61:f5:d9:a9: d9:a0:53:2c:68:fc:c5:57:f3:8c:28:0e:9b:47:e5: 35:95:d5:59:b7:e0:e7:34:50:42:3b:e2:54:5b:53: ca:18:2c:3f:ca:9c:88:8f:f2:db:ea:e8:d6:2c:40: a7:2f:6a:54:69:b9:18:fd:df:c5:69:66:f7:a9:f3: 4e:81:1c:0a:ce:04:9c:9d:06:1e:b6:be:49:ad:16: 5a:62:3a:ee:8e:9e:08:6a:56:b4:f2:36:b8:d1:66: 06:5c:87:50:22:b3:79:9a:dd:fa:60:15:c9:95:c5: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7B:EF:BE:FF:61:78:B1:2E:D9:55:C4:51:16:A7:34:EB:3F:D1:9A X509v3 Authority Key Identifier: keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bb:12:c1:a3:64:bb:0a:fe:b7:1b:3c:19:08:ac:bf:74:3c: c0:d5:a7:61:8f:bb:24:48:a2:08:af:2b:23:a8:8e:55:09:f7: 77:73:db:6a:e2:26:27:94:db:f3:ac:1f:97:3c:70:49:f1:de: 9b:db:01:39:3a:bd:cc:4c:37:42:01:64:4f:d6:a0:3a:0b:bf: f1:75:04:5b:44:5a:d4:64:c0:41:fd:0e:c0:a2:bf:ec:bf:65: 58:23:4f:b1:0f:d4:06:95:3f:2e:e9:03:1e:ba:00:03:6c:13: 8d:82:77:81:3e:71:02:67:56:95:49:68:2e:17:55:44:4e:57: 08:94:29:91:77:94:c9:40:9d:55:6f:49:84:f1:c9:64:9e:7c: 9e:4c:9a:2d:7b:a9:97:4b:36:05:53:51:90:99:72:38:6e:78: 99:53:78:30:c2:cb:c5:12:2d:76:39:3e:3e:56:ae:dc:34:1a: e2:7a:7f:36:59:9d:58:aa:44:ac:23:a8:bd:ad:1c:8a:1f:32: 28:58:f9:05:4e:6b:23:76:5f:09:77:58:11:5f:34:1b:2e:b7: b8:f4:f1:4d:60:30:a3:47:df:16:b3:bb:cf:47:2c:19:74:de: f8:5b:6c:65:da:76:0c:5c:60:ba:c2:19:6b:10:7b:e4:2b:bb: 97:79:9d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNDeUojQmo2Mpt/kbwgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjJjYTk1MTgyMzMxNGE1ZjRkMTBhNjZhNzgyMjM5OGZi ODg5NmIwHhcNMjUxMjA2MDEwMDM3WhcNMjUxMjA3MDEwMDM3WjAzMTEwLwYDVQQD EyhhYTdiZWZiZWZmNjE3OGIxMmVkOTU1YzQ1MTE2YTczNGViM2ZkMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkonke1YSJkkS18eQYpnCCGblnEdE vmElfrupo0Nr1Eqia57UpUuTEYUjBn4j6hQzhy3EoliCgw5K2xP27dbdvA7Vqu7N Jo/KsDLspi7AQ5jDYUKd8O3MZGXx3p2pUVVP55UPtViBmuxk8YePb2sKAp2bq0oj 0ZaiwnZE6Wf/b3x/926JZE6d/N55ts1OB1vM32H12anZoFMsaPzFV/OMKA6bR+U1 ldVZt+DnNFBCO+JUW1PKGCw/ypyIj/Lb6ujWLECnL2pUabkY/d/FaWb3qfNOgRwK zgScnQYetr5JrRZaYjrujp4Iala08ja40WYGXIdQIrN5mt36YBXJlcVzfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp7777/YXixLtlVxFEWpzTrP9GaMB8GA1UdIwQY MBaAFOHyypUYIzFKX00Qpmp4IjmPuIlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80ZjY5YWEtMjEzYS00OTdiLWIwNTkt ZDI4ODRhMTliZTBhLzEvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC80ZjY5YWEtMjEzYS00OTdiLWIwNTktZDI4ODRhMTliZTBh LzEvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbsSwaNk uwr+txs8GQisv3Q8wNWnYY+7JEiiCK8rI6iOVQn3d3PbauImJ5Tb86wflzxwSfHe m9sBOTq9zEw3QgFkT9agOgu/8XUEW0Ra1GTAQf0OwKK/7L9lWCNPsQ/UBpU/LukD HroAA2wTjYJ3gT5xAmdWlUloLhdVRE5XCJQpkXeUyUCdVW9JhPHJZJ58nkyaLXup l0s2BVNRkJlyOG54mVN4MMLLxRItdjk+Plau3DQa4np/NlmdWKpErCOova0cih8y KFj5BU5rI3ZfCXdYEV80Gy63uPTxTWAwo0ffFrO7z0csGXTe+FtsZdp2DFxgusIZ axB75Cu7l3mdlA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:38 2025 by rpki-client