This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft File: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json) Hash identifier: PtV7nNbchYsTa0z2ym0SRNw5jRLGtWHJY6gbrhlL1qY= Subject key identifier: E1:7F:32:F6:06:17:D0:79:EC:E2:D8:32:7E:FC:DE:EE:08:3E:EB:D0 Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C Certificate issuer: /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c Certificate serial: 019AF1644A26082BBDBAE22DCF6416A25586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft Manifest number: 0B62 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: 2/vMPyzFGqCryfAY3FfdpRI1hodFzy4vV3AQsKOMh1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4a:26:08:2b:bd:ba:e2:2d:cf:64:16:a2:55:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=e17f32f60617d079ece2d8327efcdeee083eebd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:b4:7e:8d:ea:0d:69:2b:78:75:a1:c5:ec: 8c:6d:0b:ce:f6:d4:a5:32:cc:22:d2:9f:3d:bd:24: db:ce:18:2f:1b:19:9c:06:02:f8:ec:0e:d0:c6:38: 3b:dd:5b:0a:80:bd:e8:ff:dd:f1:10:8e:04:7c:88: 00:05:ac:76:9c:4f:da:15:88:e2:af:1e:1f:bc:7f: ac:8a:f7:e2:2a:2c:a2:f3:0f:c3:4b:92:51:8a:b2: be:c2:4d:77:2a:5e:bc:44:c5:4a:1d:52:6d:c9:d1: fb:57:06:6a:f5:11:e2:22:fd:4d:7f:0c:e9:e0:ed: f2:d4:1e:d5:18:34:32:d4:fd:bb:51:d0:55:2c:70: ff:e4:75:73:20:08:2d:e3:1b:74:71:11:03:13:5c: fb:d7:f2:81:d3:cd:94:f7:8e:62:16:5b:d0:15:42: 1b:5e:73:7b:d9:c1:af:20:3a:30:ff:c5:56:0b:ab: 51:5e:9d:da:48:fa:ad:49:93:f1:4f:4e:0f:5d:49: 47:93:02:ed:17:4e:20:1a:13:4d:7b:1f:76:82:3a: 9d:13:30:84:2e:1c:f8:cc:2d:f5:94:66:6d:31:c3: 3c:7c:5d:e3:a0:26:62:a7:5f:17:c5:95:16:11:ea: 4a:0a:50:32:be:74:a1:66:cb:77:c9:ec:08:d0:fa: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7F:32:F6:06:17:D0:79:EC:E2:D8:32:7E:FC:DE:EE:08:3E:EB:D0 X509v3 Authority Key Identifier: keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:22:29:3a:23:92:38:36:62:4b:a1:f7:cd:6c:2a:3f:18:36: 06:dc:07:60:cc:4e:77:95:e9:15:28:33:0b:a7:e8:0b:63:25: 67:bc:45:21:cc:31:ea:19:8b:e5:89:a1:b0:71:74:1e:9a:b6: 9d:43:cd:e0:94:b9:c1:66:64:e5:c1:b8:33:c2:1b:67:15:9c: b6:93:89:da:4d:ad:46:72:d6:6c:11:df:03:8d:70:d4:15:c8: c4:ee:df:de:00:df:a8:b5:72:e0:c4:d9:ee:ca:be:41:72:5b: 9f:0f:21:0f:dd:f9:88:d6:94:f0:7d:c6:c5:00:2c:78:ca:6b: 4f:97:da:d9:a3:7a:68:47:ca:74:24:d8:bb:8e:0b:8d:9f:0c: 6b:d6:17:30:f2:a1:b3:cb:40:f7:96:c9:32:c5:62:46:42:2d: 78:19:a0:b4:bb:01:fb:21:63:be:6d:22:d5:18:1c:89:64:05: 44:82:97:cf:8b:88:a5:6a:3d:4f:8c:03:8a:b2:04:12:86:8a: 0a:ba:08:20:61:53:b0:f9:12:6c:a6:3d:f9:1e:90:43:06:84: 69:db:3d:22:a6:11:5d:4a:9d:7a:96:3f:46:a8:ed:0d:c4:33: 2d:d3:5c:a1:46:7a:21:2d:83:ef:2c:f9:23:86:f2:80:c3:56: 92:93:45:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEomCCu9uuItz2QWolWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMGE2ZjJlNjMzZmNmM2FkZWY4NzI1Y2M1YmUwZWE3OTE1 ZGQ0MGMwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD EyhlMTdmMzJmNjA2MTdkMDc5ZWNlMmQ4MzI3ZWZjZGVlZTA4M2VlYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yK0fo3qDWkreHWhxeyMbQvO9tSl Mswi0p89vSTbzhgvGxmcBgL47A7Qxjg73VsKgL3o/93xEI4EfIgABax2nE/aFYji rx4fvH+sivfiKiyi8w/DS5JRirK+wk13Kl68RMVKHVJtydH7VwZq9RHiIv1Nfwzp 4O3y1B7VGDQy1P27UdBVLHD/5HVzIAgt4xt0cREDE1z71/KB082U945iFlvQFUIb XnN72cGvIDow/8VWC6tRXp3aSPqtSZPxT04PXUlHkwLtF04gGhNNex92gjqdEzCE Lhz4zC31lGZtMcM8fF3joCZip18XxZUWEepKClAyvnShZst3yewI0PqDlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF/MvYGF9B57OLYMn783u4IPuvQMB8GA1UdIwQY MBaAFOAKby5jP8863vhyXMW+DqeRXdQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jMDQ0M2UtOTYwOC00MTk2LTk2MjUt ZDA5NmYxZTI1ZTk3LzEvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9jMDQ0M2UtOTYwOC00MTk2LTk2MjUtZDA5NmYxZTI1ZTk3 LzEvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCIpOiOS ODZiS6H3zWwqPxg2BtwHYMxOd5XpFSgzC6foC2MlZ7xFIcwx6hmL5YmhsHF0Hpq2 nUPN4JS5wWZk5cG4M8IbZxWctpOJ2k2tRnLWbBHfA41w1BXIxO7f3gDfqLVy4MTZ 7sq+QXJbnw8hD935iNaU8H3GxQAseMprT5fa2aN6aEfKdCTYu44LjZ8Ma9YXMPKh s8tA95bJMsViRkIteBmgtLsB+yFjvm0i1RgciWQFRIKXz4uIpWo9T4wDirIEEoaK CroIIGFTsPkSbKY9+R6QQwaEads9IqYRXUqdepY/RqjtDcQzLdNcoUZ6IS2D7yz5 I4bygMNWkpNFxg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:39:21 2025 by rpki-client