This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft File: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft (raw, json) Hash identifier: GeXRlhYjRfelBw5Z0P0DiRn45V9GSpZ6DNKJxZNM/iE= Subject key identifier: DA:88:3E:18:09:1A:FB:2D:D1:AC:20:F0:86:FD:E2:D0:24:52:53:C2 Authority key identifier: E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1 Certificate issuer: /CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1 Certificate serial: 019AF31D36C44EF4923B038E3871783B1D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft Manifest number: 117C Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl (hash: NeUr5WQ3/I1UZzLnI7NVxEJfPa2j1YWCaI2l2BSn21Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:36:c4:4e:f4:92:3b:03:8e:38:71:78:3b:1d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1 Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=da883e18091afb2dd1ac20f086fde2d0245253c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:08:70:46:b4:e8:ba:48:07:e5:e5:c7:bb: 58:c9:95:c9:ec:23:7f:8e:df:b5:2c:35:08:ee:a1: 13:20:df:03:90:41:34:b8:50:c3:69:94:58:92:c5: 08:55:02:d1:ee:6d:7a:47:63:ce:f5:cd:01:e4:3f: ba:0d:d3:42:a3:a1:96:14:5b:2e:79:ff:2a:e1:ad: 95:68:ba:f1:2a:57:ec:ca:b8:4c:b9:d3:a5:bc:52: 70:72:c1:fc:8a:ef:cd:dd:5e:c1:69:8e:fa:3b:8c: dc:20:30:be:f4:23:8c:66:7a:d8:a4:98:24:e2:46: fe:a3:eb:fd:25:3c:29:d4:07:75:33:ec:87:41:1e: 13:87:f0:ed:c8:f7:dd:c8:78:26:36:62:72:68:05: 5f:b3:d5:e7:78:ad:e8:29:04:8a:a9:24:59:b1:0e: 4f:cc:6a:c4:8a:7a:a8:18:d9:90:73:b1:e2:b3:96: 86:1f:8b:c0:a4:b4:44:a5:41:82:59:61:e7:5a:39: b1:07:73:55:1b:ed:c2:a8:b7:43:06:43:26:e6:5d: 2a:e0:d4:83:25:60:b2:61:50:f1:d2:91:33:eb:9f: 93:b8:7c:9f:0f:11:9c:74:5c:e4:3f:a6:da:3e:e4: 7a:22:f4:cb:d3:95:32:96:0e:22:92:fa:cd:43:4d: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:3E:18:09:1A:FB:2D:D1:AC:20:F0:86:FD:E2:D0:24:52:53:C2 X509v3 Authority Key Identifier: keyid:E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:26:a5:36:71:da:e8:67:5f:c1:33:a1:3f:2a:de:3d:68:ec: f6:76:21:b3:c6:cb:c2:64:0e:9c:f9:6d:b5:1c:71:9e:d4:a4: 54:f1:7e:d5:63:23:1e:11:8e:85:ee:71:69:25:52:22:8b:e9: 0e:1c:9a:7c:1c:42:be:5c:a0:3a:42:37:3f:b1:14:cd:18:95: 8b:50:c5:23:5a:f0:85:b1:c3:92:ae:31:9e:fa:b1:ad:c1:ef: 5e:22:9a:3a:d1:9e:27:59:a2:ee:17:58:23:7a:54:57:7e:c7: c0:4e:40:e2:4b:72:88:7b:6f:76:67:3f:7b:c8:7f:94:c3:9b: b0:7c:af:7e:b5:49:e6:17:4e:54:9a:bf:96:03:3f:8a:f8:10: 1e:e5:47:d7:69:d1:fd:1c:2d:36:14:45:b8:a9:91:0b:ec:24: 45:20:3f:85:4e:36:07:bf:4e:a9:06:c6:ab:13:30:89:26:7b: 2f:67:d0:6c:26:74:93:b3:5c:36:a3:a5:75:3e:13:b0:4d:68: 6b:95:4f:35:54:c6:c3:dc:55:c7:ab:2b:25:2c:d5:97:24:9c: dd:36:ef:ef:77:f8:de:26:05:04:32:27:ac:ff:fc:a6:c6:c0: 29:32:ea:87:33:00:e4:3a:e2:bc:07:aa:b7:44:37:9b:8c:3d: 06:b6:f5:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTbETvSSOwOOOHF4Ox2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDRkZWU5MjU1YmNjOGNhNGUwZjVhYzI5ZDA5ODI2ZTAy M2EwZDEwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD EyhkYTg4M2UxODA5MWFmYjJkZDFhYzIwZjA4NmZkZTJkMDI0NTI1M2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4AIcEa06LpIB+Xlx7tYyZXJ7CN/ jt+1LDUI7qETIN8DkEE0uFDDaZRYksUIVQLR7m16R2PO9c0B5D+6DdNCo6GWFFsu ef8q4a2VaLrxKlfsyrhMudOlvFJwcsH8iu/N3V7BaY76O4zcIDC+9COMZnrYpJgk 4kb+o+v9JTwp1Ad1M+yHQR4Th/DtyPfdyHgmNmJyaAVfs9XneK3oKQSKqSRZsQ5P zGrEinqoGNmQc7His5aGH4vApLREpUGCWWHnWjmxB3NVG+3CqLdDBkMm5l0q4NSD JWCyYVDx0pEz65+TuHyfDxGcdFzkP6baPuR6IvTL05Uylg4ikvrNQ034vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqIPhgJGvst0awg8Ib94tAkUlPCMB8GA1UdIwQY MBaAFOEE3uklW8yMpOD1rCnQmCbgI6DRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iNjljZTktNDU3MS00OTRlLThiYjIt NzYxYmI0NjA3N2Y3LzEvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iNjljZTktNDU3MS00OTRlLThiYjItNzYxYmI0NjA3N2Y3 LzEvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyalNnHa 6GdfwTOhPyrePWjs9nYhs8bLwmQOnPlttRxxntSkVPF+1WMjHhGOhe5xaSVSIovp DhyafBxCvlygOkI3P7EUzRiVi1DFI1rwhbHDkq4xnvqxrcHvXiKaOtGeJ1mi7hdY I3pUV37HwE5A4ktyiHtvdmc/e8h/lMObsHyvfrVJ5hdOVJq/lgM/ivgQHuVH12nR /RwtNhRFuKmRC+wkRSA/hU42B79OqQbGqxMwiSZ7L2fQbCZ0k7NcNqOldT4TsE1o a5VPNVTGw9xVx6srJSzVlySc3Tbv73f43iYFBDInrP/8psbAKTLqhzMA5DrivAeq t0Q3m4w9Brb1Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:27 2025 by rpki-client