This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json) Hash identifier: dGJ2f0hDUV0DOFtYBR6WzrCwXBlGntKwTuPFHLvWqYE= Subject key identifier: 07:CE:17:E7:4A:D0:85:6E:71:C2:69:67:FA:DC:B5:04:5E:84:63:81 Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4 Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4 Certificate serial: 019AF50A93600FB8952A2E72F980945C3C2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft Manifest number: 12D1 Signing time: Sat 06 Dec 2025 19:01:42 +0000 Manifest this update: Sat 06 Dec 2025 19:01:42 +0000 Manifest next update: Sun 07 Dec 2025 19:01:42 +0000 Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: +MaYiLH1XaOB4QBekRxUJeGluzrfas8MOx7Ot58y35s=) 2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:93:60:0f:b8:95:2a:2e:72:f9:80:94:5c:3c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4 Validity Not Before: Dec 6 19:01:42 2025 GMT Not After : Dec 7 19:01:42 2025 GMT Subject: CN=07ce17e74ad0856e71c26967fadcb5045e846381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:0e:f4:5d:12:82:9f:36:90:8d:c8:85:b2: 8c:41:2f:ea:ca:2e:bf:5e:1e:25:dd:e7:b7:b5:a4: 4d:44:2a:e8:c6:94:47:b3:c9:38:79:52:7c:52:fd: e3:f7:21:27:38:1e:44:c6:d8:c4:55:08:a2:26:89: 65:be:4e:6b:0c:1c:fb:bc:91:e2:2d:7a:3c:6d:b6: e0:3f:ae:be:72:79:bd:d6:0e:36:6c:67:bd:d0:9b: 9f:ef:92:a7:eb:f1:d0:5a:a8:a5:d8:51:29:18:27: 54:6d:d5:4a:3e:c8:da:28:f2:c2:4c:c9:40:c1:42: 1a:5b:73:00:d4:e8:f2:5a:b9:57:63:44:7f:3b:cd: 52:a4:52:ca:8a:77:06:c4:55:5f:4e:c0:b2:60:f1: 0c:df:0f:71:83:3d:e9:83:2d:45:1f:05:da:02:26: 61:55:6d:10:75:9f:44:07:fa:61:38:31:30:44:26: 5b:7a:44:9e:14:14:b7:90:50:a7:8e:49:ba:77:87: af:7a:c0:91:0d:b4:82:fe:d1:2a:f0:eb:5a:27:cc: 16:22:32:f2:96:54:b6:67:20:9f:9b:26:b7:ae:16: 96:d4:8d:b0:d7:41:c2:0e:e7:32:6f:cd:15:4a:27: a1:5b:69:6b:d8:61:dd:6a:11:62:b9:b7:08:b1:09: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CE:17:E7:4A:D0:85:6E:71:C2:69:67:FA:DC:B5:04:5E:84:63:81 X509v3 Authority Key Identifier: keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:43:35:88:a7:a2:d0:08:ed:2e:0c:76:8f:e9:b1:58:51:ac: 3e:d8:7b:dc:16:96:89:2b:07:40:cf:ed:2c:97:ed:5c:c5:f8: f9:14:b1:ec:3e:0f:1f:40:65:86:f3:88:c1:1b:6c:df:1c:f5: d0:cc:bf:d6:b6:95:07:7a:cb:ec:6e:17:2e:ce:13:70:60:93: 73:ee:08:ed:a4:16:00:2d:61:77:6e:3a:c6:fb:28:1e:64:10: 21:29:a0:ed:09:34:7a:73:2b:7e:89:52:eb:5e:c1:c4:bb:c7: e1:fd:10:e4:50:ee:8f:a7:e6:94:1c:4a:46:d9:b3:43:43:11: 54:da:e0:6e:9c:eb:66:c5:3e:18:d9:23:a1:c4:2b:87:70:a2: c2:f2:01:7d:db:3a:8d:8a:05:36:93:fc:41:f8:5c:f2:3a:37: c6:c6:39:f7:89:40:80:d1:62:bc:56:fe:a5:8a:78:a0:e4:7d: 54:13:e2:56:24:7c:f6:87:ea:d1:c3:ee:37:74:ab:73:2c:d4: c3:e4:28:55:bb:01:6e:05:23:d6:bf:c1:78:00:2d:a3:49:29: 28:60:18:ad:69:29:c0:b4:ac:9f:30:e7:b6:5f:6c:e4:52:c8: 04:b0:5a:77:9b:fb:8e:78:a4:78:f5:ad:e8:b8:b1:a6:f6:b5: 6f:ef:f4:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpNgD7iVKi5y+YCUXDwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZTQ2ZTJjNDAxNmE4ZDczOTJjODU3NDEzNGZkNDc5M2I5 NDE1YTQwHhcNMjUxMjA2MTkwMTQyWhcNMjUxMjA3MTkwMTQyWjAzMTEwLwYDVQQD EygwN2NlMTdlNzRhZDA4NTZlNzFjMjY5NjdmYWRjYjUwNDVlODQ2MzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpUO9F0Sgp82kI3IhbKMQS/qyi6/ Xh4l3ee3taRNRCroxpRHs8k4eVJ8Uv3j9yEnOB5ExtjEVQiiJollvk5rDBz7vJHi LXo8bbbgP66+cnm91g42bGe90Juf75Kn6/HQWqil2FEpGCdUbdVKPsjaKPLCTMlA wUIaW3MA1OjyWrlXY0R/O81SpFLKincGxFVfTsCyYPEM3w9xgz3pgy1FHwXaAiZh VW0QdZ9EB/phODEwRCZbekSeFBS3kFCnjkm6d4evesCRDbSC/tEq8OtaJ8wWIjLy llS2ZyCfmya3rhaW1I2w10HCDucyb80VSiehW2lr2GHdahFiubcIsQkePwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfOF+dK0IVuccJpZ/rctQRehGOBMB8GA1UdIwQY MBaAFOPkbixAFqjXOSyFdBNP1Hk7lBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYt ZDhlY2UyNmFmZWMwLzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYtZDhlY2UyNmFmZWMw LzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0M1iKei 0AjtLgx2j+mxWFGsPth73BaWiSsHQM/tLJftXMX4+RSx7D4PH0BlhvOIwRts3xz1 0My/1raVB3rL7G4XLs4TcGCTc+4I7aQWAC1hd246xvsoHmQQISmg7Qk0enMrfolS 617BxLvH4f0Q5FDuj6fmlBxKRtmzQ0MRVNrgbpzrZsU+GNkjocQrh3CiwvIBfds6 jYoFNpP8Qfhc8jo3xsY594lAgNFivFb+pYp4oOR9VBPiViR89ofq0cPuN3SrcyzU w+QoVbsBbgUj1r/BeAAto0kpKGAYrWkpwLSsnzDntl9s5FLIBLBad5v7jnikePWt 6Lixpva1b+/0jA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:43 2025 by rpki-client