This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json) Hash identifier: +cK6dYLI7Ik4R57pCQLjT0oTwOJhBIeX2IqQ04NgJis= Subject key identifier: 8C:4C:1C:6B:DD:C3:06:85:AD:08:8A:A2:26:D2:73:EB:70:24:41:F7 Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Certificate serial: 019AF50A552A7010995EA3D4F6385AAE4170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft Manifest number: 0972 Signing time: Sat 06 Dec 2025 19:01:26 +0000 Manifest this update: Sat 06 Dec 2025 19:01:26 +0000 Manifest next update: Sun 07 Dec 2025 19:01:26 +0000 Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: 0vmYC4gujW+mOh8t7Qz+KXge5pDiE8//n0Dq5MOWTZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:55:2a:70:10:99:5e:a3:d4:f6:38:5a:ae:41:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Validity Not Before: Dec 6 19:01:26 2025 GMT Not After : Dec 7 19:01:26 2025 GMT Subject: CN=8c4c1c6bddc30685ad088aa226d273eb702441f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f2:b7:ab:52:71:cd:10:23:02:c7:45:eb:bb: 1b:3e:d9:0a:81:e2:55:34:1f:67:91:d9:73:0f:6e: 66:7f:42:a8:ae:98:04:88:08:68:0a:fe:c5:6d:63: 44:c3:bd:8d:17:4d:40:6e:2a:de:ed:de:3c:77:97: 01:74:50:df:62:2c:5a:8d:fa:e4:9a:fa:e4:3b:20: 93:9c:a9:13:a0:ec:e6:f2:44:c3:d2:62:a2:58:8b: ee:48:2f:c8:63:04:a2:6e:1c:f5:62:96:af:64:f8: e9:a0:5b:bd:f0:15:ed:de:d5:8c:61:ca:de:8d:d3: 79:d7:de:77:89:14:ba:6b:3a:a1:8a:16:60:57:29: 5a:0a:ab:dd:81:f1:38:d0:17:a0:c1:73:09:7a:c7: 93:39:b5:77:2b:0b:d7:91:f0:ab:40:24:b8:ad:e2: 96:3f:fb:6b:ea:db:02:b6:dd:60:81:e3:26:28:c1: cf:57:9e:fd:2a:f5:2e:c8:0d:24:2b:92:32:e4:5d: 10:7c:8f:53:ce:c9:0f:f4:80:61:84:f3:07:5c:5e: d5:3d:a1:14:ec:15:f4:ee:69:1d:a9:a5:49:dd:0a: cb:ed:21:1a:d1:c2:d8:57:f3:7c:9e:25:05:7f:68: cf:73:6b:ad:75:5b:f7:99:10:ee:4c:82:4d:36:0f: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4C:1C:6B:DD:C3:06:85:AD:08:8A:A2:26:D2:73:EB:70:24:41:F7 X509v3 Authority Key Identifier: keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:59:91:f4:26:69:53:a9:a0:75:fd:2e:b2:8b:72:dc:b4:c3: 6b:3e:3a:73:40:b5:74:3c:1f:16:6b:91:71:07:95:d1:ae:1d: 6e:a9:ac:3c:0e:20:f8:bb:e7:99:a6:37:aa:16:d3:34:4b:66: 21:9f:6c:2e:58:2c:9f:a4:47:09:98:1d:f9:5c:c8:74:db:3b: 86:5a:ec:60:11:31:96:34:48:d0:9c:20:56:ce:af:a2:65:26: 75:9f:e1:a9:16:6b:eb:bb:56:a5:ae:8b:51:a9:c9:d9:03:d3: 09:38:40:12:49:38:be:e5:65:02:4d:f7:dc:95:7b:97:89:93: a8:36:3a:c4:b0:7b:a7:48:e2:25:87:a6:4c:89:d6:9a:dc:c8: ce:93:66:c5:07:1a:dc:a9:e6:86:a0:71:c4:6d:b0:56:88:d7: 20:e3:76:40:23:6b:22:84:01:bc:3d:f4:6d:c6:8e:77:70:22: 49:b3:c7:48:5c:cf:85:4a:2c:44:ec:05:00:87:81:a9:07:eb: 32:6c:33:29:2e:d1:dc:21:d9:90:68:22:54:85:e8:94:5a:b6: 87:1f:e3:ee:f4:b4:d5:32:11:fc:2d:94:9c:8a:f4:94:eb:86: 7e:86:00:cb:23:d3:d0:2e:8d:70:86:24:27:39:55:34:7d:78: b7:4a:c7:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClUqcBCZXqPU9jharkFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZTFlYjAyMGFiNmE1NDJmNjBiNTg1NzY5ODcyZDlmMDYx N2FmMjYwHhcNMjUxMjA2MTkwMTI2WhcNMjUxMjA3MTkwMTI2WjAzMTEwLwYDVQQD Eyg4YzRjMWM2YmRkYzMwNjg1YWQwODhhYTIyNmQyNzNlYjcwMjQ0MWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fK3q1JxzRAjAsdF67sbPtkKgeJV NB9nkdlzD25mf0KorpgEiAhoCv7FbWNEw72NF01Abire7d48d5cBdFDfYixajfrk mvrkOyCTnKkToOzm8kTD0mKiWIvuSC/IYwSibhz1YpavZPjpoFu98BXt3tWMYcre jdN51953iRS6azqhihZgVylaCqvdgfE40BegwXMJeseTObV3KwvXkfCrQCS4reKW P/tr6tsCtt1ggeMmKMHPV579KvUuyA0kK5Iy5F0QfI9TzskP9IBhhPMHXF7VPaEU 7BX07mkdqaVJ3QrL7SEa0cLYV/N8niUFf2jPc2utdVv3mRDuTIJNNg/wewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxMHGvdwwaFrQiKoibSc+twJEH3MB8GA1UdIwQY MBaAFOHh6wIKtqVC9gtYV2mHLZ8GF68mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAt YzgzNWU1ZGFhZjI0LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAtYzgzNWU1ZGFhZjI0 LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFmR9CZp U6mgdf0usoty3LTDaz46c0C1dDwfFmuRcQeV0a4dbqmsPA4g+LvnmaY3qhbTNEtm IZ9sLlgsn6RHCZgd+VzIdNs7hlrsYBExljRI0JwgVs6vomUmdZ/hqRZr67tWpa6L UanJ2QPTCThAEkk4vuVlAk333JV7l4mTqDY6xLB7p0jiJYemTInWmtzIzpNmxQca 3KnmhqBxxG2wVojXION2QCNrIoQBvD30bcaOd3AiSbPHSFzPhUosROwFAIeBqQfr MmwzKS7R3CHZkGgiVIXolFq2hx/j7vS01TIR/C2UnIr0lOuGfoYAyyPT0C6NcIYk JzlVNH14t0rHew== -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:37 2025 by rpki-client