This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json) Hash identifier: 5ej71yMcveeTIzykNKX9yrprPKucYmos1iEv2eXr45c= Subject key identifier: F6:70:2A:0B:37:DB:0B:F2:F6:8D:4C:5A:D8:05:3E:8E:75:19:60:BE Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96 Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96 Certificate serial: 019AF42DC93DCFE1ABD34713132465E29616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft Manifest number: 108A Signing time: Sat 06 Dec 2025 15:00:32 +0000 Manifest this update: Sat 06 Dec 2025 15:00:32 +0000 Manifest next update: Sun 07 Dec 2025 15:00:32 +0000 Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: 7NPbjFRFZv8XCQ6aiB1ku8O90W6Jg6yDP7mnp0r6wns=) 2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c9:3d:cf:e1:ab:d3:47:13:13:24:65:e2:96:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96 Validity Not Before: Dec 6 15:00:32 2025 GMT Not After : Dec 7 15:00:32 2025 GMT Subject: CN=f6702a0b37db0bf2f68d4c5ad8053e8e751960be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:a4:4a:05:50:32:00:7f:09:3f:51:38:a3: b2:fa:35:47:54:67:03:25:42:df:e9:9a:42:8e:b8: 32:81:09:f7:0f:c1:dd:6e:00:dd:68:0c:b5:a5:d1: b8:d0:11:54:5e:d2:d5:99:6b:5a:61:81:51:0f:fb: ea:d4:a4:85:b5:91:f8:93:a4:b2:23:62:7c:6c:69: f9:10:11:f3:bb:a4:4f:ea:15:2c:26:46:fc:62:c5: d9:06:ed:99:e1:a9:1f:56:b5:64:46:98:1c:66:41: a1:99:87:dc:8e:83:fa:94:ba:ae:c8:e3:bc:2b:df: f3:d8:de:e0:6f:53:c4:2e:74:21:34:0f:5f:59:28: af:b1:bf:da:71:54:df:ad:ae:46:b2:d6:48:7e:8b: a7:da:a0:a9:f9:31:15:04:45:df:eb:68:cf:63:29: 0c:b1:af:06:7b:00:f7:87:50:f4:40:86:a4:a5:eb: 2d:77:6e:56:94:a8:5b:d2:4e:63:c5:b5:4d:06:71: 58:02:c2:af:1d:63:10:7d:84:54:fd:52:a2:39:96: 99:b3:bc:42:cc:54:78:1a:8c:58:d4:5d:fd:ab:27: 75:04:32:ec:c2:c3:ee:45:28:44:3c:1c:30:f6:cc: e3:64:bb:b7:92:4a:c1:cc:9b:7c:3c:14:fd:77:8a: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:70:2A:0B:37:DB:0B:F2:F6:8D:4C:5A:D8:05:3E:8E:75:19:60:BE X509v3 Authority Key Identifier: keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:42:ee:74:ec:91:01:61:7d:61:9e:0b:4f:56:07:5a:10:92: c1:8d:23:4f:97:12:76:78:ad:54:d6:41:4f:f3:41:d7:0d:48: e1:fc:7f:10:c9:61:eb:12:2b:80:d5:32:2b:01:7d:0a:c5:d7: 1e:f6:90:e5:0a:2f:57:d6:ab:df:d0:0a:6c:e3:2b:0f:e1:e8: 35:54:29:62:55:9c:b8:ce:59:a8:c0:17:d6:bf:21:8c:a0:5c: d5:e0:b2:15:d3:92:37:73:aa:1b:60:50:48:d5:92:63:e0:24: 1b:6a:19:11:da:c8:43:a9:56:83:15:6a:44:71:35:96:c2:49: 25:89:37:ee:32:6e:16:46:f3:7d:17:b7:67:ea:20:4b:74:e9: 13:06:73:4a:90:b2:57:7d:03:4d:2f:7e:d2:a6:1b:b7:80:8b: e9:6a:31:cd:ee:a7:fa:94:d3:69:af:28:3b:45:ba:a8:6d:68: ad:6d:66:9e:45:ad:98:b2:b9:ff:96:f7:56:23:85:cb:6d:29: 90:a1:ff:7d:cf:98:11:f4:a5:85:b4:1b:3a:33:6c:1a:50:90: d4:52:4b:2c:2a:25:1e:e4:52:7e:e8:a5:e2:cf:87:3a:4b:45: 99:af:09:b8:85:d9:27:f1:73:8a:88:df:fb:a5:60:2e:02:26: 7c:42:ea:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lck9z+Gr00cTEyRl4pYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYzgzODg5MWI1MWUwNjdlYTJlYmY5YTQ0ZDk2ODAxNDg1 NjJlOTYwHhcNMjUxMjA2MTUwMDMyWhcNMjUxMjA3MTUwMDMyWjAzMTEwLwYDVQQD EyhmNjcwMmEwYjM3ZGIwYmYyZjY4ZDRjNWFkODA1M2U4ZTc1MTk2MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl+kSgVQMgB/CT9ROKOy+jVHVGcD JULf6ZpCjrgygQn3D8HdbgDdaAy1pdG40BFUXtLVmWtaYYFRD/vq1KSFtZH4k6Sy I2J8bGn5EBHzu6RP6hUsJkb8YsXZBu2Z4akfVrVkRpgcZkGhmYfcjoP6lLquyOO8 K9/z2N7gb1PELnQhNA9fWSivsb/acVTfra5GstZIfoun2qCp+TEVBEXf62jPYykM sa8GewD3h1D0QIakpestd25WlKhb0k5jxbVNBnFYAsKvHWMQfYRU/VKiOZaZs7xC zFR4GoxY1F39qyd1BDLswsPuRShEPBww9szjZLu3kkrBzJt8PBT9d4plXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZwKgs32wvy9o1MWtgFPo51GWC+MB8GA1UdIwQY MBaAFOHIOIkbUeBn6i6/mkTZaAFIVi6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80NWQzZjMtN2VjYS00YzE0LWFhZjct MTViMzkxMzRjNDFlLzEvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80NWQzZjMtN2VjYS00YzE0LWFhZjctMTViMzkxMzRjNDFl LzEvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmELudOyR AWF9YZ4LT1YHWhCSwY0jT5cSdnitVNZBT/NB1w1I4fx/EMlh6xIrgNUyKwF9CsXX HvaQ5QovV9ar39AKbOMrD+HoNVQpYlWcuM5ZqMAX1r8hjKBc1eCyFdOSN3OqG2BQ SNWSY+AkG2oZEdrIQ6lWgxVqRHE1lsJJJYk37jJuFkbzfRe3Z+ogS3TpEwZzSpCy V30DTS9+0qYbt4CL6Woxze6n+pTTaa8oO0W6qG1orW1mnkWtmLK5/5b3ViOFy20p kKH/fc+YEfSlhbQbOjNsGlCQ1FJLLColHuRSfuil4s+HOktFma8JuIXZJ/Fziojf +6VgLgImfELqXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:44 2025 by rpki-client