This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json) Hash identifier: NGdfhkdYL0cZ4XOo2WurGn0oTYd2E30KGXX0hjdmUIs= Subject key identifier: BF:68:C6:AE:B9:4D:7C:B2:CF:25:20:0B:DB:0C:90:EE:8A:1D:73:79 Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Certificate serial: 019AF27676FAD2E030DAADE9EA9F98807023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft Manifest number: 06FC Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: 1xkiXjLcnW4aSrKK+QEDnFQY4ylmQIO7Lr66x/hz0N4=) 2: Z5XRZtUC9s3CbIed4tLwk0brsf0.roa (hash: r/qCqYJ4chyv7nOwsypdjNGGILNa7ltYYU9q4PuuHw4=) 3: _Nm6r2Yv3Zkc3c0OIBU3ldpJJkw.roa (hash: 3ALoIGbxmP+kByubWHulq2NFwTA/LOztSuk+rMQPM34=) 4: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:76:fa:d2:e0:30:da:ad:e9:ea:9f:98:80:70:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=bf68c6aeb94d7cb2cf25200bdb0c90ee8a1d7379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:b9:08:ae:d0:59:80:16:b6:bf:3b:6c:e7: f9:a2:c1:bc:8f:ba:a2:57:c4:31:35:a9:9d:9a:a5: 7c:55:0a:35:9b:99:fb:69:c7:92:d9:ee:5a:8a:e0: a3:02:06:f0:80:53:d0:5e:5f:0b:50:df:3f:bc:ee: 48:63:23:f4:43:6b:0f:ae:a8:f4:d6:05:16:3a:e1: 81:25:63:27:e6:b0:cf:7a:c4:95:9b:b7:a3:12:50: be:c7:bc:b0:7a:20:6c:c6:f0:84:a9:ae:79:ba:c0: d9:02:ad:4a:46:8e:85:62:17:2b:31:e7:80:f9:72: 0e:24:3e:b7:40:6e:37:0f:5d:7a:6e:22:ae:c3:0f: 9a:e3:15:fc:45:2f:86:99:e7:65:68:58:e4:cc:81: bc:72:0e:a6:0a:83:e0:b4:c0:a7:50:d2:3f:25:46: 3e:17:0e:24:bf:ea:32:07:5b:83:0b:3e:91:53:dd: 05:59:5e:7c:24:ad:ea:55:49:f5:11:9b:5b:94:88: 88:5a:74:8e:65:d1:e6:b2:21:a1:30:5c:41:06:7a: 0f:20:9a:d7:da:4c:f4:9a:60:f9:3a:5f:6a:cd:29: 1d:d3:99:ba:c2:f5:43:5e:24:b4:d5:67:f2:a2:23: d6:97:b7:c5:a6:28:ba:60:22:ff:2f:3d:c4:bc:f5: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:68:C6:AE:B9:4D:7C:B2:CF:25:20:0B:DB:0C:90:EE:8A:1D:73:79 X509v3 Authority Key Identifier: keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:fe:77:b7:98:67:84:73:be:6d:f4:f6:70:f7:29:92:e8:ec: 7a:b6:e9:c5:72:ac:19:c7:a4:ff:8b:66:fa:a7:ba:1a:56:9a: ba:93:73:c0:ac:73:25:28:de:56:c6:17:c0:92:2c:76:df:9f: 46:42:b5:19:3d:3b:ab:10:37:30:28:0d:2f:ce:9b:ea:b6:23: 98:ad:1b:c4:85:a2:9b:bb:bf:52:9b:ea:d0:10:72:00:96:1d: 3e:0d:20:45:5a:dc:13:7f:db:3b:55:ad:f4:8d:42:67:84:a0: 72:80:a5:3a:be:1d:f3:f5:ef:33:c0:57:20:ea:d3:8f:f6:cb: 06:88:5c:7b:16:80:d3:81:ba:4a:7d:ee:ba:4e:90:72:5d:2d: df:76:35:19:e3:87:3e:ac:31:73:6f:2e:a5:2c:27:85:57:82: 42:49:24:9f:81:20:fc:23:8f:ef:6a:cf:46:57:fb:a0:0e:4d: e0:9f:46:89:26:88:8a:6f:6b:3e:8d:4f:d4:94:51:d4:95:6e: 61:48:79:85:19:0c:78:ac:c3:84:2f:ab:11:0e:d6:5b:34:df: 54:d0:39:cd:4c:72:0e:d9:81:3c:2d:c4:69:85:8e:99:79:46: 3f:7e:84:d7:a5:99:1b:5a:89:1c:0f:1b:ec:07:8d:eb:bf:9a: 8e:5c:50:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnb60uAw2q3p6p+YgHAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh OWU5MjEwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD EyhiZjY4YzZhZWI5NGQ3Y2IyY2YyNTIwMGJkYjBjOTBlZThhMWQ3Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSu5CK7QWYAWtr87bOf5osG8j7qi V8QxNamdmqV8VQo1m5n7aceS2e5aiuCjAgbwgFPQXl8LUN8/vO5IYyP0Q2sPrqj0 1gUWOuGBJWMn5rDPesSVm7ejElC+x7yweiBsxvCEqa55usDZAq1KRo6FYhcrMeeA +XIOJD63QG43D116biKuww+a4xX8RS+GmedlaFjkzIG8cg6mCoPgtMCnUNI/JUY+ Fw4kv+oyB1uDCz6RU90FWV58JK3qVUn1EZtblIiIWnSOZdHmsiGhMFxBBnoPIJrX 2kz0mmD5Ol9qzSkd05m6wvVDXiS01WfyoiPWl7fFpii6YCL/Lz3EvPUXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9oxq65TXyyzyUgC9sMkO6KHXN5MB8GA1UdIwQY MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt NWViYjYzNzgwMDllLzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxP53t5hn hHO+bfT2cPcpkujserbpxXKsGcek/4tm+qe6GlaaupNzwKxzJSjeVsYXwJIsdt+f RkK1GT07qxA3MCgNL86b6rYjmK0bxIWim7u/Upvq0BByAJYdPg0gRVrcE3/bO1Wt 9I1CZ4SgcoClOr4d8/XvM8BXIOrTj/bLBohcexaA04G6Sn3uuk6Qcl0t33Y1GeOH Pqwxc28upSwnhVeCQkkkn4Eg/COP72rPRlf7oA5N4J9GiSaIim9rPo1P1JRR1JVu YUh5hRkMeKzDhC+rEQ7WWzTfVNA5zUxyDtmBPC3EaYWOmXlGP36E16WZG1qJHA8b 7AeN67+ajlxQ0g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:48 2025 by rpki-client