This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json) Hash identifier: /+WgPs0KPUWvHATEwY7a3ZUo7eX7Q30kfMMhH1+Nzvo= Subject key identifier: C7:53:37:FB:4D:E2:64:A2:B5:3F:25:9A:8A:CD:06:9A:FD:55:73:D5 Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a Certificate serial: 019AF19AC18A22ED09EBABC97077FB9D2F95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft Manifest number: 1426 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: rZuFBGrGudIlr5IHMbnnIynzQm9NVPCcB8ULIqxqnzM=) 2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c1:8a:22:ed:09:eb:ab:c9:70:77:fb:9d:2f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e017872403452f3e008ab798047342db24edb35a Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=c75337fb4de264a2b53f259a8acd069afd5573d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:7f:89:d5:e5:7c:50:80:8a:aa:4c:dc:48: b2:e3:57:d0:c8:0a:01:c3:d0:fc:99:95:9f:3d:c5: 05:38:09:ae:e5:a6:1c:94:5b:63:b3:f0:60:31:5b: 11:72:93:4c:f5:54:c3:fc:2c:bd:47:ab:fc:64:92: be:dd:80:a6:97:65:58:9a:cb:76:94:53:d4:ac:4a: 82:0d:d1:0c:7b:87:2f:0d:d2:19:8e:9a:e7:a8:d1: 80:47:5d:3b:70:33:f8:d2:dd:d9:76:31:b9:15:1f: 99:d6:3f:fe:db:a9:d6:de:d6:f3:98:4b:d9:f5:53: 51:96:f0:24:6c:b6:a5:90:8a:46:6f:04:aa:61:ed: d4:02:55:26:0d:cc:ee:bd:8f:b8:a0:0a:c2:04:fe: 2a:89:23:ba:77:77:78:78:cd:81:7f:b5:91:2b:d9: 65:75:66:95:69:d9:68:4a:d7:6b:04:1c:d4:d5:fd: fd:52:81:ff:60:28:24:de:3d:67:65:66:de:c8:3c: 7b:d4:e7:a8:eb:61:96:5a:ec:e7:38:3b:63:3b:2f: d6:05:7e:7e:7c:10:8c:fb:af:3f:41:37:61:a4:2d: c5:8c:95:d7:9c:14:bc:fd:e5:c4:82:4c:bc:ea:3d: c0:39:60:47:58:2d:de:ae:aa:3e:67:6a:f4:c1:a4: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:53:37:FB:4D:E2:64:A2:B5:3F:25:9A:8A:CD:06:9A:FD:55:73:D5 X509v3 Authority Key Identifier: keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b8:02:cc:f8:db:8e:f8:a6:a7:b3:7f:b5:8b:8a:9e:eb:0c: 0d:b1:36:aa:bc:24:b0:7d:a7:cb:4e:38:34:93:7f:04:a9:d9: 3e:16:68:48:6c:15:e4:88:9a:48:a1:51:97:e3:fa:ad:97:c1: e1:5b:80:7b:df:de:20:8f:06:8b:ef:74:e6:d2:6c:82:99:0b: 65:fb:1e:97:49:08:ab:56:05:ca:95:81:09:75:5c:8e:e9:5a: 29:46:22:45:69:f5:24:4f:98:21:23:0c:a3:48:b6:03:57:db: 78:a4:ae:81:62:16:2d:d2:4a:4b:3d:85:bd:f7:df:7d:51:bb: 45:2a:b3:38:2d:fd:2d:0e:44:5e:64:2f:7c:ed:17:f1:e0:2e: 6d:6d:3d:fb:2a:a1:c3:7e:b9:80:8d:33:b7:3f:48:c5:3d:cd: 02:46:d7:c9:e4:27:07:d9:0a:f1:a5:10:e0:16:14:e4:7e:0d: 55:30:59:45:4e:ec:fb:29:20:23:95:1e:eb:1b:a5:d3:7b:c6: db:0c:3f:01:01:d1:6d:af:5f:11:7d:17:1b:3b:61:34:e3:43: d0:08:23:fa:e7:01:b1:f0:7a:90:3e:4a:61:63:c7:a0:f3:b4: 02:bc:2e:cc:99:4c:bf:86:97:03:d2:0c:45:b5:d5:b1:ae:7b: 81:ea:cc:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsGKIu0J66vJcHf7nS+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTc4NzI0MDM0NTJmM2UwMDhhYjc5ODA0NzM0MmRiMjRl ZGIzNWEwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EyhjNzUzMzdmYjRkZTI2NGEyYjUzZjI1OWE4YWNkMDY5YWZkNTU3M2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm9/idXlfFCAiqpM3Eiy41fQyAoB w9D8mZWfPcUFOAmu5aYclFtjs/BgMVsRcpNM9VTD/Cy9R6v8ZJK+3YCml2VYmst2 lFPUrEqCDdEMe4cvDdIZjprnqNGAR107cDP40t3ZdjG5FR+Z1j/+26nW3tbzmEvZ 9VNRlvAkbLalkIpGbwSqYe3UAlUmDczuvY+4oArCBP4qiSO6d3d4eM2Bf7WRK9ll dWaVadloStdrBBzU1f39UoH/YCgk3j1nZWbeyDx71Oeo62GWWuznODtjOy/WBX5+ fBCM+68/QTdhpC3FjJXXnBS8/eXEgky86j3AOWBHWC3erqo+Z2r0waT0WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdTN/tN4mSitT8lmorNBpr9VXPVMB8GA1UdIwQY MBaAFOAXhyQDRS8+AIq3mARzQtsk7bNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMt ODc3ZTBlODY2YjI0LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMtODc3ZTBlODY2YjI0 LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrgCzPjb jvimp7N/tYuKnusMDbE2qrwksH2ny044NJN/BKnZPhZoSGwV5IiaSKFRl+P6rZfB 4VuAe9/eII8Gi+905tJsgpkLZfsel0kIq1YFypWBCXVcjulaKUYiRWn1JE+YISMM o0i2A1fbeKSugWIWLdJKSz2FvffffVG7RSqzOC39LQ5EXmQvfO0X8eAubW09+yqh w365gI0ztz9IxT3NAkbXyeQnB9kK8aUQ4BYU5H4NVTBZRU7s+ykgI5Ue6xul03vG 2ww/AQHRba9fEX0XGzthNOND0Agj+ucBsfB6kD5KYWPHoPO0ArwuzJlMv4aXA9IM RbXVsa57gerMHA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:26 2025 by rpki-client