This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json) Hash identifier: W7f2Gm9XrEFHE1FsnbEAQOUHXQuydAJ7ZgrwYzWjB7Q= Subject key identifier: BB:E9:E9:BC:6E:51:BC:9F:E6:2B:78:51:7F:D2:EE:64:AE:6C:8A:05 Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f Certificate serial: 019AF1645A91E81D1080DCD0E6226CEBC9FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft Manifest number: 0CE9 Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: EYTI2wQCJrWMsiquIuBSrfgs3hKYwmM0oQB7LQgC0KA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5a:91:e8:1d:10:80:dc:d0:e6:22:6c:eb:c9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=bbe9e9bc6e51bc9fe62b78517fd2ee64ae6c8a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:a3:e7:d2:eb:2d:2c:9a:f1:24:c7:22:d8: d4:a1:b6:53:83:e9:3d:77:d4:73:3c:65:8a:04:dc: 67:1a:87:88:2d:e8:b4:81:ce:bc:0e:be:c5:15:f7: 68:90:85:18:53:01:1d:38:54:c4:42:8c:26:b6:70: d9:be:fe:7c:00:1e:62:0d:4d:75:73:90:90:4c:45: 05:7c:43:7f:f2:5a:35:93:eb:e7:75:11:c3:d3:6e: d7:c1:4b:bb:48:cd:13:5e:0b:b9:7a:14:67:2e:22: 43:fd:c9:b4:b3:38:78:18:34:31:81:7f:45:e8:0a: d4:55:a7:f3:5a:6b:b7:fc:cf:e5:7e:4b:9d:2b:c0: a2:73:38:66:b1:ff:b3:0a:28:97:f9:c1:5d:4f:63: 6f:fb:3f:38:be:4c:d4:67:a1:74:e7:1e:ca:4d:f4: c3:58:79:39:5a:64:22:9c:5c:a4:c3:e3:59:8b:34: 61:b5:bb:63:30:e7:85:9f:a1:29:24:bf:9a:d7:b7: ec:96:82:96:b5:30:81:b6:14:56:6b:bd:37:dd:44: 6a:ed:96:37:d0:86:3c:00:eb:3b:9f:93:07:e9:53: 44:34:59:bf:76:d6:cc:24:c5:6a:db:51:cd:08:6b: 0d:09:9e:a8:74:58:56:64:03:c9:cc:2d:61:53:ac: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E9:E9:BC:6E:51:BC:9F:E6:2B:78:51:7F:D2:EE:64:AE:6C:8A:05 X509v3 Authority Key Identifier: keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:96:bb:db:4e:e2:4f:c9:14:0b:81:dc:1d:16:3f:dd:e4:70: de:5a:06:9f:e1:57:94:4f:41:e0:d4:50:2f:c1:1c:0c:45:0b: d1:3b:7b:ee:35:e6:11:5d:c7:e1:79:a5:13:51:01:04:e2:f8: c3:8c:21:cb:07:f9:06:59:66:d6:bf:1a:66:ac:24:d1:19:03: 33:2f:58:ee:89:0a:fe:f2:42:46:e3:03:9e:86:35:5d:ff:c0: ba:9c:55:e2:09:f0:2e:c0:06:3c:3f:94:2d:94:4b:15:04:e8: d5:95:f8:e8:b9:62:21:b9:69:e8:70:4e:41:ae:a8:d6:00:03: 28:96:ab:1d:30:79:31:bf:a8:73:76:78:c1:30:e9:d2:aa:b4: ad:2c:6a:c2:b6:14:9d:f6:38:63:78:59:78:3a:fa:1f:29:77: d8:1e:42:b2:fd:1b:2b:98:12:82:de:d9:37:53:c1:9a:51:b8: 7d:0c:19:6a:b0:0e:7a:8b:6f:90:25:d6:2b:06:76:05:b8:f5: 73:89:3c:06:d8:bb:af:12:ca:59:df:fd:4f:45:e1:b4:e5:1a: ea:74:7b:78:84:63:59:95:c3:ac:5d:57:4d:a6:33:2c:fd:6a: e1:62:49:cf:37:ee:c5:d2:fd:62:d2:ea:bb:df:31:cf:ce:d6: 78:90:e1:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFqR6B0QgNzQ5iJs68n6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODRmZWM0OTA2YWI4OTAyMGExMTZiNjg0NDZjY2VhZjZj YzUwMGYwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD EyhiYmU5ZTliYzZlNTFiYzlmZTYyYjc4NTE3ZmQyZWU2NGFlNmM4YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH6j59LrLSya8STHItjUobZTg+k9 d9RzPGWKBNxnGoeILei0gc68Dr7FFfdokIUYUwEdOFTEQowmtnDZvv58AB5iDU11 c5CQTEUFfEN/8lo1k+vndRHD027XwUu7SM0TXgu5ehRnLiJD/cm0szh4GDQxgX9F 6ArUVafzWmu3/M/lfkudK8Ciczhmsf+zCiiX+cFdT2Nv+z84vkzUZ6F05x7KTfTD WHk5WmQinFykw+NZizRhtbtjMOeFn6EpJL+a17fsloKWtTCBthRWa7033URq7ZY3 0IY8AOs7n5MH6VNENFm/dtbMJMVq21HNCGsNCZ6odFhWZAPJzC1hU6w4ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvp6bxuUbyf5it4UX/S7mSubIoFMB8GA1UdIwQY MBaAFGuE/sSQariQIKEWtoRGzOr2zFAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgt ZDFkOTQ3ZTczMzA5LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgtZDFkOTQ3ZTczMzA5 LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5a7207i T8kUC4HcHRY/3eRw3loGn+FXlE9B4NRQL8EcDEUL0Tt77jXmEV3H4XmlE1EBBOL4 w4whywf5Bllm1r8aZqwk0RkDMy9Y7okK/vJCRuMDnoY1Xf/AupxV4gnwLsAGPD+U LZRLFQTo1ZX46LliIblp6HBOQa6o1gADKJarHTB5Mb+oc3Z4wTDp0qq0rSxqwrYU nfY4Y3hZeDr6Hyl32B5Csv0bK5gSgt7ZN1PBmlG4fQwZarAOeotvkCXWKwZ2Bbj1 c4k8Bti7rxLKWd/9T0XhtOUa6nR7eIRjWZXDrF1XTaYzLP1q4WJJzzfuxdL9YtLq u98xz87WeJDhcg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:07 2025 by rpki-client