This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft File: 4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json) Hash identifier: UnVZxSn7kcBitiZ3q3jepYnELX8rvJ94SvdyoFzFj+g= Subject key identifier: AD:3F:08:5D:25:6F:B8:DD:63:0B:6A:BD:65:38:72:6B:C0:1A:36:1F Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65 Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465 Certificate serial: 019AF240270935FB81E9CF4615E523BAD00D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft Manifest number: 0D60 Signing time: Sat 06 Dec 2025 06:01:21 +0000 Manifest this update: Sat 06 Dec 2025 06:01:21 +0000 Manifest next update: Sun 07 Dec 2025 06:01:21 +0000 Files and hashes: 1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: ev2WlQKzQFFSh9aBFAzG/d/mv0AkjjCGfiS1xNsHqns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:27:09:35:fb:81:e9:cf:46:15:e5:23:ba:d0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465 Validity Not Before: Dec 6 06:01:21 2025 GMT Not After : Dec 7 06:01:21 2025 GMT Subject: CN=ad3f085d256fb8dd630b6abd6538726bc01a361f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:3e:03:1c:da:4f:84:ac:cc:79:15:ea:3b: 3a:27:63:c9:78:96:45:92:0c:5a:7c:20:a7:54:e3: 79:0f:4a:72:26:a7:1f:59:a8:61:2d:e3:46:c3:40: 70:1b:7a:2f:3f:5a:99:63:97:80:dc:2d:73:67:42: f0:bd:ac:b9:8c:09:43:80:bb:ed:c8:f8:df:c1:32: 13:1a:6d:84:13:9d:86:37:7e:91:2e:a1:e1:a6:59: 19:71:00:60:ec:7d:cd:39:96:fb:a9:ae:b6:7f:8f: 18:42:4d:02:8d:71:0d:a7:0e:66:96:4a:0f:42:3e: 11:27:4f:4f:72:42:1e:d8:be:3f:d7:41:5b:e2:6f: 43:ea:5e:59:6d:ea:5e:cb:7e:73:99:4f:f5:1d:b8: f6:6a:8a:cf:d6:d5:0d:56:74:2f:ad:3d:3f:5f:58: 40:3e:28:32:5e:e2:c3:0b:47:23:89:c0:f4:27:c0: 6f:c8:28:6a:1d:8e:9d:84:6f:5b:79:77:98:81:61: 5a:6f:b3:a3:88:ee:35:7f:1d:ae:a5:e2:80:be:97: fd:48:0a:8b:2a:5e:c3:ba:39:09:9d:0d:61:d3:65: 77:c6:13:c9:7a:c5:0d:31:8f:a1:60:dd:10:9c:2b: 71:26:c5:12:b1:75:28:8a:54:6a:e4:54:50:5b:ea: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3F:08:5D:25:6F:B8:DD:63:0B:6A:BD:65:38:72:6B:C0:1A:36:1F X509v3 Authority Key Identifier: keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c2:30:3c:0e:df:36:d3:f6:50:66:b4:d2:93:0e:bc:d7:eb: 96:04:3f:af:01:f2:cc:8e:b1:70:31:9e:3b:f2:28:0b:f1:95: 3f:23:52:0f:af:4a:e3:c6:f0:93:49:93:e6:f4:e2:6d:a1:eb: a6:e6:d9:6c:ef:8b:1d:2e:5c:da:56:bd:56:f1:f3:1b:1e:3e: fe:d4:51:15:6e:7c:0e:ab:e8:55:1a:8f:93:e9:d5:df:91:b3: 17:4a:63:63:d2:68:fc:c6:70:e2:7a:28:89:ba:95:9e:b8:95: 77:46:7d:a8:32:76:67:de:16:e4:ef:1b:12:5e:c2:f0:ce:77: 1c:c8:ae:ff:b9:4f:47:1f:5c:81:30:f8:bc:86:6c:cc:59:6c: 6f:2a:58:87:d1:9a:c1:19:a9:3f:d1:88:29:f9:5b:2b:35:d4: 1b:8a:b7:5b:da:fc:c5:14:22:48:93:3d:b0:2c:7d:12:6c:5a: 79:6a:12:18:53:6e:84:18:54:c4:b2:d1:67:3e:c7:0d:8b:b7: e1:1a:70:20:b8:63:fd:10:e7:28:e3:fd:ee:ab:a8:2a:4e:8c: 81:fd:74:ed:43:ac:bd:03:0c:9e:1a:05:d8:fc:6b:ed:cc:1c: 33:98:c8:b7:ad:25:a4:54:c8:2a:d2:85:26:64:ce:3f:48:64: d3:5a:7d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCcJNfuB6c9GFeUjutANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh M2Q0NjUwHhcNMjUxMjA2MDYwMTIxWhcNMjUxMjA3MDYwMTIxWjAzMTEwLwYDVQQD EyhhZDNmMDg1ZDI1NmZiOGRkNjMwYjZhYmQ2NTM4NzI2YmMwMWEzNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qk+AxzaT4SszHkV6js6J2PJeJZF kgxafCCnVON5D0pyJqcfWahhLeNGw0BwG3ovP1qZY5eA3C1zZ0Lwvay5jAlDgLvt yPjfwTITGm2EE52GN36RLqHhplkZcQBg7H3NOZb7qa62f48YQk0CjXENpw5mlkoP Qj4RJ09PckIe2L4/10Fb4m9D6l5Zbepey35zmU/1Hbj2aorP1tUNVnQvrT0/X1hA PigyXuLDC0cjicD0J8BvyChqHY6dhG9beXeYgWFab7OjiO41fx2upeKAvpf9SAqL Kl7DujkJnQ1h02V3xhPJesUNMY+hYN0QnCtxJsUSsXUoilRq5FRQW+rGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0/CF0lb7jdYwtqvWU4cmvAGjYfMB8GA1UdIwQY MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8IwPA7f NtP2UGa00pMOvNfrlgQ/rwHyzI6xcDGeO/IoC/GVPyNSD69K48bwk0mT5vTibaHr pubZbO+LHS5c2la9VvHzGx4+/tRRFW58DqvoVRqPk+nV35GzF0pjY9Jo/MZw4noo ibqVnriVd0Z9qDJ2Z94W5O8bEl7C8M53HMiu/7lPRx9cgTD4vIZszFlsbypYh9Ga wRmpP9GIKflbKzXUG4q3W9r8xRQiSJM9sCx9EmxaeWoSGFNuhBhUxLLRZz7HDYu3 4RpwILhj/RDnKOP97quoKk6Mgf107UOsvQMMnhoF2Pxr7cwcM5jIt60lpFTIKtKF JmTOP0hk01p9JA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:11 2025 by rpki-client