This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json) Hash identifier: 35Uybh3hG0LXuTbjSKbtN6hJiHaUJ5mfQUZtK+cJNGU= Subject key identifier: D1:26:36:F0:5C:72:5A:7D:0F:14:40:BD:B5:F5:01:44:B8:C0:4D:2C Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc Certificate serial: 019AF2ADF29FA5AA46F1CD36BDE8CF127FF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: RhqW68L+RxrN7PmZMK4J1OT0mW/zwhI5yXqFkxoqJ8k=) 2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f2:9f:a5:aa:46:f1:cd:36:bd:e8:cf:12:7f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=d12636f05c725a7d0f1440bdb5f50144b8c04d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ad:f3:21:4c:03:04:8f:dc:10:e4:2f:51:fc: 20:20:eb:8b:81:79:1e:86:67:1a:ba:df:1e:3b:31: e7:ee:06:d7:ef:24:ba:6a:3b:8f:d2:cb:06:a6:c3: 98:2e:00:63:38:6d:8f:de:cd:c6:41:b5:4b:e0:a6: 2f:8d:3f:61:9b:cf:5f:1f:53:7f:d0:61:2a:5b:98: 06:55:a9:0d:cd:d1:26:ef:aa:25:0b:62:a1:c4:60: 4f:9f:26:73:35:36:f6:1d:7f:3c:25:4d:e5:b9:18: 6c:10:c4:e7:df:77:4c:d3:c3:cb:cf:bb:34:2d:d1: 41:80:8a:25:28:48:90:50:fa:03:3a:8d:99:0a:42: 8a:25:df:8a:87:94:1c:aa:d3:87:9f:19:fb:dc:be: d1:6a:e5:5d:80:33:2f:b7:ef:de:45:fc:4d:92:76: 40:28:45:1e:68:14:51:aa:6c:b5:eb:41:ab:d2:49: f8:64:e4:ba:07:95:09:e4:ff:f6:cd:2e:45:61:aa: a5:e2:02:22:47:58:32:e5:27:a0:4f:7d:95:4b:bf: ce:fa:b3:73:a1:30:13:38:6b:e8:3e:af:fd:21:09: 83:bb:68:09:30:21:0d:9a:e1:5f:17:b5:c9:b4:34: 29:ce:87:ea:29:9c:cd:69:9a:99:de:f4:8a:81:b8: 5c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:26:36:F0:5C:72:5A:7D:0F:14:40:BD:B5:F5:01:44:B8:C0:4D:2C X509v3 Authority Key Identifier: keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:df:93:21:34:6d:93:28:c5:cf:52:aa:4a:f9:e4:b4:56:3a: b8:e3:58:a1:99:5b:8f:b2:5a:71:c7:12:12:67:5f:f4:6c:7f: 1b:05:32:49:bc:2a:a3:36:ef:54:75:cf:8f:46:17:44:c5:87: 6b:70:c9:cf:a4:d1:8c:7c:2f:8f:e1:5a:c2:eb:b8:7e:5e:c9: d5:15:ff:30:c9:f4:b7:8a:29:14:fa:fb:e7:0b:4b:ab:38:a8: 1c:3e:12:4b:f8:68:b6:16:e4:26:b5:9a:76:0f:de:c4:a6:a8: 22:74:95:60:5f:31:90:46:73:5f:ad:9f:15:de:1b:e9:e2:cb: ef:17:7b:70:69:eb:a6:d6:ff:ac:0b:20:de:4f:81:d3:69:bb: 0b:fe:d5:2d:ad:49:1a:70:27:c7:fa:ac:54:60:89:d9:a2:94: 7c:3a:9f:8d:bb:61:f7:58:7f:28:ca:9d:46:31:40:8c:76:aa: 94:3c:6d:d8:b5:fa:36:b7:17:cc:b7:4d:c7:54:d5:32:16:a4: 79:9a:40:f5:f3:0a:6a:11:4a:50:b0:c5:4b:84:31:2e:2a:19: 46:43:fe:c1:8a:ac:d5:bc:18:48:68:12:a6:5f:43:c9:53:66: a8:fe:c1:cd:e1:67:b5:f3:a0:1d:19:c1:c5:f1:9a:fd:d5:a6: 42:8d:71:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfKfpapG8c02vejPEn/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx YmFiZmMwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD EyhkMTI2MzZmMDVjNzI1YTdkMGYxNDQwYmRiNWY1MDE0NGI4YzA0ZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq3zIUwDBI/cEOQvUfwgIOuLgXke hmcaut8eOzHn7gbX7yS6ajuP0ssGpsOYLgBjOG2P3s3GQbVL4KYvjT9hm89fH1N/ 0GEqW5gGVakNzdEm76olC2KhxGBPnyZzNTb2HX88JU3luRhsEMTn33dM08PLz7s0 LdFBgIolKEiQUPoDOo2ZCkKKJd+Kh5QcqtOHnxn73L7RauVdgDMvt+/eRfxNknZA KEUeaBRRqmy160Gr0kn4ZOS6B5UJ5P/2zS5FYaql4gIiR1gy5SegT32VS7/O+rNz oTATOGvoPq/9IQmDu2gJMCENmuFfF7XJtDQpzofqKZzNaZqZ3vSKgbhc2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEmNvBcclp9DxRAvbX1AUS4wE0sMB8GA1UdIwQY MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt NWYyODEzN2E3NjU4LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4 LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAst+TITRt kyjFz1KqSvnktFY6uONYoZlbj7JacccSEmdf9Gx/GwUySbwqozbvVHXPj0YXRMWH a3DJz6TRjHwvj+Fawuu4fl7J1RX/MMn0t4opFPr75wtLqzioHD4SS/hothbkJrWa dg/exKaoInSVYF8xkEZzX62fFd4b6eLL7xd7cGnrptb/rAsg3k+B02m7C/7VLa1J GnAnx/qsVGCJ2aKUfDqfjbth91h/KMqdRjFAjHaqlDxt2LX6NrcXzLdNx1TVMhak eZpA9fMKahFKULDFS4QxLioZRkP+wYqs1bwYSGgSpl9DyVNmqP7BzeFntfOgHRnB xfGa/dWmQo1xEg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:35 2025 by rpki-client