This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json) Hash identifier: nxDCdLz5isBNSlnM/xjbtQAdgdMTfhalBrofXWrCCWw= Subject key identifier: 14:C0:55:2A:C2:09:E4:6C:D3:60:C8:EA:D5:A5:85:81:F8:90:55:26 Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36 Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636 Certificate serial: 019AF389070AC72D736EBB65DCE54FB61B06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft Manifest number: 0E47 Signing time: Sat 06 Dec 2025 12:00:34 +0000 Manifest this update: Sat 06 Dec 2025 12:00:34 +0000 Manifest next update: Sun 07 Dec 2025 12:00:34 +0000 Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: aVUMWbibyPL9Q6J/jLUIw3to8TeZazbVRUc3IFNfA6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:07:0a:c7:2d:73:6e:bb:65:dc:e5:4f:b6:1b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636 Validity Not Before: Dec 6 12:00:34 2025 GMT Not After : Dec 7 12:00:34 2025 GMT Subject: CN=14c0552ac209e46cd360c8ead5a58581f8905526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:59:eb:50:f6:0f:46:d1:3f:95:44:57:5c: 55:9c:13:27:a1:80:a4:f7:db:3d:c2:bd:d2:22:07: 5d:4d:cd:8c:5e:3e:40:ac:70:fd:83:b3:41:58:f6: 68:bd:39:43:0b:fb:bc:8d:3b:d3:b9:ef:02:d5:f9: 2b:a2:28:33:e7:75:41:82:23:62:b2:f2:38:5b:7a: da:f0:f8:4f:c1:d3:7b:57:b5:75:bb:d5:00:d2:9f: af:06:ba:4d:05:3b:d9:1c:b4:4d:53:ee:b7:83:14: 29:9b:0a:24:7d:31:e7:c7:5c:49:48:e6:ff:f3:ea: 7a:0f:df:4c:c4:74:01:0b:40:29:c7:5b:45:4a:22: ee:3f:81:a1:0c:8a:32:42:5a:92:84:34:ea:d8:9a: a6:5a:d7:0c:9a:3d:18:35:7a:de:f7:31:47:fc:3f: 07:88:2e:d7:1f:4c:1e:80:5b:d4:6c:46:51:3a:84: bc:b7:60:fe:2d:27:5d:0f:f5:a7:32:74:da:67:ef: b3:b5:49:67:32:6b:02:a2:64:da:35:11:29:a8:c6: 88:c5:ea:c1:f1:41:0d:f5:67:bc:63:be:83:e4:bc: 36:0b:88:b3:16:96:ae:17:e1:2c:45:b3:4d:a5:e3: c5:cd:cb:e4:0d:66:44:32:42:d7:c5:05:f5:55:ce: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C0:55:2A:C2:09:E4:6C:D3:60:C8:EA:D5:A5:85:81:F8:90:55:26 X509v3 Authority Key Identifier: keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bb:d0:bd:f5:13:8e:26:e6:67:a9:54:1f:8a:d9:fd:36:9d: c7:b5:60:24:d6:02:85:49:dd:28:00:94:48:fd:79:88:15:ae: d9:1e:95:25:37:82:f7:1e:2f:03:fe:3f:d8:17:a0:98:d6:09: 32:22:f8:5a:c7:94:2a:3d:f7:8b:58:ad:90:c5:57:7c:51:21: be:44:1c:5b:74:59:2c:d8:a0:81:da:e4:b6:5d:17:1c:00:9e: a3:59:c0:de:8c:be:4f:21:6f:79:eb:a4:55:55:40:e4:53:70: b7:d3:3d:51:34:e7:9f:5d:0b:cd:25:b0:75:bc:8f:44:04:23: 44:92:65:4c:3d:4a:de:d0:03:82:09:a9:2f:27:71:06:42:1c: 90:35:c4:69:dc:e2:9e:86:ec:e4:ef:d2:32:a5:77:d2:24:a5: 24:cc:04:24:78:6d:ec:24:8d:29:7c:cd:81:55:c5:f6:88:20: b5:d7:e9:32:15:90:ec:09:74:1f:c2:fb:09:d7:4a:ba:06:7a: 11:01:4c:3f:1a:f2:46:34:87:e5:eb:ad:26:ba:4f:07:41:fc: 26:8a:e9:9d:3c:04:37:7c:9d:29:6d:3f:f6:18:a4:27:f5:d2: 0b:e5:ae:3d:4a:42:f2:90:c2:fe:eb:15:59:7d:78:83:3a:7c: 67:42:c9:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQcKxy1zbrtl3OVPthsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMmI3YjMwN2I4Yzk2ZTZjNzdiNWI4YTc4M2ZmNTVlMzc5 MDc2MzYwHhcNMjUxMjA2MTIwMDM0WhcNMjUxMjA3MTIwMDM0WjAzMTEwLwYDVQQD EygxNGMwNTUyYWMyMDllNDZjZDM2MGM4ZWFkNWE1ODU4MWY4OTA1NTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxdZ61D2D0bRP5VEV1xVnBMnoYCk 99s9wr3SIgddTc2MXj5ArHD9g7NBWPZovTlDC/u8jTvTue8C1fkroigz53VBgiNi svI4W3ra8PhPwdN7V7V1u9UA0p+vBrpNBTvZHLRNU+63gxQpmwokfTHnx1xJSOb/ 8+p6D99MxHQBC0Apx1tFSiLuP4GhDIoyQlqShDTq2JqmWtcMmj0YNXre9zFH/D8H iC7XH0wegFvUbEZROoS8t2D+LSddD/WnMnTaZ++ztUlnMmsComTaNREpqMaIxerB 8UEN9We8Y76D5Lw2C4izFpauF+EsRbNNpePFzcvkDWZEMkLXxQX1Vc7AuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTAVSrCCeRs02DI6tWlhYH4kFUmMB8GA1UdIwQY MBaAFOArezB7jJbmx3tbing/9V43kHY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0Zjkt MjIwZGRiZTJjMDlmLzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0ZjktMjIwZGRiZTJjMDlm LzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7vQvfUT jibmZ6lUH4rZ/Tadx7VgJNYChUndKACUSP15iBWu2R6VJTeC9x4vA/4/2BegmNYJ MiL4WseUKj33i1itkMVXfFEhvkQcW3RZLNiggdrktl0XHACeo1nA3oy+TyFveeuk VVVA5FNwt9M9UTTnn10LzSWwdbyPRAQjRJJlTD1K3tADggmpLydxBkIckDXEadzi nobs5O/SMqV30iSlJMwEJHht7CSNKXzNgVXF9oggtdfpMhWQ7Al0H8L7CddKugZ6 EQFMPxryRjSH5eutJrpPB0H8JorpnTwEN3ydKW0/9hikJ/XSC+WuPUpC8pDC/usV WX14gzp8Z0LJoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:54 2025 by rpki-client