This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json) Hash identifier: M58G82bfZGT6xzYV51f68+0LRNCZXdFdntS4K+ed6Q4= Subject key identifier: 2B:4A:F7:F8:67:37:19:1B:28:A7:F2:9A:64:D7:3A:26:6A:C5:E8:CB Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e Certificate serial: 019AF19AF7F242FA2F9167EAD14DBD47554F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft Manifest number: 04C6 Signing time: Sat 06 Dec 2025 03:00:56 +0000 Manifest this update: Sat 06 Dec 2025 03:00:56 +0000 Manifest next update: Sun 07 Dec 2025 03:00:56 +0000 Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: qEkPhyPeDJZKF+qoWIgUOOAgEVzd0bks8ky8eE8pmns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f7:f2:42:fa:2f:91:67:ea:d1:4d:bd:47:55:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e Validity Not Before: Dec 6 03:00:56 2025 GMT Not After : Dec 7 03:00:56 2025 GMT Subject: CN=2b4af7f86737191b28a7f29a64d73a266ac5e8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:3c:63:89:20:25:72:eb:01:e6:1d:62:02: 4c:ae:78:12:f6:27:fe:ea:ef:25:ee:e3:09:54:95: eb:6d:9b:b6:18:f5:a7:99:c1:fa:21:22:1b:a1:fb: 47:b1:0b:23:42:90:08:d9:2c:0a:9a:92:d0:d6:34: f2:e5:12:7c:28:f5:5b:6a:89:b3:e7:89:ae:34:13: 02:07:fc:ea:a7:32:43:ac:54:53:8c:66:94:05:ec: c1:38:e2:20:db:de:16:49:52:f3:46:f9:14:ff:89: d4:a0:c9:09:f6:fe:5b:0c:4e:d6:35:72:6f:78:63: 35:91:86:8b:06:26:37:00:e1:e7:db:b3:52:40:1d: 05:3a:d2:7d:13:ac:e9:39:80:2c:cb:45:eb:dd:cd: 42:c3:de:85:cf:a3:c1:d0:44:62:1c:12:a1:2b:51: 55:53:40:48:d4:65:c2:d4:07:7f:fe:c7:73:c2:03: e9:cb:72:27:e3:28:bc:d1:51:50:c6:1d:ea:d3:e5: 0b:f3:88:84:e9:f7:bc:2e:ad:ad:fc:5f:4c:4a:43: 90:56:2b:66:8c:fe:63:a2:6f:5a:b4:fd:9b:22:40: e6:a6:e1:36:bf:5f:83:f1:a7:ca:66:be:e0:6a:a0: b1:04:92:6b:80:a7:72:3e:32:47:c7:bb:69:72:06: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4A:F7:F8:67:37:19:1B:28:A7:F2:9A:64:D7:3A:26:6A:C5:E8:CB X509v3 Authority Key Identifier: keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:3f:32:fe:67:eb:92:bb:a0:57:5b:ca:7d:79:0b:f0:16: a8:56:27:29:80:18:44:64:b1:85:a8:0c:20:4b:db:ea:9d:39: 5b:b8:31:98:c3:ab:d1:69:d1:11:17:f2:b6:8c:d8:be:fb:ae: 7d:e2:70:f5:96:54:0d:cc:f8:3a:4c:f1:20:17:46:2f:bd:b3: 81:dc:30:11:49:1b:b9:20:9b:14:93:ba:33:bb:b0:cb:95:23: 4a:f1:f7:07:22:f6:44:a0:6a:0b:2d:50:96:07:73:d7:73:1c: a5:b5:c2:c4:dd:58:a2:bc:08:e8:17:05:7e:7d:23:07:7d:0f: 8d:49:78:8f:f3:5b:ef:5d:a8:52:55:b8:4c:aa:79:62:85:88: e5:2c:44:4b:50:60:57:55:67:4d:6e:a5:7c:79:c6:a0:7e:28: 6d:78:7d:f7:a8:84:53:8a:10:a3:77:50:d2:6a:29:0a:25:93: a2:a3:68:e2:c4:bc:b8:a6:7e:03:4b:78:db:55:db:ed:a9:fa: 23:4f:96:22:d7:aa:fc:48:f2:92:17:0e:ad:28:12:fd:2c:dd: 8f:6d:c3:f4:19:de:35:75:28:69:97:88:0e:27:4e:7b:39:0b: e9:bd:c8:8b:bb:0f:01:c6:e4:c3:7e:db:eb:8a:09:0f:58:d3: 4c:a1:f5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvfyQvovkWfq0U29R1VPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZGUwMjk3M2RjMDVlYzNjNmJiZjZlNTdiN2Q2YTRjZWVm ODE4NWUwHhcNMjUxMjA2MDMwMDU2WhcNMjUxMjA3MDMwMDU2WjAzMTEwLwYDVQQD EygyYjRhZjdmODY3MzcxOTFiMjhhN2YyOWE2NGQ3M2EyNjZhYzVlOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSI8Y4kgJXLrAeYdYgJMrngS9if+ 6u8l7uMJVJXrbZu2GPWnmcH6ISIboftHsQsjQpAI2SwKmpLQ1jTy5RJ8KPVbaomz 54muNBMCB/zqpzJDrFRTjGaUBezBOOIg294WSVLzRvkU/4nUoMkJ9v5bDE7WNXJv eGM1kYaLBiY3AOHn27NSQB0FOtJ9E6zpOYAsy0Xr3c1Cw96Fz6PB0ERiHBKhK1FV U0BI1GXC1Ad//sdzwgPpy3In4yi80VFQxh3q0+UL84iE6fe8Lq2t/F9MSkOQVitm jP5jom9atP2bIkDmpuE2v1+D8afKZr7gaqCxBJJrgKdyPjJHx7tpcgYl/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtK9/hnNxkbKKfymmTXOiZqxejLMB8GA1UdIwQY MBaAFJTeApc9wF7Dxrv25Xt9akzu+BheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2Qt ZDQ5ZDFmNTczOWVkLzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2QtZDQ5ZDFmNTczOWVk LzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJk/Mv5n 65K7oFdbyn15C/AWqFYnKYAYRGSxhagMIEvb6p05W7gxmMOr0WnRERfytozYvvuu feJw9ZZUDcz4OkzxIBdGL72zgdwwEUkbuSCbFJO6M7uwy5UjSvH3ByL2RKBqCy1Q lgdz13McpbXCxN1YorwI6BcFfn0jB30PjUl4j/Nb712oUlW4TKp5YoWI5SxES1Bg V1VnTW6lfHnGoH4obXh996iEU4oQo3dQ0mopCiWToqNo4sS8uKZ+A0t421Xb7an6 I0+WIteq/EjykhcOrSgS/Szdj23D9BneNXUoaZeIDidOezkL6b3Ii7sPAcbkw37b 64oJD1jTTKH1MA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:59 2025 by rpki-client