This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft File: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft (raw, json) Hash identifier: 5Z4M7rLUn7MC6pWAKbeqmkQZ84uEHTnsPKJP8eTx9w4= Subject key identifier: 2B:8A:F4:F8:1A:5F:23:BA:A6:F5:A0:57:D0:5E:5A:14:7E:E2:72:69 Authority key identifier: E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4 Certificate issuer: /CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4 Certificate serial: 019AF240028CE3D4FE30DD9AC8B9AA248864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft Manifest number: 3B Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl (hash: YKJcPWMWWFfKlva1NpeFSDx991CqHbqaA/vkpaj8j00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:02:8c:e3:d4:fe:30:dd:9a:c8:b9:aa:24:88:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4 Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=2b8af4f81a5f23baa6f5a057d05e5a147ee27269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8a:60:5a:00:da:f5:0f:1c:46:30:3a:57:79: 7d:0f:6b:b5:6a:6c:6e:14:63:c0:82:ed:e6:76:50: 15:f9:3d:b8:01:f0:56:b3:48:5f:e4:d6:fd:71:c3: cc:1a:16:b2:50:c9:66:72:d1:d0:d5:eb:b5:1d:cb: 22:51:8f:9c:6c:a6:bf:28:ef:e5:5a:25:de:c1:23: 7e:9d:17:1d:86:b8:76:56:1f:63:a4:1d:39:e1:71: 35:7c:b8:b8:fb:3b:83:75:d1:42:6b:68:72:ff:c3: b0:7d:28:90:55:c1:e7:46:f2:22:20:a7:fa:7b:dc: 81:d2:34:7d:a2:9a:1e:b3:3f:17:41:de:ee:41:4b: 5b:84:56:fe:f4:76:68:c3:9b:39:3b:6a:20:ae:55: ff:dd:67:e6:9a:8f:ec:81:71:67:d6:bf:f4:0f:eb: 85:f1:a7:75:d8:d7:a4:0f:cd:46:da:65:b4:92:9b: 5a:9c:c1:b0:59:aa:a8:06:46:60:c5:80:4d:a3:18: cc:6a:01:6b:a3:32:33:22:c4:09:c7:f6:53:72:0d: 23:72:8b:bc:32:7b:a6:74:59:8a:25:1b:e7:fa:31: fb:42:62:86:fe:99:4c:0e:fe:9f:a7:52:f1:28:c5: 7e:ee:75:0c:49:fc:e1:e9:74:cb:49:79:5c:81:62: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:F4:F8:1A:5F:23:BA:A6:F5:A0:57:D0:5E:5A:14:7E:E2:72:69 X509v3 Authority Key Identifier: keyid:E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:93:d1:60:0c:57:b2:de:8f:65:0b:0a:e6:81:03:96:f7:92: db:d9:3f:f6:1c:3f:fe:f6:a8:b6:be:17:41:ef:5c:79:bf:5c: 03:7b:ca:eb:b9:1a:b3:60:71:0f:c5:72:e3:59:69:c3:e7:f8: 82:d2:f0:85:c7:67:69:bc:ff:db:e6:00:03:37:6e:3d:48:e9: a0:c1:36:78:21:2c:af:94:21:1c:e6:da:bf:cc:13:2c:f3:30: 3c:62:0e:31:05:4e:30:74:45:87:90:7d:c5:52:b5:fe:c8:29: 8b:76:b1:cc:10:11:2e:c8:4a:d8:b8:dc:de:23:10:b4:d9:77: 6d:f8:f0:4b:3c:c1:6d:97:7c:2c:36:be:0c:72:df:f0:95:ea: e6:23:f6:11:f2:7a:05:b9:56:df:65:49:bc:d1:2f:73:82:1e: df:3d:92:6c:41:0c:7b:4c:a2:15:3c:66:8f:a4:ed:89:4d:c3: ad:d7:89:ee:b7:93:32:90:3a:15:fa:27:1a:99:24:9d:2a:2d: b3:42:a3:8b:e7:b9:b5:3d:f7:28:ee:7e:8e:d5:5b:62:c5:d9: d3:03:1d:a2:ce:14:91:ce:01:40:0d:08:c8:83:e3:8c:da:41: 77:80:84:4a:7e:65:ef:a5:86:af:4b:d6:4f:fe:98:6a:18:8d: ba:81:f9:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAKM49T+MN2ayLmqJIhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYjBlYzk5MjY4OTZiYTEyNWJlOGZhNGFlYmVlYThmZDMw OWI4YjQwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD EygyYjhhZjRmODFhNWYyM2JhYTZmNWEwNTdkMDVlNWExNDdlZTI3MjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IpgWgDa9Q8cRjA6V3l9D2u1amxu FGPAgu3mdlAV+T24AfBWs0hf5Nb9ccPMGhayUMlmctHQ1eu1HcsiUY+cbKa/KO/l WiXewSN+nRcdhrh2Vh9jpB054XE1fLi4+zuDddFCa2hy/8OwfSiQVcHnRvIiIKf6 e9yB0jR9opoesz8XQd7uQUtbhFb+9HZow5s5O2ogrlX/3Wfmmo/sgXFn1r/0D+uF 8ad12NekD81G2mW0kptanMGwWaqoBkZgxYBNoxjMagFrozIzIsQJx/ZTcg0jcou8 MnumdFmKJRvn+jH7QmKG/plMDv6fp1LxKMV+7nUMSfzh6XTLSXlcgWLSbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuK9PgaXyO6pvWgV9BeWhR+4nJpMB8GA1UdIwQY MBaAFOCw7JkmiWuhJb6PpK6+6o/TCbi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZDVjM2EtNjNjMC00MmNhLTg4NGIt YjA3MDdhN2Q2MWExLzEvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81ZDVjM2EtNjNjMC00MmNhLTg4NGItYjA3MDdhN2Q2MWEx LzEvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZPRYAxX st6PZQsK5oEDlveS29k/9hw//vaotr4XQe9ceb9cA3vK67kas2BxD8Vy41lpw+f4 gtLwhcdnabz/2+YAAzduPUjpoME2eCEsr5QhHObav8wTLPMwPGIOMQVOMHRFh5B9 xVK1/sgpi3axzBARLshK2Ljc3iMQtNl3bfjwSzzBbZd8LDa+DHLf8JXq5iP2EfJ6 BblW32VJvNEvc4Ie3z2SbEEMe0yiFTxmj6TtiU3DrdeJ7reTMpA6FfonGpkknSot s0Kji+e5tT33KO5+jtVbYsXZ0wMdos4Ukc4BQA0IyIPjjNpBd4CESn5l76WGr0vW T/6YahiNuoH5kg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:19 2025 by rpki-client