This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json) Hash identifier: /RrNNuY8jQ4bKnuPmnOvCOsVoRHUIpRLNo5o1xuVPqo= Subject key identifier: 52:A7:2A:45:D9:B7:DA:C0:6F:52:0A:C4:C7:86:E6:49:35:B4:6D:E0 Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea Certificate serial: 019AF12D0A97FBC551C4FF00690C4CF1CADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:51 +0000 Manifest this update: Sat 06 Dec 2025 01:00:51 +0000 Manifest next update: Sun 07 Dec 2025 01:00:51 +0000 Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: 9m3sA4zIOPQ0s2hvjw52TY3F6xdRovm4xjhbaSMlRM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0a:97:fb:c5:51:c4:ff:00:69:0c:4c:f1:ca:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea Validity Not Before: Dec 6 01:00:51 2025 GMT Not After : Dec 7 01:00:51 2025 GMT Subject: CN=52a72a45d9b7dac06f520ac4c786e64935b46de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:4b:cb:46:ee:a2:31:21:9e:b4:88:fe:b4: d5:65:3f:b9:4b:df:58:bd:19:3d:4b:9e:79:ca:71: 70:80:27:2a:af:b7:21:f5:b9:b9:75:ad:77:a9:44: aa:4f:05:71:db:06:f4:79:b7:84:46:8f:a4:00:29: 12:4f:dd:a1:07:0a:e9:b8:d6:a6:b7:cf:93:47:89: d1:1d:b8:e8:88:e3:5a:53:19:53:82:0d:fe:90:6b: e5:ae:f7:8c:e0:21:a9:a7:ff:3d:0b:5a:18:75:41: 94:3f:5a:2d:ed:69:6d:f5:51:c2:49:ce:1a:fd:3d: 79:64:e0:ee:d0:2a:ef:fa:15:07:b5:16:f0:e0:e3: dd:dd:61:69:a0:0c:c0:c8:f6:1a:6a:d4:47:fc:04: f8:8d:fc:4c:d0:09:42:d5:85:03:11:68:2d:70:10: a3:fe:13:b2:3a:b4:1a:06:5f:6d:e3:56:86:11:7f: 45:bb:90:f9:8b:79:44:c8:30:35:72:0c:16:fc:9b: 6d:8d:5d:94:d8:31:cd:ed:d2:e3:f6:09:38:b5:aa: 2e:5b:9d:d2:84:6f:09:68:67:d0:9b:4c:05:93:e3: a9:11:fb:86:98:43:dc:34:b7:97:fd:f8:cb:d5:6f: 88:1f:9c:0b:67:b6:91:b6:fd:63:2b:86:ce:cf:a3: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A7:2A:45:D9:B7:DA:C0:6F:52:0A:C4:C7:86:E6:49:35:B4:6D:E0 X509v3 Authority Key Identifier: keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a7:a3:11:43:e6:52:0d:71:9e:30:db:e8:51:37:14:e4:87: 50:b5:72:50:bb:bd:56:7f:76:e3:bf:79:0b:3c:48:e4:8f:74: b8:93:11:6a:58:f0:22:44:53:e4:ff:fb:b2:76:5e:4d:65:66: cf:e3:a2:58:42:f9:82:16:c6:ff:6e:fc:ee:f4:6e:5a:4a:0b: ae:27:e4:22:1d:3c:df:e7:e1:3c:0b:4f:d1:00:ce:3c:4b:a6: 11:33:7a:a3:29:17:df:50:bf:22:aa:03:a3:58:de:f5:76:df: 78:e0:d7:5f:da:5c:c4:5b:7b:df:75:99:16:7b:f8:bd:3a:91: 3c:d0:28:0e:ca:e8:35:a0:6f:c3:1a:ba:1e:1a:52:26:aa:e9: b7:8a:61:e6:61:76:6b:37:80:23:7e:2c:e8:d5:cb:ad:88:e1: db:a8:3a:23:5a:61:cc:02:2d:d9:f6:f4:e4:f0:ae:7c:87:ae: 6f:2b:1a:b6:27:dd:8e:0b:a8:a0:03:2d:12:f3:62:50:bd:d3: 62:2b:74:d7:e7:3d:25:19:0a:c3:ec:8b:76:e3:bf:71:32:6e: bb:f3:46:8f:0a:24:7e:02:ee:b9:99:06:a3:4b:20:d4:c6:9b: 18:a7:59:51:22:80:23:53:59:3f:ba:b4:1a:27:db:cd:b5:1c: 27:5a:f5:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQqX+8VRxP8AaQxM8creMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjg2MWVjODRmYzU2ZWFjYTliOGM2MzZlNzkyM2U2Zjky ZGNjZWEwHhcNMjUxMjA2MDEwMDUxWhcNMjUxMjA3MDEwMDUxWjAzMTEwLwYDVQQD Eyg1MmE3MmE0NWQ5YjdkYWMwNmY1MjBhYzRjNzg2ZTY0OTM1YjQ2ZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgpLy0buojEhnrSI/rTVZT+5S99Y vRk9S555ynFwgCcqr7ch9bm5da13qUSqTwVx2wb0ebeERo+kACkST92hBwrpuNam t8+TR4nRHbjoiONaUxlTgg3+kGvlrveM4CGpp/89C1oYdUGUP1ot7Wlt9VHCSc4a /T15ZODu0Crv+hUHtRbw4OPd3WFpoAzAyPYaatRH/AT4jfxM0AlC1YUDEWgtcBCj /hOyOrQaBl9t41aGEX9Fu5D5i3lEyDA1cgwW/JttjV2U2DHN7dLj9gk4taouW53S hG8JaGfQm0wFk+OpEfuGmEPcNLeX/fjL1W+IH5wLZ7aRtv1jK4bOz6PWOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKnKkXZt9rAb1IKxMeG5kk1tG3gMB8GA1UdIwQY MBaAFOH4YeyE/FbqypuMY255I+b5LczqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mZDhhOTQtZGFlZi00NjQ0LWJiNWUt MjFhNGQ1Y2MyYWJmLzEvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mZDhhOTQtZGFlZi00NjQ0LWJiNWUtMjFhNGQ1Y2MyYWJm LzEvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqejEUPm Ug1xnjDb6FE3FOSHULVyULu9Vn924795CzxI5I90uJMRaljwIkRT5P/7snZeTWVm z+OiWEL5ghbG/2787vRuWkoLrifkIh083+fhPAtP0QDOPEumETN6oykX31C/IqoD o1je9XbfeODXX9pcxFt733WZFnv4vTqRPNAoDsroNaBvwxq6HhpSJqrpt4ph5mF2 azeAI34s6NXLrYjh26g6I1phzAIt2fb05PCufIeubysatifdjguooAMtEvNiUL3T Yit01+c9JRkKw+yLduO/cTJuu/NGjwokfgLuuZkGo0sg1MabGKdZUSKAI1NZP7q0 GifbzbUcJ1r1WA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:20 2025 by rpki-client