This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json) Hash identifier: m+n46LdkjLg0YtVYJ7jArHwfut61ebNDYidEKcM0DjY= Subject key identifier: C4:46:02:E5:F5:BE:5F:94:23:E8:07:2D:C6:3E:A1:B9:D0:C0:35:2F Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6 Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6 Certificate serial: 019AF12D79B8B21C1EFD6C0A52344EF5169F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: SfkebaCTonoHlBX0K4NHevDw+6sWGidzWx+VYz8YFIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:79:b8:b2:1c:1e:fd:6c:0a:52:34:4e:f5:16:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6 Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=c44602e5f5be5f9423e8072dc63ea1b9d0c0352f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:85:cf:91:98:08:c3:0d:40:34:96:07:c9: 9f:6a:e0:6d:48:b3:b0:37:56:7a:8f:64:56:c2:f9: a4:8a:62:ce:ef:2e:41:e9:03:db:3c:50:be:20:96: 82:f3:3e:9a:31:4d:26:b1:c2:6b:1e:44:2d:63:a6: e6:f6:3c:9a:4d:b9:0a:59:be:40:51:25:97:d8:f7: 80:c3:e7:4e:3a:00:b6:a1:47:96:7a:c5:5d:04:75: 06:97:1b:94:35:90:d2:0e:6a:6b:a6:6d:3b:59:1b: 4d:aa:e1:f1:d1:f8:d5:5e:0b:11:26:45:a5:4f:1c: 42:b9:9e:e8:e6:3d:e7:4a:0a:17:a3:d6:a5:04:6b: 8e:87:cf:79:91:b2:ed:88:ef:cc:08:dd:16:9d:6e: c6:47:d1:e9:ac:87:f1:d4:53:f2:bf:3f:11:f4:67: 7e:a3:57:2a:15:1c:33:3a:37:4b:17:9a:92:8f:bb: 81:aa:d2:59:02:19:c0:34:9b:31:36:78:5f:71:50: ca:d2:06:0e:f2:9d:12:5f:da:76:d4:c9:af:0e:1e: cc:d0:34:fa:5c:df:b5:c8:c3:fc:d4:7e:61:a4:c0: bb:eb:7c:8e:f8:5e:3a:41:d3:07:fa:a3:29:35:51: 98:91:78:65:d6:f1:cc:c6:dc:c8:b6:c6:7f:5a:69: ab:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:46:02:E5:F5:BE:5F:94:23:E8:07:2D:C6:3E:A1:B9:D0:C0:35:2F X509v3 Authority Key Identifier: keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:79:2d:50:e1:c4:7a:a4:af:a3:52:3e:a2:a2:93:22:3a:3c: 39:1a:20:e1:9f:70:a6:14:5a:20:99:22:43:4f:7c:87:e1:7a: c8:16:32:8d:fb:a7:34:4d:fc:1f:aa:21:ce:90:02:a9:3a:c4: 0b:a6:58:1a:5b:62:1c:d4:af:d0:7b:d5:8b:9f:a0:da:55:a0: 37:be:5e:3d:1b:c8:71:22:25:d5:54:2b:14:b8:0f:c2:fb:9f: 39:1a:66:12:b5:15:d8:75:e6:25:77:33:49:ce:5d:f5:1d:f1: 55:9d:82:d8:0b:d4:8f:6a:3b:dd:35:90:11:6b:2c:55:24:c9: 1b:52:25:f5:91:3a:1b:67:9a:31:eb:3e:0d:fd:fe:bd:79:f3: a7:a3:b3:f0:a7:82:8f:1e:ed:30:93:59:4d:55:1e:b8:57:e2: 12:69:a1:18:1d:2f:64:2b:29:bb:10:3e:36:3b:ab:52:10:8c: fc:ae:64:f3:22:ca:bb:e0:32:84:68:a3:75:86:f0:94:82:81: 9f:63:c7:69:3c:a4:be:d1:4d:43:86:f6:a8:03:29:eb:8b:c9: 6b:ce:b9:fa:7f:b9:39:1d:3c:43:ad:0d:cf:3e:08:70:01:b1: 6a:a8:4e:c9:1b:e1:74:d7:d6:2a:94:93:1f:ad:6e:0e:1a:63: 24:4e:71:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXm4shwe/WwKUjRO9RafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh NTY3ZjYwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD EyhjNDQ2MDJlNWY1YmU1Zjk0MjNlODA3MmRjNjNlYTFiOWQwYzAzNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15aFz5GYCMMNQDSWB8mfauBtSLOw N1Z6j2RWwvmkimLO7y5B6QPbPFC+IJaC8z6aMU0mscJrHkQtY6bm9jyaTbkKWb5A USWX2PeAw+dOOgC2oUeWesVdBHUGlxuUNZDSDmprpm07WRtNquHx0fjVXgsRJkWl TxxCuZ7o5j3nSgoXo9alBGuOh895kbLtiO/MCN0WnW7GR9HprIfx1FPyvz8R9Gd+ o1cqFRwzOjdLF5qSj7uBqtJZAhnANJsxNnhfcVDK0gYO8p0SX9p21MmvDh7M0DT6 XN+1yMP81H5hpMC763yO+F46QdMH+qMpNVGYkXhl1vHMxtzItsZ/Wmmr4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRGAuX1vl+UI+gHLcY+obnQwDUvMB8GA1UdIwQY MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3 LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenktUOHE eqSvo1I+oqKTIjo8ORog4Z9wphRaIJkiQ098h+F6yBYyjfunNE38H6ohzpACqTrE C6ZYGltiHNSv0HvVi5+g2lWgN75ePRvIcSIl1VQrFLgPwvufORpmErUV2HXmJXcz Sc5d9R3xVZ2C2AvUj2o73TWQEWssVSTJG1Il9ZE6G2eaMes+Df3+vXnzp6Oz8KeC jx7tMJNZTVUeuFfiEmmhGB0vZCspuxA+NjurUhCM/K5k8yLKu+AyhGijdYbwlIKB n2PHaTykvtFNQ4b2qAMp64vJa865+n+5OR08Q60Nzz4IcAGxaqhOyRvhdNfWKpST H61uDhpjJE5xbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:57 2025 by rpki-client