This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft File: RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json) Hash identifier: dWFOpMzCoWZPIQD0PUB6PeIUU2FlyMzp/hM3MuSFFu0= Subject key identifier: 62:6E:47:86:AC:32:37:3A:95:3F:17:D1:6A:F2:0B:67:90:6F:5E:D1 Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC Certificate issuer: /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc Certificate serial: 019AF653E8D29B7531B148DD86F7F59EB968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft Manifest number: 0B8D Signing time: Sun 07 Dec 2025 01:01:25 +0000 Manifest this update: Sun 07 Dec 2025 01:01:25 +0000 Manifest next update: Mon 08 Dec 2025 01:01:25 +0000 Files and hashes: 1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: wU/hIV+/umPmN1QbsiGLSuos8DA8Tj3i3I/ATzmsby0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:e8:d2:9b:75:31:b1:48:dd:86:f7:f5:9e:b9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc Validity Not Before: Dec 7 01:01:25 2025 GMT Not After : Dec 8 01:01:25 2025 GMT Subject: CN=626e4786ac32373a953f17d16af20b67906f5ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:a2:cf:75:79:82:78:ba:84:c6:72:a2:3b: 57:2f:73:95:39:3e:b8:2a:5f:6d:85:9b:92:05:c8: 86:9f:e1:44:70:e0:0f:de:f4:0e:47:b1:d3:87:f7: ad:b3:76:5c:56:19:d1:0a:4d:99:84:79:d0:3a:e8: 6b:bb:bb:dc:13:d2:34:0b:f7:36:72:f8:0d:38:b7: 3d:fe:9e:35:6d:37:a2:86:d3:b6:f5:e3:16:62:61: 31:9e:1c:4b:c9:70:e5:ed:3b:1f:32:a1:48:b6:cc: 97:04:39:bc:bd:e5:7a:36:02:6b:9e:74:fe:3b:89: 68:4a:36:97:ee:c2:0a:f5:b8:09:f5:c9:cc:91:3c: c5:cc:f6:74:9d:00:46:6a:82:c0:7e:28:52:27:6d: 2a:a9:46:c3:b6:e5:43:f0:1c:2c:54:b7:e9:cb:d3: 14:07:9e:a0:ae:97:a5:56:05:6a:1b:69:bf:f1:1d: 57:72:69:c5:c5:48:75:2f:12:81:9c:25:c0:1a:7a: d6:f5:d6:98:6c:e2:c3:0e:fd:44:f2:a2:41:54:ff: 98:54:0d:a6:11:fb:c1:34:84:a4:f6:9d:7c:2f:aa: dc:0c:b5:e2:25:2a:03:0b:f6:5f:f5:24:0a:08:67: c2:01:8a:fe:f3:8e:e2:86:cd:d6:6e:c6:e0:0b:b9: 16:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:47:86:AC:32:37:3A:95:3F:17:D1:6A:F2:0B:67:90:6F:5E:D1 X509v3 Authority Key Identifier: keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4c:cd:81:58:c3:93:36:a2:6e:2c:70:3f:54:c3:15:6e:03: d2:5f:d0:8d:9f:b8:52:ff:97:01:fe:f6:28:4e:42:92:40:f8: 46:ef:35:21:69:13:28:d0:50:b9:25:50:40:a0:11:6e:4c:a3: 04:7b:91:a9:6b:e9:5b:97:9f:41:8f:43:d9:55:75:4e:7f:14: 28:75:bf:2b:b1:7c:38:0d:4a:47:52:db:56:3b:20:c2:7a:e5: 67:54:e6:78:d3:f7:66:74:d3:bb:01:65:de:87:c2:a0:c5:77: 01:92:a2:0d:6c:78:4b:f4:da:bd:2b:e6:2e:0a:d7:d9:78:a3: eb:8b:d4:ac:cb:20:f6:88:55:c6:f0:b7:1b:1d:a5:4d:71:c7: 4a:4d:05:10:1b:3f:3f:53:21:03:f4:9a:1b:9d:9b:07:f2:2b: e5:11:e1:1d:6d:92:20:31:07:b7:71:2e:ab:4e:5f:89:08:87: ca:74:94:08:20:1e:4d:92:5a:03:d1:40:1e:27:1f:03:ae:fe: 84:77:a0:ed:d5:fc:07:0f:26:fe:c1:8a:8d:a2:1c:05:40:f6: 8d:ae:84:e5:d5:32:38:f7:26:2d:5d:c6:5c:b5:1e:e7:86:6d: 42:7a:19:be:81:f1:62:41:cc:37:30:25:93:90:6a:0f:eb:d4: ac:08:7c:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U+jSm3UxsUjdhvf1nrloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWUwMGZlZTc4MjEwYWIwNDhiNDQwZTBjYjJhN2Y0MGM5 ZGI4Y2MwHhcNMjUxMjA3MDEwMTI1WhcNMjUxMjA4MDEwMTI1WjAzMTEwLwYDVQQD Eyg2MjZlNDc4NmFjMzIzNzNhOTUzZjE3ZDE2YWYyMGI2NzkwNmY1ZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqSiz3V5gni6hMZyojtXL3OVOT64 Kl9thZuSBciGn+FEcOAP3vQOR7HTh/ets3ZcVhnRCk2ZhHnQOuhru7vcE9I0C/c2 cvgNOLc9/p41bTeihtO29eMWYmExnhxLyXDl7TsfMqFItsyXBDm8veV6NgJrnnT+ O4loSjaX7sIK9bgJ9cnMkTzFzPZ0nQBGaoLAfihSJ20qqUbDtuVD8BwsVLfpy9MU B56grpelVgVqG2m/8R1XcmnFxUh1LxKBnCXAGnrW9daYbOLDDv1E8qJBVP+YVA2m EfvBNISk9p18L6rcDLXiJSoDC/Zf9SQKCGfCAYr+847ihs3WbsbgC7kW/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJuR4asMjc6lT8X0WryC2eQb17RMB8GA1UdIwQY MBaAFESuAP7nghCrBItEDgyyp/QMnbjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi80MTVlMzktNmNjYS00NGUzLWJiYjkt NmZjOWE1NzE4NzA2LzEvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi80MTVlMzktNmNjYS00NGUzLWJiYjktNmZjOWE1NzE4NzA2 LzEvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0zNgVjD kzaibixwP1TDFW4D0l/QjZ+4Uv+XAf72KE5CkkD4Ru81IWkTKNBQuSVQQKARbkyj BHuRqWvpW5efQY9D2VV1Tn8UKHW/K7F8OA1KR1LbVjsgwnrlZ1TmeNP3ZnTTuwFl 3ofCoMV3AZKiDWx4S/TavSvmLgrX2Xij64vUrMsg9ohVxvC3Gx2lTXHHSk0FEBs/ P1MhA/SaG52bB/Ir5RHhHW2SIDEHt3Euq05fiQiHynSUCCAeTZJaA9FAHicfA67+ hHeg7dX8Bw8m/sGKjaIcBUD2ja6E5dUyOPcmLV3GXLUe54ZtQnoZvoHxYkHMNzAl k5BqD+vUrAh8GQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:24 2025 by rpki-client