This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json) Hash identifier: 07OXjWs7kvHqrZLPpyu7TmhmPjQW9Cs1x42LwOmffrY= Subject key identifier: 44:EA:CB:BD:38:41:13:3F:67:8E:8D:CE:57:54:36:B2:73:8C:D3:B3 Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50 Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50 Certificate serial: 019AF12DBEE03893AF88842627E74CD6462D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft Manifest number: 0BD8 Signing time: Sat 06 Dec 2025 01:01:38 +0000 Manifest this update: Sat 06 Dec 2025 01:01:38 +0000 Manifest next update: Sun 07 Dec 2025 01:01:38 +0000 Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: +8ELEpEJ0IMuaWPTYVkwNt+DY6Nss0cYE7BN6zcsir0=) 2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:be:e0:38:93:af:88:84:26:27:e7:4c:d6:46:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50 Validity Not Before: Dec 6 01:01:38 2025 GMT Not After : Dec 7 01:01:38 2025 GMT Subject: CN=44eacbbd3841133f678e8dce575436b2738cd3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:dd:d7:1c:56:5a:ac:88:56:5a:41:84:c4: 96:76:d9:44:06:2c:9e:ea:90:63:1f:21:e0:54:b5: a8:f1:ab:e4:3a:b5:4a:79:0e:6d:65:6e:03:8e:77: 18:53:e7:17:7e:78:79:c9:96:68:21:5f:b4:70:56: 35:53:7e:8d:b5:5a:98:ca:a7:44:35:8e:07:59:94: 38:c5:eb:30:6a:d0:e2:73:97:fa:5b:f3:25:ae:f3: e5:1c:d7:f4:e2:f4:42:61:00:3e:2e:5b:21:bd:8d: ff:08:27:be:11:2e:b8:35:2f:c4:ad:50:1f:19:ec: e6:5f:c9:b7:68:36:05:09:a6:b3:b8:81:8b:e0:61: 2d:46:e5:f4:21:97:43:76:11:96:5a:56:af:4e:5d: 13:ef:7d:c1:f2:2b:9d:8a:ac:5d:e7:f5:b0:c0:97: cb:ef:c3:3b:37:e2:d3:73:09:06:0b:06:e3:70:8d: 84:05:a0:33:1e:fe:34:aa:c3:da:58:b7:44:2d:fe: b0:d2:7b:a9:4f:db:52:a2:6d:84:0a:63:b2:c9:93: 69:8d:98:81:e9:56:1c:30:81:33:3c:4e:5e:af:21: 57:a0:c7:cd:b1:b4:de:c0:1b:60:3f:4c:13:f6:4f: a9:01:18:5e:1f:3a:40:d7:da:99:cb:17:3f:c4:58: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EA:CB:BD:38:41:13:3F:67:8E:8D:CE:57:54:36:B2:73:8C:D3:B3 X509v3 Authority Key Identifier: keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e7:d1:46:14:19:a0:4d:91:8a:2e:a8:30:d7:b1:f5:36:e4: 16:e7:24:b8:f9:95:34:f3:10:23:b3:28:44:4b:52:e8:3a:8a: ca:bb:1c:4f:0c:24:67:8a:16:71:1f:8b:cf:ac:48:f8:2a:9a: ba:2b:37:61:7e:67:a3:45:cf:4c:83:ac:e0:84:9c:9d:62:15: 54:0a:c2:cb:4d:b7:76:27:14:94:3a:6a:9e:62:64:1f:25:5f: 60:9b:b7:93:9a:2a:7b:ec:31:a1:6e:09:c6:fb:0d:d8:42:d4: 42:71:e7:9c:86:5f:6c:22:92:2f:f7:8f:85:cb:9a:5a:71:c4: 3d:a8:04:92:ed:a6:1d:8c:85:a2:1b:e4:f4:49:62:1b:1e:e0: d1:1c:13:e9:44:82:2d:a6:87:0c:fe:80:d8:d2:ae:47:b1:c0: 01:f6:2e:84:50:c0:75:f8:3e:bc:18:a2:46:a1:5a:13:c2:9c: 4a:d6:83:d6:6d:41:8a:26:58:34:55:7a:3d:af:21:7f:74:b5: cf:77:30:6f:df:e8:a8:80:cc:58:5d:8b:f6:29:ad:7d:5e:9c: 5e:93:5c:5e:1e:57:80:50:86:b9:d8:8e:f5:fb:02:47:e3:a7: d4:dc:27:91:fa:39:1a:99:a7:f1:50:8d:02:33:d5:48:7f:a6: f8:67:d1:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLb7gOJOviIQmJ+dM1kYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODViYjhhNTA0NDNlNTA0YzQ4NTNjY2UwMjVlZjU4MzQx YzFkNTAwHhcNMjUxMjA2MDEwMTM4WhcNMjUxMjA3MDEwMTM4WjAzMTEwLwYDVQQD Eyg0NGVhY2JiZDM4NDExMzNmNjc4ZThkY2U1NzU0MzZiMjczOGNkM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZLd1xxWWqyIVlpBhMSWdtlEBiye 6pBjHyHgVLWo8avkOrVKeQ5tZW4DjncYU+cXfnh5yZZoIV+0cFY1U36NtVqYyqdE NY4HWZQ4xeswatDic5f6W/MlrvPlHNf04vRCYQA+LlshvY3/CCe+ES64NS/ErVAf GezmX8m3aDYFCaazuIGL4GEtRuX0IZdDdhGWWlavTl0T733B8iudiqxd5/WwwJfL 78M7N+LTcwkGCwbjcI2EBaAzHv40qsPaWLdELf6w0nupT9tSom2ECmOyyZNpjZiB 6VYcMIEzPE5eryFXoMfNsbTewBtgP0wT9k+pARheHzpA19qZyxc/xFhnBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETqy704QRM/Z46NzldUNrJzjNOzMB8GA1UdIwQY MBaAFK+Fu4pQRD5QTEhTzOAl71g0HB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgt ZmRlYmJjOTI3ZDQwLzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgtZmRlYmJjOTI3ZDQw LzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOfRRhQZ oE2Rii6oMNex9TbkFuckuPmVNPMQI7MoREtS6DqKyrscTwwkZ4oWcR+Lz6xI+Cqa uis3YX5no0XPTIOs4IScnWIVVArCy023dicUlDpqnmJkHyVfYJu3k5oqe+wxoW4J xvsN2ELUQnHnnIZfbCKSL/ePhcuaWnHEPagEku2mHYyFohvk9EliGx7g0RwT6USC LaaHDP6A2NKuR7HAAfYuhFDAdfg+vBiiRqFaE8KcStaD1m1BiiZYNFV6Pa8hf3S1 z3cwb9/oqIDMWF2L9imtfV6cXpNcXh5XgFCGudiO9fsCR+On1Nwnkfo5Gpmn8VCN AjPVSH+m+GfRhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:04 2025 by rpki-client