This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft File: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json) Hash identifier: BXLW/GTc0dTj8GWBaMI8ZCP4KFyzrRIWWJNm3poy4Zs= Subject key identifier: 75:52:D1:0A:85:83:21:90:48:81:34:7D:4B:B9:94:EB:15:30:24:92 Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4 Certificate issuer: /CN=e0b867131100c15de890110063e638a5f02367c4 Certificate serial: 019AF208FAFD752C43FB874927766BA66F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: PiLenfp9WheAs/dAbuu2RdNpF4RPY7no6yJWJOpJeyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fa:fd:75:2c:43:fb:87:49:27:76:6b:a6:6f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0b867131100c15de890110063e638a5f02367c4 Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=7552d10a858321904881347d4bb994eb15302492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:89:18:00:21:7a:c7:ab:46:17:8e:af:cd: 2c:35:2b:f8:a1:01:bc:c7:8c:27:39:b1:69:f5:ef: b6:fd:df:43:73:80:d2:5a:fb:42:9e:e6:3d:06:c2: a5:73:99:75:bd:21:bb:ac:bd:79:de:6d:ec:fb:be: b9:cd:1a:44:65:c1:56:c5:b1:62:b2:e5:d6:4c:6f: 52:0d:6f:0a:d8:2d:90:12:a4:fa:d5:72:af:3d:2b: 34:d7:3d:dd:1b:87:11:b0:60:41:f9:0a:07:80:4a: 31:89:05:46:fe:d7:01:27:43:45:fe:87:fc:5c:a2: 56:93:2d:84:c7:30:7a:f3:7a:02:e5:79:a6:79:33: 55:89:d5:4b:fb:83:83:b6:b3:57:ba:67:75:7c:e3: 42:b9:4b:fa:bb:77:c1:cc:3f:4f:74:15:70:3a:96: 40:37:4f:70:f6:54:bd:47:ec:1f:9d:6a:5c:19:b4: 6b:8b:c8:d6:d3:7b:d3:0d:8c:ab:00:05:4b:c8:47: 61:7f:c3:94:01:dd:e0:8b:c8:5c:23:f3:dc:a6:06: 71:43:cc:96:fe:7b:db:1f:24:fa:eb:8d:68:08:c7: d8:a7:73:d6:04:97:26:c5:a3:34:8b:11:6a:c2:57: 6f:dc:9d:43:51:9c:b0:c9:35:21:ea:b4:41:b4:b8: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:52:D1:0A:85:83:21:90:48:81:34:7D:4B:B9:94:EB:15:30:24:92 X509v3 Authority Key Identifier: keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7a:a3:73:d0:56:2d:1d:d8:c9:c7:fa:fa:9f:5b:d7:35:a2: 7c:14:24:c1:4f:ae:a5:1a:e3:0e:0d:15:00:f0:c4:e1:b7:68: a1:48:e3:e0:da:58:1a:05:fe:ce:a0:d0:08:3f:3a:67:b0:f6: 82:c9:de:90:a4:46:a1:f7:86:ff:c3:c2:82:e1:46:15:90:5f: c1:72:67:a3:3c:8e:38:8c:3f:f3:3f:a3:93:e8:3b:da:65:b2: d6:1d:13:7b:9e:08:d8:7e:89:9e:75:49:08:74:03:de:10:ab: 8d:b4:87:3f:02:90:ef:cc:5a:ed:07:c0:a2:77:97:d4:e4:1c: 9a:da:d4:96:b4:36:99:44:8d:42:7a:b1:5b:98:b3:b5:23:83: 61:eb:21:a0:b2:af:5f:92:74:d4:fd:eb:b1:e5:d0:b6:77:bb: 4e:28:65:ae:20:f1:4c:4d:90:c8:88:d6:7f:b1:07:c9:86:8e: 34:a4:5a:0c:a7:16:a7:f7:4b:76:49:60:48:04:6c:e5:b5:6f: e3:9e:de:e4:2b:8c:ac:7b:d0:ab:55:1f:21:d1:ab:b0:81:54: 19:35:23:40:ed:d5:e1:f3:e1:28:04:c7:c8:ee:90:8a:1b:bb: ed:67:16:65:a2:6a:f9:79:d7:5d:3d:26:e3:dd:75:4e:0d:e1: 65:f9:19:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPr9dSxD+4dJJ3Zrpm80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYjg2NzEzMTEwMGMxNWRlODkwMTEwMDYzZTYzOGE1ZjAy MzY3YzQwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD Eyg3NTUyZDEwYTg1ODMyMTkwNDg4MTM0N2Q0YmI5OTRlYjE1MzAyNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP2JGAAheserRheOr80sNSv4oQG8 x4wnObFp9e+2/d9Dc4DSWvtCnuY9BsKlc5l1vSG7rL153m3s+765zRpEZcFWxbFi suXWTG9SDW8K2C2QEqT61XKvPSs01z3dG4cRsGBB+QoHgEoxiQVG/tcBJ0NF/of8 XKJWky2ExzB683oC5XmmeTNVidVL+4ODtrNXumd1fONCuUv6u3fBzD9PdBVwOpZA N09w9lS9R+wfnWpcGbRri8jW03vTDYyrAAVLyEdhf8OUAd3gi8hcI/PcpgZxQ8yW /nvbHyT6641oCMfYp3PWBJcmxaM0ixFqwldv3J1DUZywyTUh6rRBtLhr6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVS0QqFgyGQSIE0fUu5lOsVMCSSMB8GA1UdIwQY MBaAFOC4ZxMRAMFd6JARAGPmOKXwI2fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lZWU1MjEtMjVmYS00MDA2LTk1MzEt MWUwNDQ4MTQ1MThmLzEvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lZWU1MjEtMjVmYS00MDA2LTk1MzEtMWUwNDQ4MTQ1MThm LzEvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHqjc9BW LR3Yycf6+p9b1zWifBQkwU+upRrjDg0VAPDE4bdooUjj4NpYGgX+zqDQCD86Z7D2 gsnekKRGofeG/8PCguFGFZBfwXJnozyOOIw/8z+jk+g72mWy1h0Te54I2H6JnnVJ CHQD3hCrjbSHPwKQ78xa7QfAoneX1OQcmtrUlrQ2mUSNQnqxW5iztSODYeshoLKv X5J01P3rseXQtne7TihlriDxTE2QyIjWf7EHyYaONKRaDKcWp/dLdklgSARs5bVv 457e5CuMrHvQq1UfIdGrsIFUGTUjQO3V4fPhKATHyO6Qihu77WcWZaJq+XnXXT0m 4911Tg3hZfkZAA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:58 2025 by rpki-client