This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json) Hash identifier: ciGTCOLaCEE39IlgiCWehDUgA4p6G+7uC9Et8gKdE1A= Subject key identifier: BC:6C:23:51:3C:08:07:D1:68:A2:68:DB:B4:D5:58:B1:F1:72:84:E7 Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58 Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458 Certificate serial: 019AF31B7324C147F9E8825C20B71306F079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:00:53 +0000 Manifest this update: Sat 06 Dec 2025 10:00:53 +0000 Manifest next update: Sun 07 Dec 2025 10:00:53 +0000 Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: JEWgMaZpTBDwRuy/kuoKK7M4OtNd+DGlc1/1Hg/6a1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:73:24:c1:47:f9:e8:82:5c:20:b7:13:06:f0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458 Validity Not Before: Dec 6 10:00:53 2025 GMT Not After : Dec 7 10:00:53 2025 GMT Subject: CN=bc6c23513c0807d168a268dbb4d558b1f17284e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:ff:e7:28:30:0d:43:ed:ca:eb:1e:a6:4f: 6b:ef:68:02:f8:59:46:0a:cd:5b:5c:16:f3:c6:ae: af:7d:fb:56:18:81:84:a0:35:ef:ad:60:43:6f:23: de:ce:0c:62:88:af:97:9c:49:85:f6:08:5a:f6:a1: 03:95:9b:6d:80:31:ff:2a:4b:c3:a5:57:cb:53:86: db:a3:bc:a2:23:e4:c9:a3:f3:95:a9:f1:ee:39:16: 2a:22:da:32:07:4a:ac:66:41:ae:2d:10:c3:b8:4d: cc:62:b0:aa:83:79:0c:e4:09:84:59:79:71:35:07: 11:30:d9:3e:11:fb:13:7f:9d:1e:e9:f4:eb:99:f2: 13:39:77:0e:54:21:f1:8e:db:32:78:d9:ad:13:7d: 96:9b:ee:b6:23:92:ef:af:6a:a9:1a:7a:df:40:b5: 84:a5:ab:a6:e3:4a:25:b9:3d:ce:6e:67:93:96:0b: 8a:4c:18:eb:ea:04:61:13:55:f4:63:ee:21:d7:91: bd:6b:ba:58:2b:b6:d7:cf:4c:1b:76:70:2f:69:c6: 08:bf:0b:43:8f:7f:91:98:92:82:a0:31:a5:d5:63: 43:01:74:04:b2:36:00:d8:97:03:33:4e:ad:f3:6e: 99:06:a4:7a:c5:f4:ac:12:c8:7a:2d:74:0f:8c:fe: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:23:51:3C:08:07:D1:68:A2:68:DB:B4:D5:58:B1:F1:72:84:E7 X509v3 Authority Key Identifier: keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:01:5d:31:4a:45:33:a1:fd:f2:94:66:db:e8:b6:d8:e6:3d: 7b:44:10:90:a2:72:07:66:1f:00:fe:2b:4b:97:67:f4:4e:66: 5f:dd:fd:ad:cc:2f:82:d2:86:e4:22:7f:e5:d9:45:6c:b5:c1: 75:a4:65:e0:65:e6:43:e6:a1:45:d3:51:c3:39:1b:47:6b:b6: 4e:26:e8:6c:cf:8b:73:01:c5:ca:60:5e:c6:03:2c:dc:3e:77: 05:16:90:c1:50:42:a6:92:2a:4c:b4:86:12:00:95:c4:1b:31: 5c:86:9a:1d:3f:c3:55:a9:8d:29:f1:9f:d3:f4:dd:56:c1:7b: 5e:74:3f:8b:f1:5c:2a:73:9e:bb:ee:06:d4:b5:c2:10:18:ae: dc:d0:c5:91:45:94:ea:89:e8:0f:c1:4c:70:48:a0:8f:fe:7f: 01:fb:2d:91:76:90:25:c7:b7:5f:47:4c:82:87:7e:1d:a8:60: 1a:87:43:5b:89:c4:55:18:24:a8:2f:5a:1d:a6:24:01:36:79: e2:9d:7f:ac:b4:71:e4:b5:7e:48:3d:d7:f2:cd:72:42:e5:8b: d7:b4:8c:b9:21:ec:47:97:80:b0:5f:c5:56:aa:07:05:89:34: 6e:ba:c7:9b:c1:6b:e1:3f:e1:13:b5:7f:20:af:ed:be:23:cf: b5:bc:0c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3MkwUf56IJcILcTBvB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODRhOWRiZTYzMTBkN2JmYWU4MzhiYTIyZmEwNDcxMjZi NTU0NTgwHhcNMjUxMjA2MTAwMDUzWhcNMjUxMjA3MTAwMDUzWjAzMTEwLwYDVQQD EyhiYzZjMjM1MTNjMDgwN2QxNjhhMjY4ZGJiNGQ1NThiMWYxNzI4NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLv/5ygwDUPtyusepk9r72gC+FlG Cs1bXBbzxq6vfftWGIGEoDXvrWBDbyPezgxiiK+XnEmF9gha9qEDlZttgDH/KkvD pVfLU4bbo7yiI+TJo/OVqfHuORYqItoyB0qsZkGuLRDDuE3MYrCqg3kM5AmEWXlx NQcRMNk+EfsTf50e6fTrmfITOXcOVCHxjtsyeNmtE32Wm+62I5Lvr2qpGnrfQLWE paum40oluT3ObmeTlguKTBjr6gRhE1X0Y+4h15G9a7pYK7bXz0wbdnAvacYIvwtD j3+RmJKCoDGl1WNDAXQEsjYA2JcDM06t826ZBqR6xfSsEsh6LXQPjP61xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxsI1E8CAfRaKJo27TVWLHxcoTnMB8GA1UdIwQY MBaAFAuEqdvmMQ17+ug4uiL6BHEmtVRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTkt YTg1ZGRlMjE0NWVhLzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTktYTg1ZGRlMjE0NWVh LzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewFdMUpF M6H98pRm2+i22OY9e0QQkKJyB2YfAP4rS5dn9E5mX939rcwvgtKG5CJ/5dlFbLXB daRl4GXmQ+ahRdNRwzkbR2u2TibobM+LcwHFymBexgMs3D53BRaQwVBCppIqTLSG EgCVxBsxXIaaHT/DVamNKfGf0/TdVsF7XnQ/i/FcKnOeu+4G1LXCEBiu3NDFkUWU 6onoD8FMcEigj/5/AfstkXaQJce3X0dMgod+HahgGodDW4nEVRgkqC9aHaYkATZ5 4p1/rLRx5LV+SD3X8s1yQuWL17SMuSHsR5eAsF/FVqoHBYk0brrHm8Fr4T/hE7V/ IK/tviPPtbwM9g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:18 2025 by rpki-client