This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json) Hash identifier: He8kpt+8UxRLq/fpnc+qn858OpzWauqdz8nLbUQPl84= Subject key identifier: E2:3E:A3:A9:68:FA:C4:F4:2A:C3:87:62:58:D4:4A:85:C2:35:86:73 Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9 Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9 Certificate serial: 019AF1D240D6A7BED630B75F37600F75F296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft Manifest number: 049F Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: BHNdj1g7DCSUMQbtRwe9h0UDZKubPkrW3+mTzGu++zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:40:d6:a7:be:d6:30:b7:5f:37:60:0f:75:f2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=e23ea3a968fac4f42ac3876258d44a85c2358673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:1a:7f:ae:29:4a:e4:25:6a:d2:3d:a4:25: 5e:b8:fa:79:ff:38:6f:bb:5d:c7:a5:13:38:70:52: 04:e2:26:85:a4:4b:e0:71:2c:00:78:b6:15:9f:d6: ce:b5:f1:90:88:38:a7:3a:88:e2:16:8a:a3:40:3f: f5:16:8f:0d:37:7b:9e:41:4f:63:96:a7:e9:1d:57: c1:38:6e:cf:e9:0b:53:7d:6f:d5:ba:84:62:0f:3b: 6c:97:1c:17:6e:05:87:02:7e:5e:e3:13:37:2c:98: 9f:97:04:fd:74:1c:9e:ae:a9:62:56:8b:3a:a9:d7: a4:51:f6:30:19:51:6e:2b:1b:41:69:5e:7b:8d:6b: 32:d6:5f:cb:27:bb:1c:33:d1:d7:5d:f7:a8:27:a2: a8:7a:fe:02:69:fe:f6:aa:87:84:25:44:5a:d3:94: d8:a0:c9:37:3b:6a:7c:5a:1d:95:0c:cc:95:99:19: c6:13:ce:e2:f3:77:95:4f:54:1d:21:3c:c8:54:4c: 0e:1d:b1:98:2b:58:5a:9d:b9:56:e4:5e:ab:fa:19: dc:87:6c:92:1d:ff:a3:b7:8f:ef:c0:45:e4:08:0b: d3:d8:09:a3:84:6b:86:b4:1f:45:b0:08:8b:95:3c: 6b:c9:ff:87:51:58:db:3a:6f:a2:02:39:cf:b3:1a: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3E:A3:A9:68:FA:C4:F4:2A:C3:87:62:58:D4:4A:85:C2:35:86:73 X509v3 Authority Key Identifier: keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:85:a0:31:57:bc:ef:22:ca:0a:56:c6:90:d4:f7:a6:2c:53: 3e:fc:43:96:56:61:69:76:fe:be:e3:96:82:bc:87:ce:53:ff: 57:01:31:b7:96:12:d5:fc:c4:ff:75:5c:63:fa:bf:b7:dd:8f: 19:32:7c:88:da:19:d8:79:cd:f3:9c:5e:25:98:b9:2e:ab:51: b2:f8:36:71:db:ae:87:3c:3f:3a:d4:a0:4c:07:77:e0:55:18: c4:96:69:36:4c:8d:21:36:ad:bc:63:e8:4f:74:9b:11:bf:b3: cb:87:ae:01:13:f3:be:d7:8e:71:9b:b2:c2:7c:43:cb:ca:f5: fd:71:53:53:29:3e:13:54:6e:5f:c1:ce:e6:f0:18:6d:3e:f9: 6e:39:32:55:26:c3:86:1e:2e:b7:56:e5:19:e4:69:55:a8:a7: ac:92:37:1a:a2:11:5d:a0:d3:fb:2f:44:2d:30:08:9b:3f:c7: 00:b3:5e:b6:58:2c:16:ac:13:04:75:ac:55:2c:dc:8f:db:f6: 7c:bb:5a:43:df:19:4e:78:b2:a9:b2:a8:6c:a8:e0:52:43:1a: 4e:7d:99:7f:c5:58:42:e9:56:65:c3:8d:d9:b1:72:f4:5d:be: dd:0a:ae:fa:5b:76:e9:91:5c:fd:06:41:6d:c4:5b:62:af:14: f0:d0:a6:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kDWp77WMLdfN2APdfKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjE0NzcwNGI2YzY2NGRjZjIyMzQ5MmVlNjFkNWU1Zjkx N2M1ZTkwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EyhlMjNlYTNhOTY4ZmFjNGY0MmFjMzg3NjI1OGQ0NGE4NWMyMzU4NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomcaf64pSuQlatI9pCVeuPp5/zhv u13HpRM4cFIE4iaFpEvgcSwAeLYVn9bOtfGQiDinOojiFoqjQD/1Fo8NN3ueQU9j lqfpHVfBOG7P6QtTfW/VuoRiDztslxwXbgWHAn5e4xM3LJiflwT9dByerqliVos6 qdekUfYwGVFuKxtBaV57jWsy1l/LJ7scM9HXXfeoJ6Koev4Caf72qoeEJURa05TY oMk3O2p8Wh2VDMyVmRnGE87i83eVT1QdITzIVEwOHbGYK1hanblW5F6r+hnch2yS Hf+jt4/vwEXkCAvT2AmjhGuGtB9FsAiLlTxryf+HUVjbOm+iAjnPsxoDNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI+o6lo+sT0KsOHYljUSoXCNYZzMB8GA1UdIwQY MBaAFOEhR3BLbGZNzyI0ku5h1eX5F8XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Yjk3MDMtMzkyOS00YTRlLTkzYjct YTFiZjQyYzU4NDk0LzEvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Yjk3MDMtMzkyOS00YTRlLTkzYjctYTFiZjQyYzU4NDk0 LzEvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYWgMVe8 7yLKClbGkNT3pixTPvxDllZhaXb+vuOWgryHzlP/VwExt5YS1fzE/3VcY/q/t92P GTJ8iNoZ2HnN85xeJZi5LqtRsvg2cduuhzw/OtSgTAd34FUYxJZpNkyNITatvGPo T3SbEb+zy4euARPzvteOcZuywnxDy8r1/XFTUyk+E1RuX8HO5vAYbT75bjkyVSbD hh4ut1blGeRpVainrJI3GqIRXaDT+y9ELTAImz/HALNetlgsFqwTBHWsVSzcj9v2 fLtaQ98ZTniyqbKobKjgUkMaTn2Zf8VYQulWZcON2bFy9F2+3Qqu+lt26ZFc/QZB bcRbYq8U8NCmsA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:24 2025 by rpki-client