This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json) Hash identifier: Tw9JvTSOtyDbQNBaioVYwlejbYti7ozuXidXYX7aJEo= Subject key identifier: 67:5D:A3:76:68:6A:38:9C:42:A9:40:3F:FA:0F:3F:92:24:29:35:72 Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c Certificate serial: 019AF31B25E959275CF23E2991FDF3148432 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft Manifest number: 0654 Signing time: Sat 06 Dec 2025 10:00:33 +0000 Manifest this update: Sat 06 Dec 2025 10:00:33 +0000 Manifest next update: Sun 07 Dec 2025 10:00:33 +0000 Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: NIUJxEGF++CbVsrMF3Vupt6i4UmMaA07IFxZWFOESq0=) 2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:25:e9:59:27:5c:f2:3e:29:91:fd:f3:14:84:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c Validity Not Before: Dec 6 10:00:33 2025 GMT Not After : Dec 7 10:00:33 2025 GMT Subject: CN=675da376686a389c42a9403ffa0f3f9224293572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:1f:08:05:70:95:a4:47:ea:7f:64:bd:b6: 7d:06:27:44:4f:d5:26:70:70:73:2a:ae:a9:52:6b: 92:b5:4e:b2:96:62:e7:0d:3e:34:52:93:da:4d:e8: ff:18:44:7f:e4:73:d8:53:1e:70:66:cf:e4:4f:a7: 6d:82:4c:c3:26:30:51:0b:0e:d2:eb:ef:e4:b2:f9: 7e:56:3f:9d:64:ff:d2:46:9d:ee:7a:e5:6f:0f:41: 3a:a4:00:b7:83:bc:73:0c:8a:b8:67:fc:e7:37:13: d4:61:3a:a0:cd:dc:39:5e:ad:c6:20:13:19:50:a5: c1:90:08:9a:28:1d:58:ff:5c:76:64:67:22:7e:eb: f0:d5:82:c5:ca:75:ac:75:f0:12:42:e6:84:17:38: 31:1e:4d:c6:00:43:7d:42:fb:ca:45:1a:80:54:63: 13:37:69:6f:db:10:5c:bf:fa:16:74:e0:43:53:9a: 86:a7:dd:0a:5f:30:f5:42:06:21:ce:3b:3c:ed:79: 33:23:a5:d0:a9:f2:f4:43:3e:09:3e:36:e2:2a:02: d3:f1:cb:98:e1:44:eb:bb:32:7b:12:c9:db:67:41: 9a:7c:ed:04:a0:39:38:2e:26:22:d6:23:28:0d:14: df:1a:10:27:3c:c0:ee:f9:e8:70:75:1b:7c:0e:e3: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5D:A3:76:68:6A:38:9C:42:A9:40:3F:FA:0F:3F:92:24:29:35:72 X509v3 Authority Key Identifier: keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d6:f7:f6:48:dc:f0:c6:57:af:b8:4e:3a:16:2e:52:32:d8: d3:6f:31:e5:f4:cc:a9:3e:d5:1a:09:a4:bc:20:24:39:92:d4: d7:b8:02:c7:33:5e:98:64:82:94:a8:8e:e9:bf:0b:90:e9:16: 20:da:05:c8:cd:66:9d:4d:29:7e:49:a9:a3:4f:2b:cb:7e:4a: 1d:50:3d:75:a7:a6:e7:ca:91:7b:d6:60:9f:db:9f:77:3c:b8: 98:9c:92:17:39:4e:6f:f5:c6:7c:4c:5f:0b:9a:f6:b5:53:1d: ca:e0:2d:05:9c:87:e5:4c:fc:27:33:de:bb:b5:87:01:05:bc: c6:ea:7d:cb:bd:f8:8d:32:71:22:9c:44:30:dc:b0:3f:a8:cd: 35:e9:ea:f0:ab:e8:66:38:11:c4:30:5a:b9:a7:90:5b:3e:12: 08:f3:fe:26:ca:e8:27:3a:e8:b1:c0:f1:09:25:23:00:9a:43: b9:b3:17:02:a3:b8:9e:82:e7:31:24:4b:b9:de:fa:29:04:05: 37:04:fd:92:24:0e:11:8b:88:08:ae:59:54:9b:48:06:16:a1: 6f:06:30:47:17:19:ad:ec:e9:e6:74:85:f4:27:71:d5:6d:ce: 48:8e:4e:c7:e5:6f:e2:9d:82:a5:06:0d:a7:b3:27:49:42:f2: 34:06:2e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyXpWSdc8j4pkf3zFIQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3 OTA5N2MwHhcNMjUxMjA2MTAwMDMzWhcNMjUxMjA3MTAwMDMzWjAzMTEwLwYDVQQD Eyg2NzVkYTM3NjY4NmEzODljNDJhOTQwM2ZmYTBmM2Y5MjI0MjkzNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLIfCAVwlaRH6n9kvbZ9BidET9Um cHBzKq6pUmuStU6ylmLnDT40UpPaTej/GER/5HPYUx5wZs/kT6dtgkzDJjBRCw7S 6+/ksvl+Vj+dZP/SRp3ueuVvD0E6pAC3g7xzDIq4Z/znNxPUYTqgzdw5Xq3GIBMZ UKXBkAiaKB1Y/1x2ZGcifuvw1YLFynWsdfASQuaEFzgxHk3GAEN9QvvKRRqAVGMT N2lv2xBcv/oWdOBDU5qGp90KXzD1QgYhzjs87XkzI6XQqfL0Qz4JPjbiKgLT8cuY 4UTruzJ7EsnbZ0GafO0EoDk4LiYi1iMoDRTfGhAnPMDu+ehwdRt8DuPCSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGddo3ZoajicQqlAP/oPP5IkKTVyMB8GA1UdIwQY MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNb39kjc 8MZXr7hOOhYuUjLY028x5fTMqT7VGgmkvCAkOZLU17gCxzNemGSClKiO6b8LkOkW INoFyM1mnU0pfkmpo08ry35KHVA9daem58qRe9Zgn9ufdzy4mJySFzlOb/XGfExf C5r2tVMdyuAtBZyH5Uz8JzPeu7WHAQW8xup9y734jTJxIpxEMNywP6jNNenq8Kvo ZjgRxDBauaeQWz4SCPP+JsroJzroscDxCSUjAJpDubMXAqO4noLnMSRLud76KQQF NwT9kiQOEYuICK5ZVJtIBhahbwYwRxcZrezp5nSF9Cdx1W3OSI5Ox+Vv4p2CpQYN p7MnSULyNAYuMg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:01 2025 by rpki-client