This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json) Hash identifier: pYCb86QqOeSWbcbwKsMT8xoWsU8JkugZ0rCMb9kPjXY= Subject key identifier: F2:9D:61:55:F1:8A:CC:94:CA:94:D1:DE:E9:9D:7D:12:D9:B4:81:DA Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0 Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0 Certificate serial: 019AF276E9A8DF35634D76E262109C67E7FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft Manifest number: 0B4D Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: zDUhBjEcdfcXKvZFX+PvYTFRU1bCoc7vkM4bt+pcnWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e9:a8:df:35:63:4d:76:e2:62:10:9c:67:e7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=f29d6155f18acc94ca94d1dee99d7d12d9b481da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:c9:30:81:a5:da:58:dd:32:77:a3:5f:61: a7:45:6f:08:cd:6d:e0:4c:c2:b6:64:0c:aa:8e:3d: 2f:80:1c:ad:dc:69:10:46:11:31:98:b4:e7:f6:3a: 3c:49:63:0c:1b:d8:0b:e6:af:04:48:cf:5b:9a:8c: 4a:5e:de:d3:17:91:d3:04:57:84:27:42:77:9c:fb: d5:31:5b:74:61:4c:09:a3:56:5d:8f:43:33:7a:15: 1d:8e:86:3d:c4:7e:1e:dc:ec:e7:43:fc:31:2b:cb: 0a:12:8e:5e:89:35:fd:67:36:ea:03:e1:41:43:1f: 9a:c5:fb:83:92:33:0b:5f:cf:fd:10:ba:4d:e5:c1: 9d:96:ef:78:70:e6:3e:53:de:09:8a:06:22:75:f2: ba:0d:1e:d8:e4:50:d9:77:e2:13:3f:7f:0b:86:92: 98:64:01:74:41:9a:58:b0:a7:81:d8:d7:21:29:88: 12:9f:46:6d:20:6d:26:6f:07:40:dd:52:54:c5:7d: 13:3d:99:25:1d:21:0f:18:aa:08:13:e4:33:d5:9f: 1d:c5:12:f5:5d:ac:84:0b:b2:c5:4a:56:60:cf:c3: d1:46:84:25:17:d6:37:55:c6:68:7f:2c:83:da:98: 89:18:c4:c3:11:df:73:cb:58:78:41:2b:a5:20:f8: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9D:61:55:F1:8A:CC:94:CA:94:D1:DE:E9:9D:7D:12:D9:B4:81:DA X509v3 Authority Key Identifier: keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:89:d4:60:db:31:71:cb:49:9b:5b:2f:6c:fc:cb:95:11:0d: e6:19:b2:fe:7b:95:2e:6a:b9:94:23:55:f1:d0:1c:69:2a:45: 7d:1b:9e:0c:b8:ab:9d:ea:3b:58:9f:58:61:db:29:c6:07:06: 39:01:27:ec:52:2e:62:5d:95:de:8e:fe:48:60:91:39:ad:ef: 9e:31:05:5c:4f:6e:d2:d4:59:45:a2:16:ad:12:d6:cd:e0:1f: 10:71:df:ce:76:37:2e:bb:e2:c4:78:91:6d:6b:69:ed:88:d5: 26:a9:ad:bd:90:9f:3d:cc:05:1b:9f:dd:7a:33:a4:82:2c:25: 68:3d:ee:f8:0d:ed:80:7f:1e:d5:7b:4c:fe:6e:22:b3:2d:04: 2d:e4:f5:ff:ee:f3:1e:42:c7:a4:0d:73:e9:e4:bb:cc:f0:b9: 3f:88:9a:cd:38:2f:fd:d9:80:0e:e3:08:4d:71:2f:b2:1d:19: c2:15:d7:38:39:97:e9:9b:a8:84:3c:9e:28:54:2a:33:6b:f7: b0:32:3f:42:84:f5:57:f3:84:0b:23:7c:d3:ba:07:00:24:f9: 67:4f:54:e2:a7:7f:87:72:eb:f1:ef:6e:27:ae:a5:9d:f3:c3: a6:82:0d:8e:12:c0:91:21:5b:cf:35:9a:8c:9e:32:09:03:c5: 66:43:fc:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydumo3zVjTXbiYhCcZ+f7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOGZmMWM5NjY2ZmUxOTVmMjRhYTFmZThjMzQ1ZDc5YzQ4 ZTdiYzAwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD EyhmMjlkNjE1NWYxOGFjYzk0Y2E5NGQxZGVlOTlkN2QxMmQ5YjQ4MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkDJMIGl2ljdMnejX2GnRW8IzW3g TMK2ZAyqjj0vgByt3GkQRhExmLTn9jo8SWMMG9gL5q8ESM9bmoxKXt7TF5HTBFeE J0J3nPvVMVt0YUwJo1Zdj0MzehUdjoY9xH4e3OznQ/wxK8sKEo5eiTX9ZzbqA+FB Qx+axfuDkjMLX8/9ELpN5cGdlu94cOY+U94JigYidfK6DR7Y5FDZd+ITP38LhpKY ZAF0QZpYsKeB2NchKYgSn0ZtIG0mbwdA3VJUxX0TPZklHSEPGKoIE+Qz1Z8dxRL1 XayEC7LFSlZgz8PRRoQlF9Y3VcZofyyD2piJGMTDEd9zy1h4QSulIPjmhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKdYVXxisyUypTR3umdfRLZtIHaMB8GA1UdIwQY MBaAFD+P8clmb+GV8kqh/ow0XXnEjnvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQt ZmJkMzYxY2I4MTkzLzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQtZmJkMzYxY2I4MTkz LzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4nUYNsx cctJm1svbPzLlREN5hmy/nuVLmq5lCNV8dAcaSpFfRueDLirneo7WJ9YYdspxgcG OQEn7FIuYl2V3o7+SGCROa3vnjEFXE9u0tRZRaIWrRLWzeAfEHHfznY3LrvixHiR bWtp7YjVJqmtvZCfPcwFG5/dejOkgiwlaD3u+A3tgH8e1XtM/m4isy0ELeT1/+7z HkLHpA1z6eS7zPC5P4iazTgv/dmADuMITXEvsh0ZwhXXODmX6ZuohDyeKFQqM2v3 sDI/QoT1V/OECyN807oHACT5Z09U4qd/h3Lr8e9uJ66lnfPDpoINjhLAkSFbzzWa jJ4yCQPFZkP89Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:05 2025 by rpki-client