This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json) Hash identifier: ftyJFMVUoOQaWL3Gts64pUJzwLdTZ8pZRXmjH+ufnZ0= Subject key identifier: 65:B0:2F:8C:0C:D1:9B:52:F3:38:1F:98:04:1B:DD:77:B6:38:0E:F2 Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f Certificate serial: 019AF389DFABE6DC0D5310C3985053B51BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:01:30 +0000 Manifest this update: Sat 06 Dec 2025 12:01:30 +0000 Manifest next update: Sun 07 Dec 2025 12:01:30 +0000 Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: aLFtvUvxRjU1TdWktXb7i3GbkRiHW8Ojp5P9KFNwoPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:df:ab:e6:dc:0d:53:10:c3:98:50:53:b5:1b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f Validity Not Before: Dec 6 12:01:30 2025 GMT Not After : Dec 7 12:01:30 2025 GMT Subject: CN=65b02f8c0cd19b52f3381f98041bdd77b6380ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:24:78:bd:0e:0b:2f:0f:de:2d:79:2d:15: 8c:20:1b:11:86:d7:8e:b4:4d:6b:69:65:8a:34:90: 4a:35:79:6a:66:64:6c:e9:6e:ea:dc:e5:ac:22:d1: 77:c5:a7:71:1a:49:00:25:37:aa:d7:e7:41:22:e9: 39:b5:86:c0:bb:ba:d4:70:7d:82:bb:2d:25:e3:f9: d6:57:0d:6c:80:b6:4f:92:99:ce:12:77:7e:5f:52: a5:ae:35:a0:b0:91:51:8f:6b:ef:ac:bf:24:64:76: 4a:d9:46:35:99:2a:b8:ce:fb:1e:e7:b5:e0:dd:3a: e7:ed:cc:18:b5:76:95:5c:b9:74:4e:61:1e:6d:45: ad:99:36:ea:d4:50:69:d8:3a:b3:af:51:6b:8f:33: 71:aa:5a:37:bd:79:7b:9c:c6:d0:a3:3c:97:5a:30: 37:70:65:92:96:8f:ad:8f:e3:24:fb:2c:12:5b:3e: 82:35:22:f2:02:f2:f1:28:d0:35:de:6c:84:95:87: a8:a1:a3:ec:9e:4e:33:a7:cf:eb:1e:e2:43:be:3e: 2f:80:c7:d0:84:af:55:40:20:5c:22:93:8b:9c:e7: 22:8d:2a:b3:e1:d8:92:e2:a6:4f:1b:d5:fc:44:44: 5e:23:ab:bf:8a:0d:f1:51:fd:00:90:15:52:90:12: 6e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B0:2F:8C:0C:D1:9B:52:F3:38:1F:98:04:1B:DD:77:B6:38:0E:F2 X509v3 Authority Key Identifier: keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:10:cb:db:0a:3f:3b:cf:c2:e4:61:4c:b5:44:e4:06:b7:98: 0e:c0:16:1d:50:c9:3e:dc:83:37:4c:fa:fe:9c:31:db:a1:91: f5:d5:46:16:a0:69:ae:81:88:fe:80:cd:f7:3f:0e:d8:83:5c: b2:b2:6d:e9:51:9c:30:53:ca:c2:ec:13:4d:e2:87:3a:d1:97: f8:f7:52:18:35:77:a9:26:b5:6c:cb:bb:c0:40:ea:fa:37:fe: de:84:c9:e1:99:b6:6c:2d:16:ca:79:f5:52:f1:3a:84:85:3b: 8f:bb:71:3d:a6:d3:6b:0d:79:64:f0:4f:fe:b6:cd:87:b0:b5: 27:13:66:bb:de:96:d5:b2:b6:25:21:39:d1:f3:c5:c9:93:d9: 9f:64:df:a9:c1:e3:07:53:5b:b6:45:59:c7:19:24:23:39:a2: fb:f8:c5:b1:5f:56:62:cb:e3:eb:7d:c5:6f:d5:dc:19:74:d8: da:35:06:59:23:b4:e7:92:83:60:ce:79:e6:b8:5c:4c:d4:24: 81:a7:32:d7:5c:7a:a2:1a:90:a4:da:f4:f7:52:f6:60:2c:45: 59:89:b9:cc:e7:03:02:a3:6b:5c:aa:12:81:61:16:45:ec:3c: ee:b8:5b:05:d3:15:0f:57:1f:e6:8f:00:c8:86:fd:fa:04:c6: cb:65:2f:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzid+r5twNUxDDmFBTtRuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTU4Mzk4NDlhZDNiOGJmZmEwMTQ5YmIwZTExZTY2MWM5 YzNkN2YwHhcNMjUxMjA2MTIwMTMwWhcNMjUxMjA3MTIwMTMwWjAzMTEwLwYDVQQD Eyg2NWIwMmY4YzBjZDE5YjUyZjMzODFmOTgwNDFiZGQ3N2I2MzgwZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4AkeL0OCy8P3i15LRWMIBsRhteO tE1raWWKNJBKNXlqZmRs6W7q3OWsItF3xadxGkkAJTeq1+dBIuk5tYbAu7rUcH2C uy0l4/nWVw1sgLZPkpnOEnd+X1KlrjWgsJFRj2vvrL8kZHZK2UY1mSq4zvse57Xg 3Trn7cwYtXaVXLl0TmEebUWtmTbq1FBp2Dqzr1FrjzNxqlo3vXl7nMbQozyXWjA3 cGWSlo+tj+Mk+ywSWz6CNSLyAvLxKNA13myElYeooaPsnk4zp8/rHuJDvj4vgMfQ hK9VQCBcIpOLnOcijSqz4diS4qZPG9X8REReI6u/ig3xUf0AkBVSkBJuIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWwL4wM0ZtS8zgfmAQb3Xe2OA7yMB8GA1UdIwQY MBaAFOClg5hJrTuL/6AUm7DhHmYcnD1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtXRG1FbXRPNHZfb0JTYnNPRWVaaHljUFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYjk3YTctZDFhZC00MmQ1LWEwYzgt NzhmYWU3ZmFkYWJhLzEvNEtXRG1FbXRPNHZfb0JTYnNPRWVaaHljUFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYjk3YTctZDFhZC00MmQ1LWEwYzgtNzhmYWU3ZmFkYWJh LzEvNEtXRG1FbXRPNHZfb0JTYnNPRWVaaHljUFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhDL2wo/ O8/C5GFMtUTkBreYDsAWHVDJPtyDN0z6/pwx26GR9dVGFqBproGI/oDN9z8O2INc srJt6VGcMFPKwuwTTeKHOtGX+PdSGDV3qSa1bMu7wEDq+jf+3oTJ4Zm2bC0Wynn1 UvE6hIU7j7txPabTaw15ZPBP/rbNh7C1JxNmu96W1bK2JSE50fPFyZPZn2TfqcHj B1NbtkVZxxkkIzmi+/jFsV9WYsvj633Fb9XcGXTY2jUGWSO055KDYM555rhcTNQk gacy11x6ohqQpNr091L2YCxFWYm5zOcDAqNrXKoSgWEWRew87rhbBdMVD1cf5o8A yIb9+gTGy2UvDg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:38 2025 by rpki-client