This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json) Hash identifier: qDWcd9SCwyN2bn7vsxtgeanxo96HtEPbgGqoSjROzWs= Subject key identifier: 46:60:76:10:D1:78:73:31:4D:F8:0A:30:2B:1F:5B:26:DF:08:62:2D Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Certificate serial: 019AF50B777AB87BB12A6B1DB46DA6B6C6ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft Manifest number: 0975 Signing time: Sat 06 Dec 2025 19:02:40 +0000 Manifest this update: Sat 06 Dec 2025 19:02:40 +0000 Manifest next update: Sun 07 Dec 2025 19:02:40 +0000 Files and hashes: 1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: wQYbJLgklOAhwrS9UZBgpnklNRPNxlMp4pjcDhlVMVI=) 2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:77:7a:b8:7b:b1:2a:6b:1d:b4:6d:a6:b6:c6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Validity Not Before: Dec 6 19:02:40 2025 GMT Not After : Dec 7 19:02:40 2025 GMT Subject: CN=46607610d17873314df80a302b1f5b26df08622d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:04:75:98:2f:f5:b5:a1:c9:e3:e8:37:fd: c6:eb:59:39:fb:dc:66:3a:e4:22:15:9b:85:bf:91: 79:fd:dd:37:30:20:8b:63:9c:d5:bd:f0:01:4d:8f: 8b:e9:24:95:df:40:c8:6b:15:a9:87:bd:87:79:36: 73:f1:6d:d3:f2:e9:29:c6:cd:ca:3e:75:41:5d:aa: 3c:66:8c:c6:7c:4b:ff:ef:09:bb:a4:22:a9:b4:9a: c0:64:ff:6a:ca:08:b3:c8:b4:ee:54:ac:e1:fe:ed: 15:a5:05:ab:91:fb:1d:68:9e:c8:7e:e1:c5:b5:3e: 8c:59:da:1e:24:03:1f:b4:1f:6d:34:34:90:ef:e5: 73:94:6e:27:2a:e1:83:37:f9:ce:69:bd:22:07:f9: d4:04:4e:ee:6c:bd:1d:1e:82:aa:04:27:d1:0d:b6: 42:d7:97:0d:9f:53:12:dc:3f:97:7c:f8:b3:10:36: ac:fb:7a:8d:c5:28:5f:c5:ba:ee:93:8c:4b:12:b4: e3:d5:90:a6:d5:5e:44:80:30:22:41:f3:f6:97:20: 12:38:ba:de:61:a0:93:ca:b6:92:f2:41:72:c3:e1: 63:4f:2c:52:b9:cb:a9:9b:37:d1:a3:53:be:57:cd: 40:f8:23:4d:73:bc:92:d9:e7:1f:cd:d6:21:71:ef: 72:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:60:76:10:D1:78:73:31:4D:F8:0A:30:2B:1F:5B:26:DF:08:62:2D X509v3 Authority Key Identifier: keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:71:cb:8b:6d:c9:b6:07:7f:fa:98:44:f7:c0:20:76:5b:4f: 20:86:10:4f:0e:d5:be:20:3a:1c:f8:7a:2b:2d:2e:e3:90:55: 07:53:42:47:55:f6:ec:3d:ca:63:a4:e2:9c:f3:9e:99:70:c0: 7b:51:8c:cb:7e:83:68:d7:9d:80:77:79:e9:91:59:2f:38:ff: 59:c1:99:26:db:6a:e7:bb:22:42:c3:2c:33:1d:3a:7a:f3:0e: 6a:26:d2:b7:0b:93:03:c2:9f:6c:68:d2:d2:3f:a8:5e:11:74: 9f:5c:25:3d:da:9c:a6:9e:26:02:be:cc:15:84:f8:b9:2f:fe: f8:64:b0:a8:98:96:ed:ff:3a:95:3d:82:59:91:ef:51:60:b2: 2f:61:31:9b:4e:67:09:aa:5d:74:8b:7a:c6:2d:da:a7:ef:5c: 7e:1a:e6:a4:d7:6d:4f:eb:12:03:9a:db:25:99:e4:ff:7d:d0: 5d:2d:13:16:c3:5f:ff:67:99:eb:6d:ac:1c:cc:30:f8:8b:be: 6b:4b:52:0f:7d:39:b2:ae:12:de:b8:a5:c0:f0:52:c5:c6:f7: 42:d3:19:46:3f:0d:bf:59:55:13:3d:e8:28:3a:b8:b0:7e:f5: 67:81:15:4e:10:c3:69:bb:fa:9d:35:d0:f7:78:ca:bb:33:60: 0a:8e:a9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3d6uHuxKmsdtG2mtsbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjJmNTQ1ZGRiMjM0ZTM4M2QzNmI4YThkNmI1NmEzOGRk NzJmODkwHhcNMjUxMjA2MTkwMjQwWhcNMjUxMjA3MTkwMjQwWjAzMTEwLwYDVQQD Eyg0NjYwNzYxMGQxNzg3MzMxNGRmODBhMzAyYjFmNWIyNmRmMDg2MjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGMEdZgv9bWhyePoN/3G61k5+9xm OuQiFZuFv5F5/d03MCCLY5zVvfABTY+L6SSV30DIaxWph72HeTZz8W3T8ukpxs3K PnVBXao8ZozGfEv/7wm7pCKptJrAZP9qygizyLTuVKzh/u0VpQWrkfsdaJ7IfuHF tT6MWdoeJAMftB9tNDSQ7+VzlG4nKuGDN/nOab0iB/nUBE7ubL0dHoKqBCfRDbZC 15cNn1MS3D+XfPizEDas+3qNxShfxbruk4xLErTj1ZCm1V5EgDAiQfP2lyASOLre YaCTyraS8kFyw+FjTyxSucupmzfRo1O+V81A+CNNc7yS2ecfzdYhce9ywQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZgdhDReHMxTfgKMCsfWybfCGItMB8GA1UdIwQY MBaAFODy9UXdsjTjg9Nrio1rVqON1y+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYt OGNhNmMzM2QxNGJiLzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYtOGNhNmMzM2QxNGJi LzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXHLi23J tgd/+phE98AgdltPIIYQTw7VviA6HPh6Ky0u45BVB1NCR1X27D3KY6TinPOemXDA e1GMy36DaNedgHd56ZFZLzj/WcGZJttq57siQsMsMx06evMOaibStwuTA8KfbGjS 0j+oXhF0n1wlPdqcpp4mAr7MFYT4uS/++GSwqJiW7f86lT2CWZHvUWCyL2Exm05n CapddIt6xi3ap+9cfhrmpNdtT+sSA5rbJZnk/33QXS0TFsNf/2eZ622sHMww+Iu+ a0tSD305sq4S3rilwPBSxcb3QtMZRj8Nv1lVEz3oKDq4sH71Z4EVThDDabv6nTXQ 93jKuzNgCo6p9g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:15 2025 by rpki-client