This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft File: 4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json) Hash identifier: ZabQGlRD8X0F5IHFkm8J1IO2cK/XgvkDjVB4o23YnQk= Subject key identifier: A6:56:3D:B0:6F:25:26:5F:C1:B0:20:B8:D3:06:BC:14:74:B3:36:56 Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB Certificate issuer: /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb Certificate serial: 019AF2AD8399D0BA5DCF84D8AE63D59C771D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft Manifest number: 0457 Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: Li3NqK6GipgJAJpO0n9SLfefNgaxwUDSIrlO2ZJJQTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:83:99:d0:ba:5d:cf:84:d8:ae:63:d5:9c:77:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=a6563db06f25265fc1b020b8d306bc1474b33656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:39:e8:e3:ec:c3:b8:5c:b1:75:3c:31:a5: f1:6d:55:ec:61:0f:eb:52:66:a3:76:87:66:5e:62: 7b:6a:46:78:84:34:9a:06:75:f0:77:4e:8f:bd:49: 7f:85:5b:11:99:92:68:66:f5:3a:0a:e1:ac:fb:1d: a4:ef:06:71:8d:85:48:c5:ad:e5:29:f4:c9:9f:2a: d4:10:a5:9d:a8:49:78:02:ad:52:9e:a5:05:22:9e: b6:88:00:40:db:23:7b:f5:de:c7:46:b5:2d:f6:38: 59:11:3d:8a:00:cd:e6:81:7f:dc:e1:b5:33:79:71: 89:7d:f8:91:63:46:15:ce:fc:95:2f:50:6a:24:01: 0b:c4:7f:66:cf:41:1b:6b:7b:a5:65:bb:a0:52:65: 82:71:bb:97:ce:aa:f0:a4:20:d1:05:fe:1e:82:41: d7:4d:62:c1:cd:79:61:ef:1c:18:26:9c:c9:67:52: ab:0c:d6:21:35:d4:e9:80:82:25:63:61:88:ce:cf: 4d:43:49:a1:50:84:3b:e3:8a:f5:41:6c:48:06:5e: 92:b2:e2:29:a0:bc:6c:1d:8e:86:4f:22:ad:06:52: 81:77:fb:5b:6f:8d:d4:20:b6:7b:73:80:dd:2a:2a: 2f:14:83:29:56:f4:0b:50:43:2c:91:27:70:6c:5f: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:56:3D:B0:6F:25:26:5F:C1:B0:20:B8:D3:06:BC:14:74:B3:36:56 X509v3 Authority Key Identifier: keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:13:24:ff:8f:3b:be:8b:9c:7d:ff:ff:c6:70:48:bb:f8:dc: 03:f1:82:a7:8d:3c:93:f8:17:c9:87:1d:96:d9:06:b5:aa:76: 0d:19:7c:c5:75:95:90:4a:42:f0:0c:41:51:dd:7e:86:40:ca: be:aa:c0:f2:31:78:31:ef:f1:e0:a7:22:c1:b2:be:f5:9a:77: e1:39:12:eb:23:f2:1b:25:d1:b9:a3:c6:f4:a5:ba:f1:c7:6e: b3:37:5f:93:fe:83:9b:1e:b3:44:af:f9:02:54:f9:46:5b:93: 69:51:e0:f2:5f:1f:0f:34:69:a5:6b:6c:9a:45:91:65:e8:53: dc:8f:98:08:50:99:2a:9b:18:1a:88:61:2f:5d:ea:ed:0c:16: 1e:b9:81:00:64:98:16:20:01:86:80:50:eb:af:d2:8d:6e:56: 29:4f:8c:b9:7f:6b:74:49:bc:84:e8:38:51:f8:65:ab:06:a0: b7:65:13:36:cc:07:99:79:ea:1b:ed:b4:63:86:f1:0e:a3:4b: 46:ce:83:83:01:ed:24:84:2d:2f:87:2a:45:c5:02:ac:33:23: ea:b9:08:4f:65:98:b3:16:c7:26:ab:60:86:e7:3b:6b:c8:36: 6b:42:44:d4:e2:a0:33:da:ac:e2:13:0b:13:cb:1c:8c:5d:7a: 57:a8:4e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYOZ0Lpdz4TYrmPVnHcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGU5MGI4YjJhNDg0NmMyNTc0NThiZjFiZmI2YzdhZGU5 MzJlY2IwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD EyhhNjU2M2RiMDZmMjUyNjVmYzFiMDIwYjhkMzA2YmMxNDc0YjMzNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLM56OPsw7hcsXU8MaXxbVXsYQ/r UmajdodmXmJ7akZ4hDSaBnXwd06PvUl/hVsRmZJoZvU6CuGs+x2k7wZxjYVIxa3l KfTJnyrUEKWdqEl4Aq1SnqUFIp62iABA2yN79d7HRrUt9jhZET2KAM3mgX/c4bUz eXGJffiRY0YVzvyVL1BqJAELxH9mz0Eba3ulZbugUmWCcbuXzqrwpCDRBf4egkHX TWLBzXlh7xwYJpzJZ1KrDNYhNdTpgIIlY2GIzs9NQ0mhUIQ744r1QWxIBl6SsuIp oLxsHY6GTyKtBlKBd/tbb43UILZ7c4DdKiovFIMpVvQLUEMskSdwbF/UlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZWPbBvJSZfwbAguNMGvBR0szZWMB8GA1UdIwQY MBaAFODekLiypIRsJXRYvxv7bHreky7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNWQ3NzAtOGUzZS00MmY2LTlmZGMt NDdkZjRhNTcxZjVhLzEvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iNWQ3NzAtOGUzZS00MmY2LTlmZGMtNDdkZjRhNTcxZjVh LzEvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxMk/487 voucff//xnBIu/jcA/GCp408k/gXyYcdltkGtap2DRl8xXWVkEpC8AxBUd1+hkDK vqrA8jF4Me/x4KciwbK+9Zp34TkS6yPyGyXRuaPG9KW68cduszdfk/6Dmx6zRK/5 AlT5RluTaVHg8l8fDzRppWtsmkWRZehT3I+YCFCZKpsYGohhL13q7QwWHrmBAGSY FiABhoBQ66/SjW5WKU+MuX9rdEm8hOg4Ufhlqwagt2UTNswHmXnqG+20Y4bxDqNL Rs6DgwHtJIQtL4cqRcUCrDMj6rkIT2WYsxbHJqtghuc7a8g2a0JE1OKgM9qs4hML E8scjF16V6hO5g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:14 2025 by rpki-client