This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json) Hash identifier: q5UzsUx9uxSqfVeZ5N6PoTWAQ4MWE2/HagRe17Xuit4= Subject key identifier: 5C:F1:31:0C:52:98:9D:1D:06:59:AA:5A:CA:B4:32:37:1F:C0:43:3D Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Certificate serial: 019AF208B60B127C5D2EAC5620237A3EDD7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft Manifest number: 1385 Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: 6JWlJrlBOI3H4nzPkPoastBGcJ7LdlV1zuTFUKPmayQ=) 2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b6:0b:12:7c:5d:2e:ac:56:20:23:7a:3e:dd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=5cf1310c52989d1d0659aa5acab432371fc0433d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:b6:03:1b:e0:28:f3:06:6a:2d:d9:0a:ba: bf:cd:2f:c2:1f:16:64:2b:84:82:6c:7c:ce:8b:f0: 3d:b2:ef:c4:c2:98:63:32:44:de:28:d3:30:db:bd: 95:0b:30:ca:7b:4c:e7:66:14:bc:98:d5:1b:9a:23: 90:1a:25:e5:69:6a:3c:62:25:82:f7:d3:50:32:f7: d6:84:41:f2:1b:ec:66:40:5d:bc:c5:a3:e6:6c:53: 1a:57:0b:88:02:6e:3a:3f:3f:e0:a0:55:1d:82:f5: 53:e9:ca:0b:65:bb:d6:34:ce:00:ed:14:27:71:c2: a3:d2:24:5f:c1:a8:bc:16:90:36:aa:c8:ba:63:ce: 08:09:d5:fe:d8:22:7d:13:08:76:f4:bb:b5:b7:b7: 7a:b6:d8:3d:3d:b9:03:ca:ef:a6:3c:4b:6c:26:70: 72:a9:ea:4b:a0:12:da:2f:91:21:d2:0e:08:5c:88: 55:b9:5c:aa:18:31:86:3a:10:7f:06:f0:c4:95:c8: 3d:bb:0d:55:aa:69:83:61:44:ab:fe:99:98:c1:26: 23:aa:e8:5d:e1:a9:b4:5a:f3:69:72:46:66:78:cf: b3:ca:1a:d1:3b:57:6f:39:56:38:c2:19:7d:25:3b: 2a:69:06:3d:92:7e:2e:52:f1:3e:dd:3f:93:29:88: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F1:31:0C:52:98:9D:1D:06:59:AA:5A:CA:B4:32:37:1F:C0:43:3D X509v3 Authority Key Identifier: keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:38:e2:e5:59:3d:e6:cb:b3:0c:cf:bd:72:12:59:b1:02:34: 98:45:5a:10:d7:db:b8:36:9e:e0:55:11:94:ed:4a:cb:14:af: df:36:6f:41:4b:d8:c3:83:e8:71:ab:e7:0c:a0:e9:f8:ba:f7: 00:93:14:a0:d2:e0:ed:ae:30:1f:28:51:a3:29:1a:8e:e9:98: 4d:bf:07:81:58:df:5a:cf:b6:f5:ab:ed:fa:fc:9d:63:43:be: 9e:78:b6:69:13:a6:97:84:c4:b6:6a:db:72:1d:1b:dd:28:8d: 71:18:70:a1:48:0f:fa:1b:a3:20:56:b1:94:09:c2:4b:fd:7b: 54:fc:13:8c:d5:47:bc:cf:75:34:1b:98:f2:8c:a0:e7:ff:b9: fe:b7:3a:6d:90:a9:00:43:57:6e:ec:74:73:9e:bb:80:d6:64: bc:cd:dc:44:a7:c0:f7:fa:a4:9e:23:69:f1:5c:79:26:7c:d7: 53:16:12:c6:03:aa:a2:e4:c9:e5:a9:b1:16:f9:a9:3c:9b:4a: 43:c6:fe:a5:6b:58:aa:88:e4:e4:40:47:4d:31:80:17:c6:8c: 16:59:94:f0:51:61:db:ad:e3:f3:b2:79:ca:8e:7e:e9:49:43: d9:82:4c:f8:ee:41:25:61:95:8f:41:16:64:fe:17:32:f9:f5: be:41:05:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLYLEnxdLqxWICN6Pt1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw NWIyZjAwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD Eyg1Y2YxMzEwYzUyOTg5ZDFkMDY1OWFhNWFjYWI0MzIzNzFmYzA0MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWG2AxvgKPMGai3ZCrq/zS/CHxZk K4SCbHzOi/A9su/EwphjMkTeKNMw272VCzDKe0znZhS8mNUbmiOQGiXlaWo8YiWC 99NQMvfWhEHyG+xmQF28xaPmbFMaVwuIAm46Pz/goFUdgvVT6coLZbvWNM4A7RQn ccKj0iRfwai8FpA2qsi6Y84ICdX+2CJ9Ewh29Lu1t7d6ttg9PbkDyu+mPEtsJnBy qepLoBLaL5Eh0g4IXIhVuVyqGDGGOhB/BvDElcg9uw1VqmmDYUSr/pmYwSYjquhd 4am0WvNpckZmeM+zyhrRO1dvOVY4whl9JTsqaQY9kn4uUvE+3T+TKYjWiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzxMQxSmJ0dBlmqWsq0MjcfwEM9MB8GA1UdIwQY MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTji5Vk9 5suzDM+9chJZsQI0mEVaENfbuDae4FURlO1KyxSv3zZvQUvYw4PocavnDKDp+Lr3 AJMUoNLg7a4wHyhRoykajumYTb8HgVjfWs+29avt+vydY0O+nni2aROml4TEtmrb ch0b3SiNcRhwoUgP+hujIFaxlAnCS/17VPwTjNVHvM91NBuY8oyg5/+5/rc6bZCp AENXbux0c567gNZkvM3cRKfA9/qkniNp8Vx5JnzXUxYSxgOqouTJ5amxFvmpPJtK Q8b+pWtYqojk5EBHTTGAF8aMFlmU8FFh263j87J5yo5+6UlD2YJM+O5BJWGVj0EW ZP4XMvn1vkEFFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:35 2025 by rpki-client