This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json) Hash identifier: yTKcX8yr/VZUE0iluiHjuyu6pabN/6L4KoURLRecNkU= Subject key identifier: 89:EC:F9:52:CF:39:DD:E6:0F:1D:BC:0E:37:FC:50:F3:C3:29:1D:42 Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78 Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78 Certificate serial: 019AF389377A8FECBAE99AC79021A6B7A255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft Manifest number: 0EE3 Signing time: Sat 06 Dec 2025 12:00:47 +0000 Manifest this update: Sat 06 Dec 2025 12:00:47 +0000 Manifest next update: Sun 07 Dec 2025 12:00:47 +0000 Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: xfYwEqfKpyAULFiYnJsdEda5TW5pDr4phxWqljDlQak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:37:7a:8f:ec:ba:e9:9a:c7:90:21:a6:b7:a2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78 Validity Not Before: Dec 6 12:00:47 2025 GMT Not After : Dec 7 12:00:47 2025 GMT Subject: CN=89ecf952cf39dde60f1dbc0e37fc50f3c3291d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2d:2d:0b:81:e6:e2:2b:cc:54:7b:a2:8e:48: ff:8f:96:29:de:34:1b:fb:ce:22:f7:47:9f:34:95: e4:06:ea:91:80:e3:66:19:c9:b9:87:c4:13:21:9f: 22:4d:1e:98:a3:f9:a1:59:c4:94:81:cb:7d:f9:47: f1:99:af:84:2b:12:1d:5d:6e:95:21:10:2d:68:66: 80:76:c7:ff:87:23:6e:55:ed:20:68:54:58:d3:bb: 28:d4:54:2b:98:48:5f:71:3b:b2:12:5b:a5:b5:0a: 02:eb:a0:46:ca:b0:f5:f4:43:7e:b3:ef:2c:0c:84: 24:4b:0b:5f:e2:b6:73:48:d7:00:d0:57:71:bb:4f: c8:7a:1a:ec:52:af:9f:0a:96:22:c6:36:ea:1b:3b: bd:6e:f7:58:e3:68:9e:e1:9b:9a:36:81:98:52:f7: b2:6d:e3:27:74:a3:f4:9a:c2:07:95:f3:fe:7d:98: e2:40:8a:54:9b:35:a7:2a:8b:b7:b8:f9:1c:82:31: ca:4d:a0:73:e1:b4:ce:0f:87:5c:18:eb:47:07:19: fb:2f:e7:fd:33:a8:14:32:2c:ae:5c:c5:d2:f5:1c: c3:74:2a:d2:22:8f:f6:b8:5b:58:63:80:ce:73:11: d2:39:d9:69:7d:2b:18:ff:ba:cb:96:d3:50:07:6c: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EC:F9:52:CF:39:DD:E6:0F:1D:BC:0E:37:FC:50:F3:C3:29:1D:42 X509v3 Authority Key Identifier: keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c0:bc:33:fa:f2:a3:5f:26:40:9e:77:57:0d:c9:a9:57:d7: 43:81:09:c7:cd:4a:25:e1:e8:57:d3:e1:06:8b:8e:e8:bc:2d: 46:74:31:fe:65:bf:43:62:49:b8:a7:85:50:e8:1a:62:36:99: 6a:e4:93:1e:f1:0d:f7:2e:39:15:0a:87:6c:d4:27:07:99:87: 9c:96:e6:9d:9a:fc:35:39:b8:7d:2c:69:95:98:1f:fd:ed:db: 3b:51:88:5d:00:cb:02:d3:57:e7:c5:e3:83:78:97:c5:92:c9: 28:6a:4b:8a:10:56:57:cc:f5:ec:33:5c:db:3b:72:2f:c4:fa: 99:8e:f1:df:e9:fe:eb:33:ba:d1:c4:98:eb:e7:cc:d3:12:38: 63:6b:83:71:8d:19:54:31:8f:7b:57:b9:37:34:5a:91:0b:47: 5c:74:87:5c:05:fa:dd:92:31:77:a3:6f:fb:0e:05:7e:c7:20: 3b:05:5f:9b:35:39:67:d6:9d:9d:55:7e:e3:b2:f8:52:13:52: 28:cd:45:b2:ab:02:15:ea:77:a9:02:ec:7a:b5:fc:3b:ac:c2: 29:61:6e:e0:1c:24:38:4a:f9:a0:8c:dc:39:eb:01:2a:8a:e6: b6:74:57:01:75:f3:f1:a8:30:6c:10:26:6a:0d:b1:9b:aa:f2: 0b:d8:da:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTd6j+y66ZrHkCGmt6JVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjAyZTJlNGI2NWRiM2IxZmU1ODFjZGIxOTkwMTBiMmU5 MGNmNzgwHhcNMjUxMjA2MTIwMDQ3WhcNMjUxMjA3MTIwMDQ3WjAzMTEwLwYDVQQD Eyg4OWVjZjk1MmNmMzlkZGU2MGYxZGJjMGUzN2ZjNTBmM2MzMjkxZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi0tC4Hm4ivMVHuijkj/j5Yp3jQb +84i90efNJXkBuqRgONmGcm5h8QTIZ8iTR6Yo/mhWcSUgct9+Ufxma+EKxIdXW6V IRAtaGaAdsf/hyNuVe0gaFRY07so1FQrmEhfcTuyElultQoC66BGyrD19EN+s+8s DIQkSwtf4rZzSNcA0Fdxu0/IehrsUq+fCpYixjbqGzu9bvdY42ie4ZuaNoGYUvey beMndKP0msIHlfP+fZjiQIpUmzWnKou3uPkcgjHKTaBz4bTOD4dcGOtHBxn7L+f9 M6gUMiyuXMXS9RzDdCrSIo/2uFtYY4DOcxHSOdlpfSsY/7rLltNQB2w9+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIns+VLPOd3mDx28Djf8UPPDKR1CMB8GA1UdIwQY MBaAFOEgLi5LZds7H+WBzbGZAQsukM94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNBdUxrdGwyenNmNVlITnNaa0JDeTZRejNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNzczZDctNTU0Zi00NjlmLWI0Zjgt N2RjNjkyNWNkNDJmLzEvNFNBdUxrdGwyenNmNVlITnNaa0JDeTZRejNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hNzczZDctNTU0Zi00NjlmLWI0ZjgtN2RjNjkyNWNkNDJm LzEvNFNBdUxrdGwyenNmNVlITnNaa0JDeTZRejNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsC8M/ry o18mQJ53Vw3JqVfXQ4EJx81KJeHoV9PhBouO6LwtRnQx/mW/Q2JJuKeFUOgaYjaZ auSTHvEN9y45FQqHbNQnB5mHnJbmnZr8NTm4fSxplZgf/e3bO1GIXQDLAtNX58Xj g3iXxZLJKGpLihBWV8z17DNc2ztyL8T6mY7x3+n+6zO60cSY6+fM0xI4Y2uDcY0Z VDGPe1e5NzRakQtHXHSHXAX63ZIxd6Nv+w4FfscgOwVfmzU5Z9adnVV+47L4UhNS KM1FsqsCFep3qQLserX8O6zCKWFu4BwkOEr5oIzcOesBKormtnRXAXXz8agwbBAm ag2xm6ryC9jaNg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:58 2025 by rpki-client