This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft File: 4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json) Hash identifier: oFej/oqX9iJuMngqamnGZluJKBybbvOykLeeW/M4V2E= Subject key identifier: 6E:52:F7:D0:A4:13:39:1F:4F:CC:00:D4:C4:98:5F:16:BA:D7:E2:DD Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83 Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083 Certificate serial: 019B0F373A0D50436E90F2FA0F04F06A70D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 21:00:36 +0000 Manifest this update: Thu 11 Dec 2025 21:00:36 +0000 Manifest next update: Fri 12 Dec 2025 21:00:36 +0000 Files and hashes: 1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: mAaCuxTkglyrYlRqt/bMfGClnWlWA2UG9CoQoFN6uGM=) 2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:3a:0d:50:43:6e:90:f2:fa:0f:04:f0:6a:70:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083 Validity Not Before: Dec 11 21:00:36 2025 GMT Not After : Dec 12 21:00:36 2025 GMT Subject: CN=6e52f7d0a413391f4fcc00d4c4985f16bad7e2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:4c:76:de:57:4c:20:cf:88:3a:2d:68:04: 55:d1:6e:70:c9:e0:7d:c0:0f:bc:0b:dc:08:d1:bd: 9b:c9:75:1b:f4:bd:9c:b1:92:4c:4a:e4:5a:b9:6a: 37:9f:08:eb:b2:2b:9c:98:c1:86:83:e0:d4:7f:d8: 74:da:83:1f:a1:e9:b2:56:16:e6:3c:19:4d:1c:89: 07:78:92:10:ac:9c:de:92:3b:17:cc:ee:4f:6f:23: ee:03:d8:6b:e9:35:8a:b1:31:41:a5:bb:91:6c:3b: ba:ec:c3:e7:5e:79:96:01:ed:5b:87:bb:d5:bc:df: dc:17:94:2b:10:6c:32:49:b9:9d:a0:c3:3d:e0:ae: 7d:9e:fe:4c:07:e5:43:d4:73:89:35:50:8e:5e:9b: d3:51:6e:be:07:ee:c9:bd:81:cd:87:b4:20:6e:ad: af:df:a1:21:85:89:3d:12:bd:65:51:03:68:21:be: 36:c3:9b:35:a2:b1:51:1a:e5:87:44:70:fa:56:b3: 60:07:cd:39:b2:a8:c8:ac:03:2c:b8:24:45:69:94: e9:94:34:80:5c:d9:d5:6f:9e:86:58:7a:31:be:ec: 95:2f:49:0c:fd:7f:8d:e9:60:06:44:24:45:87:2a: 02:b7:40:00:bc:73:af:e1:25:f4:96:e1:de:24:05: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:52:F7:D0:A4:13:39:1F:4F:CC:00:D4:C4:98:5F:16:BA:D7:E2:DD X509v3 Authority Key Identifier: keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f8:78:81:bd:cf:e3:f2:66:cb:4a:f4:b9:49:8f:31:dd:3a: 71:8c:f3:a1:87:68:7e:6f:7d:40:ac:d2:80:43:6a:a5:4d:73: a6:78:01:75:72:9e:a5:d0:09:e6:b0:58:8f:87:00:eb:6f:57: 3b:ee:f0:37:4e:6d:52:f1:53:86:58:30:c2:e1:94:51:30:c3: d0:cb:1b:71:83:f6:a8:cd:6b:83:16:28:fb:78:03:25:17:59: 11:b9:c7:4f:4d:fb:66:99:d0:97:ab:63:e4:72:6b:0e:db:87: ef:43:e2:f4:10:a4:df:b9:7b:f1:5e:0a:44:4f:c7:a2:3c:52: d4:14:81:e6:67:a6:3a:a0:f6:f7:01:a4:30:b2:91:d2:66:3c: b0:24:c9:cc:f9:aa:5b:05:c5:c2:4e:5e:a6:b1:ba:45:f3:2b: bd:e5:5b:41:e4:0a:5f:7d:4f:9a:e1:88:6c:c7:d1:94:84:a5: ee:41:6c:8a:78:c6:ee:5e:60:e7:0f:b8:3a:e7:ff:2d:78:37: 8e:c5:ad:24:3d:ed:3b:9a:cf:17:32:66:e0:31:9c:e5:51:59: 7f:46:28:3c:6f:08:d0:f3:e7:75:39:43:d0:31:25:74:fe:29: 1d:41:43:2b:cf:41:f9:2a:81:03:08:13:68:06:78:d2:80:26: 57:35:90:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNzoNUENukPL6DwTwanDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWJmNmQzZGY1MzliYjdjMTY4NGZiNGY0NjE3OWQwZGEw NmIwODMwHhcNMjUxMjExMjEwMDM2WhcNMjUxMjEyMjEwMDM2WjAzMTEwLwYDVQQD Eyg2ZTUyZjdkMGE0MTMzOTFmNGZjYzAwZDRjNDk4NWYxNmJhZDdlMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ZMdt5XTCDPiDotaARV0W5wyeB9 wA+8C9wI0b2byXUb9L2csZJMSuRauWo3nwjrsiucmMGGg+DUf9h02oMfoemyVhbm PBlNHIkHeJIQrJzekjsXzO5PbyPuA9hr6TWKsTFBpbuRbDu67MPnXnmWAe1bh7vV vN/cF5QrEGwySbmdoMM94K59nv5MB+VD1HOJNVCOXpvTUW6+B+7JvYHNh7Qgbq2v 36EhhYk9Er1lUQNoIb42w5s1orFRGuWHRHD6VrNgB805sqjIrAMsuCRFaZTplDSA XNnVb56GWHoxvuyVL0kM/X+N6WAGRCRFhyoCt0AAvHOv4SX0luHeJAVOPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5S99CkEzkfT8wA1MSYXxa61+LdMB8GA1UdIwQY MBaAFOKr9tPfU5u3wWhPtPRhedDaBrCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQt YjdhMWI0YWUxNTExLzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQtYjdhMWI0YWUxNTEx LzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvh4gb3P 4/Jmy0r0uUmPMd06cYzzoYdofm99QKzSgENqpU1zpngBdXKepdAJ5rBYj4cA629X O+7wN05tUvFThlgwwuGUUTDD0MsbcYP2qM1rgxYo+3gDJRdZEbnHT037ZpnQl6tj 5HJrDtuH70Pi9BCk37l78V4KRE/HojxS1BSB5memOqD29wGkMLKR0mY8sCTJzPmq WwXFwk5eprG6RfMrveVbQeQKX31PmuGIbMfRlISl7kFsinjG7l5g5w+4Ouf/LXg3 jsWtJD3tO5rPFzJm4DGc5VFZf0YoPG8I0PPndTlD0DEldP4pHUFDK89B+SqBAwgT aAZ40oAmVzWQVQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:43 2025 by rpki-client