This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json) Hash identifier: 1uvfHAvO0Ke5M/+mE1HDHEIMlxDvQtsutDs3aCBRIbY= Subject key identifier: D6:9F:48:DD:CC:2D:18:EE:A2:29:52:29:92:65:88:F8:6C:70:C6:9E Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Certificate serial: 019B3A90C5ABB683AA9F90B853AEB2CEB49D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft Manifest number: 0B93 Signing time: Sat 20 Dec 2025 07:02:04 +0000 Manifest this update: Sat 20 Dec 2025 07:02:04 +0000 Manifest next update: Sun 21 Dec 2025 07:02:04 +0000 Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: bybSw9lPIIvdjUIC8Jr9XdqejVVPHU3m55DUYjZlN5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:c5:ab:b6:83:aa:9f:90:b8:53:ae:b2:ce:b4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Validity Not Before: Dec 20 07:02:04 2025 GMT Not After : Dec 21 07:02:04 2025 GMT Subject: CN=d69f48ddcc2d18eea2295229926588f86c70c69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:d6:71:5b:dd:46:21:5e:2b:ac:24:11:4e: c3:3b:b0:49:db:ec:db:9d:6f:ec:2d:eb:09:65:15: f5:a9:fb:a1:5c:7f:3d:08:47:fa:cf:19:e5:d7:1f: 14:37:d0:8c:67:48:e4:24:f6:7b:73:74:36:98:c8: 3c:b1:0d:32:e9:23:e9:31:a1:71:38:44:ee:71:07: 52:f3:10:27:d3:d7:87:ec:56:1e:a7:3d:33:4f:ce: 2f:eb:69:ca:fd:a7:5c:96:89:0f:a9:32:2e:d7:c1: 96:46:9a:f7:a6:e4:f8:c5:c7:5c:fe:bd:1e:53:34: 58:ec:6b:3a:be:ae:ed:96:36:3b:aa:19:b0:07:ed: 24:1d:99:fb:16:03:ff:dd:be:47:6f:08:67:18:11: c7:1d:8b:bc:d2:8c:de:31:1c:e8:2c:8c:78:8a:ee: 1d:fe:03:59:76:a4:f1:fc:75:19:b5:0d:ee:26:49: ed:7f:da:51:fa:1c:5e:7c:2f:b4:1e:06:92:8e:ff: 10:bd:ac:fe:13:60:b1:fd:f4:95:ac:52:03:f3:6c: 6d:c3:aa:cf:18:36:4e:ec:ad:3a:70:ae:55:18:3c: 5c:ed:01:c8:f2:f9:8e:f7:a3:92:aa:ee:34:d0:0c: f2:25:8f:86:47:8e:3a:ae:12:42:c9:91:e9:8e:74: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9F:48:DD:CC:2D:18:EE:A2:29:52:29:92:65:88:F8:6C:70:C6:9E X509v3 Authority Key Identifier: keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:65:e8:8f:39:ee:3f:97:01:c5:c1:d0:f5:59:91:63:28:b0: 01:39:d2:28:90:f0:24:0d:96:24:b1:d1:c9:89:d2:f2:91:67: 8a:65:c6:79:c3:95:03:c1:ab:dd:a9:7c:7f:85:eb:4f:53:c6: a3:31:72:17:b8:47:48:49:36:52:8b:5e:97:84:26:6a:14:7a: fd:5c:90:b5:bf:61:00:cc:8b:58:02:c6:eb:9a:98:93:f9:17: 01:84:cb:71:52:d4:60:46:1f:72:a3:d2:3c:8b:8e:4b:80:31: a7:a0:b8:08:b3:b0:2c:5d:f9:e3:7f:a1:e6:9e:5a:90:62:7b: 51:d2:85:71:84:fb:36:b9:64:1a:3e:6f:ef:b3:6f:16:5c:ce: 24:30:cd:26:6d:8a:87:3d:6d:d5:18:53:69:15:24:a6:17:ba: ec:c1:60:df:e0:db:75:82:65:4b:d3:d8:28:b8:84:d8:38:4d: cb:71:8f:7e:fe:0a:77:86:a6:61:60:95:0e:a3:d9:c2:96:81: 29:31:e6:63:74:65:a0:40:1d:d7:f1:5e:74:2d:fd:b8:08:16: d6:92:24:ae:8a:51:8b:35:4c:96:11:e2:ea:26:7c:bc:42:cf: 33:a7:e1:6a:38:8b:0b:61:8c:81:70:e5:01:e5:4b:fe:61:92: d0:fc:b5:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kMWrtoOqn5C4U66yzrSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODRhNDE5OTdlZWVhNGQwNWZjYzdjZDQwYjEyMTEzYTVi YjY5ZTgwHhcNMjUxMjIwMDcwMjA0WhcNMjUxMjIxMDcwMjA0WjAzMTEwLwYDVQQD EyhkNjlmNDhkZGNjMmQxOGVlYTIyOTUyMjk5MjY1ODhmODZjNzBjNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc7WcVvdRiFeK6wkEU7DO7BJ2+zb nW/sLesJZRX1qfuhXH89CEf6zxnl1x8UN9CMZ0jkJPZ7c3Q2mMg8sQ0y6SPpMaFx OETucQdS8xAn09eH7FYepz0zT84v62nK/adclokPqTIu18GWRpr3puT4xcdc/r0e UzRY7Gs6vq7tljY7qhmwB+0kHZn7FgP/3b5HbwhnGBHHHYu80ozeMRzoLIx4iu4d /gNZdqTx/HUZtQ3uJkntf9pR+hxefC+0HgaSjv8Qvaz+E2Cx/fSVrFID82xtw6rP GDZO7K06cK5VGDxc7QHI8vmO96OSqu400AzyJY+GR446rhJCyZHpjnRA2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNafSN3MLRjuoilSKZJliPhscMaeMB8GA1UdIwQY MBaAFNOEpBmX7upNBfzHzUCxIROlu2noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUt ZjZkMGZmNDU4NjQ4LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUtZjZkMGZmNDU4NjQ4 LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2Xojznu P5cBxcHQ9VmRYyiwATnSKJDwJA2WJLHRyYnS8pFnimXGecOVA8Gr3al8f4XrT1PG ozFyF7hHSEk2Uotel4QmahR6/VyQtb9hAMyLWALG65qYk/kXAYTLcVLUYEYfcqPS PIuOS4Axp6C4CLOwLF3543+h5p5akGJ7UdKFcYT7NrlkGj5v77NvFlzOJDDNJm2K hz1t1RhTaRUkphe67MFg3+DbdYJlS9PYKLiE2DhNy3GPfv4Kd4amYWCVDqPZwpaB KTHmY3RloEAd1/FedC39uAgW1pIkropRizVMlhHi6iZ8vELPM6fhajiLC2GMgXDl AeVL/mGS0Py11g== -----END CERTIFICATE-----Generated at Sat Dec 20 12:22:48 2025 by rpki-client