This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json) Hash identifier: uTI3cgrc063fF6aNkHbiEL+9x0dNov/LfpAkJdAcp6Q= Subject key identifier: 06:2E:50:F5:D8:3D:C1:F7:09:E5:98:4F:DA:19:52:8A:FF:B2:B9:61 Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Certificate serial: 019B481580F6CBD8CDA37562F7F2E9374146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft Manifest number: 0B9A Signing time: Mon 22 Dec 2025 22:02:07 +0000 Manifest this update: Mon 22 Dec 2025 22:02:07 +0000 Manifest next update: Tue 23 Dec 2025 22:02:07 +0000 Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: GqrlL7HdmhavHbTIz5byAefDptM8yWSWWun3IRc3Caw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:80:f6:cb:d8:cd:a3:75:62:f7:f2:e9:37:41:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Validity Not Before: Dec 22 22:02:07 2025 GMT Not After : Dec 23 22:02:07 2025 GMT Subject: CN=062e50f5d83dc1f709e5984fda19528affb2b961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:3b:6a:05:45:31:22:fe:b0:87:db:56:b4: dd:54:3a:ea:3f:3b:a8:22:c8:75:69:10:80:81:bb: 6b:5e:c8:5a:33:bc:1f:c1:eb:fe:96:a7:fc:a3:9b: 7e:16:ec:39:2f:57:7f:7b:3e:f2:97:7b:6c:e6:c7: 80:33:4e:53:34:30:98:eb:eb:6e:2e:7e:b6:f2:ad: 91:01:22:a6:77:55:e2:c2:a2:91:ac:c6:6a:60:e6: 6e:3f:19:b2:dc:6b:5d:9c:b8:65:26:24:77:43:e9: 8d:be:1f:94:79:0a:c9:73:3b:aa:15:8f:63:9f:1e: 79:92:bc:c2:d7:e8:b8:c5:8e:04:cc:e4:b9:83:1a: 41:44:16:48:0b:16:b9:66:f2:6b:2e:f3:2b:be:e7: 73:79:0c:b0:a4:5a:9f:37:4c:3b:55:93:b3:4a:34: ac:3f:32:1a:3b:fa:e6:ce:73:5f:c8:95:d1:b1:8d: fb:4b:ba:dd:82:78:70:52:07:0d:4d:de:3d:f5:59: f7:8b:17:63:a8:fb:0c:5f:db:0b:8d:19:73:8b:c4: 44:02:76:b9:2a:f6:50:c7:7d:42:5d:8c:b3:05:0a: d0:04:11:27:66:c0:cb:0e:b8:1d:b7:77:29:0a:ee: 2c:95:97:a8:42:bf:85:4d:60:c5:71:c4:2d:3e:8b: ec:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2E:50:F5:D8:3D:C1:F7:09:E5:98:4F:DA:19:52:8A:FF:B2:B9:61 X509v3 Authority Key Identifier: keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:55:65:b4:87:78:ff:c6:09:6c:af:64:13:b6:b4:f5:a0:a7: 5e:91:d8:49:4b:ec:fd:43:fa:d9:7f:3f:2e:b8:23:70:79:39: 39:cc:52:53:fa:65:3e:b8:2e:cd:61:2b:10:39:9e:a4:75:4d: 92:c2:4b:af:8a:e1:66:de:38:37:ce:b6:b1:7c:b3:c5:3a:1a: 6a:4c:2e:bb:23:bf:b5:73:06:ec:8f:e2:35:c4:16:a3:69:f3: 1a:49:14:00:82:3a:44:8c:0b:11:2a:04:f5:8f:f5:5f:3f:a0: 30:cf:f7:42:d4:5b:3e:86:96:62:fa:3c:b8:97:d6:04:f0:62: 55:55:e6:6b:21:eb:4d:7a:b9:4a:6a:a9:5b:95:20:ab:e3:c7: 82:a3:82:04:b3:b7:51:a8:b8:11:cb:81:d7:43:fb:e0:3c:27: d4:25:6e:37:11:7a:48:94:12:8a:97:bb:d9:bf:5f:66:a2:c9: 09:15:7b:de:9e:22:aa:a3:b8:46:35:54:24:72:16:61:4d:82: 56:19:86:18:1e:22:ab:34:4a:f1:41:9d:b9:94:75:72:f4:5e: 17:55:a6:4c:73:24:9d:b2:22:19:4b:84:c0:9a:09:32:b5:6e: 63:39:ed:7c:94:5c:bf:ba:d5:ea:ab:51:bf:6d:af:b7:b3:cf: c0:9a:4c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFYD2y9jNo3Vi9/LpN0FGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODRhNDE5OTdlZWVhNGQwNWZjYzdjZDQwYjEyMTEzYTVi YjY5ZTgwHhcNMjUxMjIyMjIwMjA3WhcNMjUxMjIzMjIwMjA3WjAzMTEwLwYDVQQD EygwNjJlNTBmNWQ4M2RjMWY3MDllNTk4NGZkYTE5NTI4YWZmYjJiOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsQ7agVFMSL+sIfbVrTdVDrqPzuo Ish1aRCAgbtrXshaM7wfwev+lqf8o5t+Fuw5L1d/ez7yl3ts5seAM05TNDCY6+tu Ln628q2RASKmd1XiwqKRrMZqYOZuPxmy3GtdnLhlJiR3Q+mNvh+UeQrJczuqFY9j nx55krzC1+i4xY4EzOS5gxpBRBZICxa5ZvJrLvMrvudzeQywpFqfN0w7VZOzSjSs PzIaO/rmznNfyJXRsY37S7rdgnhwUgcNTd499Vn3ixdjqPsMX9sLjRlzi8REAna5 KvZQx31CXYyzBQrQBBEnZsDLDrgdt3cpCu4slZeoQr+FTWDFccQtPovs6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYuUPXYPcH3CeWYT9oZUor/srlhMB8GA1UdIwQY MBaAFNOEpBmX7upNBfzHzUCxIROlu2noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUt ZjZkMGZmNDU4NjQ4LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUtZjZkMGZmNDU4NjQ4 LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFVltId4 /8YJbK9kE7a09aCnXpHYSUvs/UP62X8/LrgjcHk5OcxSU/plPrguzWErEDmepHVN ksJLr4rhZt44N862sXyzxToaakwuuyO/tXMG7I/iNcQWo2nzGkkUAII6RIwLESoE 9Y/1Xz+gMM/3QtRbPoaWYvo8uJfWBPBiVVXmayHrTXq5SmqpW5Ugq+PHgqOCBLO3 Uai4EcuB10P74Dwn1CVuNxF6SJQSipe72b9fZqLJCRV73p4iqqO4RjVUJHIWYU2C VhmGGB4iqzRK8UGduZR1cvReF1WmTHMknbIiGUuEwJoJMrVuYzntfJRcv7rV6qtR v22vt7PPwJpMog== -----END CERTIFICATE-----Generated at Tue Dec 23 04:07:52 2025 by rpki-client