This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json) Hash identifier: C7zoIg3S0HYw4H9Yh3uPNNiHztK2jm9unB8By1q5H6U= Subject key identifier: 88:1C:77:A4:D7:39:5E:5E:B2:8D:CC:9B:27:DD:CD:06:4C:D6:C2:36 Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08 Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708 Certificate serial: 019B5A1AFB783C190EB39E6EBE011548EF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft Manifest number: 0651 Signing time: Fri 26 Dec 2025 10:01:16 +0000 Manifest this update: Fri 26 Dec 2025 10:01:16 +0000 Manifest next update: Sat 27 Dec 2025 10:01:16 +0000 Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: jbPJu2xfRJ7cKZw1qtxROPb15ALYkJGWR+zOP9/jmYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:fb:78:3c:19:0e:b3:9e:6e:be:01:15:48:ef:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708 Validity Not Before: Dec 26 10:01:16 2025 GMT Not After : Dec 27 10:01:16 2025 GMT Subject: CN=881c77a4d7395e5eb28dcc9b27ddcd064cd6c236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:2c:65:67:7e:83:80:40:11:45:a3:44:ef: 88:7a:a7:9a:4c:ee:98:a1:c9:42:14:d0:2a:15:1e: 46:6e:8c:d3:60:28:47:00:eb:e7:d8:71:07:38:8f: 14:cd:2e:1d:18:30:d4:82:10:84:10:4b:2e:c1:c5: f1:6a:27:3c:16:14:3f:98:6f:ec:2c:d4:fe:11:75: 0c:42:77:f1:57:4d:a5:b7:2c:da:cc:12:f7:08:27: 21:46:74:f3:6f:49:5d:4e:54:54:e7:e5:14:d9:13: 22:fd:64:d8:37:9d:8f:38:85:b0:c1:4f:1d:09:32: 9e:6c:c4:2d:4f:f8:48:4e:25:7a:36:61:3a:9f:1c: 68:b1:32:4e:8f:ec:8b:40:f0:b2:5a:0d:55:b5:a2: 4d:3b:4f:41:e0:f8:f5:e1:2a:66:96:76:a1:89:e2: 2f:9f:69:7b:4e:21:86:a9:e8:61:85:b0:f6:94:19: 5f:3f:0c:3b:99:64:06:d3:8d:36:6f:22:a6:79:82: 97:f0:91:f1:43:98:cd:8f:4b:cd:c7:0d:74:c5:e5: 56:37:e0:29:07:8d:fd:2b:c5:51:11:ba:4a:84:61: 3f:ff:07:e0:67:41:ec:ff:36:ee:45:75:d2:f8:5a: be:4c:fe:14:08:88:35:2a:b4:59:61:09:c0:05:07: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1C:77:A4:D7:39:5E:5E:B2:8D:CC:9B:27:DD:CD:06:4C:D6:C2:36 X509v3 Authority Key Identifier: keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2a:47:bf:71:5e:b1:8d:f1:2a:b7:63:95:d8:39:4b:68:e4: b9:5e:47:11:29:5c:f7:1d:0c:ab:7b:60:95:e0:8d:d6:82:cb: 6d:50:16:e3:4a:41:a1:b2:e8:66:9d:95:d8:55:c1:8f:71:75: 6e:27:8d:f0:de:a5:db:8b:27:ec:83:33:58:1a:4d:fd:dd:55: 66:ed:5e:16:47:aa:75:66:35:3d:0e:da:2e:d5:42:9d:8c:14: 29:83:c9:25:69:cb:f1:e2:11:2f:6f:2f:a3:5b:99:a8:4e:35: 23:f2:60:32:43:d0:ce:5d:5e:be:e7:0e:ad:74:86:b8:ec:8e: e9:aa:fa:98:a7:4d:50:36:f1:8d:40:7a:73:8f:4b:69:a4:68: a5:ca:08:43:39:8c:6d:47:43:86:e2:ac:3e:4b:07:ca:71:e7: f1:25:0a:cd:e8:6f:51:4f:d2:dd:0e:7d:b5:8b:f3:54:4d:77: 80:99:65:88:34:f0:7a:5e:af:c6:d1:a9:bf:6f:9e:2d:68:96: af:92:be:53:89:38:b1:d5:eb:bb:67:f7:49:75:92:20:ca:db: bc:a5:4a:22:3b:a7:46:be:d7:b1:04:de:d4:2b:71:1b:92:75: f0:9e:31:0c:5b:e9:93:b8:fc:07:08:ba:73:cc:cc:11:7c:5a: af:f8:c0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGvt4PBkOs55uvgEVSO91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjQzZjNlNjE5OTBmZDNlNTc2N2RlYmU5OGU1MWNjMTlj YWM3MDgwHhcNMjUxMjI2MTAwMTE2WhcNMjUxMjI3MTAwMTE2WjAzMTEwLwYDVQQD Eyg4ODFjNzdhNGQ3Mzk1ZTVlYjI4ZGNjOWIyN2RkY2QwNjRjZDZjMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lQsZWd+g4BAEUWjRO+IeqeaTO6Y oclCFNAqFR5GbozTYChHAOvn2HEHOI8UzS4dGDDUghCEEEsuwcXxaic8FhQ/mG/s LNT+EXUMQnfxV02ltyzazBL3CCchRnTzb0ldTlRU5+UU2RMi/WTYN52POIWwwU8d CTKebMQtT/hITiV6NmE6nxxosTJOj+yLQPCyWg1VtaJNO09B4Pj14SpmlnahieIv n2l7TiGGqehhhbD2lBlfPww7mWQG0402byKmeYKX8JHxQ5jNj0vNxw10xeVWN+Ap B439K8VREbpKhGE//wfgZ0Hs/zbuRXXS+Fq+TP4UCIg1KrRZYQnABQf8gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgcd6TXOV5eso3MmyfdzQZM1sI2MB8GA1UdIwQY MBaAFOH0Pz5hmQ/T5XZ96+mOUcwZyscIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNTM4M2ItMTBlNS00M2U5LWIzMjAt MzIzNDE2MGRiY2Q0LzEvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kNTM4M2ItMTBlNS00M2U5LWIzMjAtMzIzNDE2MGRiY2Q0 LzEvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSpHv3Fe sY3xKrdjldg5S2jkuV5HESlc9x0Mq3tgleCN1oLLbVAW40pBobLoZp2V2FXBj3F1 bieN8N6l24sn7IMzWBpN/d1VZu1eFkeqdWY1PQ7aLtVCnYwUKYPJJWnL8eIRL28v o1uZqE41I/JgMkPQzl1evucOrXSGuOyO6ar6mKdNUDbxjUB6c49LaaRopcoIQzmM bUdDhuKsPksHynHn8SUKzehvUU/S3Q59tYvzVE13gJlliDTwel6vxtGpv2+eLWiW r5K+U4k4sdXru2f3SXWSIMrbvKVKIjunRr7XsQTe1CtxG5J18J4xDFvpk7j8Bwi6 c8zMEXxar/jAVg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:34 2025 by rpki-client