This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json) Hash identifier: 8+nrxg/dcFuxImIcLU5zDDP1wKYNSJIOPb1GmvWaTJE= Subject key identifier: 73:DE:C0:01:7D:63:46:E6:28:5A:D7:1F:53:3A:A2:3C:86:3F:6B:DF Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb Certificate serial: 019B1F85F8DC3652FB2172C650BA4E628753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft Manifest number: 1775 Signing time: Mon 15 Dec 2025 01:00:32 +0000 Manifest this update: Mon 15 Dec 2025 01:00:32 +0000 Manifest next update: Tue 16 Dec 2025 01:00:32 +0000 Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: yyaxUaIHYQFhRQqKskdEsStd074XfhsOysxoDXShDLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:85:f8:dc:36:52:fb:21:72:c6:50:ba:4e:62:87:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb Validity Not Before: Dec 15 01:00:32 2025 GMT Not After : Dec 16 01:00:32 2025 GMT Subject: CN=73dec0017d6346e6285ad71f533aa23c863f6bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:d6:94:90:92:0c:ba:8f:c1:b4:17:67:24: 6f:89:1a:bc:64:10:68:69:6f:29:a4:16:36:a4:db: 29:9c:e8:8b:5e:9e:a5:76:8e:58:ff:14:92:66:93: e5:0d:cd:a5:70:dc:8b:83:90:2a:ac:2a:82:10:6f: 13:ef:9e:c1:ce:a7:0e:b2:a7:3f:f2:9b:30:3b:08: 34:1a:73:4f:e8:4d:68:ba:89:17:91:62:e7:05:8d: c6:1a:97:77:b9:e5:f9:f5:20:74:c3:6c:2b:1b:7e: 69:7f:fe:2e:4b:bb:7e:8c:b7:49:c2:69:b3:a8:a9: 03:50:78:d2:6c:4b:52:24:63:2c:57:72:ca:45:55: 54:b7:fc:cf:03:a2:d3:df:31:27:ef:7d:45:ba:26: 05:6b:a9:5e:a4:fc:b4:5a:2e:b3:5b:5d:23:4e:de: 97:a5:a9:0e:ea:58:5c:34:5c:1d:ab:a3:4d:ac:f7: 2d:53:a0:13:d9:bb:cf:29:64:8b:66:d9:8c:b7:13: f5:13:9a:e4:2a:35:a9:89:b0:8e:2a:55:6f:14:0e: fb:cb:5f:6b:ab:fd:57:26:3f:48:1f:f1:22:e0:d7: f4:81:2f:45:29:77:0a:4f:f1:6d:6e:a3:25:a3:22: 44:0d:85:c4:55:c5:2d:76:78:ae:62:8b:12:1b:df: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DE:C0:01:7D:63:46:E6:28:5A:D7:1F:53:3A:A2:3C:86:3F:6B:DF X509v3 Authority Key Identifier: keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e1:fc:23:1e:e5:e5:fd:3a:a6:8b:8f:71:2a:34:77:20:21: 8f:e4:e9:fc:4d:60:49:b7:a6:1f:4b:99:66:bb:46:80:a3:9e: a0:1d:00:f0:d1:f1:ab:b5:0d:2f:46:c1:98:e2:80:3a:51:c6: ee:d7:ab:e7:01:1a:05:0c:25:5d:c5:35:1f:aa:87:8e:f5:c2: 02:dd:92:73:be:7e:03:d7:eb:cb:02:89:f4:15:ee:a3:4b:20: bf:0a:40:9f:20:92:b6:76:0d:c6:ca:d8:5f:c6:e3:1f:fa:49: f0:8d:53:1e:22:c6:5f:f7:3c:d3:45:17:05:ca:0d:3d:06:a1: e6:ec:05:1d:74:e3:7e:68:3a:45:dd:d1:eb:c5:5f:b2:79:c7: 1e:99:b8:c2:72:72:5d:95:f7:11:54:2b:9f:4e:3a:3a:bc:82: 7e:31:c5:d3:8c:bd:e1:58:4c:12:09:ae:b8:7d:ee:5e:d4:5d: bd:cd:09:60:94:dd:34:95:aa:85:25:da:40:a2:07:fe:5f:47: 40:10:fd:76:78:4d:85:4a:fb:77:d5:a4:b8:d6:0b:d3:9c:61: 94:9c:a8:7a:d3:1c:ea:f6:14:37:ae:5f:4d:9e:a9:03:2c:07: 34:f1:8d:2e:11:85:8d:63:1a:76:5b:5a:10:8a:4b:f3:19:03: a6:1a:20:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhfjcNlL7IXLGULpOYodTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzcyN2EyOTQ1MWJlNGRkOTkyMmI2MGQxYzU5NmU4MDZh OTk1ZmIwHhcNMjUxMjE1MDEwMDMyWhcNMjUxMjE2MDEwMDMyWjAzMTEwLwYDVQQD Eyg3M2RlYzAwMTdkNjM0NmU2Mjg1YWQ3MWY1MzNhYTIzYzg2M2Y2YmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSrWlJCSDLqPwbQXZyRviRq8ZBBo aW8ppBY2pNspnOiLXp6ldo5Y/xSSZpPlDc2lcNyLg5AqrCqCEG8T757BzqcOsqc/ 8pswOwg0GnNP6E1ouokXkWLnBY3GGpd3ueX59SB0w2wrG35pf/4uS7t+jLdJwmmz qKkDUHjSbEtSJGMsV3LKRVVUt/zPA6LT3zEn731FuiYFa6lepPy0Wi6zW10jTt6X pakO6lhcNFwdq6NNrPctU6AT2bvPKWSLZtmMtxP1E5rkKjWpibCOKlVvFA77y19r q/1XJj9IH/Ei4Nf0gS9FKXcKT/FtbqMloyJEDYXEVcUtdniuYosSG99QuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPewAF9Y0bmKFrXH1M6ojyGP2vfMB8GA1UdIwQY MBaAFOE3J6KUUb5N2ZIrYNHFlugGqZX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmIt YWM0YzhmMTk4NzZkLzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmItYWM0YzhmMTk4NzZk LzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+H8Ix7l 5f06pouPcSo0dyAhj+Tp/E1gSbemH0uZZrtGgKOeoB0A8NHxq7UNL0bBmOKAOlHG 7ter5wEaBQwlXcU1H6qHjvXCAt2Sc75+A9frywKJ9BXuo0sgvwpAnyCStnYNxsrY X8bjH/pJ8I1THiLGX/c800UXBcoNPQah5uwFHXTjfmg6Rd3R68VfsnnHHpm4wnJy XZX3EVQrn046OryCfjHF04y94VhMEgmuuH3uXtRdvc0JYJTdNJWqhSXaQKIH/l9H QBD9dnhNhUr7d9WkuNYL05xhlJyoetMc6vYUN65fTZ6pAywHNPGNLhGFjWMadlta EIpL8xkDphogEg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:36 2025 by rpki-client