This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft File: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft (raw, json) Hash identifier: MxExHWckqOxOPtTk8p7Av2Gl+tuFJljuNyzqrPYl/Ek= Subject key identifier: 23:78:3A:21:F1:04:AC:F3:29:26:87:39:56:FD:2F:BF:76:A9:72:8E Authority key identifier: E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1 Certificate issuer: /CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1 Certificate serial: 019B5976E37DB6B123A187D341DF502B580A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft Manifest number: 11B1 Signing time: Fri 26 Dec 2025 07:02:02 +0000 Manifest this update: Fri 26 Dec 2025 07:02:02 +0000 Manifest next update: Sat 27 Dec 2025 07:02:02 +0000 Files and hashes: 1: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl (hash: hmrgxjJPjuFalWuJ5OmCymwistSrTr05upYMrqtVKf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:e3:7d:b6:b1:23:a1:87:d3:41:df:50:2b:58:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1 Validity Not Before: Dec 26 07:02:02 2025 GMT Not After : Dec 27 07:02:02 2025 GMT Subject: CN=23783a21f104acf32926873956fd2fbf76a9728e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:be:78:8a:8c:96:f7:65:3e:27:25:ca:b9: 05:b6:7e:ce:62:97:ba:46:43:03:29:24:85:5c:84: c8:5f:d8:9e:d2:a1:0f:93:b9:5d:e9:76:d1:f7:c4: 68:14:ab:55:18:1c:56:12:df:2e:1a:d1:cb:a9:aa: 35:b8:76:bb:44:05:3e:d1:8f:d1:a2:03:f5:a0:99: b2:a8:ec:1d:d2:e0:eb:ba:c4:36:06:7e:47:10:14: 54:d9:dd:fb:7d:07:49:3a:4f:96:e0:5f:9a:99:47: b5:de:dd:bb:07:d1:37:4a:a8:8b:23:fe:d5:95:b1: 87:f7:f7:d0:39:76:f0:a3:80:f9:fd:9a:e2:bb:c7: 7c:7c:4c:06:5e:c0:d7:4c:f3:07:a3:df:b3:5a:5f: 52:30:72:a1:4d:c1:4e:7e:7d:b8:fe:f3:e3:c4:67: 88:d5:7d:3c:d5:aa:40:33:cf:2c:aa:0f:9a:7b:ea: 25:74:39:fc:49:c6:a6:3e:8d:61:a4:5b:db:54:1b: 6e:ef:a9:5f:a9:38:35:65:00:ea:ef:81:c9:4e:16: 14:03:e7:48:86:04:e9:88:b7:8c:54:d5:a3:59:b8: 44:71:1a:6f:b7:fe:82:35:81:28:cd:f3:8d:31:48: 13:53:a4:7a:c7:73:41:9c:e1:a5:e7:fb:74:13:7f: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:78:3A:21:F1:04:AC:F3:29:26:87:39:56:FD:2F:BF:76:A9:72:8E X509v3 Authority Key Identifier: keyid:E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:69:bd:01:4b:5d:b3:61:4b:c4:c9:19:79:b4:91:a6:cd:dc: 84:20:28:75:58:d1:ef:ad:b4:ac:92:af:5f:de:18:ab:3e:88: 24:55:21:76:c1:f2:5f:56:81:4f:23:e3:5b:ab:d7:1b:d8:18: a4:76:98:0c:c6:5b:57:ae:13:cb:5b:36:52:9c:b9:5c:b2:2b: 00:6e:e5:02:b5:4f:b6:a5:dd:f8:59:75:65:2e:69:4a:98:cc: f6:36:53:0e:91:0a:92:69:ac:f4:f0:46:f6:ec:85:c6:62:40: 1c:cd:ff:fe:b6:a6:33:8b:ee:48:2d:1a:de:cd:89:04:28:51: d8:25:bc:13:06:dd:82:38:66:78:19:fe:6c:65:2c:59:5e:a6: bb:c0:7d:60:9d:12:a0:16:bf:9c:4a:21:d4:d5:7e:c7:71:13: 1e:5d:fe:04:23:3b:37:98:40:83:e4:71:53:1f:6b:ef:c0:9e: 90:2c:e1:1f:8c:bd:c0:6f:ea:5c:5e:57:35:9d:bd:ae:d8:a2: 3c:89:53:54:d7:42:ad:33:f2:9c:b1:46:a5:96:00:2f:27:64: 9d:42:ac:89:cf:67:58:dd:75:e8:8b:6c:24:7a:3d:c4:ed:17: d9:1b:f2:bc:a0:84:54:c4:9d:ed:d5:4c:68:a8:7e:21:9a:f0: 28:4f:e8:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduN9trEjoYfTQd9QK1gKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDRkZWU5MjU1YmNjOGNhNGUwZjVhYzI5ZDA5ODI2ZTAy M2EwZDEwHhcNMjUxMjI2MDcwMjAyWhcNMjUxMjI3MDcwMjAyWjAzMTEwLwYDVQQD EygyMzc4M2EyMWYxMDRhY2YzMjkyNjg3Mzk1NmZkMmZiZjc2YTk3MjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorW+eIqMlvdlPiclyrkFtn7OYpe6 RkMDKSSFXITIX9ie0qEPk7ld6XbR98RoFKtVGBxWEt8uGtHLqao1uHa7RAU+0Y/R ogP1oJmyqOwd0uDrusQ2Bn5HEBRU2d37fQdJOk+W4F+amUe13t27B9E3SqiLI/7V lbGH9/fQOXbwo4D5/Zriu8d8fEwGXsDXTPMHo9+zWl9SMHKhTcFOfn24/vPjxGeI 1X081apAM88sqg+ae+oldDn8ScamPo1hpFvbVBtu76lfqTg1ZQDq74HJThYUA+dI hgTpiLeMVNWjWbhEcRpvt/6CNYEozfONMUgTU6R6x3NBnOGl5/t0E3/jxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN4OiHxBKzzKSaHOVb9L792qXKOMB8GA1UdIwQY MBaAFOEE3uklW8yMpOD1rCnQmCbgI6DRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iNjljZTktNDU3MS00OTRlLThiYjIt NzYxYmI0NjA3N2Y3LzEvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iNjljZTktNDU3MS00OTRlLThiYjItNzYxYmI0NjA3N2Y3 LzEvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWm9AUtd s2FLxMkZebSRps3chCAodVjR7620rJKvX94Yqz6IJFUhdsHyX1aBTyPjW6vXG9gY pHaYDMZbV64Ty1s2Upy5XLIrAG7lArVPtqXd+Fl1ZS5pSpjM9jZTDpEKkmms9PBG 9uyFxmJAHM3//ramM4vuSC0a3s2JBChR2CW8EwbdgjhmeBn+bGUsWV6mu8B9YJ0S oBa/nEoh1NV+x3ETHl3+BCM7N5hAg+RxUx9r78CekCzhH4y9wG/qXF5XNZ29rtii PIlTVNdCrTPynLFGpZYALydknUKsic9nWN116ItsJHo9xO0X2RvyvKCEVMSd7dVM aKh+IZrwKE/osQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:24 2025 by rpki-client