This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json) Hash identifier: +v3bVsxoC5JNJi8Z79yzHK6GyxGQnPrVhHYi+fKjO8c= Subject key identifier: 0C:06:BE:32:F6:D8:EB:AE:92:34:05:CC:B4:F0:4D:B4:1D:A5:4F:48 Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Certificate serial: 019B093538502DE61E86E54F6B6CC45BB692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft Manifest number: 14BF Signing time: Wed 10 Dec 2025 17:00:41 +0000 Manifest this update: Wed 10 Dec 2025 17:00:41 +0000 Manifest next update: Thu 11 Dec 2025 17:00:41 +0000 Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: IqeuLsjXMyN+EJqk9tJpzq7MSwwrhs1KLOYW3ihrKKU=) 2: HTMh6RJF_q53kTnEGeTtdGIx040.roa (hash: nzX5ZOpXvf0qMt8FdSECR2favMzFA7ed3+MWJmI8hm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:35:38:50:2d:e6:1e:86:e5:4f:6b:6c:c4:5b:b6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Validity Not Before: Dec 10 17:00:41 2025 GMT Not After : Dec 11 17:00:41 2025 GMT Subject: CN=0c06be32f6d8ebae923405ccb4f04db41da54f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:0a:a7:2d:10:ae:f8:21:09:11:27:c2:13: 3d:0a:90:5d:fb:f5:57:91:ba:66:8c:f3:c5:a0:29: ee:4b:40:07:76:ba:f6:13:04:04:08:58:14:5d:47: 79:ce:44:cd:31:2d:ad:b4:01:e6:18:94:3b:a4:bd: b2:08:1f:3b:34:d6:f4:35:14:b4:58:42:c6:46:45: 31:71:67:16:3c:7e:af:27:5d:1c:59:a5:06:91:ba: f8:8b:24:00:fa:ee:a6:c4:87:6b:4c:b9:80:9f:19: 6c:e9:92:d8:e6:17:67:d1:3c:66:95:d1:17:35:b3: b5:68:ab:4d:2f:40:c9:90:b6:17:eb:55:ad:cb:a4: fd:f0:0b:38:95:e0:94:68:f2:06:94:20:93:d6:dc: 87:a4:c8:92:ba:1b:ef:7c:f3:9a:aa:4b:f0:77:18: 5b:b3:0b:f9:e8:92:1a:d5:58:62:75:18:fe:66:1c: e7:0f:a2:f7:c6:d7:fd:8c:ec:82:46:25:5f:aa:9e: 88:00:ae:37:5f:7d:e9:96:b9:a9:01:c9:88:91:93: 0c:a8:7c:a3:45:54:04:20:41:12:8e:4a:11:d1:c8: ce:30:1d:41:93:a8:35:37:45:56:f9:dd:eb:55:e7: a7:e3:95:c3:e1:31:c1:bd:fa:fc:25:23:cb:56:9e: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:06:BE:32:F6:D8:EB:AE:92:34:05:CC:B4:F0:4D:B4:1D:A5:4F:48 X509v3 Authority Key Identifier: keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d6:3e:61:25:61:9c:b1:94:4e:c1:46:52:65:cd:e3:10:11: 73:a8:b7:0b:3f:26:ea:09:1d:52:de:de:f7:e9:b0:d9:9e:1b: ab:58:b3:ef:ed:8f:29:1c:da:63:70:c6:6d:a7:06:51:4c:b7: 1b:eb:86:00:e8:0c:5b:96:19:9b:78:0a:f5:c4:7f:fa:85:99: a0:47:24:ac:27:4d:60:c8:5d:e2:4f:88:29:fc:ab:04:0f:cb: ea:57:94:a7:68:a6:ba:de:00:ce:ac:68:e0:eb:45:4d:51:f7: 49:a2:a2:b7:8f:0f:36:4c:55:ba:46:dc:ed:14:28:18:4b:3d: fc:56:c4:2f:10:72:36:06:cb:3e:e0:4c:3b:1d:32:55:2e:f5: 58:1a:c9:fd:a4:a0:4a:c1:8d:be:ea:af:04:e6:c4:4a:a3:52: cc:f5:5f:1b:14:b7:e6:22:c2:cb:4e:16:43:cc:4e:37:0b:82: 62:23:8a:7c:86:da:49:76:20:cc:03:95:cc:03:03:5b:54:fd: da:1a:5c:80:80:6a:ab:a7:14:ae:10:e0:62:38:8f:41:fb:fe: aa:97:19:b0:f6:11:3e:6d:95:b9:ac:f5:78:97:5e:96:e1:a6: b5:b0:e5:18:d8:25:47:7f:ac:ac:d3:59:ce:b0:35:3c:d0:1f: ce:aa:a8:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJNThQLeYehuVPa2zEW7aSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5 YmMyMTMwHhcNMjUxMjEwMTcwMDQxWhcNMjUxMjExMTcwMDQxWjAzMTEwLwYDVQQD EygwYzA2YmUzMmY2ZDhlYmFlOTIzNDA1Y2NiNGYwNGRiNDFkYTU0ZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWwKpy0QrvghCREnwhM9CpBd+/VX kbpmjPPFoCnuS0AHdrr2EwQECFgUXUd5zkTNMS2ttAHmGJQ7pL2yCB87NNb0NRS0 WELGRkUxcWcWPH6vJ10cWaUGkbr4iyQA+u6mxIdrTLmAnxls6ZLY5hdn0TxmldEX NbO1aKtNL0DJkLYX61Wty6T98As4leCUaPIGlCCT1tyHpMiSuhvvfPOaqkvwdxhb swv56JIa1VhidRj+ZhznD6L3xtf9jOyCRiVfqp6IAK43X33plrmpAcmIkZMMqHyj RVQEIEESjkoR0cjOMB1Bk6g1N0VW+d3rVeen45XD4THBvfr8JSPLVp60mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwGvjL22OuukjQFzLTwTbQdpU9IMB8GA1UdIwQY MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt NjJiYTNhNjg4NGM4LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4 LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdY+YSVh nLGUTsFGUmXN4xARc6i3Cz8m6gkdUt7e9+mw2Z4bq1iz7+2PKRzaY3DGbacGUUy3 G+uGAOgMW5YZm3gK9cR/+oWZoEckrCdNYMhd4k+IKfyrBA/L6leUp2imut4Azqxo 4OtFTVH3SaKit48PNkxVukbc7RQoGEs9/FbELxByNgbLPuBMOx0yVS71WBrJ/aSg SsGNvuqvBObESqNSzPVfGxS35iLCy04WQ8xONwuCYiOKfIbaSXYgzAOVzAMDW1T9 2hpcgIBqq6cUrhDgYjiPQfv+qpcZsPYRPm2Vuaz1eJdeluGmtbDlGNglR3+srNNZ zrA1PNAfzqqoOA== -----END CERTIFICATE-----Generated at Thu Dec 11 02:27:21 2025 by rpki-client