This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json) Hash identifier: aIR8QDKlTtvFiBdBfL+0SZpVs4DcDNt28iGIZ0dF1tQ= Subject key identifier: A7:F1:52:3D:19:49:5E:A6:96:A9:3D:24:14:E3:3E:A3:9F:7B:6E:3B Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc Certificate serial: 019B20D0280379A73CD83FFA1CACDFCB6985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft Manifest number: 16E0 Signing time: Mon 15 Dec 2025 07:01:11 +0000 Manifest this update: Mon 15 Dec 2025 07:01:11 +0000 Manifest next update: Tue 16 Dec 2025 07:01:11 +0000 Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: JQw9Wnjhewo8NUPcSF8Dg3BkvocDTtgc73w/fkot3WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:28:03:79:a7:3c:d8:3f:fa:1c:ac:df:cb:69:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc Validity Not Before: Dec 15 07:01:11 2025 GMT Not After : Dec 16 07:01:11 2025 GMT Subject: CN=a7f1523d19495ea696a93d2414e33ea39f7b6e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:f8:29:e7:1c:c6:35:3a:7d:6c:2b:14:34: 1a:1c:d7:96:53:f3:b1:e2:86:38:08:16:7f:48:ad: bf:ed:20:e7:f9:f5:03:23:ec:f1:f3:ca:24:44:7d: 76:a9:e3:53:ed:20:31:cc:2c:3b:d6:05:51:67:b5: cc:9b:35:eb:50:f2:93:6e:27:d2:8a:33:20:d3:88: d5:81:a3:9e:c2:2f:7e:d9:62:66:60:46:1e:7e:2e: db:12:5d:66:e1:d8:22:cf:7b:55:81:ce:ba:a6:8d: ee:8d:5d:37:30:9c:ff:f3:4f:c5:3e:e2:b4:db:91: 24:49:4f:e6:0c:b8:60:b4:38:43:d2:f4:21:f3:35: b9:62:2c:84:3b:c3:72:45:fd:9f:b0:ad:1b:c3:bf: 8b:92:d9:91:3d:28:99:a6:31:6c:d3:ff:5f:66:66: b8:e8:99:3e:1b:a3:10:0c:f5:8e:68:fe:f1:7d:0d: ca:0c:80:95:92:8a:24:f0:1d:1d:21:31:14:d7:91: d5:d5:f8:57:d4:80:ef:45:39:16:0e:e3:92:8f:49: f4:29:b6:12:73:a2:aa:f7:ed:34:7d:0c:d6:f6:b6: 2d:cb:c6:88:e2:b8:8b:c9:fc:57:42:30:8a:ac:96: 86:43:bc:35:f5:9c:36:30:be:67:94:d8:9d:19:91: 8d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F1:52:3D:19:49:5E:A6:96:A9:3D:24:14:E3:3E:A3:9F:7B:6E:3B X509v3 Authority Key Identifier: keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:cb:77:32:c3:24:6f:71:90:29:ed:4d:3e:ab:d0:b9:6f:e4: 05:fb:9f:8c:6e:f0:66:46:c5:97:98:06:7d:57:2b:00:4c:71: 8a:3f:f5:5d:b1:f3:50:4e:8e:2c:56:61:73:bf:18:ae:f7:30: 36:21:24:df:5f:34:20:9d:3c:59:bf:e1:d2:3e:6d:1e:db:09: 6d:26:16:f7:bf:0d:d5:ea:83:ac:4b:75:a7:71:8c:75:98:79: 8f:ab:9d:c7:80:e6:fe:aa:c6:7d:49:b9:44:4e:e4:be:b8:44: ae:1c:39:43:e5:63:a6:6a:59:15:19:71:b8:ed:f7:d6:03:ab: 13:bd:27:42:e6:ce:7a:bc:4b:50:1c:2d:b3:63:bf:e7:db:db: 7e:cd:8f:56:88:0a:7c:6e:ae:40:dc:68:dd:95:e1:f4:a3:c0: 51:33:93:68:8a:de:a7:68:17:82:aa:55:49:d9:76:60:bd:0c: e5:2f:66:ef:a9:b9:a7:95:50:21:d0:29:1f:4d:c3:8d:75:1b: bb:75:00:69:04:41:d4:05:b9:39:dc:cd:dd:37:31:68:63:91: e9:b8:f4:cf:ff:58:d8:c7:e5:27:0b:74:66:3e:76:8d:5b:ce: c7:9f:e5:41:b0:ff:1a:a3:d7:77:0b:35:ed:3d:10:d4:26:db: 13:a1:cb:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0CgDeac82D/6HKzfy2mFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj Y2VkZmMwHhcNMjUxMjE1MDcwMTExWhcNMjUxMjE2MDcwMTExWjAzMTEwLwYDVQQD EyhhN2YxNTIzZDE5NDk1ZWE2OTZhOTNkMjQxNGUzM2VhMzlmN2I2ZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ev4KeccxjU6fWwrFDQaHNeWU/Ox 4oY4CBZ/SK2/7SDn+fUDI+zx88okRH12qeNT7SAxzCw71gVRZ7XMmzXrUPKTbifS ijMg04jVgaOewi9+2WJmYEYefi7bEl1m4dgiz3tVgc66po3ujV03MJz/80/FPuK0 25EkSU/mDLhgtDhD0vQh8zW5YiyEO8NyRf2fsK0bw7+LktmRPSiZpjFs0/9fZma4 6Jk+G6MQDPWOaP7xfQ3KDICVkook8B0dITEU15HV1fhX1IDvRTkWDuOSj0n0KbYS c6Kq9+00fQzW9rYty8aI4riLyfxXQjCKrJaGQ7w19Zw2ML5nlNidGZGNkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfxUj0ZSV6mlqk9JBTjPqOfe247MB8GA1UdIwQY MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5 LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKct3MsMk b3GQKe1NPqvQuW/kBfufjG7wZkbFl5gGfVcrAExxij/1XbHzUE6OLFZhc78Yrvcw NiEk3180IJ08Wb/h0j5tHtsJbSYW978N1eqDrEt1p3GMdZh5j6udx4Dm/qrGfUm5 RE7kvrhErhw5Q+VjpmpZFRlxuO331gOrE70nQubOerxLUBwts2O/59vbfs2PVogK fG6uQNxo3ZXh9KPAUTOTaIrep2gXgqpVSdl2YL0M5S9m76m5p5VQIdApH03DjXUb u3UAaQRB1AW5OdzN3TcxaGOR6bj0z/9Y2MflJwt0Zj52jVvOx5/lQbD/GqPXdws1 7T0Q1CbbE6HLMQ== -----END CERTIFICATE-----Generated at Mon Dec 15 14:57:28 2025 by rpki-client