This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json) Hash identifier: iNYwSYhbpyrwpKfSOu4bvafAPCa7XvNUmcZ9Hozix6Q= Subject key identifier: 82:09:14:D5:4B:E8:5B:C7:D0:1C:BE:A7:82:4D:66:5E:83:EB:32:16 Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Certificate serial: 019B27412D5497AA83240A70D86D20F17386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft Manifest number: 098F Signing time: Tue 16 Dec 2025 13:02:21 +0000 Manifest this update: Tue 16 Dec 2025 13:02:21 +0000 Manifest next update: Wed 17 Dec 2025 13:02:21 +0000 Files and hashes: 1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: AhDIHu2K+GUWLPryE5ux3SPCyz6erU8ZxGKCKbEe1ko=) 2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:2d:54:97:aa:83:24:0a:70:d8:6d:20:f1:73:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Validity Not Before: Dec 16 13:02:21 2025 GMT Not After : Dec 17 13:02:21 2025 GMT Subject: CN=820914d54be85bc7d01cbea7824d665e83eb3216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:29:4b:46:b6:fc:80:16:c2:1e:9d:55:cb:96: 82:df:e6:c8:33:4b:11:14:0c:a7:aa:83:69:4b:79: b2:5d:27:3a:e0:8e:98:5e:e5:56:e8:05:74:60:45: 09:3a:f9:4d:ff:56:43:d3:70:09:e1:02:8c:ac:27: 34:e7:31:59:5b:5d:1a:27:ca:2c:c1:de:5b:5e:7c: ae:8c:c7:7c:87:a8:bd:4a:58:b2:62:67:99:13:64: 41:18:04:f5:1c:78:17:f3:21:93:65:42:d5:d2:3e: ab:03:17:f0:d5:a7:98:a5:b8:d4:02:40:31:1b:db: cc:3f:b2:9e:ed:40:96:4e:28:04:16:14:cf:03:0f: b0:a0:55:36:be:b7:1f:2a:03:f2:dc:eb:11:80:33: eb:48:54:f2:bc:f4:b4:63:aa:92:48:5b:0b:df:2e: 3c:ce:95:5c:a4:8f:ff:1a:ad:96:04:4d:3f:ce:45: c9:3b:cb:8e:e0:90:2f:bf:db:80:f6:76:d0:c5:d5: 22:23:19:d5:76:dc:f0:e0:85:97:fb:78:a5:3a:bf: a3:6a:2e:08:4e:1a:32:51:f3:2b:38:83:76:e2:93: ae:c7:e6:81:8b:4c:73:c7:33:c8:9e:2b:46:54:51: eb:d8:d7:d8:38:1f:b6:5c:17:00:c6:9b:8f:b7:44: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:09:14:D5:4B:E8:5B:C7:D0:1C:BE:A7:82:4D:66:5E:83:EB:32:16 X509v3 Authority Key Identifier: keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9a:6d:fe:21:11:e4:25:0e:eb:7e:a5:ca:9c:f3:10:b0:d5: 12:78:72:5d:32:cc:1c:81:d7:04:0b:41:e8:fc:f8:67:ae:bf: db:ea:d5:ed:5a:0e:90:ac:dd:49:b6:e2:9b:b6:27:3b:d7:4d: 8f:8f:f7:6d:c7:db:f9:7f:45:5e:11:d4:2e:e4:8e:b2:12:67: 2a:a5:b6:54:91:02:cb:c8:fe:a8:28:4e:34:d9:e8:26:fe:b3: 77:42:3e:34:32:4f:12:36:1d:86:48:9d:b4:fe:45:e4:d0:3b: a7:b9:b2:52:80:a7:73:43:bd:19:cb:64:69:d2:cc:79:28:af: 32:97:d3:48:0c:cb:04:86:2c:56:6b:36:ca:fc:1c:76:3d:7f: de:c1:d4:bd:82:9d:da:11:af:7e:b0:b5:11:19:d1:0d:b1:ca: 0f:8d:24:36:8a:98:d7:69:8f:e2:d6:64:12:f7:9f:9c:b8:0a: 10:d6:58:f3:8a:b6:e9:ff:cc:dc:75:50:f8:e3:aa:73:9d:17: 19:47:9a:b6:0a:af:3c:29:08:56:95:ba:88:46:1b:9e:75:ff: 4d:7b:d1:d1:88:67:49:2d:60:43:28:8c:69:18:16:7e:43:44: bd:f9:89:e0:b4:b6:1b:0b:9e:0e:1d:c2:48:fe:2a:c5:4d:6b: 43:78:f1:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQS1Ul6qDJApw2G0g8XOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjJmNTQ1ZGRiMjM0ZTM4M2QzNmI4YThkNmI1NmEzOGRk NzJmODkwHhcNMjUxMjE2MTMwMjIxWhcNMjUxMjE3MTMwMjIxWjAzMTEwLwYDVQQD Eyg4MjA5MTRkNTRiZTg1YmM3ZDAxY2JlYTc4MjRkNjY1ZTgzZWIzMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ylLRrb8gBbCHp1Vy5aC3+bIM0sR FAynqoNpS3myXSc64I6YXuVW6AV0YEUJOvlN/1ZD03AJ4QKMrCc05zFZW10aJ8os wd5bXnyujMd8h6i9SliyYmeZE2RBGAT1HHgX8yGTZULV0j6rAxfw1aeYpbjUAkAx G9vMP7Ke7UCWTigEFhTPAw+woFU2vrcfKgPy3OsRgDPrSFTyvPS0Y6qSSFsL3y48 zpVcpI//Gq2WBE0/zkXJO8uO4JAvv9uA9nbQxdUiIxnVdtzw4IWX+3ilOr+jai4I ThoyUfMrOIN24pOux+aBi0xzxzPInitGVFHr2NfYOB+2XBcAxpuPt0S8pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIJFNVL6FvH0By+p4JNZl6D6zIWMB8GA1UdIwQY MBaAFODy9UXdsjTjg9Nrio1rVqON1y+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYt OGNhNmMzM2QxNGJiLzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYtOGNhNmMzM2QxNGJi LzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZpt/iER 5CUO636lypzzELDVEnhyXTLMHIHXBAtB6Pz4Z66/2+rV7VoOkKzdSbbim7YnO9dN j4/3bcfb+X9FXhHULuSOshJnKqW2VJECy8j+qChONNnoJv6zd0I+NDJPEjYdhkid tP5F5NA7p7myUoCnc0O9GctkadLMeSivMpfTSAzLBIYsVms2yvwcdj1/3sHUvYKd 2hGvfrC1ERnRDbHKD40kNoqY12mP4tZkEvefnLgKENZY84q26f/M3HVQ+OOqc50X GUeatgqvPCkIVpW6iEYbnnX/TXvR0YhnSS1gQyiMaRgWfkNEvfmJ4LS2GwueDh3C SP4qxU1rQ3jx5Q== -----END CERTIFICATE-----Generated at Tue Dec 16 15:28:25 2025 by rpki-client