This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json) Hash identifier: DRdUaASibLHzRHnJ1LXpvnGGmFx2tz/vYV1vu//VDk8= Subject key identifier: 08:3C:40:04:7F:8C:B7:FB:60:14:E2:27:3B:7A:5D:4E:6B:EA:C3:9C Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Certificate serial: 019B31C3EC4384FF02543B251D2E9007169B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft Manifest number: 13A6 Signing time: Thu 18 Dec 2025 14:01:22 +0000 Manifest this update: Thu 18 Dec 2025 14:01:22 +0000 Manifest next update: Fri 19 Dec 2025 14:01:22 +0000 Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: vQI9gQ35Hz9OQSZBK9ao+JHZHAPGkn96mz5zZDPTOgM=) 2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:ec:43:84:ff:02:54:3b:25:1d:2e:90:07:16:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Validity Not Before: Dec 18 14:01:22 2025 GMT Not After : Dec 19 14:01:22 2025 GMT Subject: CN=083c40047f8cb7fb6014e2273b7a5d4e6beac39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:9b:60:2f:e9:f2:21:1b:b5:47:b5:79:f5: 9e:a7:ac:cb:8b:63:37:71:39:f6:5a:0a:d8:74:32: b8:a4:d2:73:26:d8:40:42:fe:59:87:3a:fa:3a:33: 98:e1:37:fb:5d:d5:1f:5d:0c:33:45:f1:43:4d:c2: 72:d8:82:8d:57:e7:a4:39:a1:4d:2c:cc:4b:81:77: 7d:57:8b:96:1f:7e:5d:60:b9:f5:13:6d:a3:59:65: 06:50:16:a3:10:66:03:f2:80:65:a2:88:ee:64:91: 01:e2:01:6f:84:14:46:2c:09:7b:c7:64:57:58:33: d1:9e:60:ee:fb:3d:b5:d4:2c:9f:72:12:04:7f:47: 58:5d:2c:4f:61:d3:8c:20:19:9f:0b:de:8d:8c:3d: 3d:92:8f:7c:bc:15:3a:4e:55:03:12:1e:c1:16:25: 95:ec:7f:37:cb:aa:e9:89:ef:83:34:8d:20:98:02: 5f:e1:3d:74:d1:0c:ee:09:fe:54:2b:eb:10:dc:9a: 54:ea:6e:22:6d:c2:2e:4d:c6:81:20:c6:fb:43:fd: 2d:fb:af:79:a8:c1:c8:27:5c:c0:20:ba:c0:2d:3a: 70:0a:d0:13:82:4d:1c:09:d8:35:01:d3:fe:ad:5c: b6:27:af:ac:1c:ae:28:65:31:fd:ab:ca:74:22:4d: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3C:40:04:7F:8C:B7:FB:60:14:E2:27:3B:7A:5D:4E:6B:EA:C3:9C X509v3 Authority Key Identifier: keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9e:a0:7e:1d:11:66:cf:1a:8e:2a:8e:9e:f7:15:12:7d:9a: 2f:d2:32:bf:b1:cf:d7:49:31:08:2a:f0:29:65:e4:d8:ab:79: 16:5c:88:a5:a0:3a:21:51:fb:10:f4:fd:7c:ff:3b:d6:c5:79: 50:9d:c1:79:07:9c:5c:e0:49:31:eb:62:f1:16:ef:e1:e4:cd: eb:fe:96:1e:c7:a4:ce:35:61:87:f2:55:06:cd:0a:86:68:9c: d0:07:5a:c2:ae:da:21:2b:18:5f:50:fa:b9:5c:7c:8f:50:8a: b7:20:d6:d9:5e:8d:00:30:3b:c9:9f:9e:d2:1b:55:e9:1c:8e: 0c:17:fb:2c:6a:ff:38:0f:5d:50:a4:c7:d5:f1:1e:dc:5e:99: 03:0c:5d:a0:3b:02:6f:00:57:e6:bc:ac:81:68:a2:24:44:e8: 1a:04:99:ec:a6:38:ae:76:52:03:fe:b4:f4:e9:a6:1a:b2:59: da:d7:dd:bf:55:02:50:39:0c:8c:fa:22:27:ba:0c:cc:4a:9f: 39:ea:be:79:24:ca:fc:98:a6:84:34:c5:d3:e4:ae:13:55:3e: 15:60:70:7b:03:e3:6a:1c:11:0f:cf:c7:bb:e4:1d:d2:16:bf: f0:d7:fa:c7:7b:52:5d:24:c4:5a:fc:f0:80:b9:82:46:ef:b7: 0a:e9:db:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw+xDhP8CVDslHS6QBxabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw NWIyZjAwHhcNMjUxMjE4MTQwMTIyWhcNMjUxMjE5MTQwMTIyWjAzMTEwLwYDVQQD EygwODNjNDAwNDdmOGNiN2ZiNjAxNGUyMjczYjdhNWQ0ZTZiZWFjMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbabYC/p8iEbtUe1efWep6zLi2M3 cTn2WgrYdDK4pNJzJthAQv5Zhzr6OjOY4Tf7XdUfXQwzRfFDTcJy2IKNV+ekOaFN LMxLgXd9V4uWH35dYLn1E22jWWUGUBajEGYD8oBloojuZJEB4gFvhBRGLAl7x2RX WDPRnmDu+z211CyfchIEf0dYXSxPYdOMIBmfC96NjD09ko98vBU6TlUDEh7BFiWV 7H83y6rpie+DNI0gmAJf4T100QzuCf5UK+sQ3JpU6m4ibcIuTcaBIMb7Q/0t+695 qMHIJ1zAILrALTpwCtATgk0cCdg1AdP+rVy2J6+sHK4oZTH9q8p0Ik2C6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg8QAR/jLf7YBTiJzt6XU5r6sOcMB8GA1UdIwQY MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp6gfh0R Zs8ajiqOnvcVEn2aL9Iyv7HP10kxCCrwKWXk2Kt5FlyIpaA6IVH7EPT9fP871sV5 UJ3BeQecXOBJMeti8Rbv4eTN6/6WHsekzjVhh/JVBs0Khmic0Adawq7aISsYX1D6 uVx8j1CKtyDW2V6NADA7yZ+e0htV6RyODBf7LGr/OA9dUKTH1fEe3F6ZAwxdoDsC bwBX5rysgWiiJEToGgSZ7KY4rnZSA/609OmmGrJZ2tfdv1UCUDkMjPoiJ7oMzEqf Oeq+eSTK/JimhDTF0+SuE1U+FWBwewPjahwRD8/Hu+Qd0ha/8Nf6x3tSXSTEWvzw gLmCRu+3CunbUg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:29:44 2025 by rpki-client