This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json) Hash identifier: MymLn8K4DQFQPvyLjMTlhCzEGRrDTMHQjbilYkq2Tzo= Subject key identifier: D1:F5:C0:21:5F:D0:1F:3A:A5:EB:56:F9:E9:37:09:1D:47:A4:28:0D Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Certificate serial: 019B0F00C025D3A0B4682C0EA52FD60A4791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft Manifest number: 1394 Signing time: Thu 11 Dec 2025 20:01:05 +0000 Manifest this update: Thu 11 Dec 2025 20:01:05 +0000 Manifest next update: Fri 12 Dec 2025 20:01:05 +0000 Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: 7fqe495+R6gYbuDVqwitFipzRrG0Ner0fKvKfPNedeU=) 2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c0:25:d3:a0:b4:68:2c:0e:a5:2f:d6:0a:47:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Validity Not Before: Dec 11 20:01:05 2025 GMT Not After : Dec 12 20:01:05 2025 GMT Subject: CN=d1f5c0215fd01f3aa5eb56f9e937091d47a4280d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:db:18:50:74:fc:90:47:88:79:6d:e0:86: 3a:05:81:d7:a6:63:3a:40:81:27:92:3c:4f:a5:26: 3a:fa:e2:60:10:3a:0f:a3:3e:a3:da:da:db:73:fe: 5d:6c:0a:c8:ac:19:25:4c:bc:8c:a6:d8:6f:1f:66: 78:24:48:ea:eb:56:f1:9e:6e:97:e6:f5:83:85:69: de:97:3c:4d:29:47:d7:93:3c:af:1f:86:9a:b8:d3: 77:17:09:6e:41:47:0a:03:22:be:80:be:39:b3:4f: cc:84:ed:6c:00:69:ba:ad:92:74:27:e7:e8:59:25: cb:a7:7d:19:d2:0b:07:0b:0c:9f:d1:db:81:5d:a9: 1a:db:a2:79:8a:d1:68:a3:ab:3d:6a:fb:3e:48:83: f7:3a:e6:f1:40:71:5b:99:72:f9:f9:ad:74:de:c1: d4:55:f7:36:52:88:d8:fa:74:ce:ca:ed:ee:e2:6b: 6d:da:9f:ec:a1:72:74:e5:6f:ed:e8:6a:5c:ee:4f: 2b:10:5f:11:d5:5d:f8:36:4a:da:b5:60:34:b1:b5: b7:c1:34:da:7f:73:5d:8a:a5:5a:a1:eb:1c:8f:64: d5:56:a2:5e:05:f0:a2:15:73:9b:d3:45:a6:8d:e8: bf:8b:30:16:ed:87:ca:97:8e:45:d0:5e:65:2f:e9: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F5:C0:21:5F:D0:1F:3A:A5:EB:56:F9:E9:37:09:1D:47:A4:28:0D X509v3 Authority Key Identifier: keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:18:fd:e3:0c:bc:a7:03:3c:eb:e2:9a:93:eb:7c:13:17:a2: 3f:63:0e:ba:b1:28:03:4d:6e:72:b2:79:11:fa:97:8a:48:be: 15:a3:2e:c9:19:cb:10:f7:ee:5a:e8:79:1c:56:4b:39:00:bb: 37:6d:29:e2:9e:0c:17:58:54:a1:35:41:3c:06:52:82:ef:fe: e6:45:eb:77:0c:33:bd:35:a4:9e:4c:68:2b:f3:0f:26:ee:e4: 14:3b:7c:cb:e1:88:46:a6:a7:ba:98:e2:23:6b:40:a1:02:37: 89:1b:da:3f:7d:fe:ec:d9:5d:51:53:d9:5a:74:41:8f:46:a8: 29:08:8d:d0:95:18:aa:63:11:e7:e7:c6:3b:94:f4:56:0b:68: 71:b8:d6:b7:3d:f4:36:ef:96:c6:8e:19:cd:b5:db:2e:d5:6a: 29:93:73:e8:eb:2c:6f:3b:bc:41:21:76:e1:41:6f:3f:12:0b: ea:99:90:b2:5f:d1:a4:1b:db:17:49:c3:d3:a7:29:54:3a:01: 2a:ff:7e:4d:50:5e:da:4a:08:4e:75:67:70:19:03:ec:bf:f4: cc:36:db:c4:dc:4b:fc:ee:05:b3:13:73:64:6b:3c:f6:98:de: c4:47:04:86:86:0c:47:a7:21:a0:2e:3f:d4:51:9b:92:cf:c0: 77:b3:2b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMAl06C0aCwOpS/WCkeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw NWIyZjAwHhcNMjUxMjExMjAwMTA1WhcNMjUxMjEyMjAwMTA1WjAzMTEwLwYDVQQD EyhkMWY1YzAyMTVmZDAxZjNhYTVlYjU2ZjllOTM3MDkxZDQ3YTQyODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/nbGFB0/JBHiHlt4IY6BYHXpmM6 QIEnkjxPpSY6+uJgEDoPoz6j2trbc/5dbArIrBklTLyMpthvH2Z4JEjq61bxnm6X 5vWDhWnelzxNKUfXkzyvH4aauNN3FwluQUcKAyK+gL45s0/MhO1sAGm6rZJ0J+fo WSXLp30Z0gsHCwyf0duBXaka26J5itFoo6s9avs+SIP3OubxQHFbmXL5+a103sHU Vfc2UojY+nTOyu3u4mtt2p/soXJ05W/t6Gpc7k8rEF8R1V34NkratWA0sbW3wTTa f3NdiqVaoescj2TVVqJeBfCiFXOb00Wmjei/izAW7YfKl45F0F5lL+m3oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH1wCFf0B86petW+ek3CR1HpCgNMB8GA1UdIwQY MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhj94wy8 pwM86+Kak+t8ExeiP2MOurEoA01ucrJ5EfqXiki+FaMuyRnLEPfuWuh5HFZLOQC7 N20p4p4MF1hUoTVBPAZSgu/+5kXrdwwzvTWknkxoK/MPJu7kFDt8y+GIRqanupji I2tAoQI3iRvaP33+7NldUVPZWnRBj0aoKQiN0JUYqmMR5+fGO5T0VgtocbjWtz30 Nu+Wxo4ZzbXbLtVqKZNz6Ossbzu8QSF24UFvPxIL6pmQsl/RpBvbF0nD06cpVDoB Kv9+TVBe2koITnVncBkD7L/0zDbbxNxL/O4FsxNzZGs89pjexEcEhoYMR6choC4/ 1FGbks/Ad7MrHA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:21 2025 by rpki-client