This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json) Hash identifier: hBX+K2QYZXVsNOsqxlwGLX7BWONIoWm93vxn+LHiQUc= Subject key identifier: 47:C9:74:46:AB:FC:A6:08:CC:33:BD:C9:C7:19:2E:08:45:5D:A9:B2 Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69 Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69 Certificate serial: 019B59774D127690B0939DCA0A5D587915F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:02:29 +0000 Manifest this update: Fri 26 Dec 2025 07:02:29 +0000 Manifest next update: Sat 27 Dec 2025 07:02:29 +0000 Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: j16IvfZh3YpLu28jnKA6vQ8LRno9zeU/3+dRkqulFtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:4d:12:76:90:b0:93:9d:ca:0a:5d:58:79:15:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69 Validity Not Before: Dec 26 07:02:29 2025 GMT Not After : Dec 27 07:02:29 2025 GMT Subject: CN=47c97446abfca608cc33bdc9c7192e08455da9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:06:c0:43:60:28:dd:e7:4c:91:a4:50:29: 6f:81:4b:7f:73:40:19:d3:9c:f2:ff:fc:8f:bf:00: 15:c7:ee:c4:32:18:83:fd:9e:0b:56:a2:d8:e8:24: cb:31:85:18:d2:10:29:79:87:1d:ba:50:e3:76:c7: a0:48:67:34:fb:5e:a4:94:6a:d6:35:00:87:20:bf: 5c:f5:dc:bf:26:bc:e3:d5:1d:82:3f:b9:b8:53:13: 90:ab:f5:53:b1:e1:2f:4a:80:71:de:6a:c8:c4:cc: 4a:a7:5b:76:f0:33:3e:9c:ba:07:6f:0a:9c:14:11: 4d:21:fb:2d:40:d2:b5:9e:3d:65:2e:a5:36:64:85: a8:c1:8f:d6:ac:1b:90:8c:b1:48:b0:91:58:07:72: c6:a6:90:64:8e:7a:9a:28:80:ce:d5:4c:62:91:14: ef:0c:16:d4:e5:a7:9a:a0:61:22:f9:78:25:28:7c: 26:2b:b0:9d:9a:c2:96:47:eb:d6:1c:85:50:a7:5a: f7:04:61:46:b3:f2:82:a2:92:19:16:59:55:8c:d5: 86:5e:11:fc:68:e1:bc:4a:55:78:d8:38:67:51:a3: 0e:c7:66:5a:23:f5:c2:b2:8a:f9:20:65:b4:be:f4: cf:8b:3b:89:2d:f0:8c:c8:33:12:21:b8:bd:ad:6f: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C9:74:46:AB:FC:A6:08:CC:33:BD:C9:C7:19:2E:08:45:5D:A9:B2 X509v3 Authority Key Identifier: keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a4:39:bf:b9:2a:63:ca:1f:88:80:df:45:2d:bb:ea:d2:4c: 1f:11:84:e2:07:a9:83:9f:02:46:5e:bf:36:87:bc:d5:16:1a: 28:8a:96:6c:83:19:31:08:b8:4d:19:b1:b6:f6:2b:5d:4f:dc: 7b:c4:7d:31:2c:9c:10:a6:85:94:e4:20:68:69:31:02:10:4d: 8f:46:4f:dc:5d:a9:46:e3:f3:25:91:a9:1c:c3:81:7b:05:0b: 08:81:4a:f9:43:da:96:e1:12:d7:70:f0:00:26:81:64:27:74: d6:ae:5a:c1:13:d0:95:dc:8c:68:31:60:7f:0e:81:63:03:dd: 68:ae:ab:c9:da:a1:3f:ed:bd:d3:29:74:f7:7c:f8:46:b5:85: ce:24:00:a4:60:ef:f2:4f:3e:61:db:1a:36:88:12:2d:08:3b: 30:24:e2:26:47:2f:7d:2a:73:c5:4e:98:bc:88:f0:f5:d5:f5: 68:10:4d:7f:26:a8:ca:af:7a:ed:44:fe:6a:31:37:bd:f9:77: 4b:c5:7e:02:8f:bd:30:92:fb:3d:21:07:88:99:01:98:48:b1: 98:fa:19:3a:e2:27:ed:2f:02:a0:a0:2d:d9:4f:98:d2:92:01: b3:14:25:6a:6d:d6:07:4e:13:41:54:66:bb:6d:66:a6:f1:91: ee:0e:ab:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd00SdpCwk53KCl1YeRXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTRkMTQ1ZWU4OWIyN2IxNTUzZDU1MWMyMGExNWJjNmJi ZjZkNjkwHhcNMjUxMjI2MDcwMjI5WhcNMjUxMjI3MDcwMjI5WjAzMTEwLwYDVQQD Eyg0N2M5NzQ0NmFiZmNhNjA4Y2MzM2JkYzljNzE5MmUwODQ1NWRhOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6YGwENgKN3nTJGkUClvgUt/c0AZ 05zy//yPvwAVx+7EMhiD/Z4LVqLY6CTLMYUY0hApeYcdulDjdsegSGc0+16klGrW NQCHIL9c9dy/Jrzj1R2CP7m4UxOQq/VTseEvSoBx3mrIxMxKp1t28DM+nLoHbwqc FBFNIfstQNK1nj1lLqU2ZIWowY/WrBuQjLFIsJFYB3LGppBkjnqaKIDO1UxikRTv DBbU5aeaoGEi+XglKHwmK7CdmsKWR+vWHIVQp1r3BGFGs/KCopIZFllVjNWGXhH8 aOG8SlV42DhnUaMOx2ZaI/XCsor5IGW0vvTPizuJLfCMyDMSIbi9rW+SeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfJdEar/KYIzDO9yccZLghFXamyMB8GA1UdIwQY MBaAFOKk0UXuibJ7FVPVUcIKFbxrv21pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEt YzNiOWYyMDEzMzJlLzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEtYzNiOWYyMDEzMzJl LzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqQ5v7kq Y8ofiIDfRS276tJMHxGE4gepg58CRl6/Noe81RYaKIqWbIMZMQi4TRmxtvYrXU/c e8R9MSycEKaFlOQgaGkxAhBNj0ZP3F2pRuPzJZGpHMOBewULCIFK+UPaluES13Dw ACaBZCd01q5awRPQldyMaDFgfw6BYwPdaK6rydqhP+290yl093z4RrWFziQApGDv 8k8+YdsaNogSLQg7MCTiJkcvfSpzxU6YvIjw9dX1aBBNfyaoyq967UT+ajE3vfl3 S8V+Ao+9MJL7PSEHiJkBmEixmPoZOuIn7S8CoKAt2U+Y0pIBsxQlam3WB04TQVRm u21mpvGR7g6rYQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:54 2025 by rpki-client