This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json) Hash identifier: B9az0AGNH00bCqly6WzowRw52qY6sPXJh4by8KIKQYo= Subject key identifier: 41:42:07:B6:91:AA:95:EC:02:E9:97:D2:4E:4B:E4:59:FB:CE:5A:7B Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06 Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06 Certificate serial: 019B3231AD862797471E5F99A13B27283D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft Manifest number: 05FC Signing time: Thu 18 Dec 2025 16:01:14 +0000 Manifest this update: Thu 18 Dec 2025 16:01:14 +0000 Manifest next update: Fri 19 Dec 2025 16:01:14 +0000 Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: umQnHcbWomM5+MhKRwYEGJd38waEBjqm1JmkVeIHl8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:ad:86:27:97:47:1e:5f:99:a1:3b:27:28:3d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06 Validity Not Before: Dec 18 16:01:14 2025 GMT Not After : Dec 19 16:01:14 2025 GMT Subject: CN=414207b691aa95ec02e997d24e4be459fbce5a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:89:13:c4:7e:67:2f:0d:74:41:1a:5d:44: fc:f1:42:4a:9e:f4:22:5e:9f:b8:85:cf:91:07:c8: 60:9d:c6:2e:1d:9c:c0:96:cd:67:f8:56:83:f0:da: bf:4a:c5:26:5f:cb:df:98:99:a9:00:05:c5:e8:4a: 4d:d8:76:27:05:e4:31:15:2d:6b:8a:00:4b:72:6a: 91:a7:a3:d9:54:90:0d:da:b2:85:94:4d:ca:2e:f0: 9a:cb:42:f9:ab:66:e4:04:94:a4:34:7a:7f:7a:06: 96:ae:ce:56:0b:d6:e2:e2:a6:52:fd:eb:9e:18:58: 0d:10:cf:33:7a:22:03:1a:02:af:40:5d:2c:c4:0a: 11:c5:06:ba:6c:18:32:e3:f3:04:67:cd:6f:97:86: e1:29:d6:3d:29:ce:3f:4c:cc:7b:56:81:57:ae:18: 18:47:58:5c:6a:83:6d:79:0f:5d:de:db:32:a9:88: 5c:cc:59:65:c5:d5:db:12:84:79:fb:4b:82:2e:7b: 30:69:81:a9:4c:25:7f:52:64:cd:24:98:37:52:70: 93:dc:db:55:32:1e:da:34:19:ad:d6:80:3d:7b:80: 21:6a:b8:57:96:02:5e:eb:86:23:af:29:da:cb:ab: df:72:c3:85:50:7f:57:fa:ad:20:04:a5:27:50:a7: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:42:07:B6:91:AA:95:EC:02:E9:97:D2:4E:4B:E4:59:FB:CE:5A:7B X509v3 Authority Key Identifier: keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3c:b2:ee:de:4d:a6:ab:2c:c9:80:0a:a0:07:ea:b2:32:ab: f9:4f:33:65:8f:91:d0:d8:d4:ef:25:ca:40:03:39:57:04:71: 4a:4f:b8:b0:6f:c5:00:ca:eb:fb:1f:f5:6e:c7:9d:57:fd:89: 34:18:0a:57:e9:d6:0c:c6:f8:c8:49:f6:9f:86:91:d5:75:26: e5:c4:6d:d9:74:fb:62:63:46:55:15:36:a2:e6:e7:33:c5:9a: d5:7d:de:34:5d:1b:63:cf:95:0a:8e:2c:03:dc:a8:28:41:f2: 70:70:af:c8:92:5f:fe:5f:53:59:de:76:8f:fe:c6:77:3d:fc: 5e:76:33:47:13:ad:0d:2b:cd:3a:36:41:93:a8:1f:f4:a3:a4: d5:54:42:51:be:88:93:f9:da:a9:a2:ac:b8:2b:c1:41:d7:27: 72:1c:21:9c:70:f0:55:74:f4:70:4b:44:b6:d5:4b:c7:e6:86: 76:5f:ca:79:63:89:e1:15:ea:78:be:d2:63:91:d2:d8:37:c2: 43:4c:5f:6e:c0:6a:0c:53:f6:5a:bf:a7:57:46:d0:13:19:66: 15:11:55:72:df:33:56:94:44:7a:b7:f6:4a:b3:ac:3c:1e:06: 46:92:62:e4:1e:de:3c:58:2f:41:c7:fe:ad:ae:c4:f4:f7:be: ee:da:b5:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMa2GJ5dHHl+ZoTsnKD0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxM2RkNGI4MWYxZmM3OWRkNGRhNjQyOGY5YzJhMDI3MzQ1 N2ZmMDYwHhcNMjUxMjE4MTYwMTE0WhcNMjUxMjE5MTYwMTE0WjAzMTEwLwYDVQQD Eyg0MTQyMDdiNjkxYWE5NWVjMDJlOTk3ZDI0ZTRiZTQ1OWZiY2U1YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1eJE8R+Zy8NdEEaXUT88UJKnvQi Xp+4hc+RB8hgncYuHZzAls1n+FaD8Nq/SsUmX8vfmJmpAAXF6EpN2HYnBeQxFS1r igBLcmqRp6PZVJAN2rKFlE3KLvCay0L5q2bkBJSkNHp/egaWrs5WC9bi4qZS/eue GFgNEM8zeiIDGgKvQF0sxAoRxQa6bBgy4/MEZ81vl4bhKdY9Kc4/TMx7VoFXrhgY R1hcaoNteQ9d3tsyqYhczFllxdXbEoR5+0uCLnswaYGpTCV/UmTNJJg3UnCT3NtV Mh7aNBmt1oA9e4AharhXlgJe64Yjrynay6vfcsOFUH9X+q0gBKUnUKfUKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFCB7aRqpXsAumX0k5L5Fn7zlp7MB8GA1UdIwQY MBaAFOE91LgfH8ed1NpkKPnCoCc0V/8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYjViZDctNjAzYi00YTVjLThhOTgt ZDU2Mzk1OWQyNzdkLzEvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wYjViZDctNjAzYi00YTVjLThhOTgtZDU2Mzk1OWQyNzdk LzEvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjyy7t5N pqssyYAKoAfqsjKr+U8zZY+R0NjU7yXKQAM5VwRxSk+4sG/FAMrr+x/1bsedV/2J NBgKV+nWDMb4yEn2n4aR1XUm5cRt2XT7YmNGVRU2oubnM8Wa1X3eNF0bY8+VCo4s A9yoKEHycHCvyJJf/l9TWd52j/7Gdz38XnYzRxOtDSvNOjZBk6gf9KOk1VRCUb6I k/naqaKsuCvBQdcnchwhnHDwVXT0cEtEttVLx+aGdl/KeWOJ4RXqeL7SY5HS2DfC Q0xfbsBqDFP2Wr+nV0bQExlmFRFVct8zVpREerf2SrOsPB4GRpJi5B7ePFgvQcf+ ra7E9Pe+7tq1Ow== -----END CERTIFICATE-----Generated at Fri Dec 19 00:17:15 2025 by rpki-client