This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json) Hash identifier: puzYAFIKpv9p/0ZM0ZQfDbUD8S05JwqDUCHZw096U2I= Subject key identifier: 72:34:F1:05:C4:C0:4D:CA:E4:0D:C0:23:53:0F:CA:FD:C7:77:AE:97 Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f Certificate serial: 019B51F2EAE4ACE98CA4DE984E79CB8E5439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft Manifest number: 0D1B Signing time: Wed 24 Dec 2025 20:00:32 +0000 Manifest this update: Wed 24 Dec 2025 20:00:32 +0000 Manifest next update: Thu 25 Dec 2025 20:00:32 +0000 Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: +KUwIwUvZ/lmhUyYiBw46SGl5UOttNZXypHI3WhIAqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f2:ea:e4:ac:e9:8c:a4:de:98:4e:79:cb:8e:54:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f Validity Not Before: Dec 24 20:00:32 2025 GMT Not After : Dec 25 20:00:32 2025 GMT Subject: CN=7234f105c4c04dcae40dc023530fcafdc777ae97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:b7:6a:08:36:57:61:d9:1d:49:04:32:7d: 52:c9:24:40:29:b3:bf:12:7c:28:ce:63:d9:da:b1: 61:d5:7f:89:ea:4a:e2:63:61:ec:19:06:37:9d:6f: 8b:00:d6:fb:3f:3c:cf:67:fa:aa:ee:f1:0a:01:dc: d1:93:0a:98:89:92:0b:2c:c5:25:1b:9c:e8:39:79: 43:47:17:a5:89:36:24:3e:34:48:48:4d:70:2a:12: 9a:5a:c4:1a:b1:ee:eb:e8:82:dd:3b:16:7a:8e:94: d2:92:67:86:fa:3b:b4:56:c1:ed:58:5e:b4:ee:3e: a9:14:d7:13:ea:75:84:07:a0:f4:f1:25:d6:6b:7c: 94:0a:7f:ea:85:ac:4a:ab:21:92:87:69:4e:3f:f1: d8:d7:25:9d:79:24:c6:b9:4e:44:92:3d:b6:47:56: ac:c3:b3:dd:e7:df:23:b9:7f:e7:41:52:cc:06:b8: 46:a4:a1:9e:77:d3:98:03:ca:f2:42:f4:ff:b3:80: 82:09:00:a6:ed:74:1b:72:f9:82:d4:92:a5:af:fe: 77:d9:fa:10:f7:9b:46:e9:c0:af:f1:07:19:5f:56: 50:9a:6c:9c:a9:3c:7a:d3:60:58:14:bc:66:50:61: 94:f5:a2:18:a5:82:dc:38:b2:fb:c9:ea:33:e0:a8: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:34:F1:05:C4:C0:4D:CA:E4:0D:C0:23:53:0F:CA:FD:C7:77:AE:97 X509v3 Authority Key Identifier: keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:87:11:a6:73:6f:ea:c9:2d:68:9b:d1:4b:8d:b6:9a:bf:8f: 23:cf:d0:07:3e:30:49:b7:e4:cc:45:f3:56:78:8c:97:b9:34: 2b:7e:a9:bb:c0:1f:05:1a:ac:5b:9c:e6:e3:22:cf:6b:b0:ed: e1:a1:5d:79:89:94:57:67:6e:28:34:82:bf:ec:59:2f:c7:ae: 28:15:39:0b:f9:a1:78:d1:01:8e:10:c8:28:bb:34:e5:53:0e: 36:64:16:91:76:98:f8:6c:02:91:6c:32:e4:c4:3b:59:a9:c5: 16:11:2b:88:71:8c:24:4f:d7:89:77:36:7a:0e:6a:cc:e3:98: 26:e0:a0:83:c4:7e:8b:7f:62:13:74:f0:14:7a:68:fc:9b:3d: a5:ab:81:32:77:a2:c0:81:ab:c9:27:d5:dc:a4:97:3d:a0:c5: 32:28:58:7a:c5:41:36:42:a7:ed:e8:b3:40:fa:81:78:b4:e9: 5c:2f:08:ec:0d:1a:af:1b:0d:44:c3:9c:20:16:96:4d:0d:3a: 57:82:b7:40:e3:45:b4:d8:05:23:7a:49:0d:02:7f:85:69:82: 24:e9:69:e8:a3:b8:57:7a:2f:8d:b6:55:89:01:2d:70:0e:81: a9:e8:3f:78:fa:32:7b:ec:59:76:eb:4d:4c:fb:ca:51:c6:ee: 64:92:9b:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8urkrOmMpN6YTnnLjlQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODRmZWM0OTA2YWI4OTAyMGExMTZiNjg0NDZjY2VhZjZj YzUwMGYwHhcNMjUxMjI0MjAwMDMyWhcNMjUxMjI1MjAwMDMyWjAzMTEwLwYDVQQD Eyg3MjM0ZjEwNWM0YzA0ZGNhZTQwZGMwMjM1MzBmY2FmZGM3NzdhZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLa3agg2V2HZHUkEMn1SySRAKbO/ EnwozmPZ2rFh1X+J6kriY2HsGQY3nW+LANb7PzzPZ/qq7vEKAdzRkwqYiZILLMUl G5zoOXlDRxeliTYkPjRISE1wKhKaWsQase7r6ILdOxZ6jpTSkmeG+ju0VsHtWF60 7j6pFNcT6nWEB6D08SXWa3yUCn/qhaxKqyGSh2lOP/HY1yWdeSTGuU5Ekj22R1as w7Pd598juX/nQVLMBrhGpKGed9OYA8ryQvT/s4CCCQCm7XQbcvmC1JKlr/532foQ 95tG6cCv8QcZX1ZQmmycqTx602BYFLxmUGGU9aIYpYLcOLL7yeoz4KiTQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHI08QXEwE3K5A3AI1MPyv3Hd66XMB8GA1UdIwQY MBaAFGuE/sSQariQIKEWtoRGzOr2zFAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgt ZDFkOTQ3ZTczMzA5LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgtZDFkOTQ3ZTczMzA5 LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEocRpnNv 6sktaJvRS422mr+PI8/QBz4wSbfkzEXzVniMl7k0K36pu8AfBRqsW5zm4yLPa7Dt 4aFdeYmUV2duKDSCv+xZL8euKBU5C/mheNEBjhDIKLs05VMONmQWkXaY+GwCkWwy 5MQ7WanFFhEriHGMJE/XiXc2eg5qzOOYJuCgg8R+i39iE3TwFHpo/Js9pauBMnei wIGrySfV3KSXPaDFMihYesVBNkKn7eizQPqBeLTpXC8I7A0arxsNRMOcIBaWTQ06 V4K3QONFtNgFI3pJDQJ/hWmCJOlp6KO4V3ovjbZViQEtcA6Bqeg/ePoye+xZdutN TPvKUcbuZJKbPg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:29 2025 by rpki-client