This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json) Hash identifier: q1ypMr6oNWi1eWXBBnFsKjE4hrZTJZHhBrj3AMf47EI= Subject key identifier: 94:B3:FC:C9:C9:A6:F4:2C:AE:65:50:93:2E:F4:43:FF:7A:3E:E4:AA Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0 Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0 Certificate serial: 019B41A4338E4AE990A0FF018F5B81E081F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft Manifest number: 0B76 Signing time: Sun 21 Dec 2025 16:00:38 +0000 Manifest this update: Sun 21 Dec 2025 16:00:38 +0000 Manifest next update: Mon 22 Dec 2025 16:00:38 +0000 Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: OYkb0aPYilEeqiMV0vQK6FkRXuLEzJ+2tqlH8wP7Rwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:33:8e:4a:e9:90:a0:ff:01:8f:5b:81:e0:81:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0 Validity Not Before: Dec 21 16:00:38 2025 GMT Not After : Dec 22 16:00:38 2025 GMT Subject: CN=94b3fcc9c9a6f42cae6550932ef443ff7a3ee4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:7e:ac:55:78:05:6c:68:77:ee:83:d1:c4: c4:43:72:58:7d:3d:07:0d:b1:71:35:e9:a3:35:ab: 4e:9e:f9:e2:dd:7b:e7:db:4a:bb:99:d8:bf:36:a8: 2f:ce:e7:aa:5a:26:d7:7c:18:db:0f:73:f6:83:2b: 57:a4:04:fb:78:62:ff:aa:0a:b3:02:06:e4:b8:27: 6d:53:a8:96:d0:12:83:63:68:2e:54:81:4f:30:12: 5f:a6:16:65:4e:03:86:e1:fb:4c:02:c7:91:c6:f1: 2a:cf:92:07:b6:5a:da:60:1e:84:24:76:74:5d:e7: 11:6f:c4:48:9d:6a:a8:8d:9c:c5:d0:3c:73:56:a2: 1b:5e:16:60:06:df:41:4f:40:8c:bd:63:6a:9e:cd: c7:2c:4b:24:e8:98:15:13:2f:5e:ad:d7:70:24:43: ec:a0:4e:bc:80:f8:b1:8e:a6:23:bb:2d:c3:c6:31: 5a:83:be:4e:c8:db:4f:6a:a8:25:59:63:37:69:69: d1:b1:3b:13:85:e0:36:96:66:33:75:b1:c1:9b:8e: 22:c0:0c:6c:4b:31:78:0e:8f:d4:2e:43:a2:49:ca: 65:72:3a:a9:9e:02:ea:41:8a:c5:4f:b0:a6:4e:5f: 2a:23:c0:b2:8b:7e:a7:67:b3:41:60:8e:ab:72:1d: d7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B3:FC:C9:C9:A6:F4:2C:AE:65:50:93:2E:F4:43:FF:7A:3E:E4:AA X509v3 Authority Key Identifier: keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a2:a9:a0:c7:59:32:ad:c2:1c:06:65:49:48:96:71:35:78: 3e:88:55:4d:5e:8e:00:17:bc:7e:fd:0f:29:3d:f9:f7:7a:d3: 1b:28:1b:59:86:fd:64:27:33:8d:42:86:01:b9:db:13:83:da: bb:d2:6f:de:33:52:be:59:a2:4c:e7:9a:03:6b:ea:ba:2f:07: 80:57:7d:90:2c:f5:3f:5e:44:97:0a:f6:e2:32:80:2e:5d:ac: dd:74:ea:12:0b:54:73:29:a1:7e:f2:4b:a0:52:b2:b1:2d:8a: 8a:d9:ac:a6:35:53:ee:5c:f2:95:61:4b:85:55:b3:94:2a:7a: 3c:60:eb:dc:c0:7e:88:09:60:cb:88:74:b5:95:e7:bf:f0:6f: e5:6a:bd:c0:03:a0:3a:2a:e6:a0:66:fb:8d:68:92:11:d5:54: 86:ba:d4:06:e1:3b:a6:9c:07:77:c1:f4:00:d6:dc:c3:43:19: 79:07:42:e6:fd:bd:95:fe:cf:35:af:08:4d:06:32:47:79:d7: b7:63:0f:6d:51:b5:22:1f:6e:60:c1:1b:37:b7:b4:a2:46:d3: b6:88:05:55:28:32:1d:3c:3e:7d:2b:88:8e:fb:6b:62:b5:ac: 92:4b:cb:6d:32:5a:cd:12:9b:47:15:58:61:9e:31:b0:d5:a4: 5e:39:b7:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpDOOSumQoP8Bj1uB4IH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOGZmMWM5NjY2ZmUxOTVmMjRhYTFmZThjMzQ1ZDc5YzQ4 ZTdiYzAwHhcNMjUxMjIxMTYwMDM4WhcNMjUxMjIyMTYwMDM4WjAzMTEwLwYDVQQD Eyg5NGIzZmNjOWM5YTZmNDJjYWU2NTUwOTMyZWY0NDNmZjdhM2VlNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNt+rFV4BWxod+6D0cTEQ3JYfT0H DbFxNemjNatOnvni3Xvn20q7mdi/NqgvzueqWibXfBjbD3P2gytXpAT7eGL/qgqz AgbkuCdtU6iW0BKDY2guVIFPMBJfphZlTgOG4ftMAseRxvEqz5IHtlraYB6EJHZ0 XecRb8RInWqojZzF0DxzVqIbXhZgBt9BT0CMvWNqns3HLEsk6JgVEy9erddwJEPs oE68gPixjqYjuy3DxjFag75OyNtPaqglWWM3aWnRsTsTheA2lmYzdbHBm44iwAxs SzF4Do/ULkOiScplcjqpngLqQYrFT7CmTl8qI8Cyi36nZ7NBYI6rch3XJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSz/MnJpvQsrmVQky70Q/96PuSqMB8GA1UdIwQY MBaAFD+P8clmb+GV8kqh/ow0XXnEjnvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQt ZmJkMzYxY2I4MTkzLzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQtZmJkMzYxY2I4MTkz LzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6KpoMdZ Mq3CHAZlSUiWcTV4PohVTV6OABe8fv0PKT3593rTGygbWYb9ZCczjUKGAbnbE4Pa u9Jv3jNSvlmiTOeaA2vqui8HgFd9kCz1P15Elwr24jKALl2s3XTqEgtUcymhfvJL oFKysS2KitmspjVT7lzylWFLhVWzlCp6PGDr3MB+iAlgy4h0tZXnv/Bv5Wq9wAOg OirmoGb7jWiSEdVUhrrUBuE7ppwHd8H0ANbcw0MZeQdC5v29lf7PNa8ITQYyR3nX t2MPbVG1Ih9uYMEbN7e0okbTtogFVSgyHTw+fSuIjvtrYrWskkvLbTJazRKbRxVY YZ4xsNWkXjm3QQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:59:31 2025 by rpki-client