This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json) Hash identifier: D5VjeLpGVtqQ4SNWRzNRiD0RKgNmdZ8sOj8oCeQpQl4= Subject key identifier: 8A:F6:2B:4F:0F:ED:C1:9A:9C:7B:13:33:7F:89:8D:C2:9E:9D:AE:27 Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Certificate serial: 019B424AFCDDC487FCA03F4C44CB4CEA99DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft Manifest number: 099D Signing time: Sun 21 Dec 2025 19:02:49 +0000 Manifest this update: Sun 21 Dec 2025 19:02:49 +0000 Manifest next update: Mon 22 Dec 2025 19:02:49 +0000 Files and hashes: 1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: /TnCrP3pLHhINGDtXAaPAhGuDPL6IW9xEBGup8LCiwY=) 2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:fc:dd:c4:87:fc:a0:3f:4c:44:cb:4c:ea:99:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Validity Not Before: Dec 21 19:02:49 2025 GMT Not After : Dec 22 19:02:49 2025 GMT Subject: CN=8af62b4f0fedc19a9c7b13337f898dc29e9dae27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:4f:81:8c:79:09:7e:52:f3:c0:43:2f:33: 7f:80:fd:22:46:f1:35:81:9c:73:ce:67:4b:4f:99: 20:68:c9:ff:a5:60:54:01:25:94:23:48:32:a2:77: 33:e3:4e:ea:53:36:0c:d6:6d:90:cb:b1:ce:5e:39: 28:ea:08:62:91:7b:2e:57:01:ba:89:89:da:8b:59: d7:d6:3f:d8:1f:f0:29:60:a1:60:ba:77:bb:27:55: a2:43:e4:fa:b3:79:2c:4c:61:69:61:3b:90:b7:0f: 60:d2:a9:8e:f4:f3:cf:12:47:e0:25:67:af:d1:03: 97:c6:1f:54:f6:c4:cb:7a:39:e9:7f:f7:9b:55:a5: f9:26:b8:98:a2:c8:c1:98:cf:fb:14:e6:6d:c3:0e: 74:9f:c7:01:3c:06:2d:3e:43:7a:b0:57:0d:d4:28: 76:e9:4b:9b:4c:84:0f:b7:4f:36:f2:c7:f5:b5:34: ca:12:02:ca:2f:5b:e4:13:1e:67:5c:1d:04:0d:5e: b2:ce:0b:a0:38:64:b8:46:f4:e3:13:f9:48:00:3d: 14:8a:e9:3b:76:c4:a4:70:3c:51:6b:96:41:7a:34: 1f:0e:aa:ec:09:4a:9b:fd:72:f6:7a:1a:6c:79:84: 3c:54:54:98:a3:04:d1:89:ad:f0:e1:c2:ba:71:e9: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F6:2B:4F:0F:ED:C1:9A:9C:7B:13:33:7F:89:8D:C2:9E:9D:AE:27 X509v3 Authority Key Identifier: keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4e:e3:0f:9c:ca:47:91:6b:7f:b9:d6:8c:ca:ec:59:58:78: a6:25:0e:59:f6:e5:b9:f4:d8:e0:9c:85:e7:c6:1b:54:7f:b1: c3:c6:fb:bc:8e:98:70:41:0a:ae:b1:93:c1:d3:5d:d9:bb:a3: 17:d7:ba:77:98:f3:d9:7c:1f:a0:db:23:98:ce:dd:ce:eb:66: 2b:dd:9f:ab:53:15:ea:90:51:3f:7b:9d:82:5e:50:74:a6:60: 60:fd:b4:8a:88:6b:36:08:28:78:75:e3:bb:03:26:a5:2b:f0: 89:5f:e4:48:9a:32:9a:ab:a8:87:5c:dc:c8:67:7b:31:05:cf: 04:b4:ba:fd:a0:43:2a:9c:98:46:6f:3f:d0:a0:85:bb:96:75: 24:f6:3e:7a:41:c7:c4:32:46:24:88:ce:72:82:ee:c8:cb:67: e8:2d:dc:4d:8c:7b:28:a0:b9:62:44:d6:bc:30:3b:9e:e7:7f: 4e:6d:e6:25:b1:e7:a5:98:ce:fe:98:0d:79:73:40:8a:6c:75: 94:5c:fd:f9:8d:28:c9:c3:48:68:40:19:6d:e6:77:4a:3f:0e: 54:76:a2:66:4b:b7:cf:5c:2a:48:19:c0:61:70:9b:2e:1b:d4: 00:78:3a:0a:ef:8a:48:e9:5e:9f:db:5d:b7:3c:c7:1e:86:56: 5c:8a:e2:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSvzdxIf8oD9MRMtM6pnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjJmNTQ1ZGRiMjM0ZTM4M2QzNmI4YThkNmI1NmEzOGRk NzJmODkwHhcNMjUxMjIxMTkwMjQ5WhcNMjUxMjIyMTkwMjQ5WjAzMTEwLwYDVQQD Eyg4YWY2MmI0ZjBmZWRjMTlhOWM3YjEzMzM3Zjg5OGRjMjllOWRhZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/hPgYx5CX5S88BDLzN/gP0iRvE1 gZxzzmdLT5kgaMn/pWBUASWUI0gyoncz407qUzYM1m2Qy7HOXjko6ghikXsuVwG6 iYnai1nX1j/YH/ApYKFgune7J1WiQ+T6s3ksTGFpYTuQtw9g0qmO9PPPEkfgJWev 0QOXxh9U9sTLejnpf/ebVaX5JriYosjBmM/7FOZtww50n8cBPAYtPkN6sFcN1Ch2 6UubTIQPt0828sf1tTTKEgLKL1vkEx5nXB0EDV6yzgugOGS4RvTjE/lIAD0Uiuk7 dsSkcDxRa5ZBejQfDqrsCUqb/XL2ehpseYQ8VFSYowTRia3w4cK6cenj9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr2K08P7cGanHsTM3+JjcKena4nMB8GA1UdIwQY MBaAFODy9UXdsjTjg9Nrio1rVqON1y+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYt OGNhNmMzM2QxNGJiLzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYtOGNhNmMzM2QxNGJi LzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK07jD5zK R5Frf7nWjMrsWVh4piUOWfblufTY4JyF58YbVH+xw8b7vI6YcEEKrrGTwdNd2buj F9e6d5jz2XwfoNsjmM7dzutmK92fq1MV6pBRP3udgl5QdKZgYP20iohrNggoeHXj uwMmpSvwiV/kSJoymquoh1zcyGd7MQXPBLS6/aBDKpyYRm8/0KCFu5Z1JPY+ekHH xDJGJIjOcoLuyMtn6C3cTYx7KKC5YkTWvDA7nud/Tm3mJbHnpZjO/pgNeXNAimx1 lFz9+Y0oycNIaEAZbeZ3Sj8OVHaiZku3z1wqSBnAYXCbLhvUAHg6Cu+KSOlen9td tzzHHoZWXIriYg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:11 2025 by rpki-client