This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json) Hash identifier: EV7rql2+5RC1tOrvO7P459I6Tm6kz52Anfwk1luR48Q= Subject key identifier: F1:A8:91:A3:A6:BB:41:F5:A2:87:CF:3A:AB:89:8A:19:CD:FF:40:C0 Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Certificate serial: 019B378EF5C7A781F5FE79C116850C4237B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft Manifest number: 13A9 Signing time: Fri 19 Dec 2025 17:01:14 +0000 Manifest this update: Fri 19 Dec 2025 17:01:14 +0000 Manifest next update: Sat 20 Dec 2025 17:01:14 +0000 Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: i46I9zUaFbpubjyzu0JHaC64qn+7b0FeE9bv+DdB3S8=) 2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:f5:c7:a7:81:f5:fe:79:c1:16:85:0c:42:37:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Validity Not Before: Dec 19 17:01:14 2025 GMT Not After : Dec 20 17:01:14 2025 GMT Subject: CN=f1a891a3a6bb41f5a287cf3aab898a19cdff40c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:18:3b:b9:2a:ee:6c:50:6e:6d:9d:c0:0b: c4:31:05:4a:55:b8:13:26:1b:15:7d:2c:20:18:be: f8:02:76:43:a5:f3:7a:00:f0:1a:f4:52:6d:72:3a: 44:74:86:16:20:b6:61:1d:62:e6:16:f9:3b:8f:6f: 65:ee:33:c1:76:ad:18:fb:41:04:11:a2:77:61:aa: ba:cf:7d:aa:70:74:96:7e:17:4f:0c:f5:1b:54:77: 73:06:bf:23:3b:70:97:c0:99:77:fc:03:c8:da:b1: 16:35:f9:ae:91:67:30:f2:53:39:01:55:0d:79:38: 6b:ad:f6:41:f3:ea:5c:b9:64:1c:03:0b:d2:07:10: 07:c2:73:b8:a2:d2:6b:fa:23:f9:85:d8:9f:04:69: eb:e2:b2:b7:73:14:32:5a:fe:94:fd:a3:2b:88:57: 81:2e:9b:1c:7d:b4:9d:cc:29:88:26:bc:f6:c6:70: 4f:5d:bd:28:4c:ee:9a:f1:5d:3d:98:46:7d:c4:e6: ed:81:c6:d7:3c:f2:b5:6e:a2:9a:63:ef:d4:d4:9b: b9:dd:4e:77:08:15:42:7f:88:2e:91:66:9c:3f:a7: 4f:9e:58:87:5a:78:51:39:3f:d6:a2:00:75:c3:b8: 28:16:49:fb:91:1d:5d:21:2d:85:bc:f6:6e:eb:44: cf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A8:91:A3:A6:BB:41:F5:A2:87:CF:3A:AB:89:8A:19:CD:FF:40:C0 X509v3 Authority Key Identifier: keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:98:f9:43:1c:a8:58:26:cc:ea:a4:17:19:fc:05:88:54:b6: cc:ca:a6:e1:87:9b:85:8a:21:1d:ee:4c:71:b1:3e:fa:2e:06: c4:b1:28:44:12:14:7a:a6:b5:85:c1:6e:b6:ef:81:67:a9:2c: ce:87:af:da:fe:ec:18:3b:e8:ab:9e:7f:bb:54:fa:e2:91:82: be:10:3e:bd:f0:a9:cd:ab:99:60:f7:e7:cd:cd:09:20:a8:51: 73:a3:53:e7:bd:ec:1f:a1:e3:11:06:27:99:83:d2:c7:29:a5: f7:66:f6:53:e4:15:58:79:07:d1:b2:cb:77:7a:3c:3c:27:45: 9b:9e:e7:d3:32:e4:5a:cf:c6:0c:05:6f:c9:3a:35:13:43:7d: 41:76:22:56:b1:64:33:81:dd:c8:d5:5a:41:cc:dd:e3:17:58: b4:99:4a:f0:6a:fc:bf:c6:9d:b1:8b:9f:e7:a9:24:ab:57:24: 47:20:9d:2b:43:d4:69:f2:56:67:9a:d2:78:3e:69:d8:bd:fd: 9c:f5:42:b3:2a:0b:9f:0e:f8:d5:3f:0b:bf:70:7d:ad:0a:ed: 10:c8:ed:eb:e7:51:ac:d2:4d:0d:46:ba:c8:7a:41:45:cf:8d: 02:81:e2:21:be:12:65:65:43:a2:1f:f4:f8:2a:dc:07:87:d4: 31:80:fe:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jvXHp4H1/nnBFoUMQjezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw NWIyZjAwHhcNMjUxMjE5MTcwMTE0WhcNMjUxMjIwMTcwMTE0WjAzMTEwLwYDVQQD EyhmMWE4OTFhM2E2YmI0MWY1YTI4N2NmM2FhYjg5OGExOWNkZmY0MGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubwYO7kq7mxQbm2dwAvEMQVKVbgT JhsVfSwgGL74AnZDpfN6APAa9FJtcjpEdIYWILZhHWLmFvk7j29l7jPBdq0Y+0EE EaJ3Yaq6z32qcHSWfhdPDPUbVHdzBr8jO3CXwJl3/API2rEWNfmukWcw8lM5AVUN eThrrfZB8+pcuWQcAwvSBxAHwnO4otJr+iP5hdifBGnr4rK3cxQyWv6U/aMriFeB LpscfbSdzCmIJrz2xnBPXb0oTO6a8V09mEZ9xObtgcbXPPK1bqKaY+/U1Ju53U53 CBVCf4gukWacP6dPnliHWnhROT/WogB1w7goFkn7kR1dIS2FvPZu60TP/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGokaOmu0H1oofPOquJihnN/0DAMB8GA1UdIwQY MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZj5Qxyo WCbM6qQXGfwFiFS2zMqm4YebhYohHe5McbE++i4GxLEoRBIUeqa1hcFutu+BZ6ks zoev2v7sGDvoq55/u1T64pGCvhA+vfCpzauZYPfnzc0JIKhRc6NT573sH6HjEQYn mYPSxyml92b2U+QVWHkH0bLLd3o8PCdFm57n0zLkWs/GDAVvyTo1E0N9QXYiVrFk M4HdyNVaQczd4xdYtJlK8Gr8v8adsYuf56kkq1ckRyCdK0PUafJWZ5rSeD5p2L39 nPVCsyoLnw741T8Lv3B9rQrtEMjt6+dRrNJNDUa6yHpBRc+NAoHiIb4SZWVDoh/0 +CrcB4fUMYD+Pg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:12:43 2025 by rpki-client