This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft File: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json) Hash identifier: ziIHdI4bwipJAmkuGGd2K18v8BKYEXGtwcoNaUOuGkc= Subject key identifier: C6:9A:AA:AA:4F:C5:29:64:74:FC:3F:35:26:29:5B:EC:03:AE:0A:99 Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60 Certificate issuer: /CN=e33779b8388d001fdcbddc48ace227f009850660 Certificate serial: 019AF12CEA968BDA7A0CC281AFD5D3CA19E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: Oy6U6sPtz6QtTgBqs1sDYwLr9JsXIOMrBW6v9HxPrbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ea:96:8b:da:7a:0c:c2:81:af:d5:d3:ca:19:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660 Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=c69aaaaa4fc5296474fc3f3526295bec03ae0a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:91:68:c8:ee:57:a4:4e:06:60:05:e8:ae: 3b:28:4f:0e:97:68:4a:f9:7b:3f:67:31:0e:9e:c5: 16:b4:79:2a:e8:85:f6:f8:be:62:2a:7b:21:48:25: 2e:c1:c3:1f:95:7b:75:3d:77:80:6e:bd:bb:ad:9e: 1f:c0:6e:72:a6:96:2e:b7:35:d5:40:17:58:51:4e: 79:f4:4d:7b:41:44:b2:45:d1:f8:53:07:01:8d:e5: f8:83:9d:2a:df:15:31:11:33:a9:c6:5e:72:3d:b6: 73:8a:3b:f4:5d:15:1c:64:2c:78:ab:77:c6:75:55: 01:45:d8:2c:e4:03:86:3d:f9:7b:dd:76:2d:ba:28: c4:b3:82:b0:4f:6f:e1:4e:12:48:a2:a5:2b:7b:e5: f6:0a:a7:7f:4c:55:bd:a2:b2:2e:f2:8f:e4:f4:fa: 7f:00:c7:62:f6:d7:6f:7c:7e:e9:70:c4:5d:d2:3a: da:64:f7:fa:96:78:90:56:0c:7b:ab:b7:5f:b9:c9: fd:13:30:75:38:4f:e4:00:8e:44:33:ef:4c:6b:c7: 75:96:a6:fb:2a:5d:a1:42:83:2e:0a:d9:27:65:2c: 2c:e7:79:d8:13:36:03:1e:c3:71:80:5c:81:78:1f: 20:28:d6:bc:ff:fa:37:f1:07:1d:1f:7d:f2:77:c2: d1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9A:AA:AA:4F:C5:29:64:74:FC:3F:35:26:29:5B:EC:03:AE:0A:99 X509v3 Authority Key Identifier: keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f8:ac:c7:5c:2e:02:06:54:c1:c1:77:e3:d7:cf:e4:17:f9: 12:ee:6f:46:a2:32:35:c1:b3:eb:0a:86:05:30:05:76:f0:01: 47:3a:ee:35:78:49:d9:96:ef:b0:de:62:90:fc:4c:f3:9d:90: 0d:76:21:f6:b2:c2:43:c5:82:ba:81:d1:92:c0:98:be:14:04: 4b:a4:a6:82:5c:10:38:64:ac:d0:38:56:f8:3e:22:22:d6:ee: 97:f0:54:dd:0c:bb:b7:ad:6d:0c:54:a6:21:e9:f6:e3:5c:c4: db:ab:20:e5:57:b6:94:24:50:bd:02:03:b0:a7:2d:06:7a:b3: 3c:89:cc:a3:86:54:7d:23:9a:fe:11:37:6b:ce:dd:96:ee:e9: e2:fa:5b:34:60:a9:99:ea:a7:a9:34:40:10:85:a7:6c:23:7e: 7a:c7:44:25:d4:46:f6:71:ba:be:5a:af:69:04:8e:e5:d4:35: ec:93:5a:97:0c:cb:2b:d2:6f:81:2d:93:a2:82:fd:d2:5e:8f: fa:83:27:ed:b0:f8:a4:ef:96:dd:ac:d4:0c:0a:e1:67:b2:e8: 80:81:97:96:82:b9:b9:b5:7b:19:4a:25:2b:b9:35:0e:22:de: 02:7e:2c:d7:b3:3a:78:da:e2:60:f6:16:5e:26:a2:7b:b3:60: bb:e6:85:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOqWi9p6DMKBr9XTyhnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzc3OWI4Mzg4ZDAwMWZkY2JkZGM0OGFjZTIyN2YwMDk4 NTA2NjAwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD EyhjNjlhYWFhYTRmYzUyOTY0NzRmYzNmMzUyNjI5NWJlYzAzYWUwYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zyRaMjuV6ROBmAF6K47KE8Ol2hK +Xs/ZzEOnsUWtHkq6IX2+L5iKnshSCUuwcMflXt1PXeAbr27rZ4fwG5yppYutzXV QBdYUU559E17QUSyRdH4UwcBjeX4g50q3xUxETOpxl5yPbZzijv0XRUcZCx4q3fG dVUBRdgs5AOGPfl73XYtuijEs4KwT2/hThJIoqUre+X2Cqd/TFW9orIu8o/k9Pp/ AMdi9tdvfH7pcMRd0jraZPf6lniQVgx7q7dfucn9EzB1OE/kAI5EM+9Ma8d1lqb7 Kl2hQoMuCtknZSws53nYEzYDHsNxgFyBeB8gKNa8//o38QcdH33yd8LRAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaaqqpPxSlkdPw/NSYpW+wDrgqZMB8GA1UdIwQY MBaAFOM3ebg4jQAf3L3cSKziJ/AJhQZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpkNXVEaU5BQl9jdmR4SXJPSW44QW1GQm1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85ZGIzMjYtMTE4OS00YWM5LWI0MTIt ZjI5NGQzYjEyY2ZkLzEvNHpkNXVEaU5BQl9jdmR4SXJPSW44QW1GQm1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85ZGIzMjYtMTE4OS00YWM5LWI0MTItZjI5NGQzYjEyY2Zk LzEvNHpkNXVEaU5BQl9jdmR4SXJPSW44QW1GQm1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvisx1wu AgZUwcF349fP5Bf5Eu5vRqIyNcGz6wqGBTAFdvABRzruNXhJ2ZbvsN5ikPxM852Q DXYh9rLCQ8WCuoHRksCYvhQES6SmglwQOGSs0DhW+D4iItbul/BU3Qy7t61tDFSm Ien241zE26sg5Ve2lCRQvQIDsKctBnqzPInMo4ZUfSOa/hE3a87dlu7p4vpbNGCp meqnqTRAEIWnbCN+esdEJdRG9nG6vlqvaQSO5dQ17JNalwzLK9JvgS2TooL90l6P +oMn7bD4pO+W3azUDArhZ7LogIGXloK5ubV7GUolK7k1DiLeAn4s17M6eNriYPYW Xiaie7Ngu+aFdw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:11 2025 by rpki-client