This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json) Hash identifier: gkbj2iDYPDyd3pyJI9+qkHN2VS4DvmFPl1uO6uyyZX4= Subject key identifier: EF:B8:88:09:0E:E0:9E:AC:26:6C:0E:01:AE:3E:98:65:26:49:3E:3D Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Certificate serial: 019B3456BA6550830D240832457C2B98EF12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft Manifest number: 0ADF Signing time: Fri 19 Dec 2025 02:00:57 +0000 Manifest this update: Fri 19 Dec 2025 02:00:57 +0000 Manifest next update: Sat 20 Dec 2025 02:00:57 +0000 Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: KsqDLpSpoQxMQYaIGub5UnWJTYyFPdJTFbmpeMwPkWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:ba:65:50:83:0d:24:08:32:45:7c:2b:98:ef:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Validity Not Before: Dec 19 02:00:57 2025 GMT Not After : Dec 20 02:00:57 2025 GMT Subject: CN=efb888090ee09eac266c0e01ae3e986526493e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:e8:f3:f9:d6:a6:57:48:cc:10:cb:5d:4e: 98:0e:44:1e:1f:21:fa:87:e9:fb:c8:18:18:03:0e: 4e:b0:af:8c:76:14:9b:74:d6:f9:be:30:2c:70:21: 77:19:e1:38:d1:ff:ce:31:37:d3:28:3e:a9:ad:1b: ea:3c:72:73:b6:70:ac:18:e4:a0:3c:fe:8d:ee:8b: 82:a2:c7:11:47:d9:de:31:83:bf:84:4b:92:8a:07: 0c:ca:77:58:52:42:21:10:bc:a9:62:b4:3b:da:72: 81:04:56:1b:c2:e2:5e:8d:b7:c6:f7:eb:66:c1:d2: 92:41:39:27:43:c3:01:35:43:47:b0:4f:c2:83:e6: 15:9d:a2:3b:4f:dc:34:99:7c:5e:db:8d:13:43:9b: ac:bf:1c:f3:58:d4:c7:fd:7b:df:28:f9:9c:76:69: d6:69:7a:9f:a0:0e:a7:d0:9c:e1:fa:13:00:5d:48: 7b:88:66:98:22:da:9d:79:88:ca:97:f1:99:21:09: 71:95:ae:cf:90:57:f3:b2:9a:0b:51:9c:fe:31:2e: 4a:4d:2f:b0:2f:5f:1f:29:ee:02:da:c9:86:2a:50: 2d:9a:4b:85:91:1e:f8:92:a1:d8:f0:86:df:20:30: 1a:73:b5:f1:21:50:67:21:a7:25:cf:64:aa:73:c1: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B8:88:09:0E:E0:9E:AC:26:6C:0E:01:AE:3E:98:65:26:49:3E:3D X509v3 Authority Key Identifier: keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:09:2a:97:f4:8e:e1:d1:4e:71:36:8a:49:31:10:3e:70:b8: 11:63:74:8f:b3:b8:6c:fa:74:56:ef:26:c3:04:00:4c:95:3c: 63:ff:01:65:76:fb:5f:c0:14:60:da:a5:85:f9:ca:ea:54:88: 61:1f:53:d2:e3:3c:6a:61:cb:e9:c2:91:a4:e1:0f:c7:f3:98: bd:8b:15:9d:a5:28:21:55:7b:76:aa:a7:e6:83:92:5c:d9:aa: 9d:82:98:ee:5f:89:e1:9d:61:a3:8d:4f:03:84:36:54:80:d4: eb:f1:76:c4:59:87:0a:67:f0:4e:25:de:c5:1e:46:d5:be:23: ed:da:a2:47:67:8c:29:e3:de:d2:88:67:23:19:63:4a:68:5f: 1b:0c:e2:84:75:b0:41:7a:f3:ac:ca:c1:f8:3d:64:f2:4f:90: 1d:ea:63:c1:8e:5b:b0:8c:b1:9c:af:ec:2d:68:07:34:e3:e0: a6:fa:51:77:05:23:6d:55:09:1c:41:80:dd:6e:c7:b4:a3:34: 9f:bb:75:86:0b:15:c0:f8:17:32:d8:1d:33:06:a0:3c:b3:42: 18:78:8a:7f:cf:f2:50:51:28:7d:0e:4f:64:d3:2a:ed:e0:05: 31:57:35:1d:ab:da:6a:84:1b:43:a0:92:49:14:62:b8:1b:a5: 01:b4:c0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VrplUIMNJAgyRXwrmO8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMmY2NGY3ZjY5N2FhOWI2ZTk5ODJjMGI3NmJiNzg0MjEz Mzg3NmEwHhcNMjUxMjE5MDIwMDU3WhcNMjUxMjIwMDIwMDU3WjAzMTEwLwYDVQQD EyhlZmI4ODgwOTBlZTA5ZWFjMjY2YzBlMDFhZTNlOTg2NTI2NDkzZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Lo8/nWpldIzBDLXU6YDkQeHyH6 h+n7yBgYAw5OsK+MdhSbdNb5vjAscCF3GeE40f/OMTfTKD6prRvqPHJztnCsGOSg PP6N7ouCoscRR9neMYO/hEuSigcMyndYUkIhELypYrQ72nKBBFYbwuJejbfG9+tm wdKSQTknQ8MBNUNHsE/Cg+YVnaI7T9w0mXxe240TQ5usvxzzWNTH/XvfKPmcdmnW aXqfoA6n0Jzh+hMAXUh7iGaYItqdeYjKl/GZIQlxla7PkFfzspoLUZz+MS5KTS+w L18fKe4C2smGKlAtmkuFkR74kqHY8IbfIDAac7XxIVBnIaclz2Sqc8FRnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+4iAkO4J6sJmwOAa4+mGUmST49MB8GA1UdIwQY MBaAFOEvZPf2l6qbbpmCwLdrt4QhM4dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUt NDdjMTBhNWNlNTM0LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUtNDdjMTBhNWNlNTM0 LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgkql/SO 4dFOcTaKSTEQPnC4EWN0j7O4bPp0Vu8mwwQATJU8Y/8BZXb7X8AUYNqlhfnK6lSI YR9T0uM8amHL6cKRpOEPx/OYvYsVnaUoIVV7dqqn5oOSXNmqnYKY7l+J4Z1ho41P A4Q2VIDU6/F2xFmHCmfwTiXexR5G1b4j7dqiR2eMKePe0ohnIxljSmhfGwzihHWw QXrzrMrB+D1k8k+QHepjwY5bsIyxnK/sLWgHNOPgpvpRdwUjbVUJHEGA3W7HtKM0 n7t1hgsVwPgXMtgdMwagPLNCGHiKf8/yUFEofQ5PZNMq7eAFMVc1HavaaoQbQ6CS SRRiuBulAbTAyA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:58:09 2025 by rpki-client