This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json) Hash identifier: 7ps7GZMGH1DRp2vusC7sorRMmmojax7h0U4ZP6Oxky0= Subject key identifier: E3:14:9B:AD:9F:59:39:AA:B8:DB:4A:7A:34:B5:73:97:3A:40:D3:F3 Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Certificate serial: 019AF0BF406CC0E9D6790347FBB84E32DA59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft Manifest number: 0ABC Signing time: Fri 05 Dec 2025 23:00:56 +0000 Manifest this update: Fri 05 Dec 2025 23:00:56 +0000 Manifest next update: Sat 06 Dec 2025 23:00:56 +0000 Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: U9weGOJBiKcaSLgt90cVEXbbaGDJXA79zEOEz9ORb50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:40:6c:c0:e9:d6:79:03:47:fb:b8:4e:32:da:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Validity Not Before: Dec 5 23:00:56 2025 GMT Not After : Dec 6 23:00:56 2025 GMT Subject: CN=e3149bad9f5939aab8db4a7a34b573973a40d3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:29:08:2b:75:e6:33:2b:1a:a5:ac:19:a6: f8:58:10:b9:ff:50:5d:30:ec:0c:2d:a0:63:17:81: ca:12:76:6b:21:35:44:41:6b:b6:26:e3:5c:bd:77: 78:48:05:7d:e8:10:6d:a0:36:38:23:1e:de:d8:c0: e5:65:7c:7d:19:57:ae:62:85:ab:47:b1:86:57:4f: 3e:f4:a2:6b:ab:e5:bd:fd:91:d4:ec:1c:0d:e6:f9: 15:34:78:d9:1d:d0:95:a9:aa:19:07:83:f5:97:fb: b3:b9:f5:b1:a3:7f:44:ba:8c:44:dc:5c:43:fa:23: 98:29:17:fd:7c:46:b9:8e:cf:48:71:26:95:8b:db: 43:e3:29:a0:70:65:18:19:c9:2d:64:41:56:a1:0c: 24:2a:fb:49:bf:8c:ae:6d:70:d6:97:b6:b0:67:14: e7:1f:ec:c8:ce:c3:38:45:31:29:06:c1:62:75:73: 3a:6a:ca:c1:e4:b9:1c:f3:27:a0:c1:75:e9:2a:68: 78:9a:eb:63:71:b9:0a:34:e1:e3:1a:c7:61:20:02: ca:34:00:92:65:bf:c8:af:96:f8:16:65:d6:14:3d: 68:87:07:56:c3:4e:44:a4:97:ef:fd:1b:34:b8:56: 3e:67:d2:95:38:d5:16:c2:46:59:73:9a:5f:ab:66: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:14:9B:AD:9F:59:39:AA:B8:DB:4A:7A:34:B5:73:97:3A:40:D3:F3 X509v3 Authority Key Identifier: keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:51:6c:e7:7e:f6:cf:f1:17:fc:34:73:d9:1d:33:24:d8:af: c1:92:01:00:b3:5e:b1:66:7c:88:93:e7:2f:ba:29:cf:13:38: 5c:f5:8d:93:1f:f4:13:6d:73:11:8d:4c:f7:e7:fb:b4:05:83: 89:4a:d7:4a:1e:1f:25:06:d6:65:fc:cb:f6:84:02:de:ab:4e: a6:71:f1:51:50:7d:b0:33:fd:09:66:8a:50:44:59:66:83:c2: 00:cd:d8:b3:e4:bb:af:06:18:63:bd:44:83:9f:f2:89:24:b0: 98:c3:2e:4d:61:da:b3:91:15:d7:42:2c:fe:d9:d2:0a:92:14: 88:ae:1f:44:0b:f7:68:39:ed:43:60:92:50:b6:87:44:06:a9: 43:d8:a4:78:b3:a4:cb:e4:29:5a:64:8f:da:8d:43:93:ca:8a: 9c:eb:f4:80:1c:6c:b8:4c:18:99:21:98:c9:4e:2d:06:a2:15: 7c:33:30:c1:fb:dd:91:41:fb:89:bc:18:62:80:3b:3f:a4:fa: 18:98:63:1d:70:ea:24:12:03:ce:d0:84:f8:96:1b:38:40:20: 51:c4:08:16:17:49:a8:d8:31:13:8d:bb:f9:eb:72:35:e2:dd: 59:ad:d0:70:3f:57:7c:32:bc:af:21:ff:a1:ca:cb:30:ee:4c: f4:ea:df:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0BswOnWeQNH+7hOMtpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMmY2NGY3ZjY5N2FhOWI2ZTk5ODJjMGI3NmJiNzg0MjEz Mzg3NmEwHhcNMjUxMjA1MjMwMDU2WhcNMjUxMjA2MjMwMDU2WjAzMTEwLwYDVQQD EyhlMzE0OWJhZDlmNTkzOWFhYjhkYjRhN2EzNGI1NzM5NzNhNDBkM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweopCCt15jMrGqWsGab4WBC5/1Bd MOwMLaBjF4HKEnZrITVEQWu2JuNcvXd4SAV96BBtoDY4Ix7e2MDlZXx9GVeuYoWr R7GGV08+9KJrq+W9/ZHU7BwN5vkVNHjZHdCVqaoZB4P1l/uzufWxo39EuoxE3FxD +iOYKRf9fEa5js9IcSaVi9tD4ymgcGUYGcktZEFWoQwkKvtJv4yubXDWl7awZxTn H+zIzsM4RTEpBsFidXM6asrB5Lkc8yegwXXpKmh4mutjcbkKNOHjGsdhIALKNACS Zb/Ir5b4FmXWFD1ohwdWw05EpJfv/Rs0uFY+Z9KVONUWwkZZc5pfq2b05QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMUm62fWTmquNtKejS1c5c6QNPzMB8GA1UdIwQY MBaAFOEvZPf2l6qbbpmCwLdrt4QhM4dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUt NDdjMTBhNWNlNTM0LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUtNDdjMTBhNWNlNTM0 LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1Fs5372 z/EX/DRz2R0zJNivwZIBALNesWZ8iJPnL7opzxM4XPWNkx/0E21zEY1M9+f7tAWD iUrXSh4fJQbWZfzL9oQC3qtOpnHxUVB9sDP9CWaKUERZZoPCAM3Ys+S7rwYYY71E g5/yiSSwmMMuTWHas5EV10Is/tnSCpIUiK4fRAv3aDntQ2CSULaHRAapQ9ikeLOk y+QpWmSP2o1Dk8qKnOv0gBxsuEwYmSGYyU4tBqIVfDMwwfvdkUH7ibwYYoA7P6T6 GJhjHXDqJBIDztCE+JYbOEAgUcQIFhdJqNgxE427+etyNeLdWa3QcD9XfDK8ryH/ ocrLMO5M9OrfIA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:11 2025 by rpki-client