This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json) Hash identifier: 3XuAH8B0DMXO54VEytlSKu1RnbgcVIpRZdiuR+gJH/c= Subject key identifier: AB:4B:44:77:60:48:8E:91:FD:9D:AF:15:23:62:0B:44:EB:5E:21:14 Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf Certificate serial: 019AF31D37CC1509ABA2CF0524D7F1C2033F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: K3DfDC4v4TBCtQiNy1JgbPSjHkAJ5q9XartiINMnd2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:37:cc:15:09:ab:a2:cf:05:24:d7:f1:c2:03:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=ab4b447760488e91fd9daf1523620b44eb5e2114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:fa:0c:2e:2d:13:64:db:54:86:6d:48:31: b6:e6:c5:77:88:0e:99:da:5c:7f:e6:4d:cc:4e:6e: dd:1f:9d:38:2a:5e:fc:a1:fa:07:2b:43:b0:ca:e6: a7:3b:ee:06:dc:a6:5e:7a:77:8b:d5:86:8f:8d:2a: f9:b2:fe:c6:3f:f3:3c:4b:2e:e5:61:93:dd:95:de: cb:3d:18:12:db:dc:8f:f8:00:ba:82:cc:de:c7:a9: 35:23:01:7a:c9:fc:41:ce:b6:33:fb:46:98:f9:72: 57:cd:8b:86:20:fa:b9:62:c2:73:26:f7:92:42:ae: 16:14:41:ce:10:3e:63:48:95:b3:fb:c7:09:a2:fc: c9:6e:7a:0a:99:5d:d3:e9:da:68:e1:44:5c:79:14: a2:f0:91:cd:b3:07:e5:6d:b6:bd:ef:9e:13:90:eb: 4b:c2:b3:91:f7:c9:a5:9b:21:96:af:d9:b6:17:f9: 7c:b5:97:53:54:97:5b:77:91:0a:2a:17:8f:6b:37: af:80:c8:3a:e5:5f:99:4b:00:4e:9b:e3:ed:ce:66: 2d:2a:e7:db:ca:fb:4c:c6:ea:33:fa:3b:b0:1a:00: b0:61:49:bd:4c:75:4a:93:48:7e:bd:f9:9a:3e:94: fa:7e:71:38:3d:93:ad:97:3f:dd:d7:58:7e:b1:cb: e5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:44:77:60:48:8E:91:FD:9D:AF:15:23:62:0B:44:EB:5E:21:14 X509v3 Authority Key Identifier: keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:85:ed:8c:cb:e9:9d:f0:3c:87:35:1a:97:0b:78:29:1a:db: 3e:2d:a3:f6:68:48:09:8a:e7:62:df:53:7d:69:41:1a:b8:b1: 46:16:6a:55:a3:82:a4:6f:b3:bf:88:8f:d2:77:55:8d:ef:ec: eb:4b:2a:78:8a:2f:42:c0:b9:53:3e:d0:9e:d9:d0:b6:b7:dd: d0:78:62:b7:00:dd:f8:e9:ec:d0:d6:42:fa:d2:f8:77:9e:46: dd:9b:02:ce:3a:83:b3:b0:de:b1:80:0c:29:c4:3e:4f:4b:b5: 25:30:03:3e:2e:c6:28:12:79:b6:ad:20:12:b6:8d:0d:4f:ae: 85:90:52:95:b8:dc:ba:de:ae:21:11:c6:30:be:68:14:f4:99: 7f:67:46:69:b1:03:21:bd:03:24:f7:5f:c6:14:05:27:59:af: 72:3d:e1:f7:1f:5f:86:48:d3:21:03:e3:d6:76:6f:be:96:82: 78:08:30:7b:6e:ba:7b:d4:27:1a:e7:fd:48:b9:86:2d:15:26: e6:c8:b8:d5:ae:f9:41:84:31:0f:ec:c2:0d:18:58:56:6e:2f: cb:c7:a9:3f:8c:27:1c:31:70:a4:d5:ae:3f:ee:2a:01:1a:94: 4a:4c:dc:72:b7:d5:1c:db:ba:b3:16:1c:8b:96:2d:3e:97:8f: ee:e9:1a:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTfMFQmros8FJNfxwgM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODhiZGI5Y2Q3ZjZiYTRhOGY2MThjNWE0MmE3NmFhZTg5 MjU5Y2YwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD EyhhYjRiNDQ3NzYwNDg4ZTkxZmQ5ZGFmMTUyMzYyMGI0NGViNWUyMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKz6DC4tE2TbVIZtSDG25sV3iA6Z 2lx/5k3MTm7dH504Kl78ofoHK0OwyuanO+4G3KZeeneL1YaPjSr5sv7GP/M8Sy7l YZPdld7LPRgS29yP+AC6gszex6k1IwF6yfxBzrYz+0aY+XJXzYuGIPq5YsJzJveS Qq4WFEHOED5jSJWz+8cJovzJbnoKmV3T6dpo4URceRSi8JHNswflbba9754TkOtL wrOR98mlmyGWr9m2F/l8tZdTVJdbd5EKKhePazevgMg65V+ZSwBOm+PtzmYtKufb yvtMxuoz+juwGgCwYUm9THVKk0h+vfmaPpT6fnE4PZOtlz/d11h+scvlMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtLRHdgSI6R/Z2vFSNiC0TrXiEUMB8GA1UdIwQY MBaAFHOIvbnNf2ukqPYYxaQqdqroklnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2U0NDAtODY1ZS00ZjRmLTlmYzkt MTA4ZDViMTQ4ZjBjLzEvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yM2U0NDAtODY1ZS00ZjRmLTlmYzktMTA4ZDViMTQ4ZjBj LzEvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoXtjMvp nfA8hzUalwt4KRrbPi2j9mhICYrnYt9TfWlBGrixRhZqVaOCpG+zv4iP0ndVje/s 60sqeIovQsC5Uz7QntnQtrfd0HhitwDd+Ons0NZC+tL4d55G3ZsCzjqDs7DesYAM KcQ+T0u1JTADPi7GKBJ5tq0gEraNDU+uhZBSlbjcut6uIRHGML5oFPSZf2dGabED Ib0DJPdfxhQFJ1mvcj3h9x9fhkjTIQPj1nZvvpaCeAgwe266e9QnGuf9SLmGLRUm 5si41a75QYQxD+zCDRhYVm4vy8epP4wnHDFwpNWuP+4qARqUSkzccrfVHNu6sxYc i5YtPpeP7ukaDg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:14 2025 by rpki-client