This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json) Hash identifier: RM3gqLvbNA/ZyDnxX4v5jdRXFTBeD4s7DdRnKKWJ8E0= Subject key identifier: 4B:8C:B6:6E:F7:19:62:1B:2E:EB:77:F8:76:3B:4D:FB:F6:FD:18:F2 Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e Certificate serial: 019AF19BB21C05F7B037E6E95F053F88247D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft Manifest number: 04EB Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: Codu8Wteyzftu6323qRQCJXNGRsuFsibc1QDtBnQZX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b2:1c:05:f7:b0:37:e6:e9:5f:05:3f:88:24:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=4b8cb66ef719621b2eeb77f8763b4dfbf6fd18f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:58:29:5c:ee:d9:76:48:dc:07:2c:6c:49: 13:e3:22:48:5d:ff:cd:24:9f:d0:f8:6f:e7:49:4e: 0b:4c:63:dd:08:c8:53:40:d4:d8:e3:ac:5b:c0:b7: 04:6f:08:52:f1:f0:45:0c:02:7e:82:a0:be:14:66: fa:d1:a4:53:81:8d:ab:88:bf:a1:b3:58:52:2d:91: 43:ca:32:33:3e:85:81:3b:44:b7:ab:94:4c:92:a7: 49:dd:86:b1:14:89:d5:e8:e4:ea:c5:7a:ec:b2:25: ba:47:ad:55:a4:cc:d8:3f:6d:d3:e9:3f:ee:8f:08: d2:bd:df:a7:cf:19:4f:fa:45:69:43:22:ed:c4:3b: de:b3:d8:b6:f6:d4:dd:e4:3f:90:61:18:18:c8:d7: c1:5d:18:61:9a:ae:48:b5:52:a9:e7:64:92:86:c2: 09:d2:4d:92:c2:fd:3b:38:f2:63:33:9d:56:1c:4e: ec:2e:ff:23:82:38:9b:e8:6a:d4:47:04:69:09:d5: 21:71:b8:de:83:62:d9:d5:42:1b:1e:8b:80:1c:55: 67:38:f7:82:42:19:df:96:2e:37:66:d4:84:e4:78: cb:b1:b8:62:d6:5c:41:9e:47:d4:96:ed:5b:0d:61: d0:7b:0e:57:89:98:74:7f:86:19:b6:c1:e3:32:d6: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8C:B6:6E:F7:19:62:1B:2E:EB:77:F8:76:3B:4D:FB:F6:FD:18:F2 X509v3 Authority Key Identifier: keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:83:c9:b4:87:d7:cf:b5:2a:a1:14:31:ca:80:ff:a9:45:fd: 63:24:be:4d:4f:dc:51:eb:1d:28:27:5e:33:75:f7:fe:42:90: 84:09:07:c0:02:01:6a:5a:09:df:20:1b:92:96:bf:66:8f:c5: d0:3f:32:90:97:e9:f6:6a:ee:e6:13:bf:70:37:60:b2:a4:06: 4a:57:fd:bc:0e:b3:74:03:e7:11:cc:d6:6c:b2:7a:a6:22:d1: b4:b0:e5:a4:e4:15:a2:24:d8:8a:27:cc:a4:b2:43:bf:e9:3a: 15:6d:eb:8c:3b:73:de:03:16:99:a9:b0:25:15:ec:17:78:d9: a8:22:e8:43:aa:7a:c7:ea:be:a1:3d:d1:2b:a9:e8:07:94:5a: bd:c1:eb:ba:38:2b:34:da:ae:29:47:8f:a1:fe:65:c4:61:59: a0:29:4d:73:94:07:b8:c0:75:4d:94:f7:03:15:1f:11:30:2f: ea:aa:c4:62:c9:88:a5:42:31:7c:b3:14:69:7e:7f:54:ee:1f: 93:34:b1:19:b7:c3:93:63:96:3b:c7:2d:39:48:d4:39:80:c4: 86:b3:82:80:f7:a2:fa:56:74:7e:bf:be:5c:0c:95:b9:31:81: ce:22:90:e2:51:7d:b8:87:78:99:44:8f:6b:4d:e6:df:a0:fa: af:1c:c4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7IcBfewN+bpXwU/iCR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3 NTExNmUwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD Eyg0YjhjYjY2ZWY3MTk2MjFiMmVlYjc3Zjg3NjNiNGRmYmY2ZmQxOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E9YKVzu2XZI3AcsbEkT4yJIXf/N JJ/Q+G/nSU4LTGPdCMhTQNTY46xbwLcEbwhS8fBFDAJ+gqC+FGb60aRTgY2riL+h s1hSLZFDyjIzPoWBO0S3q5RMkqdJ3YaxFInV6OTqxXrssiW6R61VpMzYP23T6T/u jwjSvd+nzxlP+kVpQyLtxDves9i29tTd5D+QYRgYyNfBXRhhmq5ItVKp52SShsIJ 0k2Swv07OPJjM51WHE7sLv8jgjib6GrURwRpCdUhcbjeg2LZ1UIbHouAHFVnOPeC Qhnfli43ZtSE5HjLsbhi1lxBnkfUlu1bDWHQew5XiZh0f4YZtsHjMtYPVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuMtm73GWIbLut3+HY7Tfv2/RjyMB8GA1UdIwQY MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYPJtIfX z7UqoRQxyoD/qUX9YyS+TU/cUesdKCdeM3X3/kKQhAkHwAIBaloJ3yAbkpa/Zo/F 0D8ykJfp9mru5hO/cDdgsqQGSlf9vA6zdAPnEczWbLJ6piLRtLDlpOQVoiTYiifM pLJDv+k6FW3rjDtz3gMWmamwJRXsF3jZqCLoQ6p6x+q+oT3RK6noB5RavcHrujgr NNquKUePof5lxGFZoClNc5QHuMB1TZT3AxUfETAv6qrEYsmIpUIxfLMUaX5/VO4f kzSxGbfDk2OWO8ctOUjUOYDEhrOCgPei+lZ0fr++XAyVuTGBziKQ4lF9uId4mUSP a03m36D6rxzEZw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:50 2025 by rpki-client