This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json) Hash identifier: ltoOH2SRr+sR2t26NU3hxsczClYtnMHWupOyeKUQ7U0= Subject key identifier: 2C:9A:24:E9:1D:77:24:CA:67:F0:A7:41:B6:F8:F1:31:E6:C4:CE:65 Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f Certificate serial: 019B3CEBF2D8749F4706F9D52AB35160A61A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft Manifest number: 1657 Signing time: Sat 20 Dec 2025 18:00:54 +0000 Manifest this update: Sat 20 Dec 2025 18:00:54 +0000 Manifest next update: Sun 21 Dec 2025 18:00:54 +0000 Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: ORAyOUu6txO/dUuixGtr/cA9uRkIwJj51UNkUL8RkWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f2:d8:74:9f:47:06:f9:d5:2a:b3:51:60:a6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f Validity Not Before: Dec 20 18:00:54 2025 GMT Not After : Dec 21 18:00:54 2025 GMT Subject: CN=2c9a24e91d7724ca67f0a741b6f8f131e6c4ce65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:d3:90:ea:46:0e:4a:35:05:a9:83:a0:a4: 92:15:38:58:36:e2:8f:18:be:e8:4d:a4:4e:ce:3b: 4c:37:6c:3a:e9:b8:83:a7:06:e8:c8:df:36:f7:ee: db:84:ad:ed:59:6f:33:a0:7c:09:22:6a:39:a9:e5: e6:37:28:2e:66:df:90:b6:24:97:2d:44:b9:72:4b: 07:92:35:b9:d2:e9:88:fe:cb:7e:35:15:06:e8:87: 2d:db:31:ab:e1:9d:e3:06:6e:93:ec:5b:06:e7:df: b1:0a:f4:8b:02:f1:51:e1:80:a9:2d:3e:60:b6:c3: 33:57:8c:e5:19:44:5b:27:9e:03:bf:39:8d:06:fa: 96:76:1b:ee:d2:ef:be:ce:8c:7d:12:07:19:86:e0: f7:1c:8a:47:af:69:2f:b6:f3:9e:2d:2b:73:f5:90: 9a:41:24:95:36:4f:8f:35:69:a0:e3:57:55:25:57: 0b:bf:0b:21:7f:83:50:a1:57:f3:ea:2e:9f:12:eb: b3:f1:c6:ce:9f:1c:f3:f6:d8:9e:81:e5:0a:81:64: 71:fd:ac:79:27:b8:c9:c6:12:a2:dc:f6:a6:60:56: cc:76:b9:cb:35:0c:46:19:51:b8:2e:60:b6:a5:98: 8e:0f:a0:fb:77:70:c2:b3:7a:a7:6d:40:0c:34:59: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:24:E9:1D:77:24:CA:67:F0:A7:41:B6:F8:F1:31:E6:C4:CE:65 X509v3 Authority Key Identifier: keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:84:e2:db:a2:d2:1c:e1:b6:2e:70:0b:16:9e:2e:3b:29:fb: 38:92:b3:5d:bb:7b:07:d1:5a:cd:65:ae:ce:74:0e:d1:12:0e: 1a:3c:3d:07:d7:c5:60:23:52:6a:3f:b7:fb:58:29:09:ea:2d: ed:5b:03:28:1e:92:00:5b:42:5a:3c:43:13:32:0f:e8:95:c6: dd:15:fa:19:ca:bb:1b:05:86:ce:8f:4c:08:58:c0:f6:f6:7b: 4d:e2:04:b8:5d:98:c1:e5:cb:26:a8:b7:cf:bc:e4:e8:dd:83: 64:8a:b1:e6:8a:d2:8b:8b:be:e2:24:dc:6d:a1:c9:c9:15:f8: 47:77:82:68:9e:c6:cf:bd:ed:28:f9:56:18:4f:e3:f5:e9:ee: 72:39:50:0b:f2:fd:09:21:43:04:86:89:ca:cc:15:82:85:ef: 7c:58:97:83:98:c4:71:a0:12:0b:44:17:ec:98:34:aa:86:8c: a0:3f:62:e2:47:13:3e:b7:86:ef:c7:98:2b:f8:e3:9e:56:97: 8e:df:e7:35:d6:0a:5b:4c:63:99:1f:fc:1b:bc:53:dd:61:af: ed:fc:a4:a1:7a:bd:45:7d:59:c1:3b:68:87:ac:a3:f3:98:68: 4f:27:44:04:c2:58:8d:05:88:29:8b:f8:a9:9e:48:03:7d:3f: 47:3b:a4:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/LYdJ9HBvnVKrNRYKYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOGNkNWJkYTM0NjEwYWRhZmVkMWZlZDQzYTIyMzQ1ZjA3 NjdlN2YwHhcNMjUxMjIwMTgwMDU0WhcNMjUxMjIxMTgwMDU0WjAzMTEwLwYDVQQD EygyYzlhMjRlOTFkNzcyNGNhNjdmMGE3NDFiNmY4ZjEzMWU2YzRjZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiurTkOpGDko1BamDoKSSFThYNuKP GL7oTaROzjtMN2w66biDpwboyN829+7bhK3tWW8zoHwJImo5qeXmNyguZt+QtiSX LUS5cksHkjW50umI/st+NRUG6Ict2zGr4Z3jBm6T7FsG59+xCvSLAvFR4YCpLT5g tsMzV4zlGURbJ54DvzmNBvqWdhvu0u++zox9EgcZhuD3HIpHr2kvtvOeLStz9ZCa QSSVNk+PNWmg41dVJVcLvwshf4NQoVfz6i6fEuuz8cbOnxzz9tiegeUKgWRx/ax5 J7jJxhKi3PamYFbMdrnLNQxGGVG4LmC2pZiOD6D7d3DCs3qnbUAMNFnQMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyaJOkddyTKZ/CnQbb48THmxM5lMB8GA1UdIwQY MBaAFB+M1b2jRhCtr+0f7UOiI0Xwdn5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUt ZWU2ZGJmYTk4ZDJlLzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUtZWU2ZGJmYTk4ZDJl LzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoTi26LS HOG2LnALFp4uOyn7OJKzXbt7B9FazWWuznQO0RIOGjw9B9fFYCNSaj+3+1gpCeot 7VsDKB6SAFtCWjxDEzIP6JXG3RX6Gcq7GwWGzo9MCFjA9vZ7TeIEuF2YweXLJqi3 z7zk6N2DZIqx5orSi4u+4iTcbaHJyRX4R3eCaJ7Gz73tKPlWGE/j9enucjlQC/L9 CSFDBIaJyswVgoXvfFiXg5jEcaASC0QX7Jg0qoaMoD9i4kcTPreG78eYK/jjnlaX jt/nNdYKW0xjmR/8G7xT3WGv7fykoXq9RX1ZwTtoh6yj85hoTydEBMJYjQWIKYv4 qZ5IA30/RzukFg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:16:37 2025 by rpki-client