This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json) Hash identifier: 8Uy7qXEzPwJFYlRYCvfKtrQlZNJhMppRB/ngLO+ZA4I= Subject key identifier: 5A:A1:95:65:47:13:B7:DD:B8:B6:03:39:D3:21:51:D0:EA:65:C6:AD Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72 Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172 Certificate serial: 019AF38965EA735A17005586A63837A54030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft Manifest number: 1120 Signing time: Sat 06 Dec 2025 12:00:59 +0000 Manifest this update: Sat 06 Dec 2025 12:00:59 +0000 Manifest next update: Sun 07 Dec 2025 12:00:59 +0000 Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: c7nq/Soddpt5sRIrha3D9b1kGgkk4+VQp+7mky9w8Qg=) 2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:65:ea:73:5a:17:00:55:86:a6:38:37:a5:40:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172 Validity Not Before: Dec 6 12:00:59 2025 GMT Not After : Dec 7 12:00:59 2025 GMT Subject: CN=5aa195654713b7ddb8b60339d32151d0ea65c6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:9f:50:1c:93:f6:41:a0:f9:4e:9c:44:e9: 63:7d:72:82:f6:aa:f7:f7:3a:40:58:6f:4a:b7:28: e2:cc:3d:53:9e:8b:23:23:c7:f9:67:7a:92:1e:59: 19:09:bd:d8:4f:a4:00:21:97:b6:f3:ba:14:fe:71: 5e:e6:24:c8:5f:72:4c:05:13:62:bf:6a:e6:9f:1f: e8:23:77:64:f7:4f:b8:3d:1f:92:30:0a:27:a9:f5: 27:80:bf:23:f5:66:35:aa:5a:31:35:2c:9e:14:24: 58:75:84:bd:b6:8b:93:d2:2e:65:0a:c5:88:ed:95: ff:c9:f5:b3:2a:96:df:dc:96:6c:f7:bd:e8:a5:42: 70:5e:92:1b:72:dd:b0:6d:67:d8:ba:4c:81:62:88: 56:a9:c7:43:a3:7d:4d:eb:35:07:18:b6:a8:81:6a: 55:ec:f1:9a:29:fa:95:58:ae:3d:60:21:6d:d5:64: ed:be:56:f8:fb:93:b1:04:3b:96:3b:2a:f7:06:8f: 8d:e0:01:e5:be:d4:a1:23:6f:17:6b:4e:37:b3:02: 2b:d0:e0:1d:93:ae:90:7d:81:7e:72:e3:58:1a:e0: 21:39:bd:eb:33:7c:5b:f1:dc:91:bf:98:18:78:07: a6:c5:f2:a1:c0:27:00:68:75:82:cb:44:3d:29:28: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:95:65:47:13:B7:DD:B8:B6:03:39:D3:21:51:D0:EA:65:C6:AD X509v3 Authority Key Identifier: keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:20:d5:0f:b4:e7:e4:fc:62:b9:bf:d4:08:1b:45:5a:11:2f: b4:0b:5f:a0:81:9d:b7:4b:da:d2:65:36:3d:21:1a:ec:f3:b5: ec:c6:08:f5:a8:80:74:82:bb:65:c7:f9:b6:f3:33:b6:b4:5d: 84:9a:67:8d:be:12:86:0d:23:cf:bb:32:34:39:cd:e2:25:7d: e5:57:95:1a:7f:62:ce:ba:aa:45:db:17:44:f4:b1:73:f0:b4: ca:4e:68:ce:f2:ca:6f:b0:f7:c0:43:c3:0b:b5:92:1d:05:c5: 6b:b9:51:ff:61:3e:70:05:19:66:3f:5a:0a:9b:7b:a3:18:34: 16:03:e8:4d:95:78:97:f6:ac:ca:6c:12:af:a2:b5:27:ed:ef: e8:38:48:dc:76:04:fb:dd:35:64:66:90:54:16:4e:75:70:41: a6:54:32:90:a5:89:05:c4:0c:b8:e8:c0:f4:dc:55:f0:54:3e: cb:5a:73:3b:17:7c:56:5a:b5:63:d8:1b:29:9b:b4:a4:28:1d: 61:b6:e0:e4:44:07:e0:3e:29:d1:b1:65:21:fe:e6:cb:2c:a1: 29:af:7c:6e:2c:5b:22:f5:5b:00:d3:d1:04:75:f2:f4:87:0f: c0:84:52:64:f0:83:95:7d:d1:e9:b9:d0:e7:cd:3e:cb:94:a1: 5f:1b:63:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWXqc1oXAFWGpjg3pUAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1 YjcxNzIwHhcNMjUxMjA2MTIwMDU5WhcNMjUxMjA3MTIwMDU5WjAzMTEwLwYDVQQD Eyg1YWExOTU2NTQ3MTNiN2RkYjhiNjAzMzlkMzIxNTFkMGVhNjVjNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MyfUByT9kGg+U6cROljfXKC9qr3 9zpAWG9KtyjizD1TnosjI8f5Z3qSHlkZCb3YT6QAIZe287oU/nFe5iTIX3JMBRNi v2rmnx/oI3dk90+4PR+SMAonqfUngL8j9WY1qloxNSyeFCRYdYS9touT0i5lCsWI 7ZX/yfWzKpbf3JZs973opUJwXpIbct2wbWfYukyBYohWqcdDo31N6zUHGLaogWpV 7PGaKfqVWK49YCFt1WTtvlb4+5OxBDuWOyr3Bo+N4AHlvtShI28Xa043swIr0OAd k66QfYF+cuNYGuAhOb3rM3xb8dyRv5gYeAemxfKhwCcAaHWCy0Q9KSgHnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqhlWVHE7fduLYDOdMhUdDqZcatMB8GA1UdIwQY MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViDVD7Tn 5Pxiub/UCBtFWhEvtAtfoIGdt0va0mU2PSEa7PO17MYI9aiAdIK7Zcf5tvMztrRd hJpnjb4Shg0jz7syNDnN4iV95VeVGn9izrqqRdsXRPSxc/C0yk5ozvLKb7D3wEPD C7WSHQXFa7lR/2E+cAUZZj9aCpt7oxg0FgPoTZV4l/asymwSr6K1J+3v6DhI3HYE +901ZGaQVBZOdXBBplQykKWJBcQMuOjA9NxV8FQ+y1pzOxd8Vlq1Y9gbKZu0pCgd Ybbg5EQH4D4p0bFlIf7myyyhKa98bixbIvVbANPRBHXy9IcPwIRSZPCDlX3R6bnQ 580+y5ShXxtjUw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:34:21 2025 by rpki-client