This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json) Hash identifier: mstC7FCAjXX+sZacT/NAniCr7NYKRSkqDqrSEiBHnBA= Subject key identifier: C0:7C:67:8E:CC:0B:20:F1:A0:50:44:90:11:78:CB:8E:F4:F1:C4:6C Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7 Certificate serial: 019AF31CEEB6908F62C272708E21A0B1E89E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft Manifest number: 1492 Signing time: Sat 06 Dec 2025 10:02:30 +0000 Manifest this update: Sat 06 Dec 2025 10:02:30 +0000 Manifest next update: Sun 07 Dec 2025 10:02:30 +0000 Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: w+hNcgRsjV0Eo+71q+UgHYhfzvR3WPQ8aQ0CHK2yiuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ee:b6:90:8f:62:c2:72:70:8e:21:a0:b1:e8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7 Validity Not Before: Dec 6 10:02:30 2025 GMT Not After : Dec 7 10:02:30 2025 GMT Subject: CN=c07c678ecc0b20f1a05044901178cb8ef4f1c46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:42:15:0a:89:ed:71:75:81:74:1f:70:c9: b8:cb:49:e5:fc:d2:98:b0:3d:ee:7b:25:a8:b8:63: 58:18:ff:1e:03:f1:fb:ec:73:c8:24:35:2f:92:fd: 0a:3c:7a:fa:9c:19:6b:de:9b:44:47:58:e0:31:7d: 11:03:34:df:a8:ae:20:a2:06:75:80:fc:0e:08:e1: ee:88:1c:7f:f8:82:ee:bf:82:47:0a:29:87:94:0c: 82:4f:9b:5a:eb:30:c2:a9:30:9d:fd:2c:34:fa:fb: 74:44:54:22:aa:c5:5f:53:41:47:f2:f6:68:bc:32: 1d:0c:ee:f0:e6:d5:c2:15:06:d7:9b:cf:78:da:b2: 4d:40:88:e5:13:99:34:e2:da:72:da:c7:75:32:ed: 6c:09:90:41:f4:e4:e8:30:bf:f2:23:fb:58:8c:cb: cf:eb:0b:7b:37:7b:4b:49:f8:f7:42:a7:40:87:70: 8b:a5:8f:30:ef:d6:55:ac:5e:cc:e0:28:e8:39:d7: 93:c3:65:d3:64:46:1d:ea:e6:00:7c:b3:0d:89:c3: 45:4d:73:48:c2:89:dc:4e:79:89:f3:c5:eb:9b:fe: b4:32:0c:07:6b:34:d6:ac:46:76:85:f1:aa:1b:19: d8:6c:96:da:0e:8d:89:e0:36:13:ba:a2:7f:7e:1a: 65:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7C:67:8E:CC:0B:20:F1:A0:50:44:90:11:78:CB:8E:F4:F1:C4:6C X509v3 Authority Key Identifier: keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:44:7b:fa:a2:8a:35:e3:fd:32:63:30:b1:28:9a:28:0e:cd: c0:18:7e:80:dd:40:7c:a5:8d:76:57:12:16:64:92:04:4c:43: 3f:bb:57:74:3a:e7:a8:e4:fe:e8:be:ac:b6:2c:fc:81:1a:c1: d3:d4:b5:4f:3c:57:60:80:73:be:4f:26:18:2f:c7:61:e0:63: 15:29:ea:04:32:a4:c0:db:a0:af:31:00:78:7d:e8:4a:f7:03: fc:f3:84:64:85:b5:54:9f:82:31:ea:96:fd:f2:2c:d3:0d:ca: 88:f8:d9:46:63:f9:1d:16:69:f5:76:df:67:93:30:00:11:af: 4e:f5:52:77:0e:0d:b9:a1:7d:2d:64:72:6a:99:84:b1:97:4e: 54:34:88:09:4d:0e:27:08:3e:d0:35:f1:f2:8e:21:4c:97:6f: 36:f4:d9:45:32:ed:59:5a:dc:96:d3:ab:bc:ab:90:f9:68:5d: 05:21:d9:68:91:90:02:b8:47:82:5c:54:e4:bd:e0:de:a8:23: 4b:0e:2a:7f:57:f5:42:68:4a:25:2e:d0:9a:46:11:ac:f4:31: ee:74:57:68:0b:1d:59:ab:14:f8:9b:da:4b:49:ae:b6:ea:51: 45:92:5a:81:5f:8f:8f:4d:a9:ae:7a:fd:0f:4b:88:69:71:6a: 2d:1b:0a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHO62kI9iwnJwjiGgseieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWY2MTUxYTM0N2M3OTIyYWM3Y2Y0Njk5MjUzNDQzMzBk NzI0ZjcwHhcNMjUxMjA2MTAwMjMwWhcNMjUxMjA3MTAwMjMwWjAzMTEwLwYDVQQD EyhjMDdjNjc4ZWNjMGIyMGYxYTA1MDQ0OTAxMTc4Y2I4ZWY0ZjFjNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXFCFQqJ7XF1gXQfcMm4y0nl/NKY sD3ueyWouGNYGP8eA/H77HPIJDUvkv0KPHr6nBlr3ptER1jgMX0RAzTfqK4gogZ1 gPwOCOHuiBx/+ILuv4JHCimHlAyCT5ta6zDCqTCd/Sw0+vt0RFQiqsVfU0FH8vZo vDIdDO7w5tXCFQbXm8942rJNQIjlE5k04tpy2sd1Mu1sCZBB9OToML/yI/tYjMvP 6wt7N3tLSfj3QqdAh3CLpY8w79ZVrF7M4CjoOdeTw2XTZEYd6uYAfLMNicNFTXNI woncTnmJ88Xrm/60MgwHazTWrEZ2hfGqGxnYbJbaDo2J4DYTuqJ/fhplFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB8Z47MCyDxoFBEkBF4y4708cRsMB8GA1UdIwQY MBaAFOGfYVGjR8eSKsfPRpklNEMw1yT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYt NDJkNDkzOWEwNTE5LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYtNDJkNDkzOWEwNTE5 LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0R7+qKK NeP9MmMwsSiaKA7NwBh+gN1AfKWNdlcSFmSSBExDP7tXdDrnqOT+6L6stiz8gRrB 09S1TzxXYIBzvk8mGC/HYeBjFSnqBDKkwNugrzEAeH3oSvcD/POEZIW1VJ+CMeqW /fIs0w3KiPjZRmP5HRZp9XbfZ5MwABGvTvVSdw4NuaF9LWRyapmEsZdOVDSICU0O Jwg+0DXx8o4hTJdvNvTZRTLtWVrcltOrvKuQ+WhdBSHZaJGQArhHglxU5L3g3qgj Sw4qf1f1QmhKJS7QmkYRrPQx7nRXaAsdWasU+JvaS0mutupRRZJagV+Pj02prnr9 D0uIaXFqLRsKfA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:38 2025 by rpki-client