This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft File: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json) Hash identifier: sfdfs6U987JQ7MEdfkKbTW1RPZ2mhtwR2Okqwxd/Gok= Subject key identifier: C5:0F:FE:40:A4:14:65:84:5E:BC:98:4F:64:E8:10:F1:CB:1E:EF:8E Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32 Certificate issuer: /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32 Certificate serial: 019B22BDECFCEFEEC1428163DBB5E1DEDB24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft Manifest number: 04E9 Signing time: Mon 15 Dec 2025 16:00:30 +0000 Manifest this update: Mon 15 Dec 2025 16:00:30 +0000 Manifest next update: Tue 16 Dec 2025 16:00:30 +0000 Files and hashes: 1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: vKGEPOBk7Nx7AggSdsv8m6exljOxGC2v7jhJekHrFBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:bd:ec:fc:ef:ee:c1:42:81:63:db:b5:e1:de:db:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32 Validity Not Before: Dec 15 16:00:30 2025 GMT Not After : Dec 16 16:00:30 2025 GMT Subject: CN=c50ffe40a41465845ebc984f64e810f1cb1eef8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:15:6c:2c:7d:26:ad:c8:8c:26:c1:66:78: ee:da:5f:20:4c:c7:9e:56:eb:e9:e5:19:74:a3:d1: 6a:01:ae:09:64:bf:92:48:9b:2c:61:ab:b3:d8:00: 92:52:84:cc:f6:e2:d2:05:7c:77:0c:03:5e:9a:1b: b6:42:f0:3c:f3:3b:da:8e:e4:d3:78:fb:20:6c:5d: a0:84:21:51:80:6b:cc:fb:24:15:62:42:49:d0:43: de:4f:80:5d:f0:6a:fa:a9:07:b0:10:c8:3f:1f:f0: 04:5e:cc:0a:89:ed:47:5f:03:27:bf:05:ab:0b:79: eb:69:af:5b:e5:47:d0:19:18:4d:ae:53:b2:96:03: 18:8c:87:63:58:1a:14:d4:88:df:83:28:31:60:87: 2c:61:47:35:c7:3b:c8:5e:07:b8:a9:71:ae:f4:68: e6:ce:b4:24:77:6f:cf:5b:92:e6:0a:9b:b6:f7:0b: 2d:db:d5:9d:31:ea:e5:12:5e:95:be:d6:ba:dc:09: 6b:8c:e6:2a:3d:62:fa:05:c3:cb:4b:89:15:f6:c6: cc:41:0e:85:ab:43:4e:1a:1c:62:f6:9e:e5:ed:be: a3:4d:94:1a:07:1f:c8:c6:e7:48:6d:c7:a1:05:af: a0:fe:68:ae:8b:57:ad:13:b0:85:2a:88:5a:b7:4f: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0F:FE:40:A4:14:65:84:5E:BC:98:4F:64:E8:10:F1:CB:1E:EF:8E X509v3 Authority Key Identifier: keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:36:8d:0c:53:47:dc:f2:73:d7:5f:e2:2f:2d:50:1a:54:7e: e9:b9:3c:71:d1:90:d0:00:fd:b6:8c:00:d1:bd:78:ce:04:d8: b7:5d:34:ea:b7:4c:bb:31:dc:b4:37:8e:96:a2:24:9e:b7:75: a2:60:29:09:60:3b:d2:5b:1a:4f:9e:3e:9c:b2:8b:c1:e3:f2: 05:e1:3b:5f:1d:71:83:b5:eb:88:95:06:04:89:5c:59:58:99: 6a:fe:18:cc:9b:c1:96:2b:1f:22:c0:9a:e0:4a:6f:76:6d:1e: a7:84:5b:cc:1e:59:24:17:36:0e:f1:09:bc:a4:86:15:1a:02: 82:a3:3a:32:2a:f0:af:0f:9e:9a:1d:49:b0:35:59:0a:47:6f: 52:5e:28:57:e8:20:b5:5d:c3:e4:96:53:4a:bb:d3:60:1b:11: a9:fc:1d:3f:0d:12:aa:4b:0e:d0:bc:1b:b4:9c:2d:a5:0a:24: 6d:8d:99:b1:85:6c:6e:9a:e7:8a:f6:7b:bf:43:aa:e8:cc:3c: ec:27:e6:23:70:5e:9f:a7:b1:ce:74:98:1f:6f:96:8d:81:9d: b2:58:d9:b6:7e:dc:f2:ae:9b:04:8f:ff:b2:6e:45:fc:86:e6: d6:16:ca:a9:dd:da:12:ef:05:8b:13:a3:ef:0e:ca:35:91:b3: 99:3f:a1:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivez87+7BQoFj27Xh3tskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODk3ZGJmZjAxYWZkOWQxZTc3YjZmOWZlMDhkOTc3NDJm NTZkMzIwHhcNMjUxMjE1MTYwMDMwWhcNMjUxMjE2MTYwMDMwWjAzMTEwLwYDVQQD EyhjNTBmZmU0MGE0MTQ2NTg0NWViYzk4NGY2NGU4MTBmMWNiMWVlZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6IVbCx9Jq3IjCbBZnju2l8gTMee Vuvp5Rl0o9FqAa4JZL+SSJssYauz2ACSUoTM9uLSBXx3DANemhu2QvA88zvajuTT ePsgbF2ghCFRgGvM+yQVYkJJ0EPeT4Bd8Gr6qQewEMg/H/AEXswKie1HXwMnvwWr C3nraa9b5UfQGRhNrlOylgMYjIdjWBoU1IjfgygxYIcsYUc1xzvIXge4qXGu9Gjm zrQkd2/PW5LmCpu29wst29WdMerlEl6Vvta63AlrjOYqPWL6BcPLS4kV9sbMQQ6F q0NOGhxi9p7l7b6jTZQaBx/IxudIbcehBa+g/miui1etE7CFKohat09hGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUP/kCkFGWEXryYT2ToEPHLHu+OMB8GA1UdIwQY MBaAFB+Jfb/wGv2dHne2+f4I2XdC9W0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lNDAxZDAtNjlmZS00MzI2LWEwNDIt NDExYzNkMmQwNjllLzEvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lNDAxZDAtNjlmZS00MzI2LWEwNDItNDExYzNkMmQwNjll LzEvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTaNDFNH 3PJz11/iLy1QGlR+6bk8cdGQ0AD9towA0b14zgTYt1006rdMuzHctDeOlqIknrd1 omApCWA70lsaT54+nLKLwePyBeE7Xx1xg7XriJUGBIlcWViZav4YzJvBlisfIsCa 4Epvdm0ep4RbzB5ZJBc2DvEJvKSGFRoCgqM6Mirwrw+emh1JsDVZCkdvUl4oV+gg tV3D5JZTSrvTYBsRqfwdPw0SqksO0LwbtJwtpQokbY2ZsYVsbprnivZ7v0Oq6Mw8 7CfmI3Ben6exznSYH2+WjYGdsljZtn7c8q6bBI//sm5F/Ibm1hbKqd3aEu8FixOj 7w7KNZGzmT+hLQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:17:11 2025 by rpki-client