This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft File: C4JANE7t1v9gI0SCv8MAHW4boJk.mft (raw, json) Hash identifier: HraFT9ggFL9Rn1g2s1iL7rYaJvkrDAzOV2HWXJUIF1I= Subject key identifier: 9B:67:9C:F6:48:30:E8:0A:8B:EB:15:60:78:DD:AD:2D:7F:63:5E:F8 Authority key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99 Certificate issuer: /CN=0b8240344eedd6ff60234482bfc3001d6e1ba099 Certificate serial: 019AF42E5C25344CDBEEE0EFC471882F2584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft Manifest number: 0191 Signing time: Sat 06 Dec 2025 15:01:10 +0000 Manifest this update: Sat 06 Dec 2025 15:01:10 +0000 Manifest next update: Sun 07 Dec 2025 15:01:10 +0000 Files and hashes: 1: C4JANE7t1v9gI0SCv8MAHW4boJk.crl (hash: jDHP4F8GrWnzgwpGgvp4EIej3dGxI0OHyh/B2qWjQHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:5c:25:34:4c:db:ee:e0:ef:c4:71:88:2f:25:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099 Validity Not Before: Dec 6 15:01:10 2025 GMT Not After : Dec 7 15:01:10 2025 GMT Subject: CN=9b679cf64830e80a8beb156078ddad2d7f635ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:c5:f9:f3:f2:ba:44:62:0b:f6:79:ba:38: af:91:88:ad:0e:8a:7a:49:d9:62:09:63:91:27:4c: 32:06:02:f1:84:b5:73:98:6f:d5:5a:37:1c:98:26: c6:b5:f6:8e:c2:09:a5:9d:0e:97:7f:15:1c:22:b7: b2:34:29:fa:c6:42:bb:0c:33:32:0c:9a:e6:19:53: da:32:46:9f:99:04:ec:0d:dd:55:ed:e1:10:b8:61: d7:b0:3a:f0:bd:15:4d:6f:e2:af:63:d6:a0:7c:da: 23:60:5d:b4:68:e9:16:24:3d:cd:58:96:d1:b1:3f: ad:1e:b2:d7:23:b2:a2:1e:39:8e:90:56:9f:eb:10: 9a:83:25:e3:64:e7:31:3d:15:48:8e:65:67:8b:ea: bb:5c:72:3e:b2:f8:94:3f:7b:4f:01:51:1d:f1:ef: 44:38:9a:0a:a4:69:58:57:1b:b4:32:ba:b7:30:46: c4:d4:37:5a:59:0c:e6:10:68:8d:b8:bc:88:65:71: 84:43:64:a0:9a:84:2c:94:76:71:9a:be:9e:fa:0e: d2:e6:0f:aa:d4:81:07:5e:b6:ca:a5:82:31:b3:d4: 2e:e9:e4:a4:2a:3d:fc:dc:71:ab:2f:cc:4e:15:e8: 7f:0b:ff:ad:1e:4f:5d:df:c8:03:0f:3d:0d:d4:7e: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:67:9C:F6:48:30:E8:0A:8B:EB:15:60:78:DD:AD:2D:7F:63:5E:F8 X509v3 Authority Key Identifier: keyid:0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:61:e0:df:30:dd:ac:16:1d:e6:47:65:8e:73:b9:23:04:a1: 2b:57:0b:4c:cc:86:5d:75:95:df:dd:c1:07:3e:d7:30:21:d9: 65:38:a6:69:39:29:ab:34:a1:c2:37:7e:fb:47:66:a0:d3:99: 58:8e:3a:2c:e2:5e:14:11:bd:cc:b8:1d:f2:28:d6:d2:bd:5b: 4a:20:f7:15:6f:f9:91:c9:7c:11:59:46:15:5e:95:6b:51:cd: 1a:1e:ce:96:18:76:fc:8d:65:24:60:88:d2:93:d3:ff:5c:43: a8:1b:08:d2:79:6f:35:7a:db:a3:20:7b:94:4f:2c:59:b4:42: 56:83:55:29:ee:43:20:9b:f2:3c:b4:a0:bf:e9:c6:33:42:ef: e6:06:cf:27:2e:f4:a7:89:9c:39:f0:ea:6d:6d:e0:6c:1e:6d: 59:4f:58:bf:94:d9:6e:ad:72:07:5e:2e:78:d2:fe:cc:2b:ba: 3f:55:c4:2d:b6:01:47:1c:e4:6e:fa:5a:50:b4:06:de:d7:12: f0:da:a2:3a:c2:ac:6d:1c:73:a6:e3:d4:1f:12:32:67:f3:96: 2b:fb:60:ac:b8:a8:e6:2a:17:3e:2b:48:e5:68:ec:b3:c3:6f: 1c:f0:37:d2:6e:5f:88:4c:7b:bf:1f:63:5a:8f:c8:b1:e7:55: 9d:dc:22:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LlwlNEzb7uDvxHGILyWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODI0MDM0NGVlZGQ2ZmY2MDIzNDQ4MmJmYzMwMDFkNmUx YmEwOTkwHhcNMjUxMjA2MTUwMTEwWhcNMjUxMjA3MTUwMTEwWjAzMTEwLwYDVQQD Eyg5YjY3OWNmNjQ4MzBlODBhOGJlYjE1NjA3OGRkYWQyZDdmNjM1ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18fF+fPyukRiC/Z5ujivkYitDop6 SdliCWORJ0wyBgLxhLVzmG/VWjccmCbGtfaOwgmlnQ6XfxUcIreyNCn6xkK7DDMy DJrmGVPaMkafmQTsDd1V7eEQuGHXsDrwvRVNb+KvY9agfNojYF20aOkWJD3NWJbR sT+tHrLXI7KiHjmOkFaf6xCagyXjZOcxPRVIjmVni+q7XHI+sviUP3tPAVEd8e9E OJoKpGlYVxu0Mrq3MEbE1DdaWQzmEGiNuLyIZXGEQ2SgmoQslHZxmr6e+g7S5g+q 1IEHXrbKpYIxs9Qu6eSkKj383HGrL8xOFeh/C/+tHk9d38gDDz0N1H6MsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtnnPZIMOgKi+sVYHjdrS1/Y174MB8GA1UdIwQY MBaAFAuCQDRO7db/YCNEgr/DAB1uG6CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzRKQU5FN3QxdjlnSTBTQ3Y4TUFIVzRib0prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMTE0MTgtMzBiOC00NjU3LWE2Y2Ut NTdiMDQ4YzMzYjYyLzEvQzRKQU5FN3QxdjlnSTBTQ3Y4TUFIVzRib0prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mMTE0MTgtMzBiOC00NjU3LWE2Y2UtNTdiMDQ4YzMzYjYy LzEvQzRKQU5FN3QxdjlnSTBTQ3Y4TUFIVzRib0prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2Hg3zDd rBYd5kdljnO5IwShK1cLTMyGXXWV393BBz7XMCHZZTimaTkpqzShwjd++0dmoNOZ WI46LOJeFBG9zLgd8ijW0r1bSiD3FW/5kcl8EVlGFV6Va1HNGh7Olhh2/I1lJGCI 0pPT/1xDqBsI0nlvNXrboyB7lE8sWbRCVoNVKe5DIJvyPLSgv+nGM0Lv5gbPJy70 p4mcOfDqbW3gbB5tWU9Yv5TZbq1yB14ueNL+zCu6P1XELbYBRxzkbvpaULQG3tcS 8NqiOsKsbRxzpuPUHxIyZ/OWK/tgrLio5ioXPitI5Wjss8NvHPA30m5fiEx7vx9j Wo/IsedVndwibg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:19:47 2025 by rpki-client