This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json) Hash identifier: ljT9BdeqxRm+LrV9BtT84ZXxmOtF3rRI7Mg0d8lzsu8= Subject key identifier: B0:6A:F8:50:23:F4:31:23:62:15:9D:2C:C8:BA:AA:85:42:AB:B3:02 Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2 Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2 Certificate serial: 019B35D78AEE0BF341823A28A53161A5D7C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft Manifest number: 0907 Signing time: Fri 19 Dec 2025 09:01:16 +0000 Manifest this update: Fri 19 Dec 2025 09:01:16 +0000 Manifest next update: Sat 20 Dec 2025 09:01:16 +0000 Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: FGdSXV2F+VR9ZfIjclhOwTLZWUaHfaEssBLdJ2+ba3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:8a:ee:0b:f3:41:82:3a:28:a5:31:61:a5:d7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2 Validity Not Before: Dec 19 09:01:16 2025 GMT Not After : Dec 20 09:01:16 2025 GMT Subject: CN=b06af85023f4312362159d2cc8baaa8542abb302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:18:1c:50:51:c5:c8:de:94:c8:6b:1f:3d: 6c:83:c0:68:e5:ae:e3:f8:97:8a:8d:9c:0b:ad:44: d1:1e:8a:23:16:1a:6d:95:e5:da:dc:69:ac:62:a3: 6c:f7:25:02:85:6a:ec:c5:9c:a5:5d:57:00:f5:f3: 70:aa:68:ea:dc:bd:52:9c:76:ff:6e:20:04:4f:b7: a9:81:ef:e3:fa:ff:81:4d:0f:ca:00:dc:43:45:10: 1a:45:46:85:6a:ee:b2:cb:bb:62:b8:7f:6f:46:7e: 4f:df:cc:7f:4f:7b:84:17:52:6e:00:18:b3:33:f9: e4:b2:b1:1e:8d:f2:ed:0c:47:61:56:dc:ca:77:43: a0:85:2c:9c:70:f1:7f:b3:ee:db:2b:f2:d2:68:26: 89:ce:45:98:4f:f6:b8:f2:a5:a7:df:6e:16:18:ba: bd:b3:1e:a3:a5:fa:53:bb:45:b7:13:39:65:a2:dc: 27:57:62:b6:0c:20:79:0d:bc:2a:6b:96:3f:fe:7e: 25:c4:f7:98:5c:91:35:90:c0:59:87:a9:7d:5f:40: cc:61:15:a5:cf:61:aa:49:b1:82:54:37:cd:36:da: 84:17:0c:64:5e:99:c9:c4:3d:32:06:3a:44:b3:88: 45:a7:8b:bf:68:32:0e:26:04:cc:99:63:1a:52:ee: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6A:F8:50:23:F4:31:23:62:15:9D:2C:C8:BA:AA:85:42:AB:B3:02 X509v3 Authority Key Identifier: keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f9:54:9d:33:73:cf:71:08:9d:14:a9:4a:83:69:62:9e:7e: 04:52:a1:af:94:0f:6f:2a:3e:98:ce:07:e3:32:38:38:79:d7: fb:32:43:88:f6:2a:16:0e:3b:88:ff:e8:82:b0:d9:34:9e:12: e1:f6:65:bd:23:37:dd:4b:13:ca:3b:57:1c:38:f4:ea:09:52: 55:a8:6d:1b:9c:9e:53:cc:cf:fc:1f:54:c0:d9:28:9d:e2:df: 60:21:19:10:3a:de:f0:ff:98:02:ab:10:94:da:ac:9c:40:8e: c7:11:8f:d5:93:e6:1f:eb:75:e2:c9:ac:f3:ef:51:89:70:45: 46:d8:4e:3e:9c:22:b3:df:f9:d8:6d:10:1f:be:e4:46:6b:ec: 03:d4:5e:dc:5f:e9:bf:12:30:d2:23:1c:2b:bd:58:10:98:30: 9e:27:38:e5:11:8b:68:84:3a:e6:a7:6f:87:a0:43:8b:19:ba: 22:51:74:32:79:4f:a0:7d:72:e0:d2:29:fe:9c:a3:64:4b:3d: 00:80:fe:95:6a:e4:e0:16:cd:26:56:75:2a:59:37:f5:ef:d4: 54:2a:97:93:1f:b0:f4:cc:f5:8f:7a:8c:96:bb:bf:0b:e1:41: 2c:7a:1a:be:cd:b3:34:47:15:25:48:58:5b:06:04:a2:c5:91: cd:c1:2f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs114ruC/NBgjoopTFhpdfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOGM3MThiNDVhNzc2NzU5MDlkN2ZkMWFmZWM2ZGFhYmFm ZTg4YjIwHhcNMjUxMjE5MDkwMTE2WhcNMjUxMjIwMDkwMTE2WjAzMTEwLwYDVQQD EyhiMDZhZjg1MDIzZjQzMTIzNjIxNTlkMmNjOGJhYWE4NTQyYWJiMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomkYHFBRxcjelMhrHz1sg8Bo5a7j +JeKjZwLrUTRHoojFhptleXa3GmsYqNs9yUChWrsxZylXVcA9fNwqmjq3L1SnHb/ biAET7epge/j+v+BTQ/KANxDRRAaRUaFau6yy7tiuH9vRn5P38x/T3uEF1JuABiz M/nksrEejfLtDEdhVtzKd0OghSyccPF/s+7bK/LSaCaJzkWYT/a48qWn324WGLq9 sx6jpfpTu0W3EzllotwnV2K2DCB5Dbwqa5Y//n4lxPeYXJE1kMBZh6l9X0DMYRWl z2GqSbGCVDfNNtqEFwxkXpnJxD0yBjpEs4hFp4u/aDIOJgTMmWMaUu6k1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBq+FAj9DEjYhWdLMi6qoVCq7MCMB8GA1UdIwQY MBaAFOGMcYtFp3Z1kJ1/0a/sbaq6/oiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5Nzgt MDRmMDQ0YmI5OGMyLzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5NzgtMDRmMDQ0YmI5OGMy LzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhflUnTNz z3EInRSpSoNpYp5+BFKhr5QPbyo+mM4H4zI4OHnX+zJDiPYqFg47iP/ogrDZNJ4S 4fZlvSM33UsTyjtXHDj06glSVahtG5yeU8zP/B9UwNkoneLfYCEZEDre8P+YAqsQ lNqsnECOxxGP1ZPmH+t14sms8+9RiXBFRthOPpwis9/52G0QH77kRmvsA9Re3F/p vxIw0iMcK71YEJgwnic45RGLaIQ65qdvh6BDixm6IlF0MnlPoH1y4NIp/pyjZEs9 AID+lWrk4BbNJlZ1Klk39e/UVCqXkx+w9Mz1j3qMlru/C+FBLHoavs2zNEcVJUhY WwYEosWRzcEvKA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:29:30 2025 by rpki-client