This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json) Hash identifier: R93uZWvWrKcnUJBHsvICHOsdbrJqcaZGGWhAuBcFJJs= Subject key identifier: 97:E0:54:33:EC:29:DC:D9:9C:91:07:0A:A5:AA:DD:30:93:95:B5:AB Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb Certificate serial: 019B3C7FC2F5375C4C91DDE17A814032ECFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 16:02:44 +0000 Manifest this update: Sat 20 Dec 2025 16:02:44 +0000 Manifest next update: Sun 21 Dec 2025 16:02:44 +0000 Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: SuF+qEF9lWXKYS0lAWruRdsldfZJk4fDeivyWwi64Xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:c2:f5:37:5c:4c:91:dd:e1:7a:81:40:32:ec:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb Validity Not Before: Dec 20 16:02:44 2025 GMT Not After : Dec 21 16:02:44 2025 GMT Subject: CN=97e05433ec29dcd99c91070aa5aadd309395b5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:dc:57:f0:fd:f0:d8:59:ba:20:07:6e:c3: 80:bc:46:5b:1d:74:4b:49:71:82:25:08:a0:1a:b9: 4b:6f:a6:11:ad:81:4a:0e:c1:49:69:cb:61:36:d0: 93:82:a5:b2:82:ba:cf:cd:3d:15:02:75:e9:87:cc: ee:ce:99:a8:9e:7c:e6:d4:87:16:05:fd:a8:65:52: 0f:f6:ed:ca:2f:95:c0:4e:9d:0e:e3:a1:1c:b1:88: 6e:64:50:a8:52:09:ec:9b:62:0c:82:5f:fa:6f:0b: bb:77:87:2a:32:be:7a:d2:0e:3d:b4:85:04:e6:cc: bd:76:a4:e1:4f:64:ed:8c:3f:3b:9f:f7:2a:66:6f: 28:61:c2:ca:44:3d:bd:5d:ce:6b:9c:e6:47:cd:7a: 4b:51:07:e7:d0:7f:16:7a:f1:39:71:60:7b:5a:51: b6:2c:20:c1:d1:8a:48:59:45:88:15:e4:21:b2:58: 9e:31:fc:0a:1b:00:04:b1:a3:e7:2c:1e:f4:fb:4b: 62:11:00:f2:b4:92:37:18:70:b6:3d:9e:bd:50:4d: 00:a8:47:1d:c6:fd:1a:c4:3b:73:42:df:90:de:31: d4:94:aa:59:08:db:c0:78:96:f4:ce:3e:bf:c0:37: 59:8f:5a:25:8a:2f:9f:f8:56:87:4b:63:b2:33:d5: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E0:54:33:EC:29:DC:D9:9C:91:07:0A:A5:AA:DD:30:93:95:B5:AB X509v3 Authority Key Identifier: keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0b:a3:a4:87:ac:e6:aa:24:4b:90:07:38:e6:da:4f:2a:fc: ba:30:e8:ad:13:b2:99:15:88:33:b8:19:f8:68:d4:be:95:5e: 27:d5:f1:4f:f9:46:3a:f0:c7:f4:31:0c:e3:bf:c6:58:81:27: f8:15:a8:e6:a5:5c:73:b5:86:d7:e9:47:74:09:cd:c1:73:a0: a3:59:28:be:95:f5:21:ba:b0:39:61:c3:84:20:44:ee:de:14: 8d:9f:f1:c2:3e:79:ac:3a:14:a6:12:53:6f:5a:4d:a3:ab:ad: 69:cf:2b:1f:05:47:a2:19:98:ec:d5:a7:a1:7e:07:4c:b4:3e: 6e:4a:87:97:37:0a:00:26:9a:fa:39:d1:f2:6a:5c:c4:d3:79: 30:22:67:74:63:1d:e9:c8:5c:15:01:d3:b4:08:4c:34:bb:6a: 5d:35:ac:26:8a:a3:45:eb:67:e7:44:d3:87:90:0e:51:2e:7f: a3:31:17:b3:94:54:c0:31:eb:a7:0a:90:f9:4e:0b:30:76:c5: 93:a8:3f:b6:23:6a:40:9d:8d:3e:f5:8c:b0:dc:41:e1:89:b0: 79:c0:0c:5d:30:a2:74:02:40:91:b1:44:38:c7:05:34:e9:3d: 2e:da:ba:22:f4:a5:7f:bc:6c:a4:b2:0c:54:fb:31:e4:41:4b: b2:a3:7b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f8L1N1xMkd3heoFAMuz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGZkNjMxZWYyZWM3Mzc5NDM3ZmQ3Yzc2ZjhlMjQ1ZmYw ODI0YmIwHhcNMjUxMjIwMTYwMjQ0WhcNMjUxMjIxMTYwMjQ0WjAzMTEwLwYDVQQD Eyg5N2UwNTQzM2VjMjlkY2Q5OWM5MTA3MGFhNWFhZGQzMDkzOTViNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM3cV/D98NhZuiAHbsOAvEZbHXRL SXGCJQigGrlLb6YRrYFKDsFJacthNtCTgqWygrrPzT0VAnXph8zuzpmonnzm1IcW Bf2oZVIP9u3KL5XATp0O46EcsYhuZFCoUgnsm2IMgl/6bwu7d4cqMr560g49tIUE 5sy9dqThT2TtjD87n/cqZm8oYcLKRD29Xc5rnOZHzXpLUQfn0H8WevE5cWB7WlG2 LCDB0YpIWUWIFeQhslieMfwKGwAEsaPnLB70+0tiEQDytJI3GHC2PZ69UE0AqEcd xv0axDtzQt+Q3jHUlKpZCNvAeJb0zj6/wDdZj1olii+f+FaHS2OyM9VD7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfgVDPsKdzZnJEHCqWq3TCTlbWrMB8GA1UdIwQY MBaAFIeP1jHvLsc3lDf9fHb44kX/CCS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYTNkY2ItZGE2NC00OWM4LTk4ZWQt YmE2Y2I0MjUyZmQ3LzEvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hYTNkY2ItZGE2NC00OWM4LTk4ZWQtYmE2Y2I0MjUyZmQ3 LzEvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQujpIes 5qokS5AHOObaTyr8ujDorROymRWIM7gZ+GjUvpVeJ9XxT/lGOvDH9DEM47/GWIEn +BWo5qVcc7WG1+lHdAnNwXOgo1kovpX1IbqwOWHDhCBE7t4UjZ/xwj55rDoUphJT b1pNo6utac8rHwVHohmY7NWnoX4HTLQ+bkqHlzcKACaa+jnR8mpcxNN5MCJndGMd 6chcFQHTtAhMNLtqXTWsJoqjRetn50TTh5AOUS5/ozEXs5RUwDHrpwqQ+U4LMHbF k6g/tiNqQJ2NPvWMsNxB4YmwecAMXTCidAJAkbFEOMcFNOk9Ltq6IvSlf7xspLIM VPsx5EFLsqN7zg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:44 2025 by rpki-client