This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json) Hash identifier: DJz+XUrze+weCaw7wdIbjSlGHgsqjZKvXaCh43Pj40A= Subject key identifier: C6:F4:4D:6F:63:80:9F:22:28:40:23:AE:52:5E:82:6D:86:7E:B7:39 Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9 Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9 Certificate serial: 019B2BC1C73AC6D931EDD1439B318187341D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft Manifest number: 04BD Signing time: Wed 17 Dec 2025 10:01:18 +0000 Manifest this update: Wed 17 Dec 2025 10:01:18 +0000 Manifest next update: Thu 18 Dec 2025 10:01:18 +0000 Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: PccLwGLBHk7Bh8igEW5E6zAjHGm4mS8cziQmLzf3+jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:c7:3a:c6:d9:31:ed:d1:43:9b:31:81:87:34:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9 Validity Not Before: Dec 17 10:01:18 2025 GMT Not After : Dec 18 10:01:18 2025 GMT Subject: CN=c6f44d6f63809f22284023ae525e826d867eb739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:32:48:75:14:e7:18:e1:3c:06:b2:95:25: 89:d2:c9:b1:f7:89:d3:c1:3d:ef:43:79:30:b2:46: 06:16:32:97:65:78:a8:b2:49:b1:35:52:65:d4:62: f6:6a:9c:f9:26:95:77:5d:36:b2:ae:e6:0e:93:a5: d0:c0:4e:3d:d6:c0:64:66:a5:5c:a7:ea:7b:4e:29: c2:ad:9c:43:bf:71:d8:2b:12:75:88:24:c2:28:ef: c4:7f:6b:68:29:2d:22:46:8a:73:8d:d3:eb:a1:38: 9a:02:82:f4:62:74:63:35:9f:3c:11:40:3e:0f:af: bf:b4:4f:52:a9:e3:60:ec:57:5b:4c:a5:0d:9f:0e: c9:8c:97:17:3a:2b:92:7a:c6:26:88:5a:dd:a7:a8: 17:05:95:a7:c0:54:6a:db:45:78:fc:52:68:a4:c4: 2c:a0:46:98:75:29:fb:77:1e:34:67:2e:fe:bd:7a: 94:6f:9b:a3:77:82:46:a0:4a:b3:d2:6a:c6:2c:ac: 2e:9b:e6:df:e5:9b:2f:cd:4c:83:a3:f1:fb:c5:db: 64:7e:89:9d:50:02:50:38:45:b0:f0:95:e2:7c:5d: c7:c7:28:ab:a4:8a:83:2d:15:82:bb:e2:b0:b7:bd: 47:b0:fa:e9:10:8f:cc:91:c2:d3:50:f0:bd:68:e2: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F4:4D:6F:63:80:9F:22:28:40:23:AE:52:5E:82:6D:86:7E:B7:39 X509v3 Authority Key Identifier: keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:22:e5:72:cf:bd:e4:87:45:50:b8:2f:a4:bf:dc:08:7d:19: aa:6c:d3:41:2f:ca:e7:e2:51:f2:97:86:90:57:83:45:ea:33: f3:bf:37:70:b7:b4:b1:42:86:ea:e2:9b:dc:93:e2:b3:e2:5c: 7a:8a:bc:0e:1a:50:4d:be:f0:61:0c:73:e9:54:72:38:42:25: 5f:6a:98:de:4a:59:25:91:15:ec:21:79:b4:cd:4d:17:70:d4: 71:0f:d1:e2:54:45:06:23:72:ef:86:01:fa:79:c8:8b:50:1e: da:a5:b3:c9:d7:fe:c1:17:8c:47:c1:28:d3:14:ce:26:b4:7b: c8:a0:e1:50:09:c1:f9:79:96:bf:0c:2e:61:b4:fd:06:ac:52: 81:8f:c4:01:de:06:27:e1:ac:12:19:41:7d:a6:23:0b:ac:b6: a0:e0:b6:d2:95:0c:bf:26:62:22:a3:d6:95:e2:c6:b5:37:54: 36:c0:14:ca:a4:7f:a1:b4:06:55:aa:f2:72:89:14:06:cf:fd: 7a:3e:0a:90:fb:02:1f:d2:a0:6b:db:99:49:53:6a:1a:f0:74: 85:33:07:fc:7e:aa:6e:fb:f5:28:8a:de:14:64:88:d2:53:45: bb:49:3e:ed:75:0f:44:34:b0:d1:b8:72:77:4d:7e:ff:b6:39: c1:70:22:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwcc6xtkx7dFDmzGBhzQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjE0NzcwNGI2YzY2NGRjZjIyMzQ5MmVlNjFkNWU1Zjkx N2M1ZTkwHhcNMjUxMjE3MTAwMTE4WhcNMjUxMjE4MTAwMTE4WjAzMTEwLwYDVQQD EyhjNmY0NGQ2ZjYzODA5ZjIyMjg0MDIzYWU1MjVlODI2ZDg2N2ViNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlEySHUU5xjhPAaylSWJ0smx94nT wT3vQ3kwskYGFjKXZXioskmxNVJl1GL2apz5JpV3XTayruYOk6XQwE491sBkZqVc p+p7TinCrZxDv3HYKxJ1iCTCKO/Ef2toKS0iRopzjdProTiaAoL0YnRjNZ88EUA+ D6+/tE9SqeNg7FdbTKUNnw7JjJcXOiuSesYmiFrdp6gXBZWnwFRq20V4/FJopMQs oEaYdSn7dx40Zy7+vXqUb5ujd4JGoEqz0mrGLKwum+bf5ZsvzUyDo/H7xdtkfomd UAJQOEWw8JXifF3HxyirpIqDLRWCu+Kwt71HsPrpEI/MkcLTUPC9aOJX2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb0TW9jgJ8iKEAjrlJegm2Gfrc5MB8GA1UdIwQY MBaAFOEhR3BLbGZNzyI0ku5h1eX5F8XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Yjk3MDMtMzkyOS00YTRlLTkzYjct YTFiZjQyYzU4NDk0LzEvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Yjk3MDMtMzkyOS00YTRlLTkzYjctYTFiZjQyYzU4NDk0 LzEvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSLlcs+9 5IdFULgvpL/cCH0ZqmzTQS/K5+JR8peGkFeDReoz8783cLe0sUKG6uKb3JPis+Jc eoq8DhpQTb7wYQxz6VRyOEIlX2qY3kpZJZEV7CF5tM1NF3DUcQ/R4lRFBiNy74YB +nnIi1Ae2qWzydf+wReMR8Eo0xTOJrR7yKDhUAnB+XmWvwwuYbT9BqxSgY/EAd4G J+GsEhlBfaYjC6y2oOC20pUMvyZiIqPWleLGtTdUNsAUyqR/obQGVarycokUBs/9 ej4KkPsCH9Kga9uZSVNqGvB0hTMH/H6qbvv1KIreFGSI0lNFu0k+7XUPRDSw0bhy d01+/7Y5wXAiIg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:04 2025 by rpki-client