This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json) Hash identifier: 9BRgF7tu4gKAxhZWJm05Wo+AqrI8qwogSOqMOLCEPnw= Subject key identifier: F4:52:4B:14:3C:2F:02:79:D8:7A:27:54:B6:02:75:E3:2B:C1:C9:0E Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0 Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0 Certificate serial: 019AF20996A9FD325556574ED9070D89B689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft Manifest number: 09C7 Signing time: Sat 06 Dec 2025 05:01:45 +0000 Manifest this update: Sat 06 Dec 2025 05:01:45 +0000 Manifest next update: Sun 07 Dec 2025 05:01:45 +0000 Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: HS/wX4k092060iKw2fQchf13YeNCaUc0p309f/rjIZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:96:a9:fd:32:55:56:57:4e:d9:07:0d:89:b6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0 Validity Not Before: Dec 6 05:01:45 2025 GMT Not After : Dec 7 05:01:45 2025 GMT Subject: CN=f4524b143c2f0279d87a2754b60275e32bc1c90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:27:f7:60:2d:ce:22:18:19:70:e7:fc:3c: 0d:4a:6f:c8:e8:80:4c:52:98:ea:b6:8f:9a:22:cf: d6:49:5d:92:69:7a:3c:d2:7c:95:a1:99:ba:ff:fc: 88:e5:c2:f7:4b:84:60:be:47:bb:53:59:2b:1e:f8: f4:4c:fe:e2:7b:32:11:17:87:ea:4c:82:94:ab:97: 57:c0:45:96:04:77:ff:4c:5e:f2:f9:59:bd:6b:16: 73:99:3a:44:0c:37:7c:64:0a:ec:d8:a3:be:e8:7e: a8:d7:77:0f:3e:95:41:5e:f8:7c:3b:bd:49:e8:78: 46:96:8f:d1:1f:75:c8:6c:1b:c9:b2:47:ce:e0:40: 44:34:da:ed:aa:25:ed:53:03:2c:1e:0f:5f:35:13: 1a:28:53:7a:3f:e7:b2:4b:b1:47:64:b3:ef:67:4a: 8c:9d:20:4b:cc:cf:b1:52:73:ec:98:a6:b6:f5:61: 69:13:f4:6b:8d:4d:06:44:06:bd:c8:f3:7f:49:3b: 4f:bd:8c:b1:52:65:c0:77:7b:b3:50:2e:ae:31:cf: 00:37:c5:35:10:ca:ec:41:02:4f:40:91:25:f6:01: 68:1f:de:0a:10:1d:fe:9d:51:b7:fa:1a:62:4e:1b: cd:f4:6f:6c:d3:a2:2f:03:94:70:4d:dd:4a:29:e9: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:52:4B:14:3C:2F:02:79:D8:7A:27:54:B6:02:75:E3:2B:C1:C9:0E X509v3 Authority Key Identifier: keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8c:28:50:d1:cd:3a:69:8f:bb:42:12:ee:00:28:eb:a3:da: 96:3f:ae:3d:ff:f4:60:54:de:63:58:cd:d9:45:87:44:c7:c1: 13:b1:dd:9c:ec:4d:9c:9b:99:d1:06:3c:45:5f:af:3e:20:5b: 0c:fc:06:02:e1:71:83:1f:f6:cd:7d:ba:7f:78:1b:d1:e5:c7: 3e:39:0d:c8:84:5c:da:09:ce:50:0c:0d:67:ac:ac:6b:37:a5: 65:80:5b:be:6a:08:b5:1a:eb:22:17:90:5d:06:f7:3d:e0:ab: b4:53:a3:48:59:5a:3a:d8:c5:75:a7:30:12:4d:96:bf:d9:5d: a0:18:1f:7a:a7:aa:3a:57:bd:33:43:f4:01:9b:e4:57:c6:97: 5b:5d:a4:bb:e9:32:62:84:1a:81:82:68:1f:54:e3:2b:3f:3d: 5e:49:e2:7a:d0:03:ad:a1:c6:8b:19:42:ed:88:09:ba:71:1c: 39:91:90:30:80:4d:cf:27:2b:5f:7f:3e:bd:90:e4:d0:f9:f5: 7d:f5:3b:6c:16:01:d4:bf:2d:a9:ab:77:47:e3:e1:7b:2a:1b: a2:8f:70:4f:72:c2:e4:71:7c:e0:16:9e:5e:fa:46:c2:8b:0f: e0:68:46:d6:4d:39:db:b4:8c:de:8f:98:6d:36:0b:81:bd:6b: b1:cb:3d:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZap/TJVVldO2QcNibaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTdmODkyMmFiODQ2YTI5ODE5ZWE4MjRiYjFjNjFiMDZl MzEzYjAwHhcNMjUxMjA2MDUwMTQ1WhcNMjUxMjA3MDUwMTQ1WjAzMTEwLwYDVQQD EyhmNDUyNGIxNDNjMmYwMjc5ZDg3YTI3NTRiNjAyNzVlMzJiYzFjOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Mn92AtziIYGXDn/DwNSm/I6IBM Upjqto+aIs/WSV2SaXo80nyVoZm6//yI5cL3S4Rgvke7U1krHvj0TP7iezIRF4fq TIKUq5dXwEWWBHf/TF7y+Vm9axZzmTpEDDd8ZArs2KO+6H6o13cPPpVBXvh8O71J 6HhGlo/RH3XIbBvJskfO4EBENNrtqiXtUwMsHg9fNRMaKFN6P+eyS7FHZLPvZ0qM nSBLzM+xUnPsmKa29WFpE/RrjU0GRAa9yPN/STtPvYyxUmXAd3uzUC6uMc8AN8U1 EMrsQQJPQJEl9gFoH94KEB3+nVG3+hpiThvN9G9s06IvA5RwTd1KKek5FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRSSxQ8LwJ52HonVLYCdeMrwckOMB8GA1UdIwQY MBaAFJvn+JIquEaimBnqgkuxxhsG4xOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2Qt YjUzOTY3YTJjOTM4LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2QtYjUzOTY3YTJjOTM4 LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYwoUNHN OmmPu0IS7gAo66Palj+uPf/0YFTeY1jN2UWHRMfBE7HdnOxNnJuZ0QY8RV+vPiBb DPwGAuFxgx/2zX26f3gb0eXHPjkNyIRc2gnOUAwNZ6ysazelZYBbvmoItRrrIheQ XQb3PeCrtFOjSFlaOtjFdacwEk2Wv9ldoBgfeqeqOle9M0P0AZvkV8aXW12ku+ky YoQagYJoH1TjKz89XknietADraHGixlC7YgJunEcOZGQMIBNzycrX38+vZDk0Pn1 ffU7bBYB1L8tqat3R+Pheyoboo9wT3LC5HF84BaeXvpGwosP4GhG1k0527SM3o+Y bTYLgb1rscs9Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:32 2025 by rpki-client