This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json) Hash identifier: ePNFqt2eiEnFcEdTAGYLSSVWOz1hC5MuMJbjdyATl3Y= Subject key identifier: E6:7B:2A:90:47:A9:AD:13:79:40:52:C7:EC:A2:BB:55:2E:89:74:9D Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b Certificate serial: 019B42B6DB6A8EFCE57271023FB3D06F3BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft Manifest number: 09E7 Signing time: Sun 21 Dec 2025 21:00:38 +0000 Manifest this update: Sun 21 Dec 2025 21:00:38 +0000 Manifest next update: Mon 22 Dec 2025 21:00:38 +0000 Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: R1pr30oRvkNXt/J/euZGgGD0agsAV+4Sgyole1W0wXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:db:6a:8e:fc:e5:72:71:02:3f:b3:d0:6f:3b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b Validity Not Before: Dec 21 21:00:38 2025 GMT Not After : Dec 22 21:00:38 2025 GMT Subject: CN=e67b2a9047a9ad13794052c7eca2bb552e89749d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:2c:78:09:01:5e:bc:34:de:66:31:f6:c9: 39:91:f2:04:b7:35:06:e8:59:fa:71:dd:8b:78:b3: 50:58:df:17:06:ca:ba:16:ec:d9:5c:01:dd:9d:07: 12:f8:5c:50:b1:46:df:d7:5d:fd:b4:a7:8e:d7:8b: 0a:09:56:81:17:d1:f7:32:a7:f4:9d:b0:c4:f0:b0: 26:9c:0f:22:44:64:ba:61:f7:66:c0:dd:10:ee:37: 5a:48:54:3f:37:d8:61:ee:83:e3:26:81:29:c9:01: 2b:c3:4d:0b:9e:b6:bc:bc:a6:a0:dc:c5:b8:dd:45: ef:4f:ea:71:de:55:17:54:d5:40:de:06:cc:e7:5d: fa:36:18:1f:60:45:0f:f2:83:eb:9c:54:21:6e:cf: 42:20:20:3f:29:2d:b9:bb:af:1c:84:21:eb:20:70: a0:c1:34:52:7d:7d:1c:ce:55:cb:fc:19:9e:bc:6c: a2:2d:59:d2:c3:70:62:8f:41:b1:da:49:c0:ac:11: f9:15:07:fe:36:1d:6e:9e:3a:05:ea:38:b9:89:db: b7:02:8f:16:69:ff:87:2b:9d:9b:44:05:ef:42:42: c7:37:36:8c:3d:9a:62:97:42:71:48:82:23:65:07: bf:e3:69:19:b2:51:7a:1b:be:0f:eb:03:97:ea:7c: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7B:2A:90:47:A9:AD:13:79:40:52:C7:EC:A2:BB:55:2E:89:74:9D X509v3 Authority Key Identifier: keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:16:8f:b4:13:f1:ef:3f:ab:1d:26:6e:3a:55:42:78:f4:44: e7:b1:0f:10:d7:24:40:fb:67:5a:c7:e1:2f:35:d5:76:56:51: c3:98:9d:ad:80:f9:c2:02:00:4a:4f:90:b8:89:26:ea:1c:c3: 9e:3b:ec:d2:cb:12:37:e9:0f:54:71:45:88:32:8c:98:50:03: dc:71:53:69:4c:cb:0a:e2:45:53:ee:bf:d6:c5:e7:e7:b3:00: a6:00:5e:27:a3:bf:dc:7a:82:27:af:ca:17:63:eb:4b:44:01: ed:cb:fe:8f:9d:07:d1:b5:c7:e8:26:ed:99:5d:d9:78:ab:d2: 31:b2:5d:bd:59:c3:cc:38:25:b0:16:b3:dd:20:75:ec:f1:f3: d0:54:48:db:9a:6a:6f:d5:fb:6c:cf:d0:8f:5c:20:d6:00:33: 16:2e:2f:06:33:f0:e7:16:b4:4c:7e:af:ad:23:f0:59:2a:85: 8b:f2:0a:93:9c:f6:b1:df:64:a7:84:07:7d:6d:df:41:bb:66: f6:0f:28:8e:03:b7:33:ea:9f:4a:15:c5:18:ab:db:89:ff:1b: 97:56:22:17:bc:3b:ca:c9:a1:8c:69:94:f4:1a:4a:cb:79:ae: 31:76:ed:94:7d:a4:e4:77:03:93:33:9c:39:8c:84:6d:eb:c6: 4e:6f:cf:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtttqjvzlcnECP7PQbzvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZmUzZjdiODMzYzMwNjAyZWI3OTg1OGU3ZWFmYWVkNTU0 ZjRjNWIwHhcNMjUxMjIxMjEwMDM4WhcNMjUxMjIyMjEwMDM4WjAzMTEwLwYDVQQD EyhlNjdiMmE5MDQ3YTlhZDEzNzk0MDUyYzdlY2EyYmI1NTJlODk3NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwgseAkBXrw03mYx9sk5kfIEtzUG 6Fn6cd2LeLNQWN8XBsq6FuzZXAHdnQcS+FxQsUbf1139tKeO14sKCVaBF9H3Mqf0 nbDE8LAmnA8iRGS6YfdmwN0Q7jdaSFQ/N9hh7oPjJoEpyQErw00Lnra8vKag3MW4 3UXvT+px3lUXVNVA3gbM5136NhgfYEUP8oPrnFQhbs9CICA/KS25u68chCHrIHCg wTRSfX0czlXL/BmevGyiLVnSw3Bij0Gx2knArBH5FQf+Nh1unjoF6ji5idu3Ao8W af+HK52bRAXvQkLHNzaMPZpil0JxSIIjZQe/42kZslF6G74P6wOX6nz7LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZ7KpBHqa0TeUBSx+yiu1UuiXSdMB8GA1UdIwQY MBaAFIn+P3uDPDBgLreYWOfq+u1VT0xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNjg5ZmQtYjEzZS00MzMyLTllYjct NjVjYjYzYWZjZTVlLzEvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9iNjg5ZmQtYjEzZS00MzMyLTllYjctNjVjYjYzYWZjZTVl LzEvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxaPtBPx 7z+rHSZuOlVCePRE57EPENckQPtnWsfhLzXVdlZRw5idrYD5wgIASk+QuIkm6hzD njvs0ssSN+kPVHFFiDKMmFAD3HFTaUzLCuJFU+6/1sXn57MApgBeJ6O/3HqCJ6/K F2PrS0QB7cv+j50H0bXH6CbtmV3ZeKvSMbJdvVnDzDglsBaz3SB17PHz0FRI25pq b9X7bM/Qj1wg1gAzFi4vBjPw5xa0TH6vrSPwWSqFi/IKk5z2sd9kp4QHfW3fQbtm 9g8ojgO3M+qfShXFGKvbif8bl1YiF7w7ysmhjGmU9BpKy3muMXbtlH2k5HcDkzOc OYyEbevGTm/PyQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:23:20 2025 by rpki-client