This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json) Hash identifier: c/znraP6fRNHSbv/8sA/3j9Vh6a25bY+eHw3nsPaMGk= Subject key identifier: 4A:15:C6:24:84:47:95:5D:52:EE:A6:BD:49:60:0D:63:73:52:44:79 Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18 Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518 Certificate serial: 019B495E447F8D70AE71AC734DA7422ED4A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft Manifest number: 171C Signing time: Tue 23 Dec 2025 04:01:13 +0000 Manifest this update: Tue 23 Dec 2025 04:01:13 +0000 Manifest next update: Wed 24 Dec 2025 04:01:13 +0000 Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: aW6rs/KfYNoiLh1Qg3T69CpFSncu0UY+7FXCnBQEw9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:44:7f:8d:70:ae:71:ac:73:4d:a7:42:2e:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518 Validity Not Before: Dec 23 04:01:13 2025 GMT Not After : Dec 24 04:01:13 2025 GMT Subject: CN=4a15c6248447955d52eea6bd49600d6373524479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:4d:0a:ac:e5:dc:59:d3:01:28:69:b7:63: 40:45:d0:63:99:9f:a8:8f:37:32:e9:d7:ba:70:15: 6d:b8:a7:5c:33:7b:22:69:9c:8a:49:d7:44:93:a8: 41:93:bc:2c:24:79:e9:63:e3:65:93:a0:7a:74:8c: 93:63:e0:40:53:16:c8:e0:89:29:26:c1:57:b5:3d: f6:d7:c8:ba:ec:38:e3:41:8f:30:c9:0b:0e:2e:d2: f8:2e:20:7f:8a:03:16:79:3d:81:07:1f:82:b4:92: 8e:50:05:5f:0b:08:9a:02:d4:21:18:e3:75:04:1b: b4:00:42:66:bb:8e:25:e7:fd:a3:29:e2:73:e2:99: e5:f6:b8:cb:ad:fd:64:84:59:85:97:b6:63:9e:73: c2:34:1b:e3:51:8f:27:87:98:50:ca:e0:f3:a8:0b: 85:b0:01:ba:bc:ad:87:c6:bb:21:03:6f:85:12:f9: aa:22:16:84:c6:ec:fc:fc:f5:b9:ec:de:cd:14:d7: fc:9b:82:ef:b3:db:13:de:1a:38:ec:d4:50:e9:16: 0f:39:34:66:8f:e7:b0:34:ec:f1:ee:32:7e:a1:1a: 57:94:61:ca:6b:2e:bc:33:7d:82:bd:48:20:43:8a: 1d:1b:8b:52:eb:a9:26:c8:13:6a:18:ad:16:0e:c7: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:15:C6:24:84:47:95:5D:52:EE:A6:BD:49:60:0D:63:73:52:44:79 X509v3 Authority Key Identifier: keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9b:4e:a1:63:e6:70:ff:c9:28:7e:0c:45:46:7d:3b:3e:51: a8:71:7f:fe:39:16:d7:23:2b:36:c9:8a:78:3e:69:8a:c3:ca: b8:3b:75:8e:b3:1a:43:2c:a1:8d:0b:f1:eb:55:cd:69:0e:aa: 53:58:93:6e:cb:1b:4a:e0:2c:7a:52:5c:41:97:8a:5f:68:bf: 6e:c2:aa:23:8a:00:b6:65:eb:2f:a4:c2:00:0a:d1:dc:02:56: df:98:79:84:5a:50:54:79:2c:92:02:b0:73:b9:98:e0:70:5b: d7:ed:df:73:42:86:da:76:47:9f:11:a6:dc:a9:d4:a3:34:2b: 99:fb:cf:cd:15:bd:6e:a5:6f:1e:3c:a6:22:1a:ac:53:cf:52: c5:a7:1b:42:62:61:0f:12:e4:10:54:a8:78:73:94:ab:ff:35: 2d:d5:eb:46:2a:06:c6:c3:61:49:8c:1a:a6:e7:2a:09:6d:27: 76:6f:4c:b1:ca:90:a3:ea:b6:d6:43:26:4d:b8:56:c9:78:fa: 88:66:ea:ec:6e:1f:67:58:c7:b2:12:fe:1e:4f:1b:f7:3e:43: c5:5f:cc:83:bb:e2:f9:9c:9a:ef:49:6a:de:81:07:0b:66:1b: 0b:20:44:8d:2c:07:d8:ca:e4:af:fb:44:1c:af:19:2e:0f:55: bd:3b:66:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXkR/jXCucaxzTadCLtSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZWUwOWJmZjRkN2EyNjJkMDY5MzA3M2IyNTk3NTU4ZTQ4 MDc1MTgwHhcNMjUxMjIzMDQwMTEzWhcNMjUxMjI0MDQwMTEzWjAzMTEwLwYDVQQD Eyg0YTE1YzYyNDg0NDc5NTVkNTJlZWE2YmQ0OTYwMGQ2MzczNTI0NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiZNCqzl3FnTAShpt2NARdBjmZ+o jzcy6de6cBVtuKdcM3siaZyKSddEk6hBk7wsJHnpY+Nlk6B6dIyTY+BAUxbI4Ikp JsFXtT3218i67DjjQY8wyQsOLtL4LiB/igMWeT2BBx+CtJKOUAVfCwiaAtQhGON1 BBu0AEJmu44l5/2jKeJz4pnl9rjLrf1khFmFl7ZjnnPCNBvjUY8nh5hQyuDzqAuF sAG6vK2HxrshA2+FEvmqIhaExuz8/PW57N7NFNf8m4Lvs9sT3ho47NRQ6RYPOTRm j+ewNOzx7jJ+oRpXlGHKay68M32CvUggQ4odG4tS66kmyBNqGK0WDseqtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoVxiSER5VdUu6mvUlgDWNzUkR5MB8GA1UdIwQY MBaAFJDuCb/016Ji0Gkwc7JZdVjkgHUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQt ZjhkYzk1MzUwYjg1LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQtZjhkYzk1MzUwYjg1 LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJtOoWPm cP/JKH4MRUZ9Oz5RqHF//jkW1yMrNsmKeD5pisPKuDt1jrMaQyyhjQvx61XNaQ6q U1iTbssbSuAselJcQZeKX2i/bsKqI4oAtmXrL6TCAArR3AJW35h5hFpQVHkskgKw c7mY4HBb1+3fc0KG2nZHnxGm3KnUozQrmfvPzRW9bqVvHjymIhqsU89SxacbQmJh DxLkEFSoeHOUq/81LdXrRioGxsNhSYwapucqCW0ndm9MscqQo+q21kMmTbhWyXj6 iGbq7G4fZ1jHshL+Hk8b9z5DxV/Mg7vi+Zya70lq3oEHC2YbCyBEjSwH2Mrkr/tE HK8ZLg9VvTtmcQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:21:15 2025 by rpki-client