This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json) Hash identifier: KEV0uIMEIIz/eab8i2NXuvIuTkOgN+8Q5/+gCTq+AUE= Subject key identifier: B1:9A:D5:1F:15:C1:0E:1B:06:15:3D:22:BB:15:68:A5:4B:EB:FC:8E Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11 Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911 Certificate serial: 019B53AB5DE37F51189C8241BB10D5FB8F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft Manifest number: 0CA5 Signing time: Thu 25 Dec 2025 04:01:38 +0000 Manifest this update: Thu 25 Dec 2025 04:01:38 +0000 Manifest next update: Fri 26 Dec 2025 04:01:38 +0000 Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: MTT/7fMHUnXPpTIAiumlJnAOhnY8pnknSRock87neuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:5d:e3:7f:51:18:9c:82:41:bb:10:d5:fb:8f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e229b37eb630686b1328338471b52da95d204911 Validity Not Before: Dec 25 04:01:38 2025 GMT Not After : Dec 26 04:01:38 2025 GMT Subject: CN=b19ad51f15c10e1b06153d22bb1568a54bebfc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3c:05:6e:5b:eb:ca:50:b9:fe:c1:b8:70:39: 0c:9f:de:ff:6a:ca:31:28:35:db:06:aa:8e:b2:15: 21:d4:2a:83:df:06:6d:3d:6b:6e:24:02:3a:15:15: e6:55:8a:dd:51:82:65:d0:df:31:49:4e:74:a1:0d: a2:41:94:a3:d8:ae:1c:49:21:ce:0d:fb:7c:8d:ee: 60:e5:55:6c:5b:e0:85:0c:66:aa:7f:ef:79:3e:d8: 67:d5:31:08:24:34:c2:04:bb:3d:2e:6c:87:cf:49: 63:d7:ca:8a:3f:46:7c:c4:c8:c9:9c:64:5c:63:1c: 71:3e:c0:ec:e1:9a:ca:1c:4f:bc:4b:81:52:59:d8: a9:69:b5:1b:1e:96:85:30:ed:d9:a0:d0:aa:b0:b3: 27:cf:8b:32:03:de:0a:10:41:99:0e:b2:d4:39:8d: f6:eb:89:a0:c1:89:db:7c:06:a0:11:d7:13:85:bc: 2c:e8:f9:82:f5:1c:8b:10:c4:3a:47:40:67:cb:f5: 88:b2:8d:63:71:cf:6a:ad:87:87:aa:da:b6:e7:76: 24:9d:3d:16:49:55:61:35:32:48:3e:19:56:5d:ec: c0:e8:ce:6d:32:9e:37:1a:80:91:5a:f0:f8:8f:21: 53:78:72:cc:4e:41:c4:d5:84:79:3b:9c:bf:37:d6: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9A:D5:1F:15:C1:0E:1B:06:15:3D:22:BB:15:68:A5:4B:EB:FC:8E X509v3 Authority Key Identifier: keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:03:53:a5:b4:6d:6f:de:85:57:f0:e5:d6:39:32:4f:d3:3a: 18:27:04:2a:b5:8d:c9:fd:4b:fe:31:7f:af:96:2a:28:9a:fe: cf:72:ce:44:89:55:3b:4f:ad:ab:e7:6e:a6:0b:6c:85:59:12: e7:bb:d7:c4:46:29:d6:09:18:7e:a1:d1:e0:08:dc:78:d0:44: 47:70:5e:b9:72:73:24:5d:11:ab:8e:c6:d7:ec:4d:f0:b8:2d: ed:b5:67:53:5f:61:31:76:fc:f6:16:db:8d:ff:7d:d7:12:8d: 43:e9:e1:a7:76:b6:5c:b1:1b:de:93:66:ca:46:15:1d:19:2d: dd:87:40:b3:2b:0b:5b:b0:a3:92:36:f1:90:da:de:d5:52:8e: 67:0c:dd:5d:c5:e4:e7:54:09:ec:a6:c9:c6:60:7d:0f:b8:2e: 87:86:b8:07:b0:dd:0f:79:09:03:5d:9e:3e:e5:e2:5c:41:52: e1:0b:51:33:3f:00:b9:25:4c:97:10:14:8e:2a:e6:8d:de:49: 2f:c4:96:93:5d:5b:93:5d:5c:e6:5e:16:3a:a0:42:76:bb:87: 11:c6:8b:e9:a0:95:e6:5f:4b:37:64:bb:c1:ba:79:c5:80:71: dc:91:f7:b2:e3:30:24:f1:c1:87:39:22:46:c1:08:5e:63:12: 51:fd:db:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq13jf1EYnIJBuxDV+4+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjliMzdlYjYzMDY4NmIxMzI4MzM4NDcxYjUyZGE5NWQy MDQ5MTEwHhcNMjUxMjI1MDQwMTM4WhcNMjUxMjI2MDQwMTM4WjAzMTEwLwYDVQQD EyhiMTlhZDUxZjE1YzEwZTFiMDYxNTNkMjJiYjE1NjhhNTRiZWJmYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zwFblvrylC5/sG4cDkMn97/asox KDXbBqqOshUh1CqD3wZtPWtuJAI6FRXmVYrdUYJl0N8xSU50oQ2iQZSj2K4cSSHO Dft8je5g5VVsW+CFDGaqf+95Pthn1TEIJDTCBLs9LmyHz0lj18qKP0Z8xMjJnGRc YxxxPsDs4ZrKHE+8S4FSWdipabUbHpaFMO3ZoNCqsLMnz4syA94KEEGZDrLUOY32 64mgwYnbfAagEdcThbws6PmC9RyLEMQ6R0Bny/WIso1jcc9qrYeHqtq253YknT0W SVVhNTJIPhlWXezA6M5tMp43GoCRWvD4jyFTeHLMTkHE1YR5O5y/N9bGqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGa1R8VwQ4bBhU9IrsVaKVL6/yOMB8GA1UdIwQY MBaAFOIps362MGhrEygzhHG1LaldIEkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMt N2RlOGQ4YzJlOTMwLzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMtN2RlOGQ4YzJlOTMw LzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArANTpbRt b96FV/Dl1jkyT9M6GCcEKrWNyf1L/jF/r5YqKJr+z3LORIlVO0+tq+dupgtshVkS 57vXxEYp1gkYfqHR4AjceNBER3BeuXJzJF0Rq47G1+xN8Lgt7bVnU19hMXb89hbb jf991xKNQ+nhp3a2XLEb3pNmykYVHRkt3YdAsysLW7CjkjbxkNre1VKOZwzdXcXk 51QJ7KbJxmB9D7guh4a4B7DdD3kJA12ePuXiXEFS4QtRMz8AuSVMlxAUjirmjd5J L8SWk11bk11c5l4WOqBCdruHEcaL6aCV5l9LN2S7wbp5xYBx3JH3suMwJPHBhzki RsEIXmMSUf3bVg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:15:59 2025 by rpki-client