This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json) Hash identifier: 1p5auzyZQVTG5ZLl0IAYlidGMyVHH5DMpEytofKKnlA= Subject key identifier: F4:6F:00:C5:80:60:EC:4E:49:C5:A8:71:85:29:2D:BA:A0:F2:12:B3 Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Certificate serial: 019B533CEEA196EEB886275B954392493F87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft Manifest number: 0AEF Signing time: Thu 25 Dec 2025 02:01:00 +0000 Manifest this update: Thu 25 Dec 2025 02:01:00 +0000 Manifest next update: Fri 26 Dec 2025 02:01:00 +0000 Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: mOB9m2tifi1nghK44emiD0hPQuS2piyhmr+Vk1BIrKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:ee:a1:96:ee:b8:86:27:5b:95:43:92:49:3f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Validity Not Before: Dec 25 02:01:00 2025 GMT Not After : Dec 26 02:01:00 2025 GMT Subject: CN=f46f00c58060ec4e49c5a87185292dbaa0f212b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:3a:1a:d6:45:21:a4:e0:ec:5f:82:9c:35: 0d:f4:cd:9d:6b:9f:86:ba:9b:28:2d:f0:c5:12:9b: 72:ca:c8:ec:c0:75:09:72:9c:2f:36:73:3f:0c:cd: 38:a2:32:b1:a4:76:8b:9d:b9:ec:fe:a7:4a:9e:bb: 2d:9a:2d:67:81:e4:f4:61:47:9a:f7:85:fc:0a:2b: 37:42:5c:b8:65:92:8d:11:e6:ad:03:5f:4a:d4:54: 96:0a:ce:bb:a2:80:56:2f:72:89:12:3b:35:ff:01: b5:48:19:7d:83:09:9c:10:9c:25:00:7a:ed:ec:a5: 46:36:c6:d5:10:d9:6c:b4:ad:16:13:db:7f:12:e1: fb:b9:5a:a9:b1:de:33:5e:e4:fa:81:4d:7c:33:b9: cb:6f:7d:72:7a:a7:dc:25:1e:5d:f5:91:2a:02:20: 2e:55:01:86:90:10:36:ba:f4:b2:f8:f4:e3:5d:f7: b8:61:9d:59:68:ce:bb:57:ae:b1:13:73:be:1c:b5: ac:14:a9:a2:7e:a4:58:d7:70:37:f5:e7:ed:74:72: 42:f4:0d:4d:09:d7:d4:60:be:bc:e0:47:6d:30:a9: 41:fa:67:a3:72:d5:4a:fa:08:08:6c:6b:04:b9:d6: 59:50:f7:c9:e2:ab:11:92:68:bf:4b:f0:18:0d:26: 6d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6F:00:C5:80:60:EC:4E:49:C5:A8:71:85:29:2D:BA:A0:F2:12:B3 X509v3 Authority Key Identifier: keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b4:01:f3:8d:14:6c:9f:af:05:3b:c6:fe:a8:72:0a:11:a9: 42:d1:64:59:79:6a:37:3f:7c:75:e6:d9:39:28:e1:10:5e:f9: 80:22:a4:98:74:de:4b:18:04:ca:e9:4d:98:9d:0b:41:f3:ad: 2b:df:d2:4c:02:82:76:2c:8f:b8:6b:37:98:de:74:b6:ef:21: 4c:56:a8:34:63:be:40:f8:7e:df:5a:ee:fc:f1:e2:d9:90:ac: aa:e9:c6:0c:6d:6c:b8:65:fd:bc:4f:5f:da:13:8f:61:7a:97: 79:0d:07:7e:ca:6f:09:71:63:7e:15:6f:69:f3:30:db:ac:f6: 8b:e3:4e:83:6f:ae:40:7a:7b:5a:42:88:83:28:f0:f4:f2:0e: a6:4e:9f:b8:63:ac:80:37:54:b0:cd:a0:88:7c:f5:c1:82:99: a5:e6:c0:01:4c:5b:79:da:ab:aa:59:6e:33:2c:1b:be:50:27: b3:03:42:b3:01:ed:9b:6b:af:32:71:33:16:a5:20:69:1d:4f: 4a:b2:95:e4:6a:51:a5:91:d8:7c:fb:83:05:fa:3e:7e:e6:2e: 93:35:92:18:43:98:87:51:1e:45:c0:7c:47:d8:31:a5:48:37: 84:6a:19:fa:d2:3e:96:69:b6:f5:e1:0d:f3:72:95:c5:5b:cd: f4:34:28:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPO6hlu64hidblUOSST+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMmY2NGY3ZjY5N2FhOWI2ZTk5ODJjMGI3NmJiNzg0MjEz Mzg3NmEwHhcNMjUxMjI1MDIwMTAwWhcNMjUxMjI2MDIwMTAwWjAzMTEwLwYDVQQD EyhmNDZmMDBjNTgwNjBlYzRlNDljNWE4NzE4NTI5MmRiYWEwZjIxMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbM6GtZFIaTg7F+CnDUN9M2da5+G upsoLfDFEptyysjswHUJcpwvNnM/DM04ojKxpHaLnbns/qdKnrstmi1ngeT0YUea 94X8Cis3Qly4ZZKNEeatA19K1FSWCs67ooBWL3KJEjs1/wG1SBl9gwmcEJwlAHrt 7KVGNsbVENlstK0WE9t/EuH7uVqpsd4zXuT6gU18M7nLb31yeqfcJR5d9ZEqAiAu VQGGkBA2uvSy+PTjXfe4YZ1ZaM67V66xE3O+HLWsFKmifqRY13A39eftdHJC9A1N CdfUYL684EdtMKlB+mejctVK+ggIbGsEudZZUPfJ4qsRkmi/S/AYDSZtyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRvAMWAYOxOScWocYUpLbqg8hKzMB8GA1UdIwQY MBaAFOEvZPf2l6qbbpmCwLdrt4QhM4dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUt NDdjMTBhNWNlNTM0LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUtNDdjMTBhNWNlNTM0 LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbQB840U bJ+vBTvG/qhyChGpQtFkWXlqNz98debZOSjhEF75gCKkmHTeSxgEyulNmJ0LQfOt K9/STAKCdiyPuGs3mN50tu8hTFaoNGO+QPh+31ru/PHi2ZCsqunGDG1suGX9vE9f 2hOPYXqXeQ0HfspvCXFjfhVvafMw26z2i+NOg2+uQHp7WkKIgyjw9PIOpk6fuGOs gDdUsM2giHz1wYKZpebAAUxbedqrqlluMywbvlAnswNCswHtm2uvMnEzFqUgaR1P SrKV5GpRpZHYfPuDBfo+fuYukzWSGEOYh1EeRcB8R9gxpUg3hGoZ+tI+lmm29eEN 83KVxVvN9DQoFQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:51 2025 by rpki-client