This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json) Hash identifier: wvMMG8pb6OJ4U2LcRexXCzFCfuKWYVm149cqETdmod4= Subject key identifier: BE:C0:32:EF:33:D6:83:21:15:4E:65:88:76:84:20:CD:C4:1A:E5:C8 Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Certificate serial: 019B45B855685D1C47B7D74818706885C3C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft Manifest number: 0AE8 Signing time: Mon 22 Dec 2025 11:01:06 +0000 Manifest this update: Mon 22 Dec 2025 11:01:06 +0000 Manifest next update: Tue 23 Dec 2025 11:01:06 +0000 Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: yqApZRlcc/5kwQlGPwSofgmDUQgP4ayf3Xf+d2G5LsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:55:68:5d:1c:47:b7:d7:48:18:70:68:85:c3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a Validity Not Before: Dec 22 11:01:06 2025 GMT Not After : Dec 23 11:01:06 2025 GMT Subject: CN=bec032ef33d68321154e6588768420cdc41ae5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f8:eb:b6:bf:46:79:30:11:19:09:ba:9a:7e: f9:c4:78:87:76:ae:43:cc:1f:b6:39:6f:0a:8f:6f: 2b:d8:55:33:f1:5f:b1:bf:02:e8:25:91:85:a3:00: e1:7c:32:79:fc:fa:f1:e5:61:d8:ba:c7:ea:5d:db: b1:aa:71:20:43:bf:26:0f:e7:fc:fe:67:f9:64:fd: a4:ac:ed:a4:85:f5:42:f6:b8:ac:4c:8a:e1:08:fa: be:cd:20:87:45:18:ea:2f:de:8a:d1:ff:eb:62:9c: d5:87:b1:59:86:1d:61:3a:9a:d3:b8:9e:7d:a4:be: 22:e3:93:4a:59:61:e5:0b:7b:d9:4e:fe:b1:9c:8e: 69:9d:f9:90:63:10:d1:78:ed:dd:62:a8:29:97:80: c6:de:4c:e5:0f:8f:05:48:4b:cf:f4:a3:ce:d1:a7: 52:e1:c6:f3:18:fe:cc:29:08:bc:ac:6f:7d:4b:dc: 7f:68:e7:13:3e:95:93:19:4f:7d:31:e9:e2:73:bd: a2:73:b3:d4:2e:78:b9:86:08:48:46:db:e0:8d:89: 55:19:e5:fb:c8:4c:b1:95:77:78:c3:40:44:c0:9e: 18:0c:89:39:4a:0f:a2:18:7c:be:42:be:0e:36:9f: 19:45:d7:bf:c8:0d:44:76:c7:53:ac:ba:9f:cd:94: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C0:32:EF:33:D6:83:21:15:4E:65:88:76:84:20:CD:C4:1A:E5:C8 X509v3 Authority Key Identifier: keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:56:e5:ae:e8:2f:1c:35:72:fb:96:97:05:a8:8f:5b:ed:f4: 13:aa:03:50:db:75:36:24:73:52:d5:d2:36:54:e1:bd:95:96: ff:b5:cc:af:07:d3:89:7b:3b:f8:64:e2:aa:1d:b8:1e:fa:0c: 62:88:9a:0c:d3:8e:c4:a2:68:3b:a1:97:66:da:14:2f:7b:03: e8:14:c3:06:f8:5a:49:00:ea:bd:51:84:ac:4b:a3:2a:77:36: ef:c3:dc:36:d7:bc:29:41:f4:88:37:af:b7:1f:d9:53:78:42: 95:d2:39:ab:cb:dd:87:73:81:c7:30:03:f6:7c:f3:88:b1:58: a1:f2:f7:53:84:6c:24:cb:c8:37:33:5b:25:84:61:32:cf:0e: bc:81:bd:e7:c5:7d:13:ab:9e:c6:3d:78:20:b5:e7:0b:63:19: 70:4e:db:7d:fc:fc:63:60:34:69:45:41:9a:59:af:54:e8:0f: 48:52:0f:3d:43:58:2b:80:6c:46:d6:1a:07:02:66:0d:59:c6: 11:90:59:78:cb:02:3a:34:d0:e0:ac:52:15:d2:3c:a7:0d:79: fe:94:08:b6:b0:df:52:d3:52:dd:7c:7e:cb:88:aa:e4:8d:3a: 33:4d:07:e0:2c:91:af:db:78:01:8f:14:28:a2:33:c5:d1:13: ef:72:7f:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuFVoXRxHt9dIGHBohcPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMmY2NGY3ZjY5N2FhOWI2ZTk5ODJjMGI3NmJiNzg0MjEz Mzg3NmEwHhcNMjUxMjIyMTEwMTA2WhcNMjUxMjIzMTEwMTA2WjAzMTEwLwYDVQQD EyhiZWMwMzJlZjMzZDY4MzIxMTU0ZTY1ODg3Njg0MjBjZGM0MWFlNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/jrtr9GeTARGQm6mn75xHiHdq5D zB+2OW8Kj28r2FUz8V+xvwLoJZGFowDhfDJ5/Prx5WHYusfqXduxqnEgQ78mD+f8 /mf5ZP2krO2khfVC9risTIrhCPq+zSCHRRjqL96K0f/rYpzVh7FZhh1hOprTuJ59 pL4i45NKWWHlC3vZTv6xnI5pnfmQYxDReO3dYqgpl4DG3kzlD48FSEvP9KPO0adS 4cbzGP7MKQi8rG99S9x/aOcTPpWTGU99Menic72ic7PULni5hghIRtvgjYlVGeX7 yEyxlXd4w0BEwJ4YDIk5Sg+iGHy+Qr4ONp8ZRde/yA1EdsdTrLqfzZSavwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7AMu8z1oMhFU5liHaEIM3EGuXIMB8GA1UdIwQY MBaAFOEvZPf2l6qbbpmCwLdrt4QhM4dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUt NDdjMTBhNWNlNTM0LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUtNDdjMTBhNWNlNTM0 LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1blrugv HDVy+5aXBaiPW+30E6oDUNt1NiRzUtXSNlThvZWW/7XMrwfTiXs7+GTiqh24HvoM YoiaDNOOxKJoO6GXZtoUL3sD6BTDBvhaSQDqvVGErEujKnc278PcNte8KUH0iDev tx/ZU3hCldI5q8vdh3OBxzAD9nzziLFYofL3U4RsJMvINzNbJYRhMs8OvIG958V9 E6uexj14ILXnC2MZcE7bffz8Y2A0aUVBmlmvVOgPSFIPPUNYK4BsRtYaBwJmDVnG EZBZeMsCOjTQ4KxSFdI8pw15/pQItrDfUtNS3Xx+y4iq5I06M00H4CyRr9t4AY8U KKIzxdET73J/Aw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:20:38 2025 by rpki-client