This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json) Hash identifier: mCYQw66ycp0kdiXTm/Vx3vuowHRYxYNIglutv2m3CPY= Subject key identifier: 47:F6:AD:49:72:07:AC:B8:B3:2E:D8:73:A8:EE:9F:6C:BE:E1:28:5C Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf Certificate serial: 019B32D72568FE1722D0F66E83ABD9AC0041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:01:59 +0000 Manifest this update: Thu 18 Dec 2025 19:01:59 +0000 Manifest next update: Fri 19 Dec 2025 19:01:59 +0000 Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: 1S3WT8n9fezP+ioiHNsIgapX/kygBYvAvtMj1CgiI64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:25:68:fe:17:22:d0:f6:6e:83:ab:d9:ac:00:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf Validity Not Before: Dec 18 19:01:59 2025 GMT Not After : Dec 19 19:01:59 2025 GMT Subject: CN=47f6ad497207acb8b32ed873a8ee9f6cbee1285c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:f3:83:0e:29:b0:fb:01:81:42:04:d0:76: 49:dc:2c:5f:4f:97:6d:ca:ca:27:a2:7c:ec:cd:57: 51:ef:59:ad:3b:b2:55:9d:45:e5:6a:39:fa:dc:05: 73:d3:19:69:e2:1f:b1:22:06:7d:dd:fa:8c:31:a0: e6:b2:30:5b:67:96:88:d1:37:6d:d9:d6:31:80:83: 0b:77:c0:7a:14:00:90:33:f7:f3:60:40:d3:23:59: e2:25:d4:68:ad:e7:14:54:10:fc:88:53:e3:2c:18: 83:9a:5e:4f:a7:aa:17:ae:b6:12:42:21:12:29:41: 75:6b:a5:e2:4a:cc:02:f5:70:b5:2b:45:13:21:b4: 49:bd:83:8d:ee:4a:ea:cf:5b:dd:9a:f9:81:64:90: 91:48:6e:8c:50:51:8d:3e:cd:a5:5b:f1:63:ea:1a: 79:82:fd:54:cd:dc:45:4e:aa:40:0f:43:fe:8c:f8: 12:3b:db:bc:b8:f0:af:3b:1b:47:1c:95:10:88:56: 21:88:39:01:bf:03:7a:8b:53:37:85:7c:8f:ab:5d: 7c:a6:65:a3:6e:8b:87:37:73:c4:02:d1:2e:db:9b: c4:87:60:e4:42:69:05:98:17:55:0c:a1:73:9b:ae: 71:a9:cf:c9:0e:19:a8:63:03:fb:6b:90:5c:2e:c1: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F6:AD:49:72:07:AC:B8:B3:2E:D8:73:A8:EE:9F:6C:BE:E1:28:5C X509v3 Authority Key Identifier: keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:89:ff:ca:e3:bb:a7:b2:27:2a:51:28:59:bd:46:25:69:98: fd:1c:a6:8f:db:7f:57:89:b3:ba:78:8c:7b:d9:4f:5e:08:cc: 7b:b2:49:91:87:8f:55:61:11:57:21:74:f3:38:be:80:f7:79: 1b:a7:8f:aa:24:9d:c9:88:1f:6e:a2:3c:a9:07:64:14:42:e3: 11:9f:88:dd:6a:a0:1a:03:d2:0e:6b:d9:f1:e4:68:74:e3:b9: 1c:bb:22:e3:60:1f:73:87:f3:01:f9:93:8b:f5:c5:d5:11:74: 03:17:21:f8:91:1d:3b:78:9b:93:be:18:82:e3:20:5e:e6:6e: d5:7b:8c:bd:7f:0a:b0:8c:9c:40:95:84:9a:6f:82:60:50:b5: 34:a3:6e:d2:48:32:cd:d7:84:35:c1:86:ae:c7:0f:48:7f:fe: 2c:9e:48:ee:f1:0f:7f:20:a4:39:58:d3:b0:3e:a7:ed:de:65: 4a:f1:7b:28:92:19:4d:7b:c1:60:24:72:85:94:01:e4:0b:82: 36:7b:6b:0b:62:3b:1a:fa:6f:a0:c2:0c:51:2b:da:0b:84:20: eb:2c:a5:49:af:16:55:65:0e:a4:61:21:52:40:8a:64:66:36: f3:51:8d:35:c7:99:25:1d:84:6a:4d:a9:c4:ef:9d:79:29:40: a8:92:78:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1yVo/hci0PZug6vZrABBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODhiZGI5Y2Q3ZjZiYTRhOGY2MThjNWE0MmE3NmFhZTg5 MjU5Y2YwHhcNMjUxMjE4MTkwMTU5WhcNMjUxMjE5MTkwMTU5WjAzMTEwLwYDVQQD Eyg0N2Y2YWQ0OTcyMDdhY2I4YjMyZWQ4NzNhOGVlOWY2Y2JlZTEyODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OLzgw4psPsBgUIE0HZJ3CxfT5dt ysononzszVdR71mtO7JVnUXlajn63AVz0xlp4h+xIgZ93fqMMaDmsjBbZ5aI0Tdt 2dYxgIMLd8B6FACQM/fzYEDTI1niJdRorecUVBD8iFPjLBiDml5Pp6oXrrYSQiES KUF1a6XiSswC9XC1K0UTIbRJvYON7krqz1vdmvmBZJCRSG6MUFGNPs2lW/Fj6hp5 gv1UzdxFTqpAD0P+jPgSO9u8uPCvOxtHHJUQiFYhiDkBvwN6i1M3hXyPq118pmWj bouHN3PEAtEu25vEh2DkQmkFmBdVDKFzm65xqc/JDhmoYwP7a5BcLsFexQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf2rUlyB6y4sy7Yc6jun2y+4ShcMB8GA1UdIwQY MBaAFHOIvbnNf2ukqPYYxaQqdqroklnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2U0NDAtODY1ZS00ZjRmLTlmYzkt MTA4ZDViMTQ4ZjBjLzEvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yM2U0NDAtODY1ZS00ZjRmLTlmYzktMTA4ZDViMTQ4ZjBj LzEvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4n/yuO7 p7InKlEoWb1GJWmY/Rymj9t/V4mzuniMe9lPXgjMe7JJkYePVWERVyF08zi+gPd5 G6ePqiSdyYgfbqI8qQdkFELjEZ+I3WqgGgPSDmvZ8eRodOO5HLsi42Afc4fzAfmT i/XF1RF0Axch+JEdO3ibk74YguMgXuZu1XuMvX8KsIycQJWEmm+CYFC1NKNu0kgy zdeENcGGrscPSH/+LJ5I7vEPfyCkOVjTsD6n7d5lSvF7KJIZTXvBYCRyhZQB5AuC NntrC2I7GvpvoMIMUSvaC4Qg6yylSa8WVWUOpGEhUkCKZGY281GNNceZJR2Eak2p xO+deSlAqJJ4HQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:45 2025 by rpki-client