This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft File: _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json) Hash identifier: 6LgvcLf7Bpsp1ULgmlwE7SR1F1PXGhDosmaVBfrTu8k= Subject key identifier: 21:36:1C:B4:0C:33:D9:5A:F0:E2:0B:EB:3D:4B:C7:2F:C8:E6:B9:75 Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2 Certificate issuer: /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2 Certificate serial: 019B6BB29067D38E847D8375C41B3D2F8AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft Manifest number: 1320 Signing time: Mon 29 Dec 2025 20:00:23 +0000 Manifest this update: Mon 29 Dec 2025 20:00:23 +0000 Manifest next update: Tue 30 Dec 2025 20:00:23 +0000 Files and hashes: 1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: PJczMAZf/t5QKMOQjkjdjCIABWAF8K/GwT72eWSCbGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:90:67:d3:8e:84:7d:83:75:c4:1b:3d:2f:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2 Validity Not Before: Dec 29 20:00:23 2025 GMT Not After : Dec 30 20:00:23 2025 GMT Subject: CN=21361cb40c33d95af0e20beb3d4bc72fc8e6b975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:8c:38:80:9b:46:fa:dd:75:37:0e:74:d3: 32:88:9a:5d:44:65:c1:b4:ff:4a:97:a6:74:8c:5a: 02:72:c7:40:a2:9a:3a:be:fa:98:5d:26:8e:2b:a5: c6:e0:c2:d1:96:7f:93:16:d6:69:ef:32:df:70:16: 51:b0:eb:70:0f:a4:b1:13:48:d7:08:35:c5:e8:69: 3a:1a:d8:f3:b5:f6:34:b0:e2:0f:15:da:37:da:37: 82:a6:75:ec:22:db:3e:25:d6:d6:27:83:3d:cf:6b: 80:d1:c5:79:ad:e2:75:6a:08:61:e9:fc:fd:2c:21: 0f:12:7a:46:d9:f3:83:69:9a:58:7f:aa:4e:fc:ed: e9:4b:60:c6:1e:e1:8e:48:65:ce:80:79:dd:ef:80: a0:3f:b0:01:51:8a:d5:03:b0:69:3b:6a:60:b1:97: b1:8f:3d:ab:6e:cf:e6:c4:64:34:4d:9c:0a:b2:47: 90:ac:2f:c6:53:e6:da:ee:3c:c9:25:eb:7f:23:ea: c9:8b:03:03:d9:bc:28:a2:98:a8:a0:02:d2:e5:17: 1a:63:16:d7:66:20:f1:ef:b2:5c:30:b1:08:72:5b: fd:48:6e:b2:c9:35:aa:7f:8e:ee:a6:c9:82:45:f6: 24:e8:17:77:81:23:3e:dc:a0:56:aa:8b:af:5d:54: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:36:1C:B4:0C:33:D9:5A:F0:E2:0B:EB:3D:4B:C7:2F:C8:E6:B9:75 X509v3 Authority Key Identifier: keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a3:09:4a:16:4c:02:7f:d2:f7:e6:e9:1a:a1:75:5f:2f:d0: a7:d3:2f:72:81:dc:6a:b5:7c:5a:00:28:d4:d2:db:31:fe:d3: 10:8d:4f:99:f4:90:04:58:eb:8f:5b:4c:e1:32:32:29:47:a6: f1:18:d8:c2:c1:2f:bc:f6:e1:6b:19:4c:e6:74:e5:ea:71:b2: 82:6e:82:3d:01:5d:a6:b3:e8:15:f2:04:8c:3c:ce:65:92:50: 55:ee:7f:26:fa:aa:97:9f:f2:c7:85:b4:e7:c2:40:fe:8a:7a: 4a:68:ce:a4:68:7f:ef:75:ad:94:c7:1b:35:10:52:26:42:70: e3:50:3d:25:e9:76:72:51:0c:a9:89:8a:7f:b1:91:12:13:49: b2:ac:7f:5b:d5:87:5e:d9:c3:43:b5:48:e5:20:4b:61:74:57: f9:d3:60:49:71:c1:5a:2c:3e:17:df:dc:9a:7c:9f:88:ee:4f: 0a:6c:40:8b:24:fb:e5:67:57:6a:dc:85:94:c7:94:8c:ae:61: 01:ef:5c:10:23:80:85:65:3b:12:6c:d1:a1:c6:af:0b:ba:74: 6a:95:ae:46:19:a0:a6:53:4d:c9:03:a8:55:37:5e:64:0e:11: 24:9d:cb:54:e4:e8:c2:70:35:d2:17:e2:dd:64:0f:6c:40:18: 3d:cc:fc:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrspBn046EfYN1xBs9L4qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODMyNmNjZWJjNWZjMzJmYmQwZTM0ZmVlN2YzOWJiYTg4 ZmI5YTIwHhcNMjUxMjI5MjAwMDIzWhcNMjUxMjMwMjAwMDIzWjAzMTEwLwYDVQQD EygyMTM2MWNiNDBjMzNkOTVhZjBlMjBiZWIzZDRiYzcyZmM4ZTZiOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsmMOICbRvrddTcOdNMyiJpdRGXB tP9Kl6Z0jFoCcsdAopo6vvqYXSaOK6XG4MLRln+TFtZp7zLfcBZRsOtwD6SxE0jX CDXF6Gk6GtjztfY0sOIPFdo32jeCpnXsIts+JdbWJ4M9z2uA0cV5reJ1aghh6fz9 LCEPEnpG2fODaZpYf6pO/O3pS2DGHuGOSGXOgHnd74CgP7ABUYrVA7BpO2pgsZex jz2rbs/mxGQ0TZwKskeQrC/GU+ba7jzJJet/I+rJiwMD2bwoopiooALS5RcaYxbX ZiDx77JcMLEIclv9SG6yyTWqf47upsmCRfYk6Bd3gSM+3KBWqouvXVSujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE2HLQMM9la8OIL6z1Lxy/I5rl1MB8GA1UdIwQY MBaAFP+DJszrxfwy+9DjT+5/Obuoj7miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82ZjViNmEtZjRiYi00ZmRlLThhNTEt OGIxMzQ0YjdkNWE2LzEvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82ZjViNmEtZjRiYi00ZmRlLThhNTEtOGIxMzQ0YjdkNWE2 LzEvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKMJShZM An/S9+bpGqF1Xy/Qp9MvcoHcarV8WgAo1NLbMf7TEI1PmfSQBFjrj1tM4TIyKUem 8RjYwsEvvPbhaxlM5nTl6nGygm6CPQFdprPoFfIEjDzOZZJQVe5/Jvqql5/yx4W0 58JA/op6SmjOpGh/73WtlMcbNRBSJkJw41A9Jel2clEMqYmKf7GREhNJsqx/W9WH XtnDQ7VI5SBLYXRX+dNgSXHBWiw+F9/cmnyfiO5PCmxAiyT75WdXatyFlMeUjK5h Ae9cECOAhWU7EmzRocavC7p0apWuRhmgplNNyQOoVTdeZA4RJJ3LVOTownA10hfi 3WQPbEAYPcz8bQ== -----END CERTIFICATE-----Generated at Tue Dec 30 00:21:31 2025 by rpki-client