This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json) Hash identifier: gcLi1o+UuupuIJclbtEnjov9KMn/4bTrvXW755QA9mg= Subject key identifier: 52:22:3A:B3:70:A8:A1:40:BC:83:4C:36:50:75:9C:87:51:FB:91:58 Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72 Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172 Certificate serial: 019B2B8AB6F9DD5F0532653974DB0FE30FF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft Manifest number: 113D Signing time: Wed 17 Dec 2025 09:01:09 +0000 Manifest this update: Wed 17 Dec 2025 09:01:09 +0000 Manifest next update: Thu 18 Dec 2025 09:01:09 +0000 Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: n0npATT128xcragJTnGN2KjS1zZB6n0Bs+Iy+U/Cjm4=) 2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:b6:f9:dd:5f:05:32:65:39:74:db:0f:e3:0f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172 Validity Not Before: Dec 17 09:01:09 2025 GMT Not After : Dec 18 09:01:09 2025 GMT Subject: CN=52223ab370a8a140bc834c3650759c8751fb9158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:c4:fd:60:14:3a:ed:17:e1:f4:14:13:39: 34:48:d7:17:c1:e8:37:77:25:0c:6a:11:75:6e:1c: 03:95:ba:eb:81:5e:eb:12:1f:12:e2:ba:b5:f6:09: c6:03:91:fb:27:d9:95:ee:5e:54:cb:d2:45:8b:be: 53:b4:f2:57:3e:b6:2d:35:8e:a1:9b:e8:5a:1d:27: 1c:aa:10:af:a4:d1:83:d3:b8:e7:dc:88:e8:ad:b0: c9:10:c1:d2:e6:b8:0d:e9:37:b0:cb:61:0e:61:b2: ff:2c:27:96:91:98:05:04:d0:49:5f:be:2b:99:12: 2b:81:a6:ec:2f:77:93:9c:a6:79:9e:4b:10:44:35: 53:af:5e:f5:51:b5:b1:1c:a0:95:44:7f:a9:03:d7: 5c:c8:c2:94:d5:60:76:32:b3:dc:9b:a8:b1:7d:d9: d6:ba:7a:d7:93:91:6a:3e:d4:3d:e6:a5:aa:07:17: a8:3d:50:a0:c6:77:c3:33:d9:94:70:23:dc:b0:a3: 3a:7d:5b:0f:99:3e:6f:c4:22:ef:18:4a:1e:60:1e: fe:71:b2:6a:90:07:bb:21:49:b1:16:a9:5e:9d:1d: f6:fe:01:47:fd:57:0a:60:6b:f2:96:6d:cc:bf:0a: e3:47:a1:c0:be:03:00:08:93:7a:50:58:5d:85:1c: a6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:22:3A:B3:70:A8:A1:40:BC:83:4C:36:50:75:9C:87:51:FB:91:58 X509v3 Authority Key Identifier: keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:35:15:e4:7f:fe:a1:9a:16:9e:68:38:98:bb:c4:d4:8b:54: ca:17:bd:44:eb:72:97:cd:35:74:12:83:cf:43:4c:21:0a:41: 6d:79:ac:85:d5:32:3b:36:cc:f5:b0:24:9d:bd:7d:75:ec:ec: 9b:e0:eb:c1:05:33:48:a3:0e:15:d7:81:a4:33:72:56:bb:b3: a2:33:02:fc:3a:78:7a:15:0f:50:71:bc:56:c3:d4:8a:c6:31: b1:65:94:bd:61:4e:7c:5b:4e:80:f3:9a:d9:fc:4d:5f:45:df: c4:d7:7d:4e:87:5e:3e:da:eb:d3:8a:48:d4:f3:ed:3f:4c:59: d8:9b:b8:36:7c:17:08:f4:04:0e:bb:07:e2:de:13:13:47:96: 76:d7:c2:95:76:ed:84:de:2a:c2:9a:cb:34:1c:4b:b3:23:53: 56:53:52:5c:07:5b:e9:37:b1:c0:c6:07:8e:f3:26:ae:e7:1d: 20:fb:78:62:9f:76:6d:af:e4:38:7c:b6:be:64:cc:10:30:f8: 9e:b0:60:73:a2:ec:36:c7:45:ab:b4:86:db:af:d2:17:43:5c: 9e:d7:ba:55:fe:32:7f:19:ff:ea:3b:82:7d:08:a9:1e:9d:ff: c2:c9:5e:19:21:86:4f:98:2a:a0:0f:ed:f0:bd:b1:a0:d8:34: 9a:5c:61:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrirb53V8FMmU5dNsP4w/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1 YjcxNzIwHhcNMjUxMjE3MDkwMTA5WhcNMjUxMjE4MDkwMTA5WjAzMTEwLwYDVQQD Eyg1MjIyM2FiMzcwYThhMTQwYmM4MzRjMzY1MDc1OWM4NzUxZmI5MTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13PE/WAUOu0X4fQUEzk0SNcXweg3 dyUMahF1bhwDlbrrgV7rEh8S4rq19gnGA5H7J9mV7l5Uy9JFi75TtPJXPrYtNY6h m+haHSccqhCvpNGD07jn3IjorbDJEMHS5rgN6Tewy2EOYbL/LCeWkZgFBNBJX74r mRIrgabsL3eTnKZ5nksQRDVTr171UbWxHKCVRH+pA9dcyMKU1WB2MrPcm6ixfdnW unrXk5FqPtQ95qWqBxeoPVCgxnfDM9mUcCPcsKM6fVsPmT5vxCLvGEoeYB7+cbJq kAe7IUmxFqlenR32/gFH/VcKYGvylm3MvwrjR6HAvgMACJN6UFhdhRymIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIiOrNwqKFAvINMNlB1nIdR+5FYMB8GA1UdIwQY MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTUV5H/+ oZoWnmg4mLvE1ItUyhe9ROtyl801dBKDz0NMIQpBbXmshdUyOzbM9bAknb19dezs m+DrwQUzSKMOFdeBpDNyVruzojMC/Dp4ehUPUHG8VsPUisYxsWWUvWFOfFtOgPOa 2fxNX0XfxNd9TodePtrr04pI1PPtP0xZ2Ju4NnwXCPQEDrsH4t4TE0eWdtfClXbt hN4qwprLNBxLsyNTVlNSXAdb6TexwMYHjvMmrucdIPt4Yp92ba/kOHy2vmTMEDD4 nrBgc6LsNsdFq7SG26/SF0Ncnte6Vf4yfxn/6juCfQipHp3/wsleGSGGT5gqoA/t 8L2xoNg0mlxhvA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:24:36 2025 by rpki-client