This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json) Hash identifier: ULZyEpIoOrjmBt9JuNgby/SX5as3x4V3mBbqle7h0CI= Subject key identifier: FF:F6:98:43:91:AC:81:5A:82:B8:62:1A:1C:FE:98:CE:09:F8:57:CA Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7 Certificate serial: 019B6CC5AF025F7A9C06017D2B859CD19ADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft Manifest number: 14D1 Signing time: Tue 30 Dec 2025 01:00:53 +0000 Manifest this update: Tue 30 Dec 2025 01:00:53 +0000 Manifest next update: Wed 31 Dec 2025 01:00:53 +0000 Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: JjLC86uDoR2VASWYx6D6jgdQw4oLrwQjlyrFZrG2/hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:af:02:5f:7a:9c:06:01:7d:2b:85:9c:d1:9a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7 Validity Not Before: Dec 30 01:00:53 2025 GMT Not After : Dec 31 01:00:53 2025 GMT Subject: CN=fff6984391ac815a82b8621a1cfe98ce09f857ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:89:34:cc:7d:ba:f5:c5:9d:5e:6d:f6:69:80: cb:0b:98:da:cc:78:0c:d7:95:89:39:10:cd:5b:a7: 08:3d:f0:e3:e2:3b:7f:21:1d:93:54:21:c3:7b:5e: 8b:c1:1b:e2:ed:d3:63:c4:c7:dd:98:69:30:c2:87: 90:05:f9:0a:bb:5b:08:95:c6:e8:da:12:ab:97:70: a1:01:80:29:b8:13:8b:a5:e3:e7:12:84:d4:d9:16: 22:0f:8e:ac:f4:ff:b5:4a:c5:37:c7:d0:10:80:78: b9:da:d0:7d:b0:e0:22:88:b1:4e:55:dc:4f:86:1b: 89:b2:36:a7:fd:8c:9b:a9:cc:9d:79:01:98:d5:20: 28:d5:7a:c9:3c:52:02:63:c7:be:60:52:21:2e:ea: a6:23:e5:17:46:9f:47:25:6a:06:50:d7:09:a3:53: 6e:4e:0d:dc:da:0c:97:c3:61:42:df:3b:74:34:c1: b4:9c:d4:d6:53:2a:7c:79:1d:14:2f:f7:3b:7a:28: f9:da:ae:38:b3:02:23:92:ec:c1:16:fe:7e:8d:52: 63:3f:f3:e9:33:af:48:11:eb:35:52:f8:5b:28:68: 2a:c0:1e:59:39:c4:98:41:96:47:b2:fb:1d:72:28: ff:99:4d:f1:ea:00:0f:4d:02:72:47:6a:93:bf:58: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F6:98:43:91:AC:81:5A:82:B8:62:1A:1C:FE:98:CE:09:F8:57:CA X509v3 Authority Key Identifier: keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:05:ca:2c:e8:29:bf:bd:77:e8:55:07:6a:99:ff:aa:4b:13: 56:b4:ec:69:76:33:d6:5b:08:b4:f5:16:e2:6a:7c:ab:d0:f5: 35:48:e7:8e:6b:cc:4a:fe:72:5e:c4:e5:9f:34:b7:1e:25:77: 21:61:ef:a1:22:df:50:c6:a1:30:30:c3:80:41:2c:f9:e2:81: e3:0b:db:ec:ce:c3:d3:25:6d:4a:e9:8d:d1:35:71:23:4c:b8: 60:69:76:42:5e:c9:33:03:7c:b6:d4:9c:ca:f8:7e:9f:ae:2a: 72:d1:cc:2e:9f:38:60:df:7e:8b:71:3c:d7:ab:8a:d9:cd:f7: 35:c5:a5:ee:b8:05:8d:8b:97:06:05:a3:80:04:41:13:eb:11: 19:cc:02:1c:19:82:6d:18:50:cb:e9:8b:ce:8c:07:3b:30:71: 06:d7:a8:dd:58:a8:1d:92:20:96:21:c1:e8:3e:0b:2c:bd:54: e9:05:92:f5:c4:e9:75:f6:bc:73:63:d0:1b:29:1e:e6:f2:0b: 65:37:f4:71:ac:0c:9f:88:fb:5d:64:64:97:d5:71:bc:ee:3a: 42:f4:d2:b7:88:27:3a:ad:72:d1:2f:68:04:20:b7:ae:03:08: 6d:c6:b5:df:04:20:7f:ed:74:92:1b:89:7f:97:5b:84:db:03: cd:59:10:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxa8CX3qcBgF9K4Wc0ZrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWY2MTUxYTM0N2M3OTIyYWM3Y2Y0Njk5MjUzNDQzMzBk NzI0ZjcwHhcNMjUxMjMwMDEwMDUzWhcNMjUxMjMxMDEwMDUzWjAzMTEwLwYDVQQD EyhmZmY2OTg0MzkxYWM4MTVhODJiODYyMWExY2ZlOThjZTA5Zjg1N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ik0zH269cWdXm32aYDLC5jazHgM 15WJORDNW6cIPfDj4jt/IR2TVCHDe16LwRvi7dNjxMfdmGkwwoeQBfkKu1sIlcbo 2hKrl3ChAYApuBOLpePnEoTU2RYiD46s9P+1SsU3x9AQgHi52tB9sOAiiLFOVdxP hhuJsjan/YybqcydeQGY1SAo1XrJPFICY8e+YFIhLuqmI+UXRp9HJWoGUNcJo1Nu Tg3c2gyXw2FC3zt0NMG0nNTWUyp8eR0UL/c7eij52q44swIjkuzBFv5+jVJjP/Pp M69IEes1UvhbKGgqwB5ZOcSYQZZHsvsdcij/mU3x6gAPTQJyR2qTv1je4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/2mEORrIFagrhiGhz+mM4J+FfKMB8GA1UdIwQY MBaAFOGfYVGjR8eSKsfPRpklNEMw1yT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYt NDJkNDkzOWEwNTE5LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYtNDJkNDkzOWEwNTE5 LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwXKLOgp v7136FUHapn/qksTVrTsaXYz1lsItPUW4mp8q9D1NUjnjmvMSv5yXsTlnzS3HiV3 IWHvoSLfUMahMDDDgEEs+eKB4wvb7M7D0yVtSumN0TVxI0y4YGl2Ql7JMwN8ttSc yvh+n64qctHMLp84YN9+i3E816uK2c33NcWl7rgFjYuXBgWjgARBE+sRGcwCHBmC bRhQy+mLzowHOzBxBteo3VioHZIgliHB6D4LLL1U6QWS9cTpdfa8c2PQGyke5vIL ZTf0cawMn4j7XWRkl9VxvO46QvTSt4gnOq1y0S9oBCC3rgMIbca13wQgf+10khuJ f5dbhNsDzVkQXw== -----END CERTIFICATE-----Generated at Tue Dec 30 06:23:41 2025 by rpki-client