This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json) Hash identifier: M51b9J0mrW+hQP72va5MW+rFua7sV43EQTLo4L8rWCM= Subject key identifier: F2:CA:E9:C4:63:D0:02:AB:D0:C0:EE:8C:01:47:DF:BA:05:D5:1B:16 Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e Certificate serial: 019B42B72F27EBD977E64245039671090E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft Manifest number: 04F0 Signing time: Sun 21 Dec 2025 21:00:59 +0000 Manifest this update: Sun 21 Dec 2025 21:00:59 +0000 Manifest next update: Mon 22 Dec 2025 21:00:59 +0000 Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: WKrdqGeT1TZeN2HYp7BOoh/5mvtI9qfN0dc6DbdE8Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:2f:27:eb:d9:77:e6:42:45:03:96:71:09:0e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e Validity Not Before: Dec 21 21:00:59 2025 GMT Not After : Dec 22 21:00:59 2025 GMT Subject: CN=f2cae9c463d002abd0c0ee8c0147dfba05d51b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:e3:e1:78:8f:e9:a4:f6:6d:c7:47:ff:80: 4c:c3:e1:18:56:15:42:5c:8e:d1:d4:c6:6c:21:b4: a6:a7:c2:26:62:3c:6f:ff:35:98:64:70:d8:97:fe: 19:41:10:61:18:93:e9:18:c8:e2:30:a5:58:66:e5: 17:b0:e6:3a:fa:68:1f:4a:ae:5f:57:cd:e6:aa:83: 45:79:ac:43:98:c1:9c:a2:4b:54:58:cf:de:0e:64: 06:4e:04:84:1d:9c:97:fe:67:fb:5a:74:1f:2a:ba: 4b:3b:0f:89:a4:bb:4e:a8:2d:f0:de:d5:1c:86:9a: b9:15:f5:5a:fc:7c:37:a2:5c:95:45:48:6e:19:3d: 9d:45:54:53:7a:98:b4:42:d4:80:c7:d8:ce:85:81: 00:59:3c:06:a4:75:79:87:3c:36:f5:73:c1:7e:7c: c0:f7:46:ae:27:93:b0:2a:5a:ae:ce:94:25:4a:e7: 79:e7:8f:b3:c1:c3:ea:c2:19:a7:64:8c:ed:02:c4: 1c:74:cb:43:50:6a:ae:ab:37:cb:7b:87:16:3b:2c: a8:d0:21:ce:ef:da:dc:8d:84:0c:d5:a7:94:d7:ef: 89:c6:23:2c:a9:7f:a7:6d:9d:17:27:93:03:36:a2: c5:03:8b:36:bf:13:fc:1b:96:01:01:ea:f5:f8:9c: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CA:E9:C4:63:D0:02:AB:D0:C0:EE:8C:01:47:DF:BA:05:D5:1B:16 X509v3 Authority Key Identifier: keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:63:db:75:c3:03:22:c6:91:ed:c5:1f:41:8a:c0:ae:74:09: d9:4f:eb:99:5f:ec:fa:5a:a1:25:f2:5a:69:59:22:db:7d:ef: 54:25:68:f9:a9:c7:47:87:94:22:5b:65:93:d5:7a:87:26:64: aa:b6:c3:29:46:07:51:83:af:55:83:93:6f:04:30:1d:3b:f3: 77:a9:4e:cc:8d:61:5f:88:e2:c9:63:56:0a:7c:86:f8:4b:90: d4:b9:43:1b:b1:41:fb:d5:5c:12:13:96:bb:7b:02:dd:90:e7: 3c:0c:63:ec:66:4f:71:77:c3:a6:7b:d0:b2:08:44:af:0a:4d: 17:d8:ac:82:e1:4a:9d:fd:33:00:2b:77:91:27:5e:6a:d7:9a: 6d:83:29:70:3d:2b:e5:15:a4:aa:fe:7f:45:81:4a:f2:d9:3e: 4d:3a:2b:2d:4b:ee:bc:ee:55:b6:ec:99:7b:ca:35:dd:9e:8c: 38:c7:59:aa:cb:76:b2:a0:15:5b:ff:3d:b9:b3:89:a2:ad:7e: f8:5c:d5:8e:25:d8:0a:a7:bf:cb:de:6b:71:73:82:4b:84:c4: d8:f7:79:5f:91:d2:56:2f:11:06:52:46:b4:dd:70:54:ce:d6: e3:ca:ae:dc:6d:ac:0f:05:f0:16:51:3a:a3:01:a3:d3:94:07: 1e:f7:e8:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCty8n69l35kJFA5ZxCQ6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZGUwMjk3M2RjMDVlYzNjNmJiZjZlNTdiN2Q2YTRjZWVm ODE4NWUwHhcNMjUxMjIxMjEwMDU5WhcNMjUxMjIyMjEwMDU5WjAzMTEwLwYDVQQD EyhmMmNhZTljNDYzZDAwMmFiZDBjMGVlOGMwMTQ3ZGZiYTA1ZDUxYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Orj4XiP6aT2bcdH/4BMw+EYVhVC XI7R1MZsIbSmp8ImYjxv/zWYZHDYl/4ZQRBhGJPpGMjiMKVYZuUXsOY6+mgfSq5f V83mqoNFeaxDmMGcoktUWM/eDmQGTgSEHZyX/mf7WnQfKrpLOw+JpLtOqC3w3tUc hpq5FfVa/Hw3olyVRUhuGT2dRVRTepi0QtSAx9jOhYEAWTwGpHV5hzw29XPBfnzA 90auJ5OwKlquzpQlSud554+zwcPqwhmnZIztAsQcdMtDUGquqzfLe4cWOyyo0CHO 79rcjYQM1aeU1++JxiMsqX+nbZ0XJ5MDNqLFA4s2vxP8G5YBAer1+JymSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLK6cRj0AKr0MDujAFH37oF1RsWMB8GA1UdIwQY MBaAFJTeApc9wF7Dxrv25Xt9akzu+BheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2Qt ZDQ5ZDFmNTczOWVkLzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2QtZDQ5ZDFmNTczOWVk LzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWPbdcMD IsaR7cUfQYrArnQJ2U/rmV/s+lqhJfJaaVki233vVCVo+anHR4eUIltlk9V6hyZk qrbDKUYHUYOvVYOTbwQwHTvzd6lOzI1hX4jiyWNWCnyG+EuQ1LlDG7FB+9VcEhOW u3sC3ZDnPAxj7GZPcXfDpnvQsghErwpNF9isguFKnf0zACt3kSdeateabYMpcD0r 5RWkqv5/RYFK8tk+TTorLUvuvO5VtuyZe8o13Z6MOMdZqst2sqAVW/89ubOJoq1+ +FzVjiXYCqe/y95rcXOCS4TE2Pd5X5HSVi8RBlJGtN1wVM7W48qu3G2sDwXwFlE6 owGj05QHHvfovg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:25 2025 by rpki-client