This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json) Hash identifier: okdhoj4tT5boWyxyor5zE4rg/HZ2MSHQc4rf5Xzo3II= Subject key identifier: B9:CA:5E:7D:B3:48:14:2C:64:B2:39:DE:59:E0:56:D5:05:15:6E:7A Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb Certificate serial: 019B4FCEC4D426D33ACD81B803235CFFFE06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 10:01:49 +0000 Manifest this update: Wed 24 Dec 2025 10:01:49 +0000 Manifest next update: Thu 25 Dec 2025 10:01:49 +0000 Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: hYTnAqQDCzIDTCgrHb0yZ/kQnnKFW7tNSgreIHz7JcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:c4:d4:26:d3:3a:cd:81:b8:03:23:5c:ff:fe:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb Validity Not Before: Dec 24 10:01:49 2025 GMT Not After : Dec 25 10:01:49 2025 GMT Subject: CN=b9ca5e7db348142c64b239de59e056d505156e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:47:af:b3:0e:0e:07:f2:f7:6f:70:ea:e3:56: 4c:53:87:11:5d:31:f7:47:df:82:43:1a:59:bb:89: 36:db:f1:27:a4:9c:2d:50:32:06:b8:81:e6:cb:b6: b4:a1:c2:fe:69:7e:95:e7:c5:01:80:14:1a:04:c2: 15:9a:57:dc:4c:5c:dc:6a:c0:12:10:93:cf:31:2e: cb:1c:49:5c:59:5d:5c:33:9e:1b:a3:82:35:bf:99: 66:b2:dd:b4:2a:41:36:ac:a1:fe:e8:7a:68:33:f5: 0a:fb:b9:a6:94:64:99:5d:d7:2b:3d:3b:e7:96:88: bb:3d:75:a9:7a:f3:33:36:1b:91:05:3d:1b:63:d1: 6c:20:92:22:19:30:e7:4f:62:9e:45:ee:6e:21:3b: 24:bb:bc:7d:b3:c8:a8:56:96:d0:3b:13:d0:b3:9a: 76:6e:71:28:24:95:e9:37:4e:7f:22:88:fb:73:67: 4a:83:84:33:2b:05:bd:5c:2c:4a:71:cb:83:60:6f: 1a:a6:99:46:11:c3:b9:81:67:e1:88:07:b6:db:e2: e3:78:35:3e:aa:74:af:f2:7a:0c:64:48:c2:49:20: 1e:1b:50:18:5e:ae:13:64:1b:89:a7:e4:95:25:6c: af:3e:8c:f2:20:2b:7b:2e:3c:25:69:50:b7:9b:d0: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CA:5E:7D:B3:48:14:2C:64:B2:39:DE:59:E0:56:D5:05:15:6E:7A X509v3 Authority Key Identifier: keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b7:5e:8e:7e:3a:b8:c2:a7:f7:f9:6a:80:fb:68:8c:d9:a0: 8e:31:69:34:ac:61:03:ad:d4:fb:d1:ff:bb:8b:06:b5:9e:da: 26:a6:35:54:16:b8:29:a1:d2:ec:40:aa:9c:bd:c4:39:81:2f: c3:ad:98:28:47:3a:35:ac:41:0e:e1:d5:b9:c8:8d:51:bb:a6: 8e:8f:ea:e7:6d:43:8f:ec:ea:03:1c:f7:27:10:b4:50:c3:c5: 61:0b:3d:b2:b6:50:08:4b:8b:bf:af:a4:3a:3b:0a:5e:73:ab: df:0c:ef:00:fd:17:88:c2:11:a5:4d:6d:55:f3:ce:ca:8e:f7: 8f:9f:5e:6b:75:3d:62:2e:bf:76:6f:81:3a:48:ae:7d:a3:7f: f8:75:cc:42:db:a2:fe:8b:a6:ad:62:aa:1f:5c:4b:c7:13:11: 23:05:a9:83:8a:c6:5b:d2:2c:77:53:2b:fd:5c:34:d8:b6:fe: ba:7b:53:4b:96:1a:76:fc:b5:f5:21:ee:4f:1b:e4:0e:02:94: a8:56:b1:25:66:94:d8:a5:3b:ad:16:cd:9c:46:a2:f0:0d:9e: 87:b5:51:0b:ad:de:d4:59:4f:e9:35:43:e7:90:1a:0d:4f:36: e5:cc:c2:39:90:e5:ef:65:8d:54:af:8b:50:bd:b5:68:63:08: 5b:81:d1:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzsTUJtM6zYG4AyNc//4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGZkNjMxZWYyZWM3Mzc5NDM3ZmQ3Yzc2ZjhlMjQ1ZmYw ODI0YmIwHhcNMjUxMjI0MTAwMTQ5WhcNMjUxMjI1MTAwMTQ5WjAzMTEwLwYDVQQD EyhiOWNhNWU3ZGIzNDgxNDJjNjRiMjM5ZGU1OWUwNTZkNTA1MTU2ZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0evsw4OB/L3b3Dq41ZMU4cRXTH3 R9+CQxpZu4k22/EnpJwtUDIGuIHmy7a0ocL+aX6V58UBgBQaBMIVmlfcTFzcasAS EJPPMS7LHElcWV1cM54bo4I1v5lmst20KkE2rKH+6HpoM/UK+7mmlGSZXdcrPTvn loi7PXWpevMzNhuRBT0bY9FsIJIiGTDnT2KeRe5uITsku7x9s8ioVpbQOxPQs5p2 bnEoJJXpN05/Ioj7c2dKg4QzKwW9XCxKccuDYG8applGEcO5gWfhiAe22+LjeDU+ qnSv8noMZEjCSSAeG1AYXq4TZBuJp+SVJWyvPozyICt7LjwlaVC3m9BkIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnKXn2zSBQsZLI53lngVtUFFW56MB8GA1UdIwQY MBaAFIeP1jHvLsc3lDf9fHb44kX/CCS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYTNkY2ItZGE2NC00OWM4LTk4ZWQt YmE2Y2I0MjUyZmQ3LzEvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hYTNkY2ItZGE2NC00OWM4LTk4ZWQtYmE2Y2I0MjUyZmQ3 LzEvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbdejn46 uMKn9/lqgPtojNmgjjFpNKxhA63U+9H/u4sGtZ7aJqY1VBa4KaHS7ECqnL3EOYEv w62YKEc6NaxBDuHVuciNUbumjo/q521Dj+zqAxz3JxC0UMPFYQs9srZQCEuLv6+k OjsKXnOr3wzvAP0XiMIRpU1tVfPOyo73j59ea3U9Yi6/dm+BOkiufaN/+HXMQtui /oumrWKqH1xLxxMRIwWpg4rGW9Isd1Mr/Vw02Lb+untTS5Yadvy19SHuTxvkDgKU qFaxJWaU2KU7rRbNnEai8A2eh7VRC63e1FlP6TVD55AaDU825czCOZDl72WNVK+L UL21aGMIW4HRug== -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:36 2025 by rpki-client