This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json) Hash identifier: csKlzHQ4Z5QythfnE5qCpz23new/RHnkKAWjPY45e9g= Subject key identifier: B4:F3:9E:9D:1C:7E:7C:12:52:E0:BB:3E:0F:92:00:7C:8E:F6:9F:FB Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9 Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9 Certificate serial: 019B44DCF6DC4C2C1FE56F7B4D5FB6855ACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft Manifest number: 04CA Signing time: Mon 22 Dec 2025 07:01:30 +0000 Manifest this update: Mon 22 Dec 2025 07:01:30 +0000 Manifest next update: Tue 23 Dec 2025 07:01:30 +0000 Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: KJlRmL0ESGphkqHCx3QBlukKDU68jsrrbavudl7ypMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:f6:dc:4c:2c:1f:e5:6f:7b:4d:5f:b6:85:5a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9 Validity Not Before: Dec 22 07:01:30 2025 GMT Not After : Dec 23 07:01:30 2025 GMT Subject: CN=b4f39e9d1c7e7c1252e0bb3e0f92007c8ef69ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:a7:c2:99:20:8a:b5:97:b0:79:d2:07:85: 36:7c:67:c5:d1:17:ad:a5:4c:32:32:ad:86:e9:ac: 8b:b2:ca:01:ac:df:06:91:37:d7:56:c4:92:94:cc: 7e:70:ae:18:82:4c:99:b9:24:c3:b6:78:30:3c:8a: 09:09:ea:f7:e1:a7:fb:47:34:2b:ed:43:e0:a0:a1: de:f8:ed:2c:a9:fe:99:af:0a:e1:81:68:b1:bb:64: a9:7f:fc:c4:74:4b:22:41:c9:dc:8b:7b:7d:9f:91: 41:8a:bf:72:fc:1b:12:2a:cc:db:ce:87:25:85:c1: c7:08:da:e8:5f:54:0b:9d:d1:a4:d9:b7:c3:d8:0b: 70:42:ca:67:89:93:d8:5a:6a:95:44:67:ce:32:9b: fe:b5:e1:d7:9a:c1:6a:de:98:72:27:4a:d6:a8:5d: c4:8b:a8:16:9d:4b:87:a7:c9:e4:42:e9:0c:bf:28: 07:ce:df:88:f3:44:c6:13:b2:7a:19:c3:f9:2b:12: 6f:6c:2c:14:b0:fa:55:bf:19:b3:29:2b:17:04:bb: 88:df:3e:d3:a5:61:8c:11:87:fa:04:ec:ef:ea:38: 42:f6:1e:91:f6:06:a2:b2:b5:03:eb:65:36:51:d1: 74:d6:43:dc:31:08:11:b3:d0:56:df:96:d0:64:10: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F3:9E:9D:1C:7E:7C:12:52:E0:BB:3E:0F:92:00:7C:8E:F6:9F:FB X509v3 Authority Key Identifier: keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:f1:ba:72:0b:9f:72:76:05:93:80:fa:0a:a7:51:b9:72: 49:1e:e7:7c:a0:ab:c6:1f:ff:6e:1f:a4:4f:b6:2c:97:0c:a4: 5b:3d:9c:d9:00:ef:fc:ea:ab:65:c4:6d:c5:f7:93:67:e0:ff: 34:5b:54:bd:99:7f:88:7b:bf:ea:2f:89:54:1e:7f:30:f2:39: 99:9e:58:f6:0f:d4:1e:93:55:02:9b:1a:3a:42:69:bc:e9:e8: 4a:c9:4e:20:7d:91:4c:f1:46:03:4b:fe:48:bb:b4:8d:e5:c6: 47:1a:e9:48:36:5d:06:43:94:da:d1:e7:bc:ef:dd:51:20:59: cd:e2:cd:ac:4d:78:1f:70:2d:f1:c7:98:1d:24:7b:2c:5e:47: 81:30:03:e5:b5:b8:25:f8:d6:ec:cf:42:2c:ae:4a:bb:cc:16: 2e:42:80:10:1d:ff:2c:f6:68:29:82:4c:61:d2:6f:a1:a9:77: 5b:49:38:fc:0f:d8:65:7a:e0:a4:5c:e0:36:09:94:ca:be:86: de:da:a3:6a:3a:a8:fb:8b:7b:64:3b:eb:ac:0b:73:0a:6a:3e: 63:3e:fb:a0:c8:29:8a:f6:07:71:59:0a:c4:85:45:12:32:bd: 7e:d2:32:66:40:8b:bc:23:09:f4:ef:46:ff:fb:9f:c7:e4:da: fc:e3:35:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3PbcTCwf5W97TV+2hVrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjE0NzcwNGI2YzY2NGRjZjIyMzQ5MmVlNjFkNWU1Zjkx N2M1ZTkwHhcNMjUxMjIyMDcwMTMwWhcNMjUxMjIzMDcwMTMwWjAzMTEwLwYDVQQD EyhiNGYzOWU5ZDFjN2U3YzEyNTJlMGJiM2UwZjkyMDA3YzhlZjY5ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoienwpkgirWXsHnSB4U2fGfF0Ret pUwyMq2G6ayLssoBrN8GkTfXVsSSlMx+cK4YgkyZuSTDtngwPIoJCer34af7RzQr 7UPgoKHe+O0sqf6ZrwrhgWixu2Spf/zEdEsiQcnci3t9n5FBir9y/BsSKszbzocl hcHHCNroX1QLndGk2bfD2AtwQspniZPYWmqVRGfOMpv+teHXmsFq3phyJ0rWqF3E i6gWnUuHp8nkQukMvygHzt+I80TGE7J6GcP5KxJvbCwUsPpVvxmzKSsXBLuI3z7T pWGMEYf6BOzv6jhC9h6R9gaisrUD62U2UdF01kPcMQgRs9BW35bQZBDZeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTznp0cfnwSUuC7Pg+SAHyO9p/7MB8GA1UdIwQY MBaAFOEhR3BLbGZNzyI0ku5h1eX5F8XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Yjk3MDMtMzkyOS00YTRlLTkzYjct YTFiZjQyYzU4NDk0LzEvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Yjk3MDMtMzkyOS00YTRlLTkzYjctYTFiZjQyYzU4NDk0 LzEvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcErxunIL n3J2BZOA+gqnUblySR7nfKCrxh//bh+kT7YslwykWz2c2QDv/OqrZcRtxfeTZ+D/ NFtUvZl/iHu/6i+JVB5/MPI5mZ5Y9g/UHpNVApsaOkJpvOnoSslOIH2RTPFGA0v+ SLu0jeXGRxrpSDZdBkOU2tHnvO/dUSBZzeLNrE14H3At8ceYHSR7LF5HgTAD5bW4 JfjW7M9CLK5Ku8wWLkKAEB3/LPZoKYJMYdJvoal3W0k4/A/YZXrgpFzgNgmUyr6G 3tqjajqo+4t7ZDvrrAtzCmo+Yz77oMgpivYHcVkKxIVFEjK9ftIyZkCLvCMJ9O9G //ufx+Ta/OM1IA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:45 2025 by rpki-client