This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json) Hash identifier: N4a93Yn2+Jjbe3bjv7r2Id7xxi7g6KJCxR52mRgyc/M= Subject key identifier: 98:29:D3:90:F8:EE:4B:48:56:DE:25:DC:E4:0A:9D:E3:55:DC:98:D3 Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11 Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611 Certificate serial: 019B6B7BDE96B8FC41C16D1D46D4687B9A2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft Manifest number: 1730 Signing time: Mon 29 Dec 2025 19:00:38 +0000 Manifest this update: Mon 29 Dec 2025 19:00:38 +0000 Manifest next update: Tue 30 Dec 2025 19:00:38 +0000 Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: BGex/mSexj38iOfTfZcdkMnfR15B6qH8PQntelTzKYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7b:de:96:b8:fc:41:c1:6d:1d:46:d4:68:7b:9a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611 Validity Not Before: Dec 29 19:00:38 2025 GMT Not After : Dec 30 19:00:38 2025 GMT Subject: CN=9829d390f8ee4b4856de25dce40a9de355dc98d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:3f:6e:6b:0f:97:f3:df:f1:ae:c0:60:59: cf:15:b7:4c:d0:c4:9a:03:f4:6a:f5:67:9f:a2:26: 8b:82:d7:9b:3c:3e:77:33:7f:74:49:4f:b7:5f:d5: 02:d0:59:60:b6:b1:ab:fb:f5:a5:02:98:4b:0f:fd: c9:68:cc:11:4d:fc:c0:64:41:5f:d3:ce:f6:9b:ff: 6e:d9:52:ba:5c:88:e6:dd:96:82:f4:82:14:68:28: 72:4e:5c:16:ad:64:a0:5f:90:29:59:9a:23:20:62: f8:4d:3f:86:97:1a:cc:50:5a:c5:cb:85:4c:f9:2f: 39:6e:18:a4:f5:19:fe:fb:31:d7:ef:ef:c5:d8:61: 32:1c:0b:5a:5f:8f:da:9e:94:da:98:89:eb:c7:ba: ab:82:3f:af:9e:fe:c9:3d:da:d0:17:b4:e3:fa:d9: c4:c4:b9:42:5a:2b:12:14:e1:a6:9e:02:6b:bc:ae: 35:12:aa:cb:3f:bd:cb:19:d6:77:1a:a1:f3:2c:b8: d9:3c:43:4a:a4:3f:5d:e7:cf:5d:21:0a:dd:79:dd: d7:e8:81:bb:7b:f2:a8:05:3d:2f:a3:12:b1:37:14: 7f:60:fd:3a:d6:33:eb:5a:ee:33:82:03:6c:70:e5: 4c:de:66:21:0f:ea:fe:a2:ba:d5:27:c3:19:50:30: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:29:D3:90:F8:EE:4B:48:56:DE:25:DC:E4:0A:9D:E3:55:DC:98:D3 X509v3 Authority Key Identifier: keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fe:de:a0:fb:2b:fc:9a:c2:99:b7:8c:10:8a:c2:ac:57:52: 78:45:b8:e2:e9:cf:9e:cf:ca:59:4a:90:84:11:fe:9b:ac:75: fe:47:42:c2:dd:b0:d1:f7:2d:81:0d:d2:ee:29:1a:72:3e:76: f9:c4:90:6e:63:c9:e8:b1:aa:33:4e:2d:2f:8a:9e:1b:f5:e3: 17:6a:9a:37:de:05:a3:27:f1:85:43:73:b8:8b:ba:d3:4c:1c: d7:9d:78:09:13:62:a5:2a:04:f1:38:06:18:ce:b5:6e:d2:17: 8f:30:30:70:24:1a:fb:bd:5b:e5:03:b7:65:20:fa:e5:a1:82: 79:23:9b:78:0b:c0:60:34:8e:42:10:1b:9f:ff:b4:13:49:62: 3b:bf:46:61:e0:52:de:94:7e:c7:d7:55:cf:8c:e8:1c:aa:dd: c5:2d:8f:a3:00:e2:20:f2:c3:e9:b1:64:87:a0:f1:50:5c:5e: 35:dd:24:7a:17:d5:87:25:9c:81:71:d4:6d:a7:ba:af:7b:02: 34:df:44:fe:3a:4a:64:95:ab:b0:be:dd:53:cb:b2:8e:f9:9c: 56:a3:a5:f1:59:d9:39:43:c4:a3:b0:11:57:55:75:ad:12:87: 65:e4:ea:2f:1f:82:7f:04:a1:f4:d6:e0:d4:13:3e:a3:1b:07: 03:af:49:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtre96WuPxBwW0dRtRoe5orMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODNkOTI4MWE3YTUwOGFiZmM0OTUzMDRhZTk5Yzk4YzA0 MmM2MTEwHhcNMjUxMjI5MTkwMDM4WhcNMjUxMjMwMTkwMDM4WjAzMTEwLwYDVQQD Eyg5ODI5ZDM5MGY4ZWU0YjQ4NTZkZTI1ZGNlNDBhOWRlMzU1ZGM5OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zc/bmsPl/Pf8a7AYFnPFbdM0MSa A/Rq9WefoiaLgtebPD53M390SU+3X9UC0FlgtrGr+/WlAphLD/3JaMwRTfzAZEFf 0872m/9u2VK6XIjm3ZaC9IIUaChyTlwWrWSgX5ApWZojIGL4TT+GlxrMUFrFy4VM +S85bhik9Rn++zHX7+/F2GEyHAtaX4/anpTamInrx7qrgj+vnv7JPdrQF7Tj+tnE xLlCWisSFOGmngJrvK41EqrLP73LGdZ3GqHzLLjZPENKpD9d589dIQrded3X6IG7 e/KoBT0voxKxNxR/YP061jPrWu4zggNscOVM3mYhD+r+orrVJ8MZUDBXsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgp05D47ktIVt4l3OQKneNV3JjTMB8GA1UdIwQY MBaAFGuD2SgaelCKv8SVMErpnJjAQsYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84MGM5ZTMtM2I4OS00ZTNjLWFhMzct MDNmZWYzMmFmNzA2LzEvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84MGM5ZTMtM2I4OS00ZTNjLWFhMzctMDNmZWYzMmFmNzA2 LzEvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/7eoPsr /JrCmbeMEIrCrFdSeEW44unPns/KWUqQhBH+m6x1/kdCwt2w0fctgQ3S7ikacj52 +cSQbmPJ6LGqM04tL4qeG/XjF2qaN94FoyfxhUNzuIu600wc1514CRNipSoE8TgG GM61btIXjzAwcCQa+71b5QO3ZSD65aGCeSObeAvAYDSOQhAbn/+0E0liO79GYeBS 3pR+x9dVz4zoHKrdxS2PowDiIPLD6bFkh6DxUFxeNd0kehfVhyWcgXHUbae6r3sC NN9E/jpKZJWrsL7dU8uyjvmcVqOl8VnZOUPEo7ARV1V1rRKHZeTqLx+CfwSh9Nbg 1BM+oxsHA69JdA== -----END CERTIFICATE-----Generated at Tue Dec 30 03:16:32 2025 by rpki-client