This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json) Hash identifier: /Y3XZds5629F7/1YV0lpwmTeutbgDK61G5Nl85JMLcs= Subject key identifier: BE:3F:17:D3:E5:56:A3:D7:E1:90:E1:B4:F8:68:61:C5:CD:9D:68:EB Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f Certificate serial: 019B42B7CA1459EA4C42F783B3BC91D2F812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 21:01:39 +0000 Manifest this update: Sun 21 Dec 2025 21:01:39 +0000 Manifest next update: Mon 22 Dec 2025 21:01:39 +0000 Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: 9+7dpy/RMocNvhRlcd2Ngp2dKGmweiYFyd/RW9v0UQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:ca:14:59:ea:4c:42:f7:83:b3:bc:91:d2:f8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f Validity Not Before: Dec 21 21:01:39 2025 GMT Not After : Dec 22 21:01:39 2025 GMT Subject: CN=be3f17d3e556a3d7e190e1b4f86861c5cd9d68eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c6:c8:e5:ab:4c:55:15:7a:dd:31:5a:35:d7: 2b:7a:8c:a9:d6:e9:29:fd:7c:61:f3:de:1a:4b:f9: 21:79:ba:8a:91:5a:0b:b2:eb:bf:5c:7e:b9:5b:51: 8b:1b:3b:45:e5:b3:04:af:79:bb:d6:d7:07:72:3d: 9c:5d:31:34:14:80:16:af:8b:b0:cb:81:90:79:a5: a5:21:76:91:50:9c:dc:53:f2:62:41:c4:22:f3:cd: 64:ae:77:f4:ca:23:9b:ec:83:51:b9:67:86:0e:89: e5:c4:9b:2e:56:39:55:b8:a9:f6:e3:12:6d:02:12: e3:7e:2b:f7:8d:3a:1f:cb:09:06:8e:9a:60:83:5b: f2:37:89:38:73:6e:1d:60:d0:b6:00:26:8f:dd:01: 93:7f:8d:90:20:78:1b:57:73:51:de:cf:99:17:1a: 8b:f0:fa:3e:bd:44:20:d6:d3:1d:74:4e:63:04:75: a6:65:bb:02:4e:f9:39:1a:7b:69:2f:a0:38:50:26: 5c:91:f0:4d:c2:2b:ca:e3:26:62:fd:a4:cd:d7:d6: c7:bc:9f:ce:74:bd:c2:27:c9:25:c3:12:08:5b:a9: b4:e1:20:7e:45:20:9c:1f:36:91:eb:9c:98:97:5c: de:23:64:27:36:4b:55:f5:40:ee:01:18:7b:04:9c: 7a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3F:17:D3:E5:56:A3:D7:E1:90:E1:B4:F8:68:61:C5:CD:9D:68:EB X509v3 Authority Key Identifier: keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:07:55:d5:67:bd:55:53:ce:10:36:19:b1:1a:b5:7e:8b:ae: 8a:3b:13:5b:84:91:f3:9a:71:11:a5:1b:62:d8:78:1f:98:3a: 63:5b:6b:35:9f:da:2a:11:92:ff:90:0c:07:a5:d2:9a:cb:2b: 60:43:e0:8a:08:4d:3f:9f:79:df:02:43:0e:40:1c:62:2c:94: 45:67:8b:39:15:3d:50:fe:76:94:c3:6f:b0:ce:35:8a:6d:ed: 22:f1:d2:5f:08:db:f1:f0:b6:0d:32:a6:c8:7b:66:61:29:f5: c3:f4:85:3d:c6:3a:26:8a:67:e4:c8:be:d5:06:24:7a:5d:97: 55:91:b0:e2:70:0a:71:45:8e:6e:e5:40:50:ac:12:e6:a1:3c: 54:fb:da:54:2c:31:37:97:df:7d:25:8f:11:07:7b:57:e2:6a: fe:3c:25:4a:b7:d2:68:bc:21:9f:7d:30:39:aa:31:84:00:73: 11:94:04:54:79:2d:ea:25:08:44:9f:a5:67:ee:6c:3b:9d:4c: 8c:9b:2d:e7:59:29:d7:0d:bf:b3:8f:de:a7:ff:d5:d3:f6:68: 7c:58:66:65:fa:5f:e6:3f:ab:57:cf:01:05:de:98:a7:d8:e9: dc:9a:03:c3:27:d0:3f:fe:8a:54:9f:4b:34:04:1c:00:2a:07: 67:f4:49:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt8oUWepMQveDs7yR0vgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTU4Mzk4NDlhZDNiOGJmZmEwMTQ5YmIwZTExZTY2MWM5 YzNkN2YwHhcNMjUxMjIxMjEwMTM5WhcNMjUxMjIyMjEwMTM5WjAzMTEwLwYDVQQD EyhiZTNmMTdkM2U1NTZhM2Q3ZTE5MGUxYjRmODY4NjFjNWNkOWQ2OGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cbI5atMVRV63TFaNdcreoyp1ukp /Xxh894aS/khebqKkVoLsuu/XH65W1GLGztF5bMEr3m71tcHcj2cXTE0FIAWr4uw y4GQeaWlIXaRUJzcU/JiQcQi881krnf0yiOb7INRuWeGDonlxJsuVjlVuKn24xJt AhLjfiv3jTofywkGjppgg1vyN4k4c24dYNC2ACaP3QGTf42QIHgbV3NR3s+ZFxqL 8Po+vUQg1tMddE5jBHWmZbsCTvk5GntpL6A4UCZckfBNwivK4yZi/aTN19bHvJ/O dL3CJ8klwxIIW6m04SB+RSCcHzaR65yYl1zeI2QnNktV9UDuARh7BJx6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4/F9PlVqPX4ZDhtPhoYcXNnWjrMB8GA1UdIwQY MBaAFOClg5hJrTuL/6AUm7DhHmYcnD1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtXRG1FbXRPNHZfb0JTYnNPRWVaaHljUFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYjk3YTctZDFhZC00MmQ1LWEwYzgt NzhmYWU3ZmFkYWJhLzEvNEtXRG1FbXRPNHZfb0JTYnNPRWVaaHljUFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYjk3YTctZDFhZC00MmQ1LWEwYzgtNzhmYWU3ZmFkYWJh LzEvNEtXRG1FbXRPNHZfb0JTYnNPRWVaaHljUFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwdV1We9 VVPOEDYZsRq1fouuijsTW4SR85pxEaUbYth4H5g6Y1trNZ/aKhGS/5AMB6XSmssr YEPgighNP5953wJDDkAcYiyURWeLORU9UP52lMNvsM41im3tIvHSXwjb8fC2DTKm yHtmYSn1w/SFPcY6Jopn5Mi+1QYkel2XVZGw4nAKcUWObuVAUKwS5qE8VPvaVCwx N5fffSWPEQd7V+Jq/jwlSrfSaLwhn30wOaoxhABzEZQEVHkt6iUIRJ+lZ+5sO51M jJst51kp1w2/s4/ep//V0/ZofFhmZfpf5j+rV88BBd6Yp9jp3JoDwyfQP/6KVJ9L NAQcACoHZ/RJAw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:26:25 2025 by rpki-client