This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json) Hash identifier: 7q6EX/CCfPZeDZs35QTDhEh3SmOykfgsFiPv1SoLBjs= Subject key identifier: 30:15:49:8F:B4:CD:74:84:BC:88:D7:28:E5:95:D8:BE:F1:BF:6E:6B Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0 Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0 Certificate serial: 019B432518F970C621793E63751129CF14DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft Manifest number: 09F1 Signing time: Sun 21 Dec 2025 23:01:03 +0000 Manifest this update: Sun 21 Dec 2025 23:01:03 +0000 Manifest next update: Mon 22 Dec 2025 23:01:03 +0000 Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: DnbnJ7reg0iJDDdrlhqifP8BL/lDvqgoywRIoIQHBIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:18:f9:70:c6:21:79:3e:63:75:11:29:cf:14:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0 Validity Not Before: Dec 21 23:01:03 2025 GMT Not After : Dec 22 23:01:03 2025 GMT Subject: CN=3015498fb4cd7484bc88d728e595d8bef1bf6e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:4f:7e:f5:73:ac:1d:23:8b:cd:ec:dd:e5: 97:96:00:e5:70:9a:3c:ae:26:c9:c7:df:2a:89:b1: 84:10:0d:07:7b:c9:8e:95:5b:20:ec:11:d7:11:aa: e8:5d:bf:f9:2a:59:8c:b1:40:11:76:3f:e0:a8:b7: dd:4a:17:08:32:d3:2c:ff:c2:36:80:0c:20:d4:db: 40:22:11:1f:17:d3:9d:8f:82:65:ee:54:82:3a:d7: 44:6c:92:9d:2b:63:23:81:fa:b4:d2:1d:66:d1:ba: 23:dc:fd:fc:b7:c2:cd:54:cf:a9:d4:89:78:95:40: c3:68:21:98:fe:60:86:17:98:62:4d:2b:50:34:f9: 17:5d:82:15:90:8c:a4:44:c1:0e:62:e0:34:25:6c: f2:27:c5:f5:3f:21:1e:67:db:ad:44:2b:8f:b9:ea: b4:7a:11:81:8d:6d:bb:48:51:c7:9c:8a:cb:8d:92: b5:32:9d:2f:47:c8:e6:63:6c:99:c6:41:be:a8:4b: a0:b2:81:89:76:7d:7d:14:a1:c1:b4:f2:41:60:9d: 88:84:38:c8:e3:1b:99:b6:c0:ce:bc:33:f8:07:78: 8f:a0:c9:c0:0e:08:db:2e:79:51:6e:ed:e4:5f:e4: 0f:94:b4:23:5a:71:6b:a2:ef:ae:72:be:96:a7:ff: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:15:49:8F:B4:CD:74:84:BC:88:D7:28:E5:95:D8:BE:F1:BF:6E:6B X509v3 Authority Key Identifier: keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:74:94:f3:b8:53:32:67:18:49:44:31:ca:5f:fa:74:e3:72: f7:d6:4e:86:cd:48:99:0d:8d:8c:f8:99:3e:e0:7d:ff:e5:01: 00:44:df:29:34:11:be:19:c7:c6:a9:a5:c1:8c:d6:6a:c1:5c: b2:78:ac:15:fd:73:3e:ef:fa:f4:c3:c2:0d:8b:7d:c0:33:f2: 08:18:41:66:88:c6:7e:9e:e9:5f:4e:68:c2:42:91:c0:a9:7a: 24:4a:e2:e8:1f:d6:5b:62:5e:a8:35:bf:7c:95:99:64:ac:cc: ff:e2:66:98:d5:1c:e8:d1:c7:b0:ad:5c:ff:b8:23:55:a5:f0: f8:b5:56:4e:95:34:52:db:ef:68:f9:07:d7:1b:71:a2:f9:de: fc:67:d4:db:68:7d:1e:2a:f3:f3:e6:5f:b7:e9:88:6b:c4:2a: 4b:1b:c3:27:76:ac:c3:bc:ef:a3:1d:f4:cf:b2:7a:04:28:6e: d3:c8:20:bc:f3:38:73:27:47:61:10:3e:a6:c0:e3:8e:e9:06: 2d:8c:06:97:7c:da:17:5f:de:b6:2f:e2:94:13:c3:28:2a:bf: 97:62:45:5c:39:d9:16:c2:ec:5e:6e:7c:ff:01:97:d9:46:00: 84:99:4c:d0:9c:8b:2b:17:1e:fa:ed:5c:69:3b:29:5c:4b:4e: a2:2e:70:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJRj5cMYheT5jdREpzxTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTdmODkyMmFiODQ2YTI5ODE5ZWE4MjRiYjFjNjFiMDZl MzEzYjAwHhcNMjUxMjIxMjMwMTAzWhcNMjUxMjIyMjMwMTAzWjAzMTEwLwYDVQQD EygzMDE1NDk4ZmI0Y2Q3NDg0YmM4OGQ3MjhlNTk1ZDhiZWYxYmY2ZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UZPfvVzrB0ji83s3eWXlgDlcJo8 ribJx98qibGEEA0He8mOlVsg7BHXEaroXb/5KlmMsUARdj/gqLfdShcIMtMs/8I2 gAwg1NtAIhEfF9Odj4Jl7lSCOtdEbJKdK2Mjgfq00h1m0boj3P38t8LNVM+p1Il4 lUDDaCGY/mCGF5hiTStQNPkXXYIVkIykRMEOYuA0JWzyJ8X1PyEeZ9utRCuPueq0 ehGBjW27SFHHnIrLjZK1Mp0vR8jmY2yZxkG+qEugsoGJdn19FKHBtPJBYJ2IhDjI 4xuZtsDOvDP4B3iPoMnADgjbLnlRbu3kX+QPlLQjWnFrou+ucr6Wp//WVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAVSY+0zXSEvIjXKOWV2L7xv25rMB8GA1UdIwQY MBaAFJvn+JIquEaimBnqgkuxxhsG4xOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2Qt YjUzOTY3YTJjOTM4LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2QtYjUzOTY3YTJjOTM4 LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXSU87hT MmcYSUQxyl/6dONy99ZOhs1ImQ2NjPiZPuB9/+UBAETfKTQRvhnHxqmlwYzWasFc snisFf1zPu/69MPCDYt9wDPyCBhBZojGfp7pX05owkKRwKl6JEri6B/WW2JeqDW/ fJWZZKzM/+JmmNUc6NHHsK1c/7gjVaXw+LVWTpU0UtvvaPkH1xtxovne/GfU22h9 Hirz8+Zft+mIa8QqSxvDJ3asw7zvox30z7J6BChu08ggvPM4cydHYRA+psDjjukG LYwGl3zaF1/eti/ilBPDKCq/l2JFXDnZFsLsXm58/wGX2UYAhJlM0JyLKxce+u1c aTspXEtOoi5w1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 00:13:20 2025 by rpki-client