This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json) Hash identifier: fAG5OEt3CgZTEM7x2Qtz97/9NYIMN9oiJ/JqXfmkWxo= Subject key identifier: C0:71:F3:A0:FE:1C:0B:F0:43:26:73:D9:16:9D:F9:A7:46:D4:D0:D7 Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87 Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387 Certificate serial: 019B3A8FD95B6FB7B26B579D06F647ADCA44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft Manifest number: 04B6 Signing time: Sat 20 Dec 2025 07:01:04 +0000 Manifest this update: Sat 20 Dec 2025 07:01:04 +0000 Manifest next update: Sun 21 Dec 2025 07:01:04 +0000 Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: NALYcvdgFtygXsLG448Dxcf1/JX224GhMowkLGDBQLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:d9:5b:6f:b7:b2:6b:57:9d:06:f6:47:ad:ca:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387 Validity Not Before: Dec 20 07:01:04 2025 GMT Not After : Dec 21 07:01:04 2025 GMT Subject: CN=c071f3a0fe1c0bf0432673d9169df9a746d4d0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:b6:a7:fd:84:d3:b6:28:ef:0d:e9:ea:bc: a5:c3:72:d8:5b:ac:fe:b0:bc:7c:13:83:6a:ae:84: 54:9b:1c:8f:f0:4b:4a:25:57:05:92:b7:9f:ed:94: 0b:d8:2d:85:54:cc:8b:16:a4:cc:23:c5:62:6b:52: 7b:f7:37:14:f5:30:dc:ca:ed:96:7e:c3:a0:5c:e9: 1d:61:6d:82:1f:7a:32:e3:1b:d8:61:1f:ab:3d:5d: ee:56:11:fd:f7:e4:33:cb:99:84:46:7c:d7:84:f2: 32:ff:61:65:60:59:64:9a:aa:c7:26:d8:fc:9a:72: 49:31:8c:ae:c0:ca:94:24:be:99:17:b5:40:a2:1e: 9a:dc:1c:1a:eb:4f:6e:bb:38:de:af:50:f7:59:ce: 5f:f6:89:27:9e:d0:26:c5:92:54:3b:f7:53:b6:4c: b1:ce:50:39:21:c4:32:54:4d:fe:bf:7a:14:3a:3d: 01:31:f1:c1:f4:82:74:a5:e9:82:cd:b6:e5:b2:95: cf:5b:92:15:c1:09:e9:03:ae:a5:ea:4e:1b:ea:91: f0:b2:55:3c:a0:f7:f3:83:b3:60:fd:12:61:9b:22: 85:e2:d1:b3:89:c2:c0:87:77:d6:58:63:15:9c:03: 0a:85:96:db:8a:5a:d0:b1:d1:60:bf:9a:2e:72:d3: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:71:F3:A0:FE:1C:0B:F0:43:26:73:D9:16:9D:F9:A7:46:D4:D0:D7 X509v3 Authority Key Identifier: keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2f:5a:39:9a:d9:e7:c8:5b:9b:e4:c4:64:9c:35:56:5e:db: 6a:d8:43:3a:47:15:87:58:a2:bc:48:23:a0:c0:af:4f:d8:e6: 60:ee:19:a8:30:49:59:7e:36:02:b7:4e:9d:f2:d5:30:8c:a3: 81:a0:d2:ee:c5:d5:9d:85:bd:f3:34:95:a2:b1:c4:29:25:6c: 6f:12:db:ee:1c:8b:42:00:93:9e:ce:ad:7c:56:60:60:55:69: f8:ed:0a:80:e8:02:84:2f:13:b6:bb:6c:b3:1b:53:b0:79:68: 63:3e:7b:03:f7:e3:36:ff:8a:b9:d6:ab:8a:fb:b8:f2:93:10: 95:2d:a9:d3:a8:a1:78:38:ae:54:03:eb:93:88:34:48:7e:ec: 65:f9:1a:70:d0:4c:d9:4b:37:a4:cd:9b:72:b8:7e:15:a0:6e: 38:e0:5a:ed:a8:ca:43:f5:b5:5d:b6:d2:88:72:08:67:84:72: b1:0c:af:5a:a4:5f:0a:5f:d9:9a:67:be:c5:5e:72:7d:a4:ad: 38:7c:d0:5f:26:0d:04:0f:60:16:02:17:b1:c1:fd:74:a3:06: 4c:70:17:07:0e:fc:ae:76:ee:cf:e2:42:0e:b3:28:f9:88:6e: dd:43:14:19:93:d3:e5:20:e0:4b:44:c1:aa:03:72:f3:58:40: 81:1c:3b:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j9lbb7eya1edBvZHrcpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzODI4ODdlMTkwNDkzMmYxMTg2YzJjMzFjNmE5MmZmNWVj NjQzODcwHhcNMjUxMjIwMDcwMTA0WhcNMjUxMjIxMDcwMTA0WjAzMTEwLwYDVQQD EyhjMDcxZjNhMGZlMWMwYmYwNDMyNjczZDkxNjlkZjlhNzQ2ZDRkMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwta2p/2E07Yo7w3p6rylw3LYW6z+ sLx8E4NqroRUmxyP8EtKJVcFkref7ZQL2C2FVMyLFqTMI8Via1J79zcU9TDcyu2W fsOgXOkdYW2CH3oy4xvYYR+rPV3uVhH99+Qzy5mERnzXhPIy/2FlYFlkmqrHJtj8 mnJJMYyuwMqUJL6ZF7VAoh6a3Bwa609uuzjer1D3Wc5f9oknntAmxZJUO/dTtkyx zlA5IcQyVE3+v3oUOj0BMfHB9IJ0pemCzbblspXPW5IVwQnpA66l6k4b6pHwslU8 oPfzg7Ng/RJhmyKF4tGzicLAh3fWWGMVnAMKhZbbilrQsdFgv5ouctPjvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBx86D+HAvwQyZz2Rad+adG1NDXMB8GA1UdIwQY MBaAFJOCiH4ZBJMvEYbCwxxqkv9exkOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAt NWM5NDU0NjhjNDc1LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAtNWM5NDU0NjhjNDc1 LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXy9aOZrZ 58hbm+TEZJw1Vl7bathDOkcVh1iivEgjoMCvT9jmYO4ZqDBJWX42ArdOnfLVMIyj gaDS7sXVnYW98zSVorHEKSVsbxLb7hyLQgCTns6tfFZgYFVp+O0KgOgChC8Ttrts sxtTsHloYz57A/fjNv+Kudarivu48pMQlS2p06iheDiuVAPrk4g0SH7sZfkacNBM 2Us3pM2bcrh+FaBuOOBa7ajKQ/W1XbbSiHIIZ4RysQyvWqRfCl/Zmme+xV5yfaSt OHzQXyYNBA9gFgIXscH9dKMGTHAXBw78rnbuz+JCDrMo+Yhu3UMUGZPT5SDgS0TB qgNy81hAgRw7IQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:09:06 2025 by rpki-client