This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json) Hash identifier: enIuMUp+duWIcGe1sXFzwX8CJeJRuy5DD2l07Eim/0A= Subject key identifier: A0:44:91:40:30:40:FB:DD:9A:8B:19:3B:BC:08:CF:AB:68:64:C6:3B Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18 Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518 Certificate serial: 019B58D1856E68CF93DE22C63EC3067EB9AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft Manifest number: 1724 Signing time: Fri 26 Dec 2025 04:01:24 +0000 Manifest this update: Fri 26 Dec 2025 04:01:24 +0000 Manifest next update: Sat 27 Dec 2025 04:01:24 +0000 Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: WRCZxh+3Hm0vfPO0IscCkdPvEmUPVc8MaTmD/VLheEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:85:6e:68:cf:93:de:22:c6:3e:c3:06:7e:b9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518 Validity Not Before: Dec 26 04:01:24 2025 GMT Not After : Dec 27 04:01:24 2025 GMT Subject: CN=a04491403040fbdd9a8b193bbc08cfab6864c63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:f3:36:7d:f4:99:ca:93:14:be:c9:11:98: 3d:fb:1a:b7:cc:c0:ff:db:4f:6c:f2:cc:ec:07:d5: fe:a1:e2:bb:c9:49:dc:22:02:04:6b:5f:1e:ff:bc: c2:50:d8:79:6f:3c:f4:06:22:5d:0a:bf:0e:6e:fb: a2:7e:a1:87:8a:44:ac:18:ac:ca:a7:ee:ae:19:eb: 69:57:b7:eb:23:7f:3d:d5:98:8e:3f:e2:54:68:77: d6:fb:1b:17:2e:95:fe:98:f4:64:a0:b4:83:2c:ec: 59:40:35:24:15:d4:2b:54:79:6f:36:58:d8:27:08: ab:9d:ff:65:bd:46:96:1a:19:2f:de:77:76:07:e1: 64:2d:ed:92:70:71:b9:72:e9:a2:21:e0:ae:3a:8c: b3:b3:f6:2f:b0:cf:34:c4:6a:68:0c:04:e4:b2:49: 76:f4:2f:fd:df:75:6b:bf:20:85:9e:c3:8b:a6:55: 80:b6:35:a5:71:a9:13:6d:60:7b:7a:0a:d5:6d:15: 58:c0:66:3f:1e:55:a3:2f:f2:36:00:ee:97:68:69: 43:40:9c:23:99:35:ff:ac:42:a1:63:ff:c8:63:0a: 33:05:67:40:4e:ad:6f:05:5e:c8:ad:14:f0:c4:d5: 50:49:4d:18:84:3b:0f:d3:d6:ea:53:bc:67:9f:fd: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:44:91:40:30:40:FB:DD:9A:8B:19:3B:BC:08:CF:AB:68:64:C6:3B X509v3 Authority Key Identifier: keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f5:0f:4f:70:55:46:d7:c5:01:bf:83:68:e6:9e:1d:87:19: a0:60:27:0d:35:00:67:b3:3c:db:c9:95:2e:a3:f9:6e:9b:ff: 40:bc:6c:34:c4:f9:fa:17:fd:24:01:6c:64:6a:ed:31:38:86: f3:fa:06:25:5c:23:ee:90:56:75:f0:5f:ce:a8:e3:d6:0c:a0: b2:96:cf:47:15:c6:ba:5b:36:90:5b:c8:5d:25:a1:a6:16:18: 64:76:39:91:d4:ae:bb:9c:c8:75:e8:64:6b:63:09:36:cf:11: 96:6c:0e:9f:21:0b:76:3a:52:e1:85:97:06:b4:e9:54:69:e0: 03:6d:d9:53:fc:7c:72:ec:aa:21:71:60:a3:33:22:03:82:7d: 2e:5d:24:d1:51:52:8f:7f:bc:52:ca:4d:2e:78:1d:5e:ab:15: 06:8e:41:8f:89:9a:62:6a:4e:bd:c4:17:fb:cc:b3:c5:fe:af: 39:87:db:fc:c5:7a:d8:46:1f:4d:52:40:cd:8a:45:9d:1f:78: e7:d8:be:a9:af:ba:88:b0:ef:d2:61:3c:57:ce:09:89:74:fc: ce:4b:dc:8a:10:94:6d:af:96:c2:1f:84:30:1d:2c:b7:b9:c1: 0d:d4:ae:61:a3:12:71:3c:bf:3b:34:77:06:21:27:60:7b:74: 3a:bd:50:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0YVuaM+T3iLGPsMGfrmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZWUwOWJmZjRkN2EyNjJkMDY5MzA3M2IyNTk3NTU4ZTQ4 MDc1MTgwHhcNMjUxMjI2MDQwMTI0WhcNMjUxMjI3MDQwMTI0WjAzMTEwLwYDVQQD EyhhMDQ0OTE0MDMwNDBmYmRkOWE4YjE5M2JiYzA4Y2ZhYjY4NjRjNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RHzNn30mcqTFL7JEZg9+xq3zMD/ 209s8szsB9X+oeK7yUncIgIEa18e/7zCUNh5bzz0BiJdCr8ObvuifqGHikSsGKzK p+6uGetpV7frI3891ZiOP+JUaHfW+xsXLpX+mPRkoLSDLOxZQDUkFdQrVHlvNljY Jwirnf9lvUaWGhkv3nd2B+FkLe2ScHG5cumiIeCuOoyzs/YvsM80xGpoDATkskl2 9C/933VrvyCFnsOLplWAtjWlcakTbWB7egrVbRVYwGY/HlWjL/I2AO6XaGlDQJwj mTX/rEKhY//IYwozBWdATq1vBV7IrRTwxNVQSU0YhDsP09bqU7xnn/0NFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBEkUAwQPvdmosZO7wIz6toZMY7MB8GA1UdIwQY MBaAFJDuCb/016Ji0Gkwc7JZdVjkgHUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQt ZjhkYzk1MzUwYjg1LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQtZjhkYzk1MzUwYjg1 LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/UPT3BV RtfFAb+DaOaeHYcZoGAnDTUAZ7M828mVLqP5bpv/QLxsNMT5+hf9JAFsZGrtMTiG 8/oGJVwj7pBWdfBfzqjj1gygspbPRxXGuls2kFvIXSWhphYYZHY5kdSuu5zIdehk a2MJNs8RlmwOnyELdjpS4YWXBrTpVGngA23ZU/x8cuyqIXFgozMiA4J9Ll0k0VFS j3+8UspNLngdXqsVBo5Bj4maYmpOvcQX+8yzxf6vOYfb/MV62EYfTVJAzYpFnR94 59i+qa+6iLDv0mE8V84JiXT8zkvcihCUba+Wwh+EMB0st7nBDdSuYaMScTy/OzR3 BiEnYHt0Or1QCg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:26 2025 by rpki-client