This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json) Hash identifier: e+7N9ohAD2bCXDZO4+0o/KkReRsmnDFna6MvEfobrVU= Subject key identifier: F9:AE:D3:DA:23:16:4A:B3:3D:DE:5C:7E:A9:1B:27:F2:C1:71:62:02 Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A Certificate issuer: /CN=b785ec73dc181f9935659f58aed208532a2c2a6a Certificate serial: 019B405CDD454D18EC8715579B660641318A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft Manifest number: 0316 Signing time: Sun 21 Dec 2025 10:03:06 +0000 Manifest this update: Sun 21 Dec 2025 10:03:06 +0000 Manifest next update: Mon 22 Dec 2025 10:03:06 +0000 Files and hashes: 1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: EbYpbjekyi/2OCfoxabSjWjuawNzw1s53Q9ivJqxgbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:dd:45:4d:18:ec:87:15:57:9b:66:06:41:31:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a Validity Not Before: Dec 21 10:03:06 2025 GMT Not After : Dec 22 10:03:06 2025 GMT Subject: CN=f9aed3da23164ab33dde5c7ea91b27f2c1716202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:25:bd:07:2d:12:72:10:d3:59:33:67:93: 97:38:a9:c9:cc:38:96:34:c3:5a:23:ca:df:4d:6e: 23:5b:44:96:9f:aa:81:c2:49:7c:20:58:f6:65:d7: 92:52:8c:12:36:20:80:63:11:2d:b6:0d:3f:b0:cc: 83:17:c1:5e:a4:ee:3e:3e:95:be:58:2c:85:84:cf: bd:04:1d:1a:e6:8f:65:68:23:d9:fe:3a:cd:b4:6c: 1c:9d:96:97:0e:fa:0f:8d:67:9d:6d:2a:24:57:cf: 31:50:99:b0:bd:6f:02:20:e8:8d:ef:89:f1:4e:00: 10:6c:76:62:1a:c8:81:63:79:bc:71:46:3b:40:ee: 45:28:73:1f:84:5b:8d:46:10:fc:60:45:4e:86:61: e3:3f:1f:21:20:8a:16:d5:ea:12:11:d6:14:f8:f0: ea:b8:c5:5e:e7:2b:1b:f7:7d:1c:5d:d6:e3:1a:82: 5a:89:a9:f6:76:0e:f2:ae:87:ea:94:89:cb:3b:7c: 32:38:07:0e:12:33:a6:92:eb:cf:90:11:2e:8e:79: 07:d5:26:e0:d2:ca:1d:6e:91:be:39:4a:0c:89:57: 3e:56:51:43:2b:31:1c:a6:43:88:63:53:b4:3b:76: 74:ef:f1:3e:e0:fd:38:95:e7:d2:15:44:32:4f:61: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AE:D3:DA:23:16:4A:B3:3D:DE:5C:7E:A9:1B:27:F2:C1:71:62:02 X509v3 Authority Key Identifier: keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0e:c7:f2:70:83:7a:64:19:a6:c3:7e:7b:97:09:b5:bd:dc: e9:fa:7f:8a:fe:55:71:6d:62:9f:b6:28:db:7d:a0:b9:8b:79: 66:8d:40:9b:49:1e:b7:c5:0c:4b:31:e7:c0:5a:30:ab:39:bc: e3:13:02:de:f4:48:30:62:12:92:7f:11:9e:bd:d9:d8:3c:14: d7:3c:a4:eb:74:e8:bf:0b:bd:ba:23:14:fa:a1:37:4f:8f:a8: 2f:36:85:db:29:23:8f:25:40:6e:b5:ee:96:fa:13:4b:8d:9d: 69:f2:6e:64:1c:32:d8:77:3e:65:2c:42:67:b8:57:76:d9:2c: 27:69:69:7a:55:db:8f:75:56:19:e0:b5:96:93:16:18:20:f5: 23:70:28:ca:6c:1c:01:40:54:53:c9:05:06:bd:f2:48:77:81: 09:e8:c9:4b:35:ce:85:24:c2:49:86:23:47:db:ee:85:6b:ee: 71:2f:b5:e3:8a:e0:48:05:cc:be:5f:f2:f2:21:64:5c:15:70: be:66:1a:f8:d3:39:47:02:a1:63:87:c0:90:2b:1b:e6:de:28: c2:03:e3:e3:fe:29:4e:24:09:ce:ee:d5:61:b2:44:1a:ee:e6: fe:e6:fb:30:cc:5b:12:53:e7:78:65:fc:6a:18:a3:2c:7e:a7: c1:10:9e:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXN1FTRjshxVXm2YGQTGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODVlYzczZGMxODFmOTkzNTY1OWY1OGFlZDIwODUzMmEy YzJhNmEwHhcNMjUxMjIxMTAwMzA2WhcNMjUxMjIyMTAwMzA2WjAzMTEwLwYDVQQD EyhmOWFlZDNkYTIzMTY0YWIzM2RkZTVjN2VhOTFiMjdmMmMxNzE2MjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiYlvQctEnIQ01kzZ5OXOKnJzDiW NMNaI8rfTW4jW0SWn6qBwkl8IFj2ZdeSUowSNiCAYxEttg0/sMyDF8FepO4+PpW+ WCyFhM+9BB0a5o9laCPZ/jrNtGwcnZaXDvoPjWedbSokV88xUJmwvW8CIOiN74nx TgAQbHZiGsiBY3m8cUY7QO5FKHMfhFuNRhD8YEVOhmHjPx8hIIoW1eoSEdYU+PDq uMVe5ysb930cXdbjGoJaian2dg7yrofqlInLO3wyOAcOEjOmkuvPkBEujnkH1Sbg 0sodbpG+OUoMiVc+VlFDKzEcpkOIY1O0O3Z07/E+4P04lefSFUQyT2F6sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmu09ojFkqzPd5cfqkbJ/LBcWICMB8GA1UdIwQY MBaAFLeF7HPcGB+ZNWWfWK7SCFMqLCpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lODU0MTgtNjRiMy00NDRiLTkxM2Et NjNjMmJhNGM5OTZjLzEvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lODU0MTgtNjRiMy00NDRiLTkxM2EtNjNjMmJhNGM5OTZj LzEvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACw7H8nCD emQZpsN+e5cJtb3c6fp/iv5VcW1in7Yo232guYt5Zo1Am0ket8UMSzHnwFowqzm8 4xMC3vRIMGISkn8Rnr3Z2DwU1zyk63Tovwu9uiMU+qE3T4+oLzaF2ykjjyVAbrXu lvoTS42dafJuZBwy2Hc+ZSxCZ7hXdtksJ2lpelXbj3VWGeC1lpMWGCD1I3Aoymwc AUBUU8kFBr3ySHeBCejJSzXOhSTCSYYjR9vuhWvucS+144rgSAXMvl/y8iFkXBVw vmYa+NM5RwKhY4fAkCsb5t4owgPj4/4pTiQJzu7VYbJEGu7m/ub7MMxbElPneGX8 ahijLH6nwRCeZA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:05 2025 by rpki-client