This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json) Hash identifier: 1LjQ0X6h31oMaP3SDDGEfpjXIICXV2AGXKVTLXxC5Uw= Subject key identifier: 5A:65:F7:F4:BF:03:16:5C:0A:41:24:2A:55:B3:60:A2:96:B6:7B:D1 Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e Certificate serial: 019B21E2C7417E0A86D3E099FBE80A4C1A72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft Manifest number: 0504 Signing time: Mon 15 Dec 2025 12:01:08 +0000 Manifest this update: Mon 15 Dec 2025 12:01:08 +0000 Manifest next update: Tue 16 Dec 2025 12:01:08 +0000 Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: GpN3uvNjMisGo//Ti3UMsqY9cFQcZA11PvY4Cbidf54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:c7:41:7e:0a:86:d3:e0:99:fb:e8:0a:4c:1a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e Validity Not Before: Dec 15 12:01:08 2025 GMT Not After : Dec 16 12:01:08 2025 GMT Subject: CN=5a65f7f4bf03165c0a41242a55b360a296b67bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:6b:a2:a7:46:08:c6:31:f4:08:f9:33:4d: 0c:2c:9c:61:e8:6e:fe:cd:1b:1b:ab:60:9f:33:59: 04:55:e7:bc:27:37:fb:67:7e:61:72:89:1d:c9:bb: 34:54:b2:fe:c0:ff:2d:4e:cf:82:90:34:56:75:8c: 07:ba:fb:4f:fa:50:fb:e8:68:39:78:ca:43:00:97: 4e:d4:f4:75:57:9d:1b:e0:ba:7a:08:7b:d7:19:aa: 89:04:07:3d:b0:da:fc:65:eb:98:28:28:a4:84:d0: 04:82:0e:e0:02:9a:a6:9e:14:37:02:3f:22:46:f0: 7d:fc:be:ab:cb:63:28:7c:b2:39:75:11:14:18:38: 5f:5e:ad:ac:21:0f:58:95:94:22:17:8b:dd:5c:92: 0e:9b:a7:66:a6:f3:f1:be:aa:86:a0:6a:9d:0f:c8: 8d:5a:b8:c7:2c:ce:63:09:44:00:21:28:1e:5f:07: 1a:d4:3a:42:f7:61:b8:b1:8b:f3:95:12:00:d2:d6: 70:72:7f:83:ae:95:32:3b:ce:9b:a0:c8:79:ff:a9: b7:07:51:39:32:49:8f:8b:4f:fe:10:26:7f:8c:b8: 03:e4:b2:f1:91:e0:91:e3:d8:60:46:08:7a:e4:e8: 1b:f1:f9:8a:aa:36:db:0e:bb:cd:2f:b6:52:fd:42: eb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:65:F7:F4:BF:03:16:5C:0A:41:24:2A:55:B3:60:A2:96:B6:7B:D1 X509v3 Authority Key Identifier: keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f6:84:78:ab:e9:55:ec:93:19:3f:5b:d1:61:7e:85:f1:cf: 23:06:71:e9:d3:9b:61:87:85:1f:81:99:86:00:b8:18:ed:d5: cb:ea:b6:d8:75:58:89:5b:49:c9:fc:0f:81:85:19:d2:db:e8: 50:10:dc:bf:22:f9:1a:d8:20:6b:f6:97:f6:8a:f5:47:6f:79: 9a:fb:60:77:e4:19:a6:53:7b:78:ba:c2:9e:f5:25:20:7c:fe: b6:99:7e:52:7f:97:07:c1:c9:25:1f:8c:45:69:50:9b:b7:e6: 6c:ad:f7:09:22:8e:4b:40:36:de:06:83:d3:94:5f:ba:a2:26: 61:75:1e:74:67:d9:a6:b3:dc:d9:ff:b6:2a:c8:88:2b:5d:e8: c8:a5:23:b3:5e:4f:b9:75:b4:3c:79:24:18:69:97:df:88:c5: 4c:62:42:6c:93:a8:fc:61:4e:f5:34:9a:8b:d7:cf:91:62:1c: 85:9f:1b:f4:2e:c3:4a:c0:b0:a8:a0:31:46:75:3b:e7:c4:0a: 24:e5:3e:c4:93:0e:1d:4e:5c:b7:67:c2:75:1a:05:d4:b0:8e: d3:3e:5b:8e:19:5e:cd:f7:f2:6b:c9:70:b0:5d:6a:a7:ae:b7: 68:1b:44:ff:c1:4e:af:8c:45:93:53:7f:99:00:49:7f:39:cb: d6:a3:01:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4sdBfgqG0+CZ++gKTBpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3 NTExNmUwHhcNMjUxMjE1MTIwMTA4WhcNMjUxMjE2MTIwMTA4WjAzMTEwLwYDVQQD Eyg1YTY1ZjdmNGJmMDMxNjVjMGE0MTI0MmE1NWIzNjBhMjk2YjY3YmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ktroqdGCMYx9Aj5M00MLJxh6G7+ zRsbq2CfM1kEVee8Jzf7Z35hcokdybs0VLL+wP8tTs+CkDRWdYwHuvtP+lD76Gg5 eMpDAJdO1PR1V50b4Lp6CHvXGaqJBAc9sNr8ZeuYKCikhNAEgg7gApqmnhQ3Aj8i RvB9/L6ry2MofLI5dREUGDhfXq2sIQ9YlZQiF4vdXJIOm6dmpvPxvqqGoGqdD8iN WrjHLM5jCUQAISgeXwca1DpC92G4sYvzlRIA0tZwcn+DrpUyO86boMh5/6m3B1E5 MkmPi0/+ECZ/jLgD5LLxkeCR49hgRgh65Ogb8fmKqjbbDrvNL7ZS/ULrqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpl9/S/AxZcCkEkKlWzYKKWtnvRMB8GA1UdIwQY MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/aEeKvp VeyTGT9b0WF+hfHPIwZx6dObYYeFH4GZhgC4GO3Vy+q22HVYiVtJyfwPgYUZ0tvo UBDcvyL5Gtgga/aX9or1R295mvtgd+QZplN7eLrCnvUlIHz+tpl+Un+XB8HJJR+M RWlQm7fmbK33CSKOS0A23gaD05RfuqImYXUedGfZprPc2f+2KsiIK13oyKUjs15P uXW0PHkkGGmX34jFTGJCbJOo/GFO9TSai9fPkWIchZ8b9C7DSsCwqKAxRnU758QK JOU+xJMOHU5ct2fCdRoF1LCO0z5bjhlezffya8lwsF1qp663aBtE/8FOr4xFk1N/ mQBJfznL1qMBaw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:58 2025 by rpki-client