This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json) Hash identifier: fUMTYLoKHkIrgQUAUKOh2DqRRPDlJvVQbtTpOyKoLWA= Subject key identifier: 3B:34:14:59:74:02:BD:8D:E5:53:C9:D3:62:64:2F:80:0D:9A:FB:11 Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f Certificate serial: 019B37212A90D4233E0494CB5E68859F7DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft Manifest number: 1654 Signing time: Fri 19 Dec 2025 15:01:18 +0000 Manifest this update: Fri 19 Dec 2025 15:01:18 +0000 Manifest next update: Sat 20 Dec 2025 15:01:18 +0000 Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: VNLTBgwUFOblG98XVOAdlLyCmdp4TxWf/AteB9oJIPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:2a:90:d4:23:3e:04:94:cb:5e:68:85:9f:7d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f Validity Not Before: Dec 19 15:01:18 2025 GMT Not After : Dec 20 15:01:18 2025 GMT Subject: CN=3b3414597402bd8de553c9d362642f800d9afb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:27:41:5f:0c:6f:c5:d7:ce:7a:2c:16:75: 7f:95:5a:28:bd:35:89:98:2d:8c:8a:0d:71:c2:e7: ac:17:f8:c2:71:f4:53:d7:31:03:2a:2c:aa:02:e7: 3c:51:60:ee:6f:7c:3f:a1:0f:25:93:ea:21:df:00: ef:5f:c4:08:83:b7:93:1c:73:95:41:16:35:02:3b: ee:5d:63:33:96:e7:53:e2:01:46:ff:70:2e:a8:d3: d8:9c:7d:1e:25:a1:42:2c:cf:8b:37:96:f1:ba:68: 41:ef:35:db:e5:b4:93:2c:97:ed:6b:d0:96:97:46: f6:7b:b9:bf:c1:8d:27:0e:29:37:00:84:cb:09:34: 9f:89:11:c9:b4:64:ca:6e:b8:3a:f8:d7:a1:b5:0e: a8:db:86:29:29:d4:cd:9e:15:8e:b4:26:4d:f6:43: 98:07:04:df:16:ce:84:cf:5b:83:20:7a:e9:2e:7f: f3:27:60:59:c3:1a:d0:c2:f2:94:83:e7:1c:d6:e0: c6:4c:3e:fe:82:5c:0f:f6:63:4e:65:7c:3e:1c:d3: 68:c7:8c:72:2c:37:62:8c:99:f5:78:4b:8c:d8:4a: dc:b6:91:88:c6:a3:4d:4c:a2:12:5d:fa:af:d3:0c: d7:95:90:6e:0c:8a:ac:48:5b:03:77:89:83:40:93: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:34:14:59:74:02:BD:8D:E5:53:C9:D3:62:64:2F:80:0D:9A:FB:11 X509v3 Authority Key Identifier: keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9d:a9:f4:42:dc:f5:bb:d3:c1:04:62:b7:a5:91:d8:8b:98: c4:d2:10:84:e4:cb:7f:9b:04:10:a8:b1:6f:cc:43:10:55:6d: eb:5e:54:54:de:be:50:97:bb:41:d4:19:ea:42:56:ca:b4:5d: ad:c9:f8:1d:19:dd:0c:56:4c:83:7c:27:a2:f1:19:ef:df:00: 89:94:74:26:cb:e0:25:ba:2d:07:39:f8:4b:d7:f6:47:74:52: 15:0a:16:f4:db:92:39:4b:82:82:2f:85:31:76:b9:77:95:ba: aa:69:33:54:8d:17:47:3c:00:c1:92:e0:5a:68:7e:6d:d6:fa: 06:84:b0:cb:9e:fc:17:d6:c9:c5:b8:fc:11:03:76:22:6a:ad: 58:f2:a7:75:4f:2b:aa:7e:d2:13:56:9a:ff:1a:47:92:60:25: 0b:11:c3:ca:26:f9:96:1f:cd:e2:49:2a:1f:26:bb:66:35:90: 8d:d4:22:4e:00:ac:86:2c:a3:3d:fa:94:96:84:a7:e0:e7:85: 8b:cc:73:65:de:6c:bc:85:a7:cc:0a:ff:3f:43:6f:2c:ae:43: 48:47:8f:ee:f5:05:63:78:19:4a:a7:84:77:ca:1c:3e:bc:55: 92:11:4e:3b:3f:32:82:85:50:b9:33:82:80:8e:eb:c5:df:f8: 5f:b0:e2:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ISqQ1CM+BJTLXmiFn33LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOGNkNWJkYTM0NjEwYWRhZmVkMWZlZDQzYTIyMzQ1ZjA3 NjdlN2YwHhcNMjUxMjE5MTUwMTE4WhcNMjUxMjIwMTUwMTE4WjAzMTEwLwYDVQQD EygzYjM0MTQ1OTc0MDJiZDhkZTU1M2M5ZDM2MjY0MmY4MDBkOWFmYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcEnQV8Mb8XXznosFnV/lVoovTWJ mC2Mig1xwuesF/jCcfRT1zEDKiyqAuc8UWDub3w/oQ8lk+oh3wDvX8QIg7eTHHOV QRY1AjvuXWMzludT4gFG/3AuqNPYnH0eJaFCLM+LN5bxumhB7zXb5bSTLJfta9CW l0b2e7m/wY0nDik3AITLCTSfiRHJtGTKbrg6+NehtQ6o24YpKdTNnhWOtCZN9kOY BwTfFs6Ez1uDIHrpLn/zJ2BZwxrQwvKUg+cc1uDGTD7+glwP9mNOZXw+HNNox4xy LDdijJn1eEuM2ErctpGIxqNNTKISXfqv0wzXlZBuDIqsSFsDd4mDQJPWLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDs0FFl0Ar2N5VPJ02JkL4ANmvsRMB8GA1UdIwQY MBaAFB+M1b2jRhCtr+0f7UOiI0Xwdn5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUt ZWU2ZGJmYTk4ZDJlLzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUtZWU2ZGJmYTk4ZDJl LzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ2p9ELc 9bvTwQRit6WR2IuYxNIQhOTLf5sEEKixb8xDEFVt615UVN6+UJe7QdQZ6kJWyrRd rcn4HRndDFZMg3wnovEZ798AiZR0JsvgJbotBzn4S9f2R3RSFQoW9NuSOUuCgi+F MXa5d5W6qmkzVI0XRzwAwZLgWmh+bdb6BoSwy578F9bJxbj8EQN2ImqtWPKndU8r qn7SE1aa/xpHkmAlCxHDyib5lh/N4kkqHya7ZjWQjdQiTgCshiyjPfqUloSn4OeF i8xzZd5svIWnzAr/P0NvLK5DSEeP7vUFY3gZSqeEd8ocPrxVkhFOOz8ygoVQuTOC gI7rxd/4X7DipQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:52:55 2025 by rpki-client