This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json) Hash identifier: UqydjSaueKKfeJUFwwAAw7mKDVIU+KtHWl6fXalzkL8= Subject key identifier: C6:DB:5F:70:24:8C:C4:EC:5D:40:66:0C:61:DA:24:7C:8F:6F:A7:DD Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72 Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172 Certificate serial: 019B1A29301658ECA94AC1BBE30B578494CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft Manifest number: 1134 Signing time: Sun 14 Dec 2025 00:01:05 +0000 Manifest this update: Sun 14 Dec 2025 00:01:05 +0000 Manifest next update: Mon 15 Dec 2025 00:01:05 +0000 Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: gPEDWvYcaFNA1zeabm5tGknmSJeXvphd4eiQpy4eCL0=) 2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:30:16:58:ec:a9:4a:c1:bb:e3:0b:57:84:94:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172 Validity Not Before: Dec 14 00:01:05 2025 GMT Not After : Dec 15 00:01:05 2025 GMT Subject: CN=c6db5f70248cc4ec5d40660c61da247c8f6fa7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:0a:c8:49:2e:9f:bf:f8:46:20:5e:ce:12: 05:b5:ac:08:4f:d4:89:36:50:84:19:49:a0:3e:56: 7a:17:01:ef:14:67:60:0e:1f:99:25:bd:ae:36:ef: ba:6d:11:b1:06:de:b5:11:d0:1d:81:d8:42:cd:48: 2d:59:5b:7c:a8:91:41:b8:de:aa:4f:99:27:78:3a: f3:a2:f8:33:05:71:10:de:3e:49:7b:40:73:7b:78: ef:03:18:84:21:9f:a6:ea:87:57:23:39:34:0c:39: 60:c6:68:c9:5e:fa:f7:99:05:e7:bc:41:0f:30:4b: af:88:aa:a3:a9:4c:ee:69:4f:9a:17:8d:c3:58:14: 73:3e:78:71:46:23:19:73:8c:d8:72:51:2d:a6:d9: ab:d4:bb:ad:cf:06:9a:d6:1a:54:d3:60:6a:89:48: 88:88:0a:7f:ee:d0:b6:a2:5f:12:ad:1d:9e:1a:76: ff:15:c2:c2:f5:cd:78:58:80:6f:37:7c:c4:b3:f1: 60:fb:38:32:af:66:cb:8a:fd:60:5a:ea:94:4c:c6: f8:af:0e:8b:b4:a5:3a:c4:ba:64:63:7d:fa:82:6a: b8:98:ad:68:1f:5f:1b:14:8f:5e:62:33:b6:3e:9e: d1:af:22:1f:12:b1:63:6f:17:0d:3b:01:79:79:d4: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DB:5F:70:24:8C:C4:EC:5D:40:66:0C:61:DA:24:7C:8F:6F:A7:DD X509v3 Authority Key Identifier: keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ef:af:ca:07:c5:74:41:69:73:d3:d1:9d:f7:34:3a:7a:be: 71:33:0f:85:42:3c:f9:be:f3:8f:99:2d:82:71:b5:36:02:a3: 57:db:6d:29:11:5d:05:23:7a:a8:1e:3d:89:78:9b:d8:8b:dd: a4:ce:9b:b2:46:24:0e:e5:f1:87:e8:7e:1b:d8:3f:6d:f6:9d: 57:0b:4a:47:ac:2b:2b:d7:85:70:6f:46:75:6c:6a:80:fd:aa: 99:27:e8:73:ed:c7:65:cd:f5:3d:03:09:bf:ca:38:31:c8:f7: 8e:47:7d:eb:9b:23:a4:cc:e1:9f:bd:d2:7c:3c:d1:fa:2a:e1: f3:7f:0f:5b:6e:9a:1f:53:48:ba:b4:39:b1:db:d5:2f:aa:53: f8:80:cc:93:0d:5b:7f:a7:e2:3c:89:14:f6:d5:3c:ce:22:55: dd:84:ec:0d:37:17:57:15:1c:b2:a5:d5:7c:60:4a:9f:18:9d: 9a:f5:ee:92:c6:c1:37:a0:de:cd:59:7a:5e:14:a3:8d:af:00: c4:ec:20:ff:85:28:5e:e6:52:eb:53:23:cd:43:16:c1:b8:c1: 52:d7:d5:ed:97:6f:7b:7e:74:09:fd:fd:00:a6:ed:67:56:55: 1d:9f:b7:33:e5:2a:07:f5:c1:69:0d:e7:51:a6:dc:f9:05:c2: 2a:89:0b:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKTAWWOypSsG74wtXhJTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1 YjcxNzIwHhcNMjUxMjE0MDAwMTA1WhcNMjUxMjE1MDAwMTA1WjAzMTEwLwYDVQQD EyhjNmRiNWY3MDI0OGNjNGVjNWQ0MDY2MGM2MWRhMjQ3YzhmNmZhN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhAKyEkun7/4RiBezhIFtawIT9SJ NlCEGUmgPlZ6FwHvFGdgDh+ZJb2uNu+6bRGxBt61EdAdgdhCzUgtWVt8qJFBuN6q T5kneDrzovgzBXEQ3j5Je0Bze3jvAxiEIZ+m6odXIzk0DDlgxmjJXvr3mQXnvEEP MEuviKqjqUzuaU+aF43DWBRzPnhxRiMZc4zYclEtptmr1Lutzwaa1hpU02BqiUiI iAp/7tC2ol8SrR2eGnb/FcLC9c14WIBvN3zEs/Fg+zgyr2bLiv1gWuqUTMb4rw6L tKU6xLpkY336gmq4mK1oH18bFI9eYjO2Pp7RryIfErFjbxcNOwF5edQ9AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbbX3AkjMTsXUBmDGHaJHyPb6fdMB8GA1UdIwQY MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEe+vygfF dEFpc9PRnfc0Onq+cTMPhUI8+b7zj5ktgnG1NgKjV9ttKRFdBSN6qB49iXib2Ivd pM6bskYkDuXxh+h+G9g/bfadVwtKR6wrK9eFcG9GdWxqgP2qmSfoc+3HZc31PQMJ v8o4Mcj3jkd965sjpMzhn73SfDzR+irh838PW26aH1NIurQ5sdvVL6pT+IDMkw1b f6fiPIkU9tU8ziJV3YTsDTcXVxUcsqXVfGBKnxidmvXuksbBN6DezVl6XhSjja8A xOwg/4UoXuZS61MjzUMWwbjBUtfV7Zdve350Cf39AKbtZ1ZVHZ+3M+UqB/XBaQ3n Uabc+QXCKokLZg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:43 2025 by rpki-client