This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json) Hash identifier: 2NDgzOa17wrPabIvfMxFU3dvpKtx4NrVRtskioEVlaE= Subject key identifier: 5B:66:32:A7:D2:BA:2F:F4:D1:34:2C:4F:BF:D0:42:5A:6E:D8:95:D1 Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72 Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172 Certificate serial: 019B0E9283CAF4C1BE96C8562035EE6DC7A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft Manifest number: 112E Signing time: Thu 11 Dec 2025 18:00:41 +0000 Manifest this update: Thu 11 Dec 2025 18:00:41 +0000 Manifest next update: Fri 12 Dec 2025 18:00:41 +0000 Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: HkXrimsHDKnTMHmpCyVyu8NjJdl1RAkOy0BJUKZnZjo=) 2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:83:ca:f4:c1:be:96:c8:56:20:35:ee:6d:c7:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172 Validity Not Before: Dec 11 18:00:41 2025 GMT Not After : Dec 12 18:00:41 2025 GMT Subject: CN=5b6632a7d2ba2ff4d1342c4fbfd0425a6ed895d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:fc:e6:83:45:5f:31:59:c5:3c:aa:0f:52: ed:fe:00:9b:a7:28:5c:5f:92:45:90:f5:27:28:61: 4a:d9:05:7c:72:f7:42:dc:cf:bb:83:e9:aa:7b:b7: 16:a6:11:68:5b:50:e5:b2:bc:8f:ab:b5:2e:69:4b: 22:67:76:54:b4:03:7d:33:df:39:21:fe:37:57:0a: bc:84:94:f9:a8:9f:79:f1:a2:6b:de:2a:d2:4c:71: b6:36:73:09:a0:31:0d:ce:53:83:7a:24:38:ae:13: 05:6e:4c:24:c8:76:b1:b1:6c:ce:a8:6d:7e:1a:6a: 0c:08:a8:c0:d3:29:c0:9d:c3:4e:1f:42:fe:16:99: 81:08:9e:8c:8f:ca:4c:99:68:78:aa:23:72:50:e1: 1d:41:ee:6e:89:75:48:5f:a4:7e:36:e5:16:a4:00: 96:7e:48:72:fd:a8:01:91:32:ff:2a:87:69:7f:ac: 6c:3a:c7:e4:e9:d7:70:99:59:12:84:1c:cc:b0:25: 78:f6:d1:fc:42:b2:09:6e:1b:56:62:23:0d:b1:48: d9:4e:c7:7c:3d:6f:30:d8:8c:da:40:71:01:b8:db: db:f0:2e:81:5f:b6:9a:45:23:eb:d8:b5:0d:56:b1: 4a:0e:dd:e5:7d:9c:81:c8:f5:07:98:f1:43:11:25: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:66:32:A7:D2:BA:2F:F4:D1:34:2C:4F:BF:D0:42:5A:6E:D8:95:D1 X509v3 Authority Key Identifier: keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:42:1d:b8:ff:e6:92:d7:03:89:4d:7e:2a:ea:cd:99:15:68: c7:54:03:d3:97:f6:03:c7:dc:03:1f:cc:a1:93:72:fe:a9:0e: 56:a6:a7:f1:38:65:c3:85:8a:2b:56:0b:99:6e:4f:59:4d:36: fa:41:64:26:ec:f3:e3:b0:10:97:00:cf:7f:d6:df:80:2a:cc: c0:f0:06:2e:f5:4b:a7:a0:8c:06:28:58:be:96:06:cb:f4:e8: fd:0f:45:07:39:a4:82:8d:cd:e3:8d:0b:83:c0:d2:b9:24:95: 0e:1a:63:73:fc:00:cd:a5:1d:04:c1:87:fe:7d:32:e3:70:b7: a1:22:db:53:d3:2d:1b:23:f0:05:d4:75:37:93:4a:b8:05:ca: b5:59:72:ef:a3:d4:4c:a2:34:8b:f3:03:b6:29:c0:3c:02:74: 19:d9:30:db:7e:09:1d:14:ac:68:33:1b:c5:07:1a:6c:c9:77: 82:79:20:d0:85:0c:35:72:d3:ef:2f:c2:f2:7c:7e:c9:f2:b4: 02:ad:21:a0:be:80:d1:b2:10:94:5b:84:f4:42:6e:4a:02:81: 01:34:01:ed:de:18:86:93:eb:fd:2f:ef:cd:7b:55:23:b7:5d: a5:f4:71:e9:cb:73:17:52:b7:c0:aa:d4:48:1c:1d:20:ce:ba: a8:09:df:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkoPK9MG+lshWIDXubcepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1 YjcxNzIwHhcNMjUxMjExMTgwMDQxWhcNMjUxMjEyMTgwMDQxWjAzMTEwLwYDVQQD Eyg1YjY2MzJhN2QyYmEyZmY0ZDEzNDJjNGZiZmQwNDI1YTZlZDg5NWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluD85oNFXzFZxTyqD1Lt/gCbpyhc X5JFkPUnKGFK2QV8cvdC3M+7g+mqe7cWphFoW1DlsryPq7UuaUsiZ3ZUtAN9M985 If43Vwq8hJT5qJ958aJr3irSTHG2NnMJoDENzlODeiQ4rhMFbkwkyHaxsWzOqG1+ GmoMCKjA0ynAncNOH0L+FpmBCJ6Mj8pMmWh4qiNyUOEdQe5uiXVIX6R+NuUWpACW fkhy/agBkTL/Kodpf6xsOsfk6ddwmVkShBzMsCV49tH8QrIJbhtWYiMNsUjZTsd8 PW8w2IzaQHEBuNvb8C6BX7aaRSPr2LUNVrFKDt3lfZyByPUHmPFDESX1bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtmMqfSui/00TQsT7/QQlpu2JXRMB8GA1UdIwQY MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkIduP/m ktcDiU1+KurNmRVox1QD05f2A8fcAx/MoZNy/qkOVqan8Thlw4WKK1YLmW5PWU02 +kFkJuzz47AQlwDPf9bfgCrMwPAGLvVLp6CMBihYvpYGy/To/Q9FBzmkgo3N440L g8DSuSSVDhpjc/wAzaUdBMGH/n0y43C3oSLbU9MtGyPwBdR1N5NKuAXKtVly76PU TKI0i/MDtinAPAJ0Gdkw234JHRSsaDMbxQcabMl3gnkg0IUMNXLT7y/C8nx+yfK0 Aq0hoL6A0bIQlFuE9EJuSgKBATQB7d4YhpPr/S/vzXtVI7ddpfRx6ctzF1K3wKrU SBwdIM66qAnfVQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:29:27 2025 by rpki-client