This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json) Hash identifier: 1cSQF9GndOPTSAiY5TvyFoSPMs88C7f5bnZtJ+JIQEc= Subject key identifier: 80:BE:6C:F0:82:84:3E:04:51:70:E7:90:52:82:28:54:1B:F3:C3:96 Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7 Certificate serial: 019B405C638025C161154B7E06F7DFA115E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft Manifest number: 14BA Signing time: Sun 21 Dec 2025 10:02:35 +0000 Manifest this update: Sun 21 Dec 2025 10:02:35 +0000 Manifest next update: Mon 22 Dec 2025 10:02:35 +0000 Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: UWhonQDqlysUsuanzlFHZPzTUF0RMkFgmXvokiAh1YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:63:80:25:c1:61:15:4b:7e:06:f7:df:a1:15:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7 Validity Not Before: Dec 21 10:02:35 2025 GMT Not After : Dec 22 10:02:35 2025 GMT Subject: CN=80be6cf082843e045170e790528228541bf3c396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:85:02:ef:63:06:27:f5:3e:1a:68:cf:87: c1:2a:0f:1a:9a:33:d7:8d:ca:6a:ee:29:56:ad:81: 06:fb:e2:c7:ba:16:bb:95:bd:bf:0f:0b:19:7e:a9: 30:cf:f8:63:a9:16:16:ef:b1:6f:9f:6f:6a:57:1d: f0:5a:35:00:03:31:ef:c2:0d:8f:23:24:96:a5:78: d4:4f:36:75:db:38:79:96:f4:aa:91:94:9b:51:5e: 5a:8b:cb:a8:cf:b8:4f:e2:70:d5:9d:aa:69:b1:66: f0:60:e6:57:14:b3:12:f8:36:99:7f:b2:94:0c:6a: 48:75:8b:b0:c4:c2:e9:a2:85:e3:49:0e:ab:fc:0a: 7c:00:24:1a:f0:1b:01:01:ac:61:87:38:17:68:24: d1:66:54:56:4e:73:76:00:c7:c4:50:a1:10:fc:61: 76:3e:e7:4c:6a:79:62:f2:58:68:71:8c:83:6d:33: 34:e7:cd:54:33:4d:64:00:9b:e0:fa:83:51:33:d5: 37:6c:28:e9:7e:a8:5c:22:f5:5f:92:5c:05:11:4a: 22:e5:31:f7:eb:29:04:3b:c9:8b:a0:b6:43:ab:4b: 3d:bb:b4:25:7f:36:fb:f0:70:71:83:39:99:da:3b: 00:1f:00:e5:52:79:6f:42:51:86:af:20:94:fd:52: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:6C:F0:82:84:3E:04:51:70:E7:90:52:82:28:54:1B:F3:C3:96 X509v3 Authority Key Identifier: keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:e4:35:a5:09:e9:3f:3b:00:98:43:35:7f:d7:d5:9c:b1:27: 59:67:0d:d4:cf:3d:d1:88:36:40:23:5a:c9:6b:20:21:8c:de: 86:16:76:20:3a:c1:34:b1:1e:4d:b7:76:a9:6f:a2:b1:a6:b2: 68:77:5a:d0:e9:48:01:00:2f:f9:ff:5e:79:bd:a9:ed:21:70: 43:2b:b0:33:ad:a2:4f:ac:54:1b:dd:91:b8:73:24:57:7e:26: 6f:b6:67:24:ca:70:42:26:b1:f2:87:28:55:e4:7b:22:33:dd: 2c:e9:5e:c1:31:fd:3d:4e:c3:eb:43:93:af:d3:bb:c0:8d:2a: 1f:23:86:74:55:1b:34:b4:b2:79:c7:0f:d6:4d:af:bc:67:82: a6:16:62:67:b1:2d:ce:dc:9b:70:46:7d:7e:4e:91:40:18:a0: 4b:03:51:cd:f5:e5:24:0b:3f:d4:25:11:61:c4:a0:fa:f9:ac: b8:d1:45:56:74:f1:cf:b5:46:69:30:c7:1b:a5:f2:c1:6d:8c: 6e:1d:2b:57:14:1a:1b:86:49:f2:0e:87:e7:73:f9:90:73:a0: 46:30:9c:8d:4e:ca:7d:38:1e:99:0a:cf:3c:ee:bf:d6:71:b7: 42:e3:80:e0:9e:85:04:2f:ba:73:ca:b5:32:89:d1:91:d5:33: 72:5a:f0:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXGOAJcFhFUt+BvffoRXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWY2MTUxYTM0N2M3OTIyYWM3Y2Y0Njk5MjUzNDQzMzBk NzI0ZjcwHhcNMjUxMjIxMTAwMjM1WhcNMjUxMjIyMTAwMjM1WjAzMTEwLwYDVQQD Eyg4MGJlNmNmMDgyODQzZTA0NTE3MGU3OTA1MjgyMjg1NDFiZjNjMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuySFAu9jBif1Phpoz4fBKg8amjPX jcpq7ilWrYEG++LHuha7lb2/DwsZfqkwz/hjqRYW77Fvn29qVx3wWjUAAzHvwg2P IySWpXjUTzZ12zh5lvSqkZSbUV5ai8uoz7hP4nDVnappsWbwYOZXFLMS+DaZf7KU DGpIdYuwxMLpooXjSQ6r/Ap8ACQa8BsBAaxhhzgXaCTRZlRWTnN2AMfEUKEQ/GF2 PudManli8lhocYyDbTM0581UM01kAJvg+oNRM9U3bCjpfqhcIvVfklwFEUoi5TH3 6ykEO8mLoLZDq0s9u7Qlfzb78HBxgzmZ2jsAHwDlUnlvQlGGryCU/VKDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC+bPCChD4EUXDnkFKCKFQb88OWMB8GA1UdIwQY MBaAFOGfYVGjR8eSKsfPRpklNEMw1yT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYt NDJkNDkzOWEwNTE5LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYtNDJkNDkzOWEwNTE5 LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5eQ1pQnp PzsAmEM1f9fVnLEnWWcN1M890Yg2QCNayWsgIYzehhZ2IDrBNLEeTbd2qW+isaay aHda0OlIAQAv+f9eeb2p7SFwQyuwM62iT6xUG92RuHMkV34mb7ZnJMpwQiax8oco VeR7IjPdLOlewTH9PU7D60OTr9O7wI0qHyOGdFUbNLSyeccP1k2vvGeCphZiZ7Et ztybcEZ9fk6RQBigSwNRzfXlJAs/1CURYcSg+vmsuNFFVnTxz7VGaTDHG6XywW2M bh0rVxQaG4ZJ8g6H53P5kHOgRjCcjU7KfTgemQrPPO6/1nG3QuOA4J6FBC+6c8q1 MonRkdUzclrw3w== -----END CERTIFICATE-----Generated at Sun Dec 21 18:02:12 2025 by rpki-client