This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.mft File: 4p9sKxV-ZtjY8gMvOafwtBlitEc.mft (raw, json) Hash identifier: 69Mxp5cw3L7NdVTM+tnV2xlq65R4ynhJOkzEC8KwH1s= Subject key identifier: 86:39:B2:0F:30:94:7F:9B:77:EA:05:B2:A4:F6:82:9C:98:B4:3C:78 Authority key identifier: E2:9F:6C:2B:15:7E:66:D8:D8:F2:03:2F:39:A7:F0:B4:19:62:B4:47 Certificate issuer: /CN=e29f6c2b157e66d8d8f2032f39a7f0b41962b447 Certificate serial: 019B5AF6A7E6F950759DC47E34400A830144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9sKxV-ZtjY8gMvOafwtBlitEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.mft Manifest number: 77 Signing time: Fri 26 Dec 2025 14:01:12 +0000 Manifest this update: Fri 26 Dec 2025 14:01:12 +0000 Manifest next update: Sat 27 Dec 2025 14:01:12 +0000 Files and hashes: 1: 4p9sKxV-ZtjY8gMvOafwtBlitEc.crl (hash: wd6tzqUvpdBHZBDcNOU/s4EMV1IXui5bjSZ0wCfWMQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.mft rsync://rpki.ripe.net/repository/DEFAULT/4p9sKxV-ZtjY8gMvOafwtBlitEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:a7:e6:f9:50:75:9d:c4:7e:34:40:0a:83:01:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29f6c2b157e66d8d8f2032f39a7f0b41962b447 Validity Not Before: Dec 26 14:01:12 2025 GMT Not After : Dec 27 14:01:12 2025 GMT Subject: CN=8639b20f30947f9b77ea05b2a4f6829c98b43c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:96:b6:ac:4f:81:dd:8b:21:df:94:eb:ab: 9e:a8:63:4e:d3:0b:7e:f8:ba:f3:14:dd:23:6f:4f: ae:d3:e7:15:a6:a4:75:74:19:c2:eb:ad:b6:c4:88: c1:38:c4:5f:ba:30:34:37:f7:5f:31:36:6d:ac:ba: d1:97:ea:c6:0c:6a:52:e8:e1:44:a4:54:41:6b:ad: 7a:73:10:ea:25:91:fb:ee:f7:c1:f8:54:a5:c9:af: 56:1c:1e:36:a2:25:95:56:52:2f:81:10:5a:47:29: 7a:e8:24:f2:7e:58:ba:f9:5f:d4:e1:d3:fd:ee:0b: 5a:6e:5d:5b:22:4c:6b:8f:c2:d0:8e:30:c5:41:88: 91:75:83:85:2d:f4:20:43:5b:73:2d:6c:32:d5:5d: 47:89:d2:74:10:82:d5:66:36:e8:22:f7:42:76:38: c9:bb:c2:cb:04:88:cc:24:68:50:59:2f:ed:f1:d9: 23:db:80:02:f8:55:a7:99:bc:ae:9f:9d:1f:df:74: ed:a5:e5:6f:7d:40:66:b1:a1:a8:20:8e:26:18:92: 32:dd:b4:7b:cb:23:4b:86:d3:e4:98:fe:9f:20:fc: 4b:12:7f:2d:1a:52:28:53:36:3c:89:c0:bc:e3:a9: 02:56:61:06:ae:1d:a7:4d:9a:4b:c7:29:4d:a1:fc: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:39:B2:0F:30:94:7F:9B:77:EA:05:B2:A4:F6:82:9C:98:B4:3C:78 X509v3 Authority Key Identifier: keyid:E2:9F:6C:2B:15:7E:66:D8:D8:F2:03:2F:39:A7:F0:B4:19:62:B4:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9sKxV-ZtjY8gMvOafwtBlitEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d7e204-b901-443a-884f-b05aa0100679/1/4p9sKxV-ZtjY8gMvOafwtBlitEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ca:e5:f7:10:e6:72:34:50:a4:35:1f:8c:86:f6:0f:6d:c0: 6e:5c:17:8f:28:d3:74:6a:4c:02:14:a2:b1:30:4a:eb:21:61: f0:9b:b1:e1:05:cd:32:86:10:4c:86:9e:cc:72:7e:35:86:fb: f5:14:1d:92:d9:93:00:12:e9:64:f2:28:1f:5d:48:3f:a4:5a: b9:ad:72:18:c8:73:3b:cf:9a:67:7b:37:3d:92:bc:3e:c2:57: c3:74:61:cd:5c:3a:bb:f6:4f:54:c8:a5:87:c5:aa:3b:2b:06: fa:aa:c6:db:c7:76:99:71:6f:c9:14:95:6f:83:a1:c6:0c:2d: 22:d4:17:f2:0d:4f:1d:c2:aa:64:35:ed:26:80:1f:7e:f0:b2: 60:4f:02:5c:72:e6:41:54:76:4a:fa:61:70:b5:4a:95:46:f0: 39:14:22:23:6a:53:e3:c0:46:d8:eb:f5:b6:65:ef:85:1b:4a: 9a:ce:33:91:00:ff:a0:8b:e0:b3:34:6b:86:3f:06:28:9b:ee: 0d:e7:30:78:8e:d0:ae:99:67:28:57:39:87:08:a6:0c:3e:69: 6b:3e:78:75:1b:3e:c5:95:29:ee:4b:62:33:84:2b:0d:48:01: 23:5b:20:b3:a3:90:21:f5:db:60:6b:5f:02:01:48:18:55:6b: 2c:cb:38:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9qfm+VB1ncR+NEAKgwFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWY2YzJiMTU3ZTY2ZDhkOGYyMDMyZjM5YTdmMGI0MTk2 MmI0NDcwHhcNMjUxMjI2MTQwMTEyWhcNMjUxMjI3MTQwMTEyWjAzMTEwLwYDVQQD Eyg4NjM5YjIwZjMwOTQ3ZjliNzdlYTA1YjJhNGY2ODI5Yzk4YjQzYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rOWtqxPgd2LId+U66ueqGNO0wt+ +LrzFN0jb0+u0+cVpqR1dBnC6622xIjBOMRfujA0N/dfMTZtrLrRl+rGDGpS6OFE pFRBa616cxDqJZH77vfB+FSlya9WHB42oiWVVlIvgRBaRyl66CTyfli6+V/U4dP9 7gtabl1bIkxrj8LQjjDFQYiRdYOFLfQgQ1tzLWwy1V1HidJ0EILVZjboIvdCdjjJ u8LLBIjMJGhQWS/t8dkj24AC+FWnmbyun50f33TtpeVvfUBmsaGoII4mGJIy3bR7 yyNLhtPkmP6fIPxLEn8tGlIoUzY8icC846kCVmEGrh2nTZpLxylNofwKJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY5sg8wlH+bd+oFsqT2gpyYtDx4MB8GA1UdIwQY MBaAFOKfbCsVfmbY2PIDLzmn8LQZYrRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHA5c0t4Vi1adGpZOGdNdk9hZnd0QmxpdEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kN2UyMDQtYjkwMS00NDNhLTg4NGYt YjA1YWEwMTAwNjc5LzEvNHA5c0t4Vi1adGpZOGdNdk9hZnd0QmxpdEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kN2UyMDQtYjkwMS00NDNhLTg4NGYtYjA1YWEwMTAwNjc5 LzEvNHA5c0t4Vi1adGpZOGdNdk9hZnd0QmxpdEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcrl9xDm cjRQpDUfjIb2D23AblwXjyjTdGpMAhSisTBK6yFh8Jux4QXNMoYQTIaezHJ+NYb7 9RQdktmTABLpZPIoH11IP6Raua1yGMhzO8+aZ3s3PZK8PsJXw3RhzVw6u/ZPVMil h8WqOysG+qrG28d2mXFvyRSVb4OhxgwtItQX8g1PHcKqZDXtJoAffvCyYE8CXHLm QVR2SvphcLVKlUbwORQiI2pT48BG2Ov1tmXvhRtKms4zkQD/oIvgszRrhj8GKJvu DecweI7QrplnKFc5hwimDD5paz54dRs+xZUp7ktiM4QrDUgBI1sgs6OQIfXbYGtf AgFIGFVrLMs41g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:36 2025 by rpki-client