This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json) Hash identifier: ENF2aWpoAqP4gAJsshJxi9RcDGv0sow5a2EUBo9azLk= Subject key identifier: 77:1E:CF:0B:14:00:98:38:29:EC:39:BF:A4:8E:91:AD:27:0F:C4:42 Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12 Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12 Certificate serial: 019B4ADEBC8E4B1AFC13AE0E8D5D3D774043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft Manifest number: 0D0C Signing time: Tue 23 Dec 2025 11:01:09 +0000 Manifest this update: Tue 23 Dec 2025 11:01:09 +0000 Manifest next update: Wed 24 Dec 2025 11:01:09 +0000 Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: TtXFAvRjA9QJZ9ldYSvModIAdB8AVpLpVbDnJXmkmUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:bc:8e:4b:1a:fc:13:ae:0e:8d:5d:3d:77:40:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12 Validity Not Before: Dec 23 11:01:09 2025 GMT Not After : Dec 24 11:01:09 2025 GMT Subject: CN=771ecf0b1400983829ec39bfa48e91ad270fc442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:16:5f:a4:07:1c:98:8d:15:a8:4d:ad:59: 3c:89:f3:32:ec:83:a9:2c:98:34:6e:05:ad:95:2c: 27:55:d3:e5:9c:93:a4:ba:24:ae:8c:47:b4:c9:5f: 55:eb:98:96:f7:f4:82:00:1d:fa:25:06:b5:10:2a: 1e:d2:68:63:3c:49:4c:c3:86:4f:83:72:ac:7d:fd: e2:60:fc:34:e3:9d:15:f3:94:b1:42:2b:0d:05:a4: 3d:89:17:14:19:4e:b2:76:dd:9b:73:06:97:6b:7a: 88:c2:31:84:04:a9:8a:ac:5a:5d:ff:88:b5:2e:4e: c8:42:9b:d4:e7:64:3f:bb:dd:aa:f3:7f:81:d2:22: d9:8f:94:fd:d6:02:8e:5b:7b:de:a1:b6:fa:ff:61: 0d:24:b7:87:c1:94:20:31:02:c6:ae:95:d9:99:3a: d1:fb:ca:90:26:12:9c:75:82:d5:1a:85:b9:58:cf: 11:50:6f:76:40:90:56:d9:6a:33:aa:75:66:77:38: 1b:18:ea:8a:b4:ef:6a:7c:57:41:71:0b:70:a6:ea: 05:4a:d2:99:2a:a6:4f:0c:58:1f:50:e0:1a:46:0f: 5f:e8:00:2c:34:2c:7b:0b:50:6f:f8:22:7d:b8:10: b8:c5:5d:6d:57:d8:39:11:51:4c:33:f7:6a:60:2f: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1E:CF:0B:14:00:98:38:29:EC:39:BF:A4:8E:91:AD:27:0F:C4:42 X509v3 Authority Key Identifier: keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:fe:d1:04:ff:2f:94:2e:09:0f:93:2c:59:39:a7:18:3d:35: 07:af:22:e5:ed:d9:f0:e6:73:d9:8d:a8:7b:7a:78:04:fc:09: 20:ed:6b:c8:e9:13:7d:7d:b4:65:67:eb:dc:0d:89:96:10:6f: c4:ef:27:40:0d:94:1a:01:e5:d6:44:18:77:9a:e7:5c:de:ca: 7f:3b:69:6a:8d:a4:2c:07:9e:fb:c1:f6:08:32:9d:de:22:a8: 07:aa:32:aa:7c:01:65:6d:34:6b:24:de:d4:37:18:64:89:88: 24:d5:c0:55:54:39:c8:b7:0d:69:35:da:1f:b2:d6:a0:a2:3c: 88:74:a1:60:aa:3b:db:ee:fa:37:7b:58:1d:a1:6e:a5:d4:ab: 6e:9a:41:b7:9a:97:00:00:a3:6b:96:06:1b:69:41:6b:6c:c8: 18:1c:48:4c:cb:db:cf:0d:e8:e3:67:2c:15:cc:45:90:a7:14: 09:71:b1:60:d3:c4:46:c9:b4:2a:00:15:2e:d7:8e:bb:37:49: b9:72:4f:1d:47:fc:d0:f3:20:8b:4d:25:81:10:8d:00:8e:13: 42:75:f7:00:3f:fd:da:27:e3:3b:40:62:0b:78:cf:4d:1a:ad: 46:4e:c2:b8:3d:53:22:02:f7:dc:8a:6d:28:cc:f8:c8:f7:b5: 95:e5:97:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3ryOSxr8E64OjV09d0BDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGZiYjI0YzI4YmEyMTE3MjEyZjBkMzI3M2EzYzJhNGMy N2NjMTIwHhcNMjUxMjIzMTEwMTA5WhcNMjUxMjI0MTEwMTA5WjAzMTEwLwYDVQQD Eyg3NzFlY2YwYjE0MDA5ODM4MjllYzM5YmZhNDhlOTFhZDI3MGZjNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzwWX6QHHJiNFahNrVk8ifMy7IOp LJg0bgWtlSwnVdPlnJOkuiSujEe0yV9V65iW9/SCAB36JQa1ECoe0mhjPElMw4ZP g3Ksff3iYPw0450V85SxQisNBaQ9iRcUGU6ydt2bcwaXa3qIwjGEBKmKrFpd/4i1 Lk7IQpvU52Q/u92q83+B0iLZj5T91gKOW3veobb6/2ENJLeHwZQgMQLGrpXZmTrR +8qQJhKcdYLVGoW5WM8RUG92QJBW2WozqnVmdzgbGOqKtO9qfFdBcQtwpuoFStKZ KqZPDFgfUOAaRg9f6AAsNCx7C1Bv+CJ9uBC4xV1tV9g5EVFMM/dqYC/2wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcezwsUAJg4Kew5v6SOka0nD8RCMB8GA1UdIwQY MBaAFIuPuyTCi6IRchLw0yc6PCpMJ8wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZjIxNjctNmE1ZC00ZDQxLTgyOTct YzJlOWQxN2Q4ZDRhLzEvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81ZjIxNjctNmE1ZC00ZDQxLTgyOTctYzJlOWQxN2Q4ZDRh LzEvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtv7RBP8v lC4JD5MsWTmnGD01B68i5e3Z8OZz2Y2oe3p4BPwJIO1ryOkTfX20ZWfr3A2JlhBv xO8nQA2UGgHl1kQYd5rnXN7Kfztpao2kLAee+8H2CDKd3iKoB6oyqnwBZW00ayTe 1DcYZImIJNXAVVQ5yLcNaTXaH7LWoKI8iHShYKo72+76N3tYHaFupdSrbppBt5qX AACja5YGG2lBa2zIGBxITMvbzw3o42csFcxFkKcUCXGxYNPERsm0KgAVLteOuzdJ uXJPHUf80PMgi00lgRCNAI4TQnX3AD/92ifjO0BiC3jPTRqtRk7CuD1TIgL33Ipt KMz4yPe1leWXdQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:43:44 2025 by rpki-client