This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json) Hash identifier: hbElCh6+FGw/1unb2rQTldET1EJstrDrDEUaoMYJsoQ= Subject key identifier: D4:49:F6:B1:FF:E7:9B:C3:75:63:B3:4D:15:62:10:D2:8B:52:0F:8B Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03 Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03 Certificate serial: 019B5977478DAA437BF409898D5E218AE9CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft Manifest number: 0255 Signing time: Fri 26 Dec 2025 07:02:27 +0000 Manifest this update: Fri 26 Dec 2025 07:02:27 +0000 Manifest next update: Sat 27 Dec 2025 07:02:27 +0000 Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: KeJ8aBX46FlGpdhH3aTSh+WJ3p1wF4df/B8sytObuHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:47:8d:aa:43:7b:f4:09:89:8d:5e:21:8a:e9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03 Validity Not Before: Dec 26 07:02:27 2025 GMT Not After : Dec 27 07:02:27 2025 GMT Subject: CN=d449f6b1ffe79bc37563b34d156210d28b520f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:18:1b:c0:05:df:48:b0:9c:40:2d:7a:f8: 1f:f5:f6:ea:51:b1:e7:6c:3d:e1:97:0f:cb:51:ea: 5d:26:a3:f8:49:1f:1d:9b:46:b0:f5:89:33:17:e7: 18:53:57:65:0b:9c:30:a1:9c:a2:b4:2c:09:03:de: d9:46:6e:fc:8c:94:17:7c:73:aa:8e:d4:18:f7:1e: 62:31:92:2f:23:f8:41:ce:b2:05:1e:f8:14:86:0c: c2:11:47:35:c5:05:ad:7a:be:61:fa:23:a6:e7:f1: d1:c1:25:04:70:9b:12:e0:83:52:db:b7:8f:3f:aa: d7:ca:79:f0:40:8d:15:2c:fe:93:41:43:39:1f:e4: 42:f1:e8:35:ea:b8:61:e1:ba:9e:06:b5:cb:8b:8b: b7:20:d0:b1:c4:73:6f:d0:05:f4:46:a6:88:cf:13: f9:72:f0:65:a7:8e:1c:8f:9e:1c:8c:d7:e1:97:29: b2:01:bc:29:58:e3:ed:3f:80:40:e9:71:fd:a3:06: ba:ad:45:dd:ef:5d:69:a5:a0:57:bb:2a:5c:5e:cb: 39:b0:ba:4c:4a:49:24:42:4f:d5:71:a0:cc:c5:b1: a4:5f:a9:c1:25:ae:38:65:cb:26:ba:c6:08:9a:b1: a9:15:4c:4a:bb:92:81:f0:46:86:63:9c:dc:f5:4f: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:49:F6:B1:FF:E7:9B:C3:75:63:B3:4D:15:62:10:D2:8B:52:0F:8B X509v3 Authority Key Identifier: keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:cc:ed:b3:b5:1c:db:8d:f3:f6:54:7f:a0:6a:0c:bb:ad:5b: 95:80:74:16:25:aa:ab:db:ab:8f:2e:07:64:81:18:85:91:0d: cf:f6:6b:71:9e:1b:2d:c8:e5:8a:da:f4:94:fa:a7:8c:7e:6e: b1:7b:09:2a:46:b7:63:47:55:3d:8c:3b:19:7f:2d:a6:c4:6e: 12:4f:8d:eb:19:3b:89:57:eb:ac:55:c3:be:0c:e9:54:1b:96: 1b:4e:07:f4:88:ff:1b:e1:87:38:2f:f8:cc:a9:f4:2d:d1:7d: 54:2d:b9:3d:0e:d8:e0:b4:05:d0:82:d4:e0:72:d4:c5:be:fa: 4e:e9:d2:ed:ca:3e:68:39:bb:1c:4b:64:60:39:00:7d:69:09: 0e:56:2e:5c:65:8e:9c:92:57:47:8a:15:0a:10:13:14:56:bf: 7b:34:0a:a5:96:4c:12:4b:1d:e5:33:20:3a:17:23:09:14:08: 39:0e:85:34:30:ee:fc:53:59:a9:19:54:1d:69:5f:39:5f:3b: 9a:69:3a:69:83:75:95:eb:d2:11:4c:74:a0:b9:1c:49:f1:e2: 1a:d6:4f:87:16:a8:dc:17:25:4e:bd:d2:7c:8b:32:6f:47:ea: 07:89:9d:f6:2a:a2:d2:ab:ae:47:bf:e2:4a:29:0c:5a:b2:d6: e6:d6:35:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0eNqkN79AmJjV4hiunLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyN2UyMThhMzE4M2Y1MTI4MjdlNWFjNmQ5ZTU0MjVlMmJm MGVlMDMwHhcNMjUxMjI2MDcwMjI3WhcNMjUxMjI3MDcwMjI3WjAzMTEwLwYDVQQD EyhkNDQ5ZjZiMWZmZTc5YmMzNzU2M2IzNGQxNTYyMTBkMjhiNTIwZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxMYG8AF30iwnEAtevgf9fbqUbHn bD3hlw/LUepdJqP4SR8dm0aw9YkzF+cYU1dlC5wwoZyitCwJA97ZRm78jJQXfHOq jtQY9x5iMZIvI/hBzrIFHvgUhgzCEUc1xQWter5h+iOm5/HRwSUEcJsS4INS27eP P6rXynnwQI0VLP6TQUM5H+RC8eg16rhh4bqeBrXLi4u3INCxxHNv0AX0RqaIzxP5 cvBlp44cj54cjNfhlymyAbwpWOPtP4BA6XH9owa6rUXd711ppaBXuypcXss5sLpM SkkkQk/VcaDMxbGkX6nBJa44ZcsmusYImrGpFUxKu5KB8EaGY5zc9U/3TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRJ9rH/55vDdWOzTRViENKLUg+LMB8GA1UdIwQY MBaAFHJ+IYoxg/USgn5axtnlQl4r8O4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zZTUxM2YtYjlhYS00NzQ0LWE1NzAt ZWZjYjU4MjAwZThhLzEvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zZTUxM2YtYjlhYS00NzQ0LWE1NzAtZWZjYjU4MjAwZThh LzEvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMzts7Uc 243z9lR/oGoMu61blYB0FiWqq9urjy4HZIEYhZENz/ZrcZ4bLcjlitr0lPqnjH5u sXsJKka3Y0dVPYw7GX8tpsRuEk+N6xk7iVfrrFXDvgzpVBuWG04H9Ij/G+GHOC/4 zKn0LdF9VC25PQ7Y4LQF0ILU4HLUxb76TunS7co+aDm7HEtkYDkAfWkJDlYuXGWO nJJXR4oVChATFFa/ezQKpZZMEksd5TMgOhcjCRQIOQ6FNDDu/FNZqRlUHWlfOV87 mmk6aYN1levSEUx0oLkcSfHiGtZPhxao3BclTr3SfIsyb0fqB4md9iqi0quuR7/i SikMWrLW5tY1yw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:08 2025 by rpki-client