This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json) Hash identifier: VERSNcq4NN2NJ0unOnztbPxUVColF0C2yjZ+fOXkyFo= Subject key identifier: 04:C7:4A:8D:9F:F0:9B:94:20:B3:3E:3B:6E:F7:EB:D6:A0:3A:E4:75 Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3 Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3 Certificate serial: 019B33E928688F631F10E59DBA234D2A71C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft Manifest number: 079D Signing time: Fri 19 Dec 2025 00:01:16 +0000 Manifest this update: Fri 19 Dec 2025 00:01:16 +0000 Manifest next update: Sat 20 Dec 2025 00:01:16 +0000 Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: rzPaY6zlrfQaOztM6PCOMaXJRZ8Qqpg5jVPJ9DE+Zxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:28:68:8f:63:1f:10:e5:9d:ba:23:4d:2a:71:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3 Validity Not Before: Dec 19 00:01:16 2025 GMT Not After : Dec 20 00:01:16 2025 GMT Subject: CN=04c74a8d9ff09b9420b33e3b6ef7ebd6a03ae475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:99:b8:d8:2a:97:3a:59:15:59:33:3c:bb: 08:eb:68:2a:45:38:5f:b8:56:db:8d:91:65:70:02: e3:d5:51:03:aa:28:c1:5e:fa:b1:64:f4:01:b3:ca: ad:49:4f:03:8a:d7:ef:74:ec:35:22:7a:0b:e0:f4: 4c:ca:c7:81:c0:c0:e2:0a:ec:54:4f:14:62:04:14: e3:38:34:0d:fe:bd:84:74:0d:a9:26:df:28:50:d3: 4d:bc:ef:01:5d:8c:c3:cd:46:97:b6:e6:e0:6a:7e: bd:c3:65:28:7f:00:d5:b0:67:04:60:6d:63:01:dd: 17:41:20:96:95:ca:88:09:7a:4a:f2:a0:26:0c:a7: f5:bd:f5:05:ca:0a:e0:9c:23:59:1a:24:61:fc:f2: da:bb:7d:b7:15:ae:67:50:7a:a1:5d:95:ce:ef:13: 40:2d:e1:32:a0:19:ce:44:b3:90:f3:5a:99:48:43: 8d:f7:99:79:a2:51:4b:6d:ce:78:f0:df:22:0a:e5: 95:06:51:3e:05:e1:3a:5d:39:8e:35:e4:a2:0f:4c: 88:89:11:db:1f:ec:af:85:d1:fe:29:2c:4f:fd:97: 98:6c:18:c8:fd:01:a9:13:ed:9a:01:d3:36:38:7e: cd:9c:c8:7b:68:64:ca:83:1e:1a:bd:6e:eb:39:a1: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C7:4A:8D:9F:F0:9B:94:20:B3:3E:3B:6E:F7:EB:D6:A0:3A:E4:75 X509v3 Authority Key Identifier: keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:62:d9:a4:15:59:e2:77:7b:26:fa:7d:60:1d:dc:3e:9c:0c: ca:d8:51:70:86:14:06:8e:ac:59:60:d3:35:77:99:87:09:97: e6:26:8e:31:85:70:4a:91:8f:79:3a:b9:d6:c2:76:c8:c2:c9: 87:88:09:58:7f:32:ad:4e:8a:01:6a:8c:14:36:ce:50:e8:c4: 8c:f0:8d:78:c9:7e:e6:94:35:17:d6:98:08:97:0c:a3:b3:41: 52:25:42:b3:2b:48:30:01:40:27:cb:fa:37:10:9d:39:57:f4: ee:6b:d5:7a:73:22:ff:db:20:15:17:a2:52:de:0e:3e:02:47: 04:51:79:7c:2e:e4:cc:12:ca:6f:10:57:32:04:74:3b:a6:6e: 1b:d9:c9:2e:79:98:86:70:6c:b6:8d:87:cd:3d:d2:2a:24:c1: c7:41:af:91:86:5c:95:e4:e3:e4:9f:b3:04:f4:b2:eb:88:4b: b4:bb:09:88:5b:55:e7:55:0b:4b:ef:7e:dc:4f:41:1c:ed:6b: 0b:94:54:75:1e:b7:c4:b6:02:a3:46:82:a7:e9:44:66:b0:b7: 58:b0:35:45:7c:85:f2:66:0f:38:b0:22:3b:30:31:6a:74:ea: ad:5d:d2:d7:7b:25:5e:35:45:21:7b:b0:72:d7:92:6c:2b:fc: 0e:9d:84:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6Shoj2MfEOWduiNNKnHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzhmOGM5YzcwNzJiNzMwNDg4ZjllMzIxMjhkZDg5NWJk ZTMyZDMwHhcNMjUxMjE5MDAwMTE2WhcNMjUxMjIwMDAwMTE2WjAzMTEwLwYDVQQD EygwNGM3NGE4ZDlmZjA5Yjk0MjBiMzNlM2I2ZWY3ZWJkNmEwM2FlNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDCZuNgqlzpZFVkzPLsI62gqRThf uFbbjZFlcALj1VEDqijBXvqxZPQBs8qtSU8DitfvdOw1InoL4PRMyseBwMDiCuxU TxRiBBTjODQN/r2EdA2pJt8oUNNNvO8BXYzDzUaXtubgan69w2UofwDVsGcEYG1j Ad0XQSCWlcqICXpK8qAmDKf1vfUFygrgnCNZGiRh/PLau323Fa5nUHqhXZXO7xNA LeEyoBnORLOQ81qZSEON95l5olFLbc548N8iCuWVBlE+BeE6XTmONeSiD0yIiRHb H+yvhdH+KSxP/ZeYbBjI/QGpE+2aAdM2OH7NnMh7aGTKgx4avW7rOaGmvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATHSo2f8JuUILM+O27369agOuR1MB8GA1UdIwQY MBaAFNd4+MnHBytzBIj54yEo3Ylb3jLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAt NThiZTkyN2Y0MmU5LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAtNThiZTkyN2Y0MmU5 LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGLZpBVZ 4nd7Jvp9YB3cPpwMythRcIYUBo6sWWDTNXeZhwmX5iaOMYVwSpGPeTq51sJ2yMLJ h4gJWH8yrU6KAWqMFDbOUOjEjPCNeMl+5pQ1F9aYCJcMo7NBUiVCsytIMAFAJ8v6 NxCdOVf07mvVenMi/9sgFReiUt4OPgJHBFF5fC7kzBLKbxBXMgR0O6ZuG9nJLnmY hnBsto2HzT3SKiTBx0GvkYZcleTj5J+zBPSy64hLtLsJiFtV51ULS+9+3E9BHO1r C5RUdR63xLYCo0aCp+lEZrC3WLA1RXyF8mYPOLAiOzAxanTqrV3S13slXjVFIXuw cteSbCv8Dp2EqA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:44:44 2025 by rpki-client