This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json) Hash identifier: D6yWheamAaN2HdyJjUnjuilC4PR7mLmeRzhPICeY5pE= Subject key identifier: 22:5F:3D:49:D7:EF:E7:D8:5E:C6:A8:DB:67:FE:74:37:45:55:3D:81 Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79 Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879 Certificate serial: 019B51F3333B08AF23EAF206A4EF57AE787C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft Manifest number: 074E Signing time: Wed 24 Dec 2025 20:00:51 +0000 Manifest this update: Wed 24 Dec 2025 20:00:51 +0000 Manifest next update: Thu 25 Dec 2025 20:00:51 +0000 Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: 1PVL4cZiFOHcG4eIkzAUImBkLyJr+/fAe6PILBLHjMw=) 2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:33:3b:08:af:23:ea:f2:06:a4:ef:57:ae:78:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879 Validity Not Before: Dec 24 20:00:51 2025 GMT Not After : Dec 25 20:00:51 2025 GMT Subject: CN=225f3d49d7efe7d85ec6a8db67fe743745553d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:ca:e7:40:2b:3a:fd:bc:cf:3d:68:1f:a8: 55:ef:33:53:86:4a:9b:1e:9d:8d:2a:f0:7d:98:2e: 03:fe:15:6e:29:21:a9:ea:bb:dc:9b:58:12:6f:60: 77:9b:b7:da:fb:2e:05:8a:e5:26:64:fb:53:c8:30: 26:6d:08:f3:8c:61:9a:fd:5e:7f:49:f6:19:6e:4f: 71:d3:35:c1:35:08:b3:65:97:48:ba:75:6c:96:55: 62:51:a2:3e:e1:ce:36:8a:47:e2:29:d9:27:89:76: 35:50:86:24:04:93:43:fd:f3:db:fc:71:95:ed:39: 13:de:5d:41:01:4b:35:f7:0e:5b:80:93:5d:5a:03: 17:1c:a2:a9:79:28:14:06:93:bc:8d:3f:9b:9a:1c: f1:91:07:83:70:73:5a:88:18:03:1f:4e:78:09:74: 0b:7f:8c:92:1a:f4:8b:9e:5d:e5:99:35:e1:5d:1e: 9d:a3:aa:1a:c2:dc:15:73:3b:d0:2a:14:fd:e7:df: 34:50:8d:fe:3b:4c:48:1a:a8:79:f2:5d:f2:93:7c: 09:34:cc:27:aa:e9:77:5c:d6:cc:f6:d6:6a:f7:4f: c7:f2:27:4b:94:54:fd:08:77:f0:b9:7d:66:d7:5f: c6:b8:cd:0d:4c:1b:c2:cf:7b:6d:71:35:18:29:6c: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:3D:49:D7:EF:E7:D8:5E:C6:A8:DB:67:FE:74:37:45:55:3D:81 X509v3 Authority Key Identifier: keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:18:a3:0b:aa:41:7e:ab:12:e6:67:bc:06:f0:a4:18:32: 2b:45:b3:50:ef:57:a7:7a:99:26:f3:bb:c6:da:6c:56:d7:7f: c9:df:e9:0f:b3:71:41:a4:f7:31:10:a3:c1:39:a8:d2:54:af: 64:76:2e:6b:b3:65:03:3b:ae:9a:7e:3f:55:ef:5c:c0:a0:9b: 5d:93:2f:a6:67:f9:b9:fb:95:bd:37:29:b5:27:1c:5e:3e:9e: 40:aa:c4:cc:90:d4:e1:81:a6:6f:4b:a5:b5:9a:b1:b9:4f:8b: c6:a2:2d:7a:6e:1f:fb:93:db:62:0e:7a:4e:6e:01:db:cd:a0: c6:35:7e:2a:2a:0e:f2:43:ad:c3:e4:fc:99:de:b6:1a:73:11: 3a:23:bf:33:06:a4:ca:84:e7:f1:37:a6:de:5a:7a:10:3d:66: b7:42:46:15:04:49:a0:2d:3e:a2:be:1c:27:d2:63:51:bd:d8: 6f:e8:39:e3:73:3a:a6:c1:28:0e:d3:22:5c:24:8f:b1:da:4a: 32:2d:f8:5a:c9:73:3f:e6:8a:02:b8:5a:56:d4:7c:c6:0f:38: f4:91:25:63:f0:c5:97:9e:fe:e5:10:d1:8e:c7:c2:5b:f6:b1: de:d0:8a:cc:64:e6:e0:56:b7:9b:16:24:b2:b1:94:1d:f4:8b: fa:87:69:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8zM7CK8j6vIGpO9Xrnh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNDc3MDcyYjkxYWY1YzNmM2JmZTY5NzQzMjQzZTdjZGEz YWU4NzkwHhcNMjUxMjI0MjAwMDUxWhcNMjUxMjI1MjAwMDUxWjAzMTEwLwYDVQQD EygyMjVmM2Q0OWQ3ZWZlN2Q4NWVjNmE4ZGI2N2ZlNzQzNzQ1NTUzZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kPK50ArOv28zz1oH6hV7zNThkqb Hp2NKvB9mC4D/hVuKSGp6rvcm1gSb2B3m7fa+y4FiuUmZPtTyDAmbQjzjGGa/V5/ SfYZbk9x0zXBNQizZZdIunVsllViUaI+4c42ikfiKdkniXY1UIYkBJND/fPb/HGV 7TkT3l1BAUs19w5bgJNdWgMXHKKpeSgUBpO8jT+bmhzxkQeDcHNaiBgDH054CXQL f4ySGvSLnl3lmTXhXR6do6oawtwVczvQKhT95980UI3+O0xIGqh58l3yk3wJNMwn qul3XNbM9tZq90/H8idLlFT9CHfwuX1m11/GuM0NTBvCz3ttcTUYKWwhTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJfPUnX7+fYXsao22f+dDdFVT2BMB8GA1UdIwQY MBaAFOFHcHK5GvXD87/ml0MkPnzaOuh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2Ut ZTdjOGNmM2FmNWRlLzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2UtZTdjOGNmM2FmNWRl LzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnoYowuq QX6rEuZnvAbwpBgyK0WzUO9Xp3qZJvO7xtpsVtd/yd/pD7NxQaT3MRCjwTmo0lSv ZHYua7NlAzuumn4/Ve9cwKCbXZMvpmf5ufuVvTcptSccXj6eQKrEzJDU4YGmb0ul tZqxuU+LxqItem4f+5PbYg56Tm4B282gxjV+KioO8kOtw+T8md62GnMROiO/Mwak yoTn8Tem3lp6ED1mt0JGFQRJoC0+or4cJ9JjUb3Yb+g543M6psEoDtMiXCSPsdpK Mi34WslzP+aKArhaVtR8xg849JElY/DFl57+5RDRjsfCW/ax3tCKzGTm4Fa3mxYk srGUHfSL+odpeQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:29:31 2025 by rpki-client