This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json) Hash identifier: E9DZJxyB2AT0Yuu5gWpubRCZvlqyVMTadPg/bFUuo84= Subject key identifier: A1:47:E5:A9:B9:38:7E:FF:2F:C7:57:3C:52:26:DA:52:B3:69:E3:E2 Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79 Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879 Certificate serial: 019B3AC6AE256DC38CF49C799BE9DDB6F111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft Manifest number: 0742 Signing time: Sat 20 Dec 2025 08:00:57 +0000 Manifest this update: Sat 20 Dec 2025 08:00:57 +0000 Manifest next update: Sun 21 Dec 2025 08:00:57 +0000 Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: Uhjh7w5YMmPG2vBeWYb8pVrk5TEpSm2dGgaeEbp3xag=) 2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:ae:25:6d:c3:8c:f4:9c:79:9b:e9:dd:b6:f1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879 Validity Not Before: Dec 20 08:00:57 2025 GMT Not After : Dec 21 08:00:57 2025 GMT Subject: CN=a147e5a9b9387eff2fc7573c5226da52b369e3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:00:bc:38:28:31:8a:1a:54:49:6c:35:48:9a: a9:0b:54:10:dd:ad:71:d7:75:65:40:fc:1b:96:bd: 50:85:c4:7f:40:32:5b:80:e8:c8:2a:ab:32:6b:7e: c7:39:69:8e:09:9d:f5:c7:d7:9b:0e:84:3e:9c:1a: f1:7c:0d:f7:0f:54:00:a6:d5:09:45:1e:cb:81:00: a4:41:04:7d:a2:45:d2:4a:a3:00:6f:ec:5e:4f:e8: 35:2e:3e:3b:41:16:97:e9:03:9b:2f:05:fa:7c:ef: e7:27:bd:e5:b2:74:e3:3e:d3:1f:77:10:aa:ae:23: 63:4b:63:1b:ca:08:5f:9f:be:84:dc:7c:af:d1:df: 1e:63:76:ed:e7:47:9e:07:f7:8d:3b:4f:59:53:4a: 64:9e:5a:91:1d:2c:41:d1:ea:49:1d:10:a4:00:4b: 19:f7:32:a8:d2:e5:ef:c9:ee:4a:7a:ee:97:21:8e: 7e:16:c8:01:d4:7f:05:83:65:02:94:d7:94:c4:9e: d6:05:41:13:60:a3:8b:dc:0e:a9:a4:15:1a:00:09: b1:89:2c:ea:7b:e2:39:94:fc:b7:6a:b9:3d:3c:61: 2a:c5:20:d5:4f:95:09:91:ab:b9:7c:c4:e9:77:47: a9:95:dc:a2:87:19:a4:ed:21:92:25:e5:fc:cb:f3: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:47:E5:A9:B9:38:7E:FF:2F:C7:57:3C:52:26:DA:52:B3:69:E3:E2 X509v3 Authority Key Identifier: keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:98:e8:ae:19:80:fd:f3:0e:16:50:60:19:c3:1f:07:8a:3d: 96:9c:27:0d:01:eb:63:c5:ce:c3:37:9e:62:f1:5b:61:34:20: cb:a5:4f:2b:dc:a8:83:9d:93:9e:b1:68:f5:f6:cd:d1:2f:6c: 54:69:74:b2:bd:e8:81:b4:09:45:8f:bd:5f:8f:36:76:fd:18: 4d:43:fd:7e:bb:0d:a0:53:87:84:0b:5f:2d:d7:f2:d1:c7:c8: b8:b0:0e:81:6f:eb:26:53:2f:c3:b8:78:6b:15:5b:d1:23:a5: dd:aa:f4:9c:6b:6a:c1:10:be:6d:32:43:53:07:4d:af:3c:e3: 93:d2:bd:83:d5:19:87:9b:25:60:35:e8:e4:98:8d:81:e3:27: 6f:6c:12:34:be:c7:72:b9:da:5f:7c:e8:59:c8:80:08:87:31: 95:55:0f:21:56:6d:02:2c:77:10:9c:b6:06:47:c9:30:8e:46: a0:2a:65:b6:6d:c0:4a:86:07:ee:78:26:b4:a8:77:93:5b:09: 72:1f:ba:f1:1e:6d:f8:74:34:4e:a6:fc:fa:05:f3:03:49:f6: e6:a4:42:cc:37:6f:93:de:3c:c0:7c:87:93:02:7a:c2:ac:55: 8b:68:3c:2d:2c:e6:41:66:44:7f:68:80:a0:a6:b4:f1:63:5d: 0e:92:68:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xq4lbcOM9Jx5m+ndtvERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNDc3MDcyYjkxYWY1YzNmM2JmZTY5NzQzMjQzZTdjZGEz YWU4NzkwHhcNMjUxMjIwMDgwMDU3WhcNMjUxMjIxMDgwMDU3WjAzMTEwLwYDVQQD EyhhMTQ3ZTVhOWI5Mzg3ZWZmMmZjNzU3M2M1MjI2ZGE1MmIzNjllM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QC8OCgxihpUSWw1SJqpC1QQ3a1x 13VlQPwblr1QhcR/QDJbgOjIKqsya37HOWmOCZ31x9ebDoQ+nBrxfA33D1QAptUJ RR7LgQCkQQR9okXSSqMAb+xeT+g1Lj47QRaX6QObLwX6fO/nJ73lsnTjPtMfdxCq riNjS2Mbyghfn76E3Hyv0d8eY3bt50eeB/eNO09ZU0pknlqRHSxB0epJHRCkAEsZ 9zKo0uXvye5Keu6XIY5+FsgB1H8Fg2UClNeUxJ7WBUETYKOL3A6ppBUaAAmxiSzq e+I5lPy3ark9PGEqxSDVT5UJkau5fMTpd0epldyihxmk7SGSJeX8y/Ms2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFH5am5OH7/L8dXPFIm2lKzaePiMB8GA1UdIwQY MBaAFOFHcHK5GvXD87/ml0MkPnzaOuh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2Ut ZTdjOGNmM2FmNWRlLzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2UtZTdjOGNmM2FmNWRl LzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpjorhmA /fMOFlBgGcMfB4o9lpwnDQHrY8XOwzeeYvFbYTQgy6VPK9yog52TnrFo9fbN0S9s VGl0sr3ogbQJRY+9X482dv0YTUP9frsNoFOHhAtfLdfy0cfIuLAOgW/rJlMvw7h4 axVb0SOl3ar0nGtqwRC+bTJDUwdNrzzjk9K9g9UZh5slYDXo5JiNgeMnb2wSNL7H crnaX3zoWciACIcxlVUPIVZtAix3EJy2BkfJMI5GoCpltm3ASoYH7ngmtKh3k1sJ ch+68R5t+HQ0Tqb8+gXzA0n25qRCzDdvk948wHyHkwJ6wqxVi2g8LSzmQWZEf2iA oKa08WNdDpJoPA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:52 2025 by rpki-client