This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json) Hash identifier: /3O21fyM7mCWnXELR+6mbei1TVJOw7AEv8Zh+b3cc0E= Subject key identifier: A8:F1:39:2E:9A:0D:2C:4B:80:FD:E8:9F:56:BB:E7:54:8C:32:3C:72 Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58 Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358 Certificate serial: 019B6843D47B55654634A6C9AA6AE1DA2F3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft Manifest number: 0768 Signing time: Mon 29 Dec 2025 04:00:34 +0000 Manifest this update: Mon 29 Dec 2025 04:00:34 +0000 Manifest next update: Tue 30 Dec 2025 04:00:34 +0000 Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: 8y2XC1fhLDrZJEfh4ToROcnsiuwFP1f9sdR8Un3zZmY=) 2: IrEzCg-L6ChV6NO0z_pSKTvObkE.roa (hash: BAxTmTfKNgnausi613sLgqp7n2C4MuqhHvDS7/1g8aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:43:d4:7b:55:65:46:34:a6:c9:aa:6a:e1:da:2f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358 Validity Not Before: Dec 29 04:00:34 2025 GMT Not After : Dec 30 04:00:34 2025 GMT Subject: CN=a8f1392e9a0d2c4b80fde89f56bbe7548c323c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:ff:52:94:5c:00:0c:7a:01:70:9a:bd:35: 45:e1:63:a8:02:71:83:ca:18:30:69:ec:08:3c:24: ba:a0:b5:16:8a:25:52:aa:31:04:32:dd:d2:7d:1a: 95:5f:d4:aa:72:a0:3e:4d:45:97:af:87:32:c6:48: 69:5b:69:4a:d5:65:3b:de:5c:5d:6b:c3:3d:3d:ba: c6:8c:a5:ff:16:cd:62:b3:b7:7e:bb:b6:f6:f0:fb: 60:04:f1:9b:c9:22:14:8d:bc:fb:23:dc:57:a9:67: 53:dc:6e:72:81:92:43:28:e5:a1:e5:85:11:7c:33: 27:a1:66:7a:1c:57:fb:ee:e8:4c:66:0b:bb:f6:80: 12:fc:6e:24:3d:7a:e6:0b:a4:f1:8e:8f:3b:e8:bf: 1d:79:08:8a:62:a2:05:72:c2:92:be:c5:98:3a:81: 10:89:a6:15:01:bb:7e:48:95:52:4b:e7:3f:07:f3: fb:fa:9e:3e:ec:4a:73:6e:41:7f:38:68:cf:1a:c7: 3e:fb:ea:23:1d:9b:1b:11:64:5e:f8:3d:8f:d1:10: 89:2a:ff:5e:3c:c8:bc:49:04:4f:65:0f:96:c1:e0: d3:f7:d1:be:be:41:ea:35:89:3b:7b:7a:57:9c:77: bd:6d:84:0f:ed:20:01:25:e4:ed:99:d3:a2:0f:19: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F1:39:2E:9A:0D:2C:4B:80:FD:E8:9F:56:BB:E7:54:8C:32:3C:72 X509v3 Authority Key Identifier: keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:1b:6a:71:ee:3e:fc:98:19:f9:c0:be:c8:a1:4e:54:08:68: 4a:2a:58:49:5f:07:7f:7a:55:f7:54:54:32:ce:56:3d:2b:8a: 7f:03:72:46:99:6a:42:5f:5d:73:7f:dc:8b:eb:d1:ba:52:e3: 45:e6:6a:70:c2:f4:6c:2e:8f:89:13:69:b1:f4:e2:e2:b1:64: 87:d7:f7:18:3c:98:22:29:bf:3f:99:34:65:1f:34:6f:6f:3c: a2:e6:e9:67:36:0e:76:53:0c:ff:82:01:27:76:3f:cf:16:46: 0d:87:ed:27:13:69:e2:56:03:ad:5d:21:b4:5e:34:ff:bd:0c: c5:fb:ae:5f:a1:98:c8:94:da:db:1b:e0:4e:60:25:16:2e:9c: 0a:4a:3f:7d:c2:69:65:8c:f0:41:5e:c9:e3:bf:42:93:25:1f: a4:3f:b8:d4:d5:72:6b:7d:67:58:a7:dd:ce:7b:d1:6e:7f:92: c7:77:ac:3c:4d:fa:fe:ad:8f:94:30:85:50:bf:43:90:da:16: c0:78:d5:87:4e:bf:d8:0e:c3:3f:e6:59:31:b4:43:5b:8a:ae: d1:d3:e1:7c:3a:d2:68:03:de:8c:50:f3:12:c9:e3:5f:81:49: 0e:ea:53:fd:44:96:11:bb:d1:a0:16:07:d1:be:55:20:fc:6a: 01:47:e1:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoQ9R7VWVGNKbJqmrh2i8/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWI4NmY4MGM0YmIyYWM1NmU0MWVjN2EyNDZhZTI5Njlk OGQzNTgwHhcNMjUxMjI5MDQwMDM0WhcNMjUxMjMwMDQwMDM0WjAzMTEwLwYDVQQD EyhhOGYxMzkyZTlhMGQyYzRiODBmZGU4OWY1NmJiZTc1NDhjMzIzYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY3/UpRcAAx6AXCavTVF4WOoAnGD yhgwaewIPCS6oLUWiiVSqjEEMt3SfRqVX9SqcqA+TUWXr4cyxkhpW2lK1WU73lxd a8M9PbrGjKX/Fs1is7d+u7b28PtgBPGbySIUjbz7I9xXqWdT3G5ygZJDKOWh5YUR fDMnoWZ6HFf77uhMZgu79oAS/G4kPXrmC6Txjo876L8deQiKYqIFcsKSvsWYOoEQ iaYVAbt+SJVSS+c/B/P7+p4+7EpzbkF/OGjPGsc+++ojHZsbEWRe+D2P0RCJKv9e PMi8SQRPZQ+WweDT99G+vkHqNYk7e3pXnHe9bYQP7SABJeTtmdOiDxlD2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjxOS6aDSxLgP3on1a751SMMjxyMB8GA1UdIwQY MBaAFOGrhvgMS7KsVuQex6JGrilp2NNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODct NTE2ZjExYWNiM2FlLzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODctNTE2ZjExYWNiM2Fl LzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Btqce4+ /JgZ+cC+yKFOVAhoSipYSV8Hf3pV91RUMs5WPSuKfwNyRplqQl9dc3/ci+vRulLj ReZqcML0bC6PiRNpsfTi4rFkh9f3GDyYIim/P5k0ZR80b288oubpZzYOdlMM/4IB J3Y/zxZGDYftJxNp4lYDrV0htF40/70MxfuuX6GYyJTa2xvgTmAlFi6cCko/fcJp ZYzwQV7J479CkyUfpD+41NVya31nWKfdznvRbn+Sx3esPE36/q2PlDCFUL9DkNoW wHjVh06/2A7DP+ZZMbRDW4qu0dPhfDrSaAPejFDzEsnjX4FJDupT/USWEbvRoBYH 0b5VIPxqAUfh4w== -----END CERTIFICATE-----Generated at Mon Dec 29 12:06:26 2025 by rpki-client