This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft File: 4ram_1lpoV0l3cO73da-uU9Ipfk.mft (raw, json) Hash identifier: msCRfBP1+xjrYTpdZgMIKP7FTucXbutYpKBwxPpSlFs= Subject key identifier: C0:D3:BE:4F:13:DC:32:48:51:82:C7:73:AB:18:43:59:05:17:C1:56 Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9 Certificate issuer: /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9 Certificate serial: 019B51BDAC1EC05EDF113165131AAF94B109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 19:02:23 +0000 Manifest this update: Wed 24 Dec 2025 19:02:23 +0000 Manifest next update: Thu 25 Dec 2025 19:02:23 +0000 Files and hashes: 1: 4ram_1lpoV0l3cO73da-uU9Ipfk.crl (hash: 1OMZwGE0HVv1z1+voDOA9TdkUPkBk2aoQTbR/6xL/Yk=) 2: Jw977rRbSBm1vkOFCP_ZwqthNts.roa (hash: pZc4mT999KgIePYxSGeV1dkG1LyeuUgVh98eZi0P55s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:ac:1e:c0:5e:df:11:31:65:13:1a:af:94:b1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9 Validity Not Before: Dec 24 19:02:23 2025 GMT Not After : Dec 25 19:02:23 2025 GMT Subject: CN=c0d3be4f13dc32485182c773ab1843590517c156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:24:fc:5b:b7:11:b1:d6:e3:80:ba:76:6e: 4f:f5:29:f5:57:95:bd:d6:c1:ab:95:23:7b:d3:09: 30:2a:bd:43:f2:e4:ca:64:73:8d:51:cb:77:c2:c8: 9f:c4:c3:aa:4d:d1:42:43:50:36:0a:3c:d7:e1:bc: 38:d5:8b:3b:cc:3f:db:b7:04:52:93:70:26:69:d7: e7:7d:6f:f8:a4:59:6d:4f:c0:58:bb:34:ff:49:12: 6c:a2:bf:32:fd:7e:de:b5:89:56:18:df:e9:6d:fb: 90:f0:56:41:f3:c5:fd:c2:8b:c9:fa:14:31:c8:46: 5c:c5:22:52:48:58:1f:27:14:42:72:bd:2a:66:44: df:af:ab:51:c9:cf:5a:6e:e0:63:0d:95:4d:3b:8f: 5d:24:87:6e:2f:0d:35:6b:6b:93:0a:bf:66:63:1e: 67:e5:d7:46:1f:2e:c2:0b:2b:59:0b:8b:c4:b1:4c: 7b:10:59:e5:66:6f:5e:d4:8f:35:38:6d:79:76:2a: 0c:c7:ba:41:c9:de:61:08:ae:a3:e0:f0:04:6f:ed: f4:21:ed:41:0d:98:47:c3:ae:c4:92:f2:54:a7:02: ae:70:8c:16:46:b7:d4:23:14:5e:8a:20:99:5a:1e: cf:57:95:5e:50:39:52:f5:af:32:ac:45:01:6a:ec: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D3:BE:4F:13:DC:32:48:51:82:C7:73:AB:18:43:59:05:17:C1:56 X509v3 Authority Key Identifier: keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d6:7e:f5:4e:3d:3e:8c:42:73:74:63:56:55:1e:cd:97:c2: 38:da:a5:ab:1f:22:39:85:aa:20:ee:bd:6d:ff:79:c1:0a:ca: 70:3c:f9:55:1b:98:af:1f:77:36:51:bd:ca:4a:91:8f:d4:1a: 69:22:dc:86:4a:40:da:f5:ee:4a:8a:4c:00:83:9c:a5:4a:a4: 2a:86:d3:1b:70:67:bd:d1:4e:6f:66:c7:42:ac:a4:a0:b8:f7: 4a:25:63:cc:8f:9e:9a:55:53:bf:43:81:ea:1c:77:a4:9c:7e: 1c:bc:84:ac:6e:3f:18:87:25:24:09:45:13:08:9f:a2:09:b8: c8:f0:48:fe:2a:2f:f6:2c:83:8d:2f:32:dd:3c:c9:c5:50:5a: 27:e8:45:34:86:53:91:ad:4c:2a:49:b6:0b:51:c0:45:52:df: 4e:59:76:55:84:f9:e3:8f:91:61:4a:f1:40:13:b3:97:bb:eb: a4:59:b0:78:0f:8a:65:fc:8a:0b:c4:6f:d4:69:ac:95:3e:0f: ff:43:5f:58:c9:10:a1:65:03:ba:36:a0:12:c0:48:4d:e2:c6: 4a:c6:a7:50:ce:e0:9e:47:01:21:6b:a4:51:00:11:1d:9a:aa: 17:f8:c6:a8:d5:e9:9a:3b:5b:50:12:ea:b8:1d:34:c1:02:4a: e5:6f:99:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvawewF7fETFlExqvlLEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjZhNmZmNTk2OWExNWQyNWRkYzNiYmRkZDZiZWI5NGY0 OGE1ZjkwHhcNMjUxMjI0MTkwMjIzWhcNMjUxMjI1MTkwMjIzWjAzMTEwLwYDVQQD EyhjMGQzYmU0ZjEzZGMzMjQ4NTE4MmM3NzNhYjE4NDM1OTA1MTdjMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vkk/Fu3EbHW44C6dm5P9Sn1V5W9 1sGrlSN70wkwKr1D8uTKZHONUct3wsifxMOqTdFCQ1A2CjzX4bw41Ys7zD/btwRS k3AmadfnfW/4pFltT8BYuzT/SRJsor8y/X7etYlWGN/pbfuQ8FZB88X9wovJ+hQx yEZcxSJSSFgfJxRCcr0qZkTfr6tRyc9abuBjDZVNO49dJIduLw01a2uTCr9mYx5n 5ddGHy7CCytZC4vEsUx7EFnlZm9e1I81OG15dioMx7pByd5hCK6j4PAEb+30Ie1B DZhHw67EkvJUpwKucIwWRrfUIxReiiCZWh7PV5VeUDlS9a8yrEUBauyyewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDTvk8T3DJIUYLHc6sYQ1kFF8FWMB8GA1UdIwQY MBaAFOK2pv9ZaaFdJd3Du93WvrlPSKX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJhbV8xbHBvVjBsM2NPNzNkYS11VTlJcGZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MGMwYTAtODUzOS00NmVkLWIxMjIt ZmUwY2ExYTdkMzVkLzEvNHJhbV8xbHBvVjBsM2NPNzNkYS11VTlJcGZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MGMwYTAtODUzOS00NmVkLWIxMjItZmUwY2ExYTdkMzVk LzEvNHJhbV8xbHBvVjBsM2NPNzNkYS11VTlJcGZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftZ+9U49 PoxCc3RjVlUezZfCONqlqx8iOYWqIO69bf95wQrKcDz5VRuYrx93NlG9ykqRj9Qa aSLchkpA2vXuSopMAIOcpUqkKobTG3BnvdFOb2bHQqykoLj3SiVjzI+emlVTv0OB 6hx3pJx+HLyErG4/GIclJAlFEwifogm4yPBI/iov9iyDjS8y3TzJxVBaJ+hFNIZT ka1MKkm2C1HARVLfTll2VYT544+RYUrxQBOzl7vrpFmweA+KZfyKC8Rv1GmslT4P /0NfWMkQoWUDujagEsBITeLGSsanUM7gnkcBIWukUQARHZqqF/jGqNXpmjtbUBLq uB00wQJK5W+ZuA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:41:23 2025 by rpki-client