This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json) Hash identifier: tjH4sA8pBSK3IPJ1hMZcKnR9WUAcK6cRWT2P2jWU2Hw= Subject key identifier: 4F:8C:B6:DF:ED:A1:9B:3E:14:C5:EF:81:2A:4D:0B:CE:00:82:57:A8 Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Certificate serial: 019B51BC391895AF6CEC583289A9518F908E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft Manifest number: 154E Signing time: Wed 24 Dec 2025 19:00:48 +0000 Manifest this update: Wed 24 Dec 2025 19:00:48 +0000 Manifest next update: Thu 25 Dec 2025 19:00:48 +0000 Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=) 2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: 0HhIPapT4QVZLlOqxJwFWrBHRmx41Xy7EbXMbqCOpHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:39:18:95:af:6c:ec:58:32:89:a9:51:8f:90:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Validity Not Before: Dec 24 19:00:48 2025 GMT Not After : Dec 25 19:00:48 2025 GMT Subject: CN=4f8cb6dfeda19b3e14c5ef812a4d0bce008257a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:a9:3d:f2:58:bb:a4:53:33:a9:83:28:70: 25:2e:cd:79:18:e9:c8:8a:74:a1:44:86:11:2e:36: 1e:ba:92:b1:7a:ce:e7:4e:d3:c9:67:fe:09:15:4e: fa:74:60:c7:c8:de:2d:07:67:0c:c5:2f:6d:b6:ea: d3:29:c6:e7:b3:3c:d5:ff:18:21:6d:1d:5e:c7:10: 49:c8:47:cf:6d:d5:25:34:24:89:92:e2:e3:8f:db: 8a:b5:cc:1d:d4:72:ae:b6:eb:48:32:3f:a6:5b:b3: c9:d7:4c:ac:a0:cf:f8:bd:90:6f:55:35:af:2c:fa: 83:1a:37:96:3d:c1:d7:80:6c:28:1a:c9:d2:43:a8: 4e:1e:ff:b3:e7:88:61:8f:4f:cf:20:62:bd:f9:42: 0f:82:cb:a1:60:bc:58:08:ba:ae:e9:4c:82:4d:41: 3a:1f:95:f4:8d:e7:52:37:53:d9:c5:aa:e0:e9:70: 49:e7:61:f0:f3:80:59:12:25:72:d8:f5:1f:12:e5: c9:d5:a1:a3:10:3c:2d:4a:45:b0:84:5a:b8:da:a2: 93:bb:65:86:c9:f6:ef:5f:19:2a:09:1d:21:c3:29: 9b:68:59:7a:3d:91:57:f0:d8:3c:c6:65:16:9e:5e: 4a:84:10:78:0e:b1:da:9c:f1:0f:08:ce:d2:e3:2f: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:B6:DF:ED:A1:9B:3E:14:C5:EF:81:2A:4D:0B:CE:00:82:57:A8 X509v3 Authority Key Identifier: keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:84:bd:c0:c5:d9:be:b6:24:66:6e:ef:89:58:32:55:a2:9f: c2:58:93:57:ca:65:ce:84:d9:e3:c5:4e:79:79:5b:88:c8:6e: 2c:cf:b8:03:11:71:39:99:26:3c:d6:82:f0:0b:3e:19:42:26: e7:44:6b:bd:bb:d5:7b:ae:22:77:a2:cd:1c:d4:15:4f:36:8e: ed:c0:7d:88:e6:20:b2:df:1e:d3:e9:3c:22:77:7f:66:fe:04: b3:24:05:35:44:48:35:39:c1:d4:a3:75:dc:8b:8a:95:5c:b0: 7f:c0:8f:a8:4b:40:44:b1:e9:cd:88:cf:f4:66:ef:25:4d:a0: ac:d2:1c:d7:4d:87:45:d9:d0:14:db:0b:96:05:e8:c9:6a:31: 99:39:07:a3:8c:1e:4a:35:5f:9a:b1:f7:7a:99:25:a4:0f:e3: 17:a1:64:25:5f:e4:27:aa:f4:4d:0b:9f:4c:40:81:16:9d:71: 5d:b0:b7:d6:2d:5c:cf:cf:24:5e:f0:f9:d7:f8:4a:3b:f9:6c: 0c:40:65:54:e1:e3:1b:40:cf:d0:30:cc:9a:6f:e4:ad:a9:97: 0f:12:9d:e0:f3:53:19:b1:74:1f:35:c1:ab:dd:01:88:04:48: cb:d6:c4:f9:a3:f3:af:67:0e:68:2f:2c:82:a9:4e:e7:18:fe: 0d:6f:b7:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvDkYla9s7FgyialRj5COMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw OWVkMjcwHhcNMjUxMjI0MTkwMDQ4WhcNMjUxMjI1MTkwMDQ4WjAzMTEwLwYDVQQD Eyg0ZjhjYjZkZmVkYTE5YjNlMTRjNWVmODEyYTRkMGJjZTAwODI1N2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyKpPfJYu6RTM6mDKHAlLs15GOnI inShRIYRLjYeupKxes7nTtPJZ/4JFU76dGDHyN4tB2cMxS9tturTKcbnszzV/xgh bR1exxBJyEfPbdUlNCSJkuLjj9uKtcwd1HKututIMj+mW7PJ10ysoM/4vZBvVTWv LPqDGjeWPcHXgGwoGsnSQ6hOHv+z54hhj0/PIGK9+UIPgsuhYLxYCLqu6UyCTUE6 H5X0jedSN1PZxarg6XBJ52Hw84BZEiVy2PUfEuXJ1aGjEDwtSkWwhFq42qKTu2WG yfbvXxkqCR0hwymbaFl6PZFX8Ng8xmUWnl5KhBB4DrHanPEPCM7S4y/2KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+Mtt/toZs+FMXvgSpNC84AgleoMB8GA1UdIwQY MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIS9wMXZ vrYkZm7viVgyVaKfwliTV8plzoTZ48VOeXlbiMhuLM+4AxFxOZkmPNaC8As+GUIm 50RrvbvVe64id6LNHNQVTzaO7cB9iOYgst8e0+k8Ind/Zv4EsyQFNURINTnB1KN1 3IuKlVywf8CPqEtARLHpzYjP9GbvJU2grNIc102HRdnQFNsLlgXoyWoxmTkHo4we SjVfmrH3epklpA/jF6FkJV/kJ6r0TQufTECBFp1xXbC31i1cz88kXvD51/hKO/ls DEBlVOHjG0DP0DDMmm/kramXDxKd4PNTGbF0HzXBq90BiARIy9bE+aPzr2cOaC8s gqlO5xj+DW+3Pg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:55:57 2025 by rpki-client